Security Directory

A

ASSORESTAURO – Associazione Italiana per il Restauro Architettonico, Artistico, Urbano

assorestauro.org

49

ASSORESTAURO is an Italian association founded in 2005 representing the architectural, artistic, and urban restoration sector in Italy. The organization acts as a network for companies and professionals in the restoration industry, facilitating collaboration on national projects and competing in international markets. The website reflects a professional and well-structured digital presence, built on WordPress with modern plugins and privacy-respecting analytics (Matomo). The site offers information about the association, its members, services, events, and publications, targeting restoration professionals and companies in Italy. Technically, the website uses a modern CMS platform with a responsive design and good SEO practices. However, some security best practices such as security headers are not evident, and no explicit privacy or terms of service pages were found, though a cookie consent mechanism is implemented. The WHOIS data for the domain is unavailable due to a malformed query response, limiting the ability to verify domain registration details and ownership, which slightly reduces trustworthiness. Security posture is moderate with HTTPS enabled and no visible vulnerabilities or exposed sensitive data. The site does not appear to have any WAF or blocking mechanisms, allowing full content access. Overall, the site is safe, professional, and credible but would benefit from improved transparency in privacy policies and domain registration information.

A

ANIT

anit.it

51

ANIT is a well-established Italian national association dedicated to promoting scientific information and best practices in thermal and acoustic insulation for the construction and industrial sectors. The website serves as a comprehensive platform offering news, legislative updates, training courses, publications, and membership services targeting professionals, companies, and public entities involved in insulation technologies. The organization maintains a strong market position within Italy's energy and construction sectors, supported by active social media engagement and a professional web presence. Technically, the website is built on WordPress with WooCommerce integration, leveraging modern frameworks like Bootstrap and libraries such as jQuery and FontAwesome. It employs Google Analytics and Google Tag Manager for analytics and tracking, alongside Iubenda for cookie consent management, indicating a moderate level of digital maturity. The site is mobile-optimized and SEO-friendly, with structured data enhancing search visibility. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data confirms the legitimacy and consistency of the domain registration with the organization's identity and history. Overall, ANIT's website demonstrates a solid business and technical foundation with room for improvement in security policy transparency and enhanced security header implementation. The site is safe for general audiences and aligns well with its stated mission and sector focus.

U

UNICMI

unicmi.it

43

UNICMI is a well-established Italian industry association founded in 2013, representing companies in the metal construction and building envelope sectors. The website serves as a comprehensive portal offering technical training, consultancy, market data, and industry news to its members and stakeholders. It maintains a consistent brand presence and provides useful resources tailored to industry professionals. Technically, the site is built on Joomla CMS with standard JavaScript libraries and tracking tools such as Google Analytics and Facebook Pixel. While the site is functional and professionally designed, there is room for improvement in mobile optimization and accessibility. Security posture is moderate with HTTPS enabled and basic privacy compliance, but lacks advanced security headers and DNSSEC. The WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the site is trustworthy and serves its target audience effectively.

P

Politecnico di Milano

polimi.it

68

Politecnico di Milano is Italy's largest scientific-technological university, established in 1863, offering a wide range of academic programs including undergraduate, graduate, and doctoral studies, alongside advanced research activities. The institution targets students, researchers, and academic staff, providing comprehensive campus services and sustainability initiatives. The website reflects a mature digital presence built on TYPO3 CMS with modern frontend technologies such as Bootstrap and Swiper.js, and integrates multiple analytics platforms including Google Analytics, Matomo, and Maze Analytics with privacy-conscious configurations. Security posture is strong with HTTPS, DNSSEC, and cookie consent mechanisms, although explicit privacy and security policies are not found in the analyzed content. WHOIS data confirms domain legitimacy and long-term ownership consistent with the institution's history.

C

Claymatic Games Ltd

claymatic.games

63

Claymatic Games Ltd is a small independent game development company based in the United Kingdom, specializing in cooperative and couch-play games for PC and console platforms. Their flagship project is Clodhoppers, featuring the character Cletus Clay. The company emphasizes bringing friends together through fun and laughter in gaming experiences. The website is professionally designed using Squarespace CMS and includes essential business documents such as privacy policy and terms and conditions, indicating a basic level of compliance and professionalism. Social media presence across multiple platforms supports their market engagement and community building. Technically, the website uses modern web technologies including Google Analytics and Tag Manager for tracking, Typekit fonts for typography, and is hosted on Squarespace. The site is mobile optimized with good SEO practices but lacks some advanced security headers which could enhance its security posture. HTTPS is enforced, but HSTS and other headers like Content-Security-Policy are missing. From a security perspective, the site shows no signs of vulnerabilities or malicious content. Privacy compliance is basic but present, with a cookie consent banner and accessible privacy documents. The WHOIS data is privacy protected, common for small businesses, and does not raise immediate concerns. Overall, the site is trustworthy with room for security improvements. Strategically, the company should focus on enhancing security headers, improving contact information availability, and possibly expanding privacy and security policies to strengthen trust and compliance. The technical infrastructure is solid for their size and market position, supporting their business goals effectively.

M

media touch

mediatouch.de

45

media touch is a German technology company operating a website powered by TYPO3 CMS, targeting German-speaking users. The company appears to provide digital technology services, though specific services are not detailed in the provided content. The website uses modern frontend technologies including Bootstrap and jQuery, and integrates Usercentrics for GDPR-compliant cookie consent management. Hosting is provided by Schlundtech, a German hosting provider, consistent with the website's regional focus. Security posture is moderate with HTTPS enabled and consent management in place, but lacks explicit privacy policies, terms of service, and security headers. Contact information and incident response details are not present, limiting transparency and trust. Overall, the website is professionally designed and mobile-optimized but could improve in privacy and security disclosures.

I

Instructure

instructure.com

59

Instructure is a leading education technology company specializing in learning management systems and edtech solutions for K–12, higher education, and business sectors. Their flagship product, Canvas LMS, is recognized as the world's most-loved LMS, supported by additional offerings such as Mastery for assessments and Parchment for credential management. The company maintains a strong market position with a global customer base and a comprehensive partner ecosystem. Technically, the website is built on Drupal 10 and integrates modern analytics, marketing, and tracking technologies, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is solid with HTTPS enforced and no evident vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website reflects a professional, trustworthy, and mature digital presence.

M

MINT

mint-frauen-bw.de

66

The website mint-frauen-bw.de represents a regional initiative in Baden-Württemberg, Germany, focused on promoting women in STEM (MINT) careers. It provides educational measures, workshops, and career planning support targeting women interested in STEM fields. The site is built on WordPress using the Avada theme and includes SEO and accessibility features, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and cookie consent implemented, but lacks explicit privacy policies, terms of service, and security headers. Contact information is not readily available, which may impact user trust and compliance. Overall, the site is professional and trustworthy for its purpose but could improve in privacy and security transparency.

H

Hochschulallianz für Angewandte Wissenschaften (HAWtech)

hawtech.de

46

HAWtech is a German university alliance focused on applied sciences and engineering education, uniting six leading universities of applied sciences. The website serves as an information portal for students, researchers, and industry partners, emphasizing collaboration in teaching, research, and innovation. Technically, the site is built on TYPO3 CMS with modern JavaScript frameworks and includes privacy-compliant cookie consent and analytics via Matomo. Security posture is solid with HTTPS and no visible vulnerabilities, though formal security policies and incident response contacts are absent. Overall, the site is professional, trustworthy, and well-maintained, supporting the alliance's mission effectively.

The domain landratsamt-ostalbkreis.de currently serves a minimal redirect page managed by Parklogic, a domain parking and monetization service. No official website content, business information, or contact details are present, indicating the domain is not actively used for its purported purpose. The technical infrastructure is limited to basic JavaScript redirection and ad overlays, with no visible security or privacy policies. This results in a low digital maturity and poor user experience. Security posture is weak due to lack of HTTPS confirmation and absence of security headers. Overall, the site poses a low trust level and is not suitable for business or public use in its current state.

explorhino is a German educational science center focused on interactive learning experiences for children, families, and schools. It offers hands-on exhibits, workshops, courses, and events designed to engage young learners in science and technology. The website reflects a well-structured and professionally designed platform that supports its educational mission with clear navigation and relevant content. Technically, the site is built on WordPress with modern plugins for SEO, event management, and GDPR compliance, ensuring a good digital maturity level. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and incident response transparency. Overall, the site is trustworthy, compliant with privacy regulations, and provides clear contact information and social media presence.

S

Viele Hochschulen. Ein Ziel. Ihr Weiterkommen.

suedwissen.de

57

The website www.suedwissen.de serves as an educational platform focused on providing information about multiple universities and supporting educational advancement, primarily targeting students and prospective university attendees in Germany. The site features a modern technical infrastructure utilizing JavaScript frameworks such as Vue.js, with Cookiebot managing cookie consent and Matomo for analytics, hosted on bunny.net's infrastructure. While the site demonstrates good design quality and user experience with mobile optimization, it lacks explicit privacy policies, terms of service, and contact information, which are critical for compliance and user trust. Security posture is moderate, with no detected security headers or incident response policies, indicating room for improvement in security best practices. Overall, the site is safe for general audiences and does not contain adult or questionable content.

G

Graduate Campus Hochschule Aalen

learniac.org

43

Graduate Campus Hochschule Aalen operates as a professional continuing education provider offering a range of courses primarily in technology, business, and digital transformation. The platform leverages modern online delivery methods including live-online sessions and e-learning modules, targeting professionals seeking flexible and compact learning formats. The website is built on TYPO3 CMS and integrates cookie consent management and analytics tools, reflecting a moderate to advanced digital maturity. Security posture is solid with HTTPS and consent mechanisms, though lacks published privacy and security policies. Overall, the site presents a trustworthy and professional educational service with room for improvement in compliance documentation and security transparency.

T

Taxmaster

taxmaster.de

66

Taxmaster.de is an educational website focused on providing a Master of Taxation degree and tax consultancy training in Germany. The site targets students and professionals interested in taxation, offering dual qualifications. The business operates in the education sector with a niche focus on taxation studies. The website is built on TYPO3 CMS and integrates modern technologies such as Google reCAPTCHA, Cookiebot for consent management, and Google Tag Manager for analytics. The technical infrastructure is solid with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enforced and consent mechanisms in place, though some security headers and explicit policies could be improved. Privacy compliance is strong, with comprehensive cookie policies and GDPR adherence. Overall, the site is professional, trustworthy, and well-positioned within its market niche.

G

Graduate Campus Hochschule Aalen

graduatecampus.de

43

Graduate Campus Hochschule Aalen is a reputable educational institution specializing in professional continuing education and part-time study programs including Bachelor and Master degrees, certificates, and courses primarily in technology, business, and IT sectors. The website reflects a strong market position in Germany with a focus on flexible learning formats such as blended learning, online, and on-campus options. The institution leverages modern digital tools including TYPO3 CMS, Google Tag Manager, and Usercentrics for consent management, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and consent mechanisms in place, though explicit security policies and incident response contacts are absent. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO.

S

Studierendenwerk Ulm

studierendenwerk-ulm.de

61

Studierendenwerk Ulm is a non-profit public institution dedicated to supporting the social needs of students in Ulm and surrounding academic institutions. The organization provides a broad range of services including student housing, cafeteria and food services, financial aid consulting (notably BAföG), psychosocial and legal counseling, childcare support, and services for international students. The website reflects a well-established regional leader in student social services with a clear focus on accessibility and comprehensive support. Technically, the website is built on WordPress with common plugins such as Events Manager and AIOSEO, leveraging jQuery and RoyalSlider for interactive elements. The site is served over HTTPS with a Content-Security-Policy header, indicating a good baseline security posture. Performance is moderate with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured data. Security-wise, the site benefits from HTTPS and some security headers but lacks others like HSTS and X-Frame-Options. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial; while a comprehensive privacy policy is present, no cookie consent mechanism was found, which may pose GDPR compliance risks. Contact information is available, though no direct company emails are exposed on the site. Overall, the website is trustworthy, professional, and well-aligned with its mission. Strategic improvements in privacy compliance and security headers would enhance its security posture and regulatory adherence.

Tuna Technologies is an independent game development company with a history dating back to 1998. The company focuses on creating games and has worked on notable brands such as Family Guy, Boulder Dash, and Alien Hominid. Their website is minimalistic, primarily serving as a portal linking to partner sites related to their game projects. The business operates in the technology sector, specifically within game development, targeting independent game players and enthusiasts. The company appears to be small in size with a niche market position.

HugeDomains operates as a reputable domain marketplace specializing in premium domain name sales, exemplified by the SevenVenture.com listing. The platform offers straightforward purchase options including immediate buy and interest-free payment plans, targeting individuals and businesses seeking valuable domain assets. The website is professionally designed with clear navigation, mobile responsiveness, and trust signals such as customer testimonials and a 30-day money back guarantee. Technically, the site employs modern web technologies including jQuery, Google Analytics, Google reCAPTCHA Enterprise, and cookie consent management, ensuring a secure and user-friendly experience. Security posture is strong with HTTPS enforced and SSL encryption, although explicit security headers and incident response policies are not publicly documented. Overall, the domain sale page is trustworthy and well-maintained, with minor recommendations to enhance security transparency and accessibility.

C

comparion.de — Domain default page for

comparion.de

41

The website comparion.de currently hosts a default Virtualmin control panel placeholder page, indicating that no active website content has been deployed. The page primarily serves as a notification to the site owner that the virtual server is operational and ready for content upload. The business overview is minimal, with no explicit company branding or service descriptions beyond the Virtualmin hosting control panel references. The technical infrastructure is based on Virtualmin with Bootstrap 5.3.1 for styling, and the site is accessible without any web application firewall or blocking mechanisms detected. Security posture is basic, with HTTPS implied but no advanced security headers or policies implemented. Privacy and compliance features such as privacy policies, cookie consent, and terms of service are absent, limiting the site's compliance maturity. Overall, the site represents a nascent or inactive web presence with significant room for development and security enhancements.

B

Bosch Building Automation GmbH

gfr.de

56

Bosch Building Automation GmbH, formerly GFR mbH, is a subsidiary of the Bosch Group specializing in innovative building automation solutions focused on comfort, efficiency, and sustainability. The company leverages Bosch's strong brand and technological expertise to serve facility managers, building owners, and energy managers primarily in Germany. Their offerings include system automation, room automation, building management software, and related services. The website is professionally designed, well-structured, and provides comprehensive information about their portfolio and corporate identity. Technically, the site uses modern web technologies including Google Tag Manager and Qualtrics for analytics and surveys, with good mobile optimization and accessibility. Security posture is solid with HTTPS and consent management, though explicit security policies and incident response details are absent. WHOIS data is unavailable, which slightly reduces transparency but does not detract significantly from trust given the strong Bosch affiliation and professional presentation. Overall, the site demonstrates a mature digital presence aligned with Bosch's corporate standards.

L

Lega Nazionale delle Cooperative e Mutue (LEGACOOP)

legacoop.coop

61

Legacoop Nazionale is a well-established non-profit association founded in 1886, representing over 10,000 cooperative enterprises primarily in Italy. The organization promotes economic, social, and civil protagonism of cooperatives, supporting their growth domestically and internationally. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to cooperative stakeholders. Technically, the site is built on WordPress with Elementor and Yoast SEO, hosted behind Cloudflare DNS, and uses HTTPS with domain transfer protections, indicating a secure and modern infrastructure. However, explicit privacy and terms of service pages are not found, and direct contact information is missing, which are areas for improvement. The security posture is strong with no visible vulnerabilities, but enabling DNSSEC and publishing security policies would enhance trust. Overall, the site is trustworthy, professional, and aligned with the organization's mission.

ANAEPA-Confartigianato Edilizia is a national Italian association representing artisans in the construction sector, including decorators and painters. The website serves as an information hub providing news, documents, and resources relevant to artisan construction professionals. It maintains a consistent brand presence and targets small to medium artisan enterprises in Italy. Technically, the site is built on WordPress with modern plugins and uses Matomo analytics for privacy-conscious visitor tracking. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements such as DNSSEC and security headers are recommended. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

N

Net at Work GmbH

netatwork.de

60

Net at Work GmbH is a German technology company specializing in Microsoft solutions such as Microsoft 365, Teams, Security, SharePoint, and Exchange. The company positions itself as an experienced Microsoft Solutions Partner, offering consulting, migration, managed services, and change management to enable modern, secure digital workplaces. Their website reflects a professional and consistent brand image targeting business customers seeking Microsoft-based collaboration and security solutions. Technically, the website is built on WordPress with a modern theme and plugins, including Borlabs Cookie for GDPR-compliant cookie consent and Google Analytics for tracking. Security posture is good with HTTPS and cookie consent, but lacks visible advanced security headers and explicit security policies. Privacy compliance is partial due to missing explicit privacy and terms of service pages. WHOIS data is minimal but consistent with the business location and domain usage. Overall, the website is professional, trustworthy, and well-maintained, with room for improvement in privacy transparency and security documentation.

M

MADE eventi Srl

madeexpo.it

67

MADE eventi Srl operates the MADE expo, a prominent trade fair in Milan, Italy, focusing on the construction sector. The website presents a professional and comprehensive platform for exhibitors, visitors, and media, offering detailed event information, ticketing, and networking opportunities. The company is positioned as a key player in the event organization industry with strong partnerships and media presence. Technically, the website uses modern web technologies including Adobe Experience Manager CMS, Bootstrap, jQuery, and integrates Google Tag Manager and Iubenda for analytics and privacy compliance. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms implemented. No critical vulnerabilities or suspicious content were detected. Overall, the site is well-structured, GDPR compliant, and trustworthy, serving a general audience interested in construction industry events.

C.T.A. Consorzio Tecnologie Avanzate Soc. Coop. is an Italian cooperative consortium founded in 2005, comprising approximately 30 artisan companies and about 200 affiliated partners. The cooperative specializes in technological systems, telecommunications, renewable energy, electrical and electronic sectors, offering turnkey services with a focus on professionalism and quality. Their target audience includes SMEs and individual artisans aiming to compete for national contracts. The website demonstrates a moderate level of digital maturity, built on WordPress with modern plugins such as Elementor and Yoast SEO, and integrates Google Analytics for visitor tracking. The presence of a cookie consent banner and privacy policy indicates GDPR compliance awareness.

W

WInTO GmbH – Wirtschafts-, Innovations- und Tourismusförderung Oberhavel GmbH

youlab.de

51

youlab.de is the official website for the youlab career and educational fair organized by WInTO GmbH, serving the Oberhavel region in Germany. The site provides comprehensive information about the event, including exhibitor registration, apprenticeship opportunities, and media impressions. It targets students, young job seekers, and local companies, positioning itself as the largest career orientation fair in the region. The business model focuses on event organization and promotion, supported by local government and industry partners. Technically, the website is built on a modern stack including HTML5, CSS3, JavaScript, and uses Cookiebot for consent management and Matomo for analytics. The CMS appears to be Redaxo, inferred from media URL patterns. The site is hosted on servers indicated by the nameservers your-server.de and second-ns.de. Performance and mobile optimization are good, with basic accessibility and SEO features implemented. From a security perspective, the site enforces HTTPS and uses a cookie consent mechanism with blocking mode. No critical vulnerabilities or exposed sensitive data were detected. However, security headers are not explicitly observed in the provided data, and no published security or incident response policies were found. Privacy compliance is strong, with a clear privacy policy and cookie management aligned with GDPR requirements. Overall, the website is professional, trustworthy, and well-suited for its educational purpose. Recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and continuing to monitor third-party scripts for security risks.

W

WInTO GmbH

gruenderservice-oberhavel.de

47

WInTO GmbH operates the Gründerservice Oberhavel website, providing comprehensive support and consulting services for business founders in the Oberhavel region of Germany. The company focuses on guiding entrepreneurs through orientation, planning, implementation, and consolidation phases of business establishment. The website serves as a regional government-related platform to foster a startup-friendly environment with clear contact points and event information. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, Font Awesome icons, and Swiper.js for UI components. Cookie consent is managed via Cookiebot, ensuring GDPR compliance, and user analytics are handled through Matomo with cookies disabled to enhance privacy. The site is mobile-optimized and presents a professional design with good navigation clarity. From a security perspective, the site uses HTTPS and integrates cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response information. No vulnerabilities or suspicious elements were detected in the content or WHOIS data. The domain registration information is minimal but consistent with the business claims. Overall, the website is a trustworthy, professional resource for its target audience, with moderate technical sophistication and good privacy compliance. Strategic improvements in security headers, incident response transparency, and SEO could further enhance its posture and user trust.

F

fib Oberhavel

fib-oberhavel.de

49

fib Oberhavel is a regional workforce information office operating under the WInTO GmbH umbrella, focused on supporting companies, schools, and higher education institutions in the Oberhavel district of Germany. It provides coordination, networking, and advisory services to address the growing demand for skilled workers in the region. The website presents a professional and content-rich platform with clear navigation and responsive design, targeting local businesses, students, and educational institutions. Technically, the site uses modern front-end technologies including Font Awesome, Bootstrap, and Cookiebot for consent management, alongside Matomo for privacy-conscious analytics. Security posture is solid with HTTPS and cookie consent mechanisms, though security headers and explicit policies could be improved. Overall, the site demonstrates a good balance of usability, privacy compliance, and business credibility, suitable for a government-affiliated entity.

T

Tintri

tintri.com

69

Tintri is a technology company specializing in data management solutions tailored for virtualized workloads. Their offerings focus on providing enterprises with enhanced control, automation capabilities, and improved security for managing virtual data environments. The company has an established market presence since 2008, positioning itself as a specialized provider in the virtual data management sector. The website reflects a professional and consistent brand image, targeting IT professionals and enterprises requiring advanced data management solutions. From a technical perspective, the website is built on WordPress using modern tools such as Elementor and Yoast SEO, indicating a mature digital infrastructure. The site demonstrates good mobile optimization and SEO practices, although performance is moderate. Security-wise, HTTPS is used, and a cookie consent mechanism is implemented, but there is room for improvement in security headers, DNSSEC, and published security policies. The security posture is adequate but lacks transparency in privacy and incident response policies, which are critical for compliance and trust. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is functional and professional but would benefit from enhanced privacy and security disclosures. Strategic recommendations include publishing comprehensive privacy and terms of service policies, enabling DNSSEC, adding security headers, and providing clear incident response contacts to strengthen trust and compliance.

fairplaid.org is a German crowdfunding platform specializing in sports projects, enabling sports clubs and athletes to raise funds for their initiatives. The platform has been operational since 2012, indicating a mature presence in its niche market. The website is well designed with good content relevance and user experience, targeting sports organizations and individuals in Germany. The technical infrastructure leverages modern JavaScript frameworks and integrates multiple analytics and marketing tools while maintaining user privacy through cookie consent and IP anonymization. Security posture is solid with HTTPS enforced and domain registration protections in place, though improvements such as enabling DNSSEC and adding security headers could enhance resilience. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism, but the absence of terms of service and explicit security policies is noted. Overall, the site demonstrates a professional and trustworthy online presence with moderate to good technical and security maturity.

T

TARGOBANK

targobank.de

66

TARGOBANK is a well-established German financial institution offering a broad range of banking products including loans, accounts, cards, savings, investments, and insurance. The website targets private, business, and corporate customers with a strong emphasis on flexible, customer-centric financial solutions. The bank maintains a significant physical presence with approximately 340 branches and complements this with a robust digital platform featuring online banking and mobile apps. The site content is professional, comprehensive, and well-structured, reflecting a mature business model in the banking sector. Technically, the website employs modern web technologies including asynchronous JavaScript, CSS, and uses third-party services such as Google Tag Manager and TagCommander for analytics and consent management. The site is hosted on a CDN, ensuring moderate to good performance and excellent mobile optimization. Accessibility features and SEO best practices are well implemented. From a security perspective, the site enforces HTTPS, includes multiple security headers, and integrates a consent management platform to comply with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, explicit incident response contacts and vulnerability disclosure mechanisms like security.txt are not found, representing an area for improvement. Overall, the website demonstrates a high level of professionalism, security, and compliance suitable for a large financial institution. Strategic recommendations include enhancing transparency around security incident response and vulnerability disclosure to further strengthen trust and security posture.

V

VGH Stiftung

nsks.de

50

The website www.nsks.de represents the Niedersächsische Sparkassenstiftung (NSKS) and the VGH Stiftung, two cultural foundations focused on promoting arts, music, museums, monument preservation, and sustainability projects in Lower Saxony, Germany. The platform serves as an information hub for cultural awards, events, and funding opportunities, targeting cultural institutions, artists, and the general public interested in regional culture. The business model is non-profit, emphasizing cultural support and community engagement. Technically, the website is built on WordPress with a modern tech stack including Bootstrap for responsive design, Yoast SEO for search optimization, and Borlabs Cookie for cookie consent management. Hosting is provided via DomainDiscount24, and the site uses HTTPS with a good SSL configuration. The site is moderately performant and well-optimized for mobile devices, though accessibility features are basic. From a security perspective, the site benefits from HTTPS and cookie consent mechanisms but lacks visible security headers and explicit privacy policies. No vulnerability disclosures or incident response contacts are present, which could be improved to enhance trust and compliance. No WAF or blocking mechanisms were detected, and no adult or questionable content is present, making the site safe for general audiences. Overall, the website is professional and trustworthy, with good content quality and business credibility. However, improvements in privacy policy publication, security headers, and contact information would strengthen its security posture and compliance with GDPR requirements.

C

CELLEHEUTE.DE | Nachrichten für Stadt und Landkreis Celle

celleheute.de

54

The website www.celleheute.de appears to be a small-scale local news or information portal based in Germany, built using the Wix platform. The site uses standard Wix hosting and scripts, including Google Tag Manager and Facebook Pixel for analytics and tracking. However, the website lacks critical privacy and cookie policies, contact information, and security policies, which impacts its overall trustworthiness and compliance posture. The content quality is minimal based on the provided HTML snapshot, and no structured data or Open Graph metadata is present to enhance SEO or social sharing. Technically, the site benefits from HTTPS and Wix's hosting infrastructure but lacks advanced security headers and accessibility features.

W

Westermann Gruppe

antolin.de

60

Antolin by Westermann Gruppe is a well-established educational platform focused on promoting reading skills among students from grades 1 to 10. The platform offers a vast database of quizzes related to children's and youth literature, enabling self-directed learning and performance tracking. The website is professionally designed, mobile-optimized, and provides comprehensive content relevant to its target audience of students, teachers, parents, and libraries. The business model revolves around licensing and subscriptions for schools, with free trial options available. Recognized certifications and awards enhance its market credibility. Technically, the website employs a modern tech stack including jQuery, Flexslider, and Piwik (Matomo) for analytics, with responsive design and good SEO practices. However, some security best practices such as security headers and cookie consent mechanisms are missing or not detected, which could be improved to enhance GDPR compliance and security posture. The site uses HTTPS and disables cookies in analytics to protect user privacy. From a security perspective, the site shows a moderate security maturity with no visible vulnerabilities or exposed sensitive data. The absence of a published security policy or incident response contact limits transparency. The WHOIS data is partially consistent but lacks detailed registrant information, though no suspicious patterns are detected. Overall, the domain and website appear legitimate and trustworthy. Strategically, the platform should focus on improving privacy compliance by implementing cookie consent banners, publishing security policies, and adding incident response contacts. Enhancing security headers and conducting regular security audits would further strengthen its security posture. These improvements will support trust and compliance in the education sector, ensuring continued growth and user confidence.

R

Rapp AG

rapp.ch

63

Rapp AG is a leading Swiss planning and consulting group specializing in integrated design and sustainable development of living spaces and environments. The company offers a broad range of services including general planning, construction management, logistics, architecture, infrastructure, energy management, and mobility solutions. Their website reflects a mature business with a professional digital presence, supporting multiple languages to cater to a diverse audience. Technically, the site is built on Drupal 10 and incorporates modern tracking and consent management tools, indicating a reasonable level of digital maturity. Security posture is strong with HTTPS enforcement and security headers, though explicit privacy and terms of service documentation are missing, representing compliance gaps. Overall, the website and WHOIS data align well, confirming the legitimacy and credibility of the business.

L

Lutec GmbH

lutec.ch

69

Lutec GmbH is a Swiss-based company specializing in energy-efficient ventilation and climate technology solutions, focusing on central and residential ventilation systems. The company targets regional customers in Baselland, Switzerland, offering services including installation, maintenance, and servicing of ventilation and air conditioning systems. The website is built on the BaseKit CMS platform, hosted by Hoststar, and employs modern web technologies such as FontAwesome and PhotoSwipe for enhanced user experience. The site is mobile-optimized and provides a good level of content quality and navigation clarity, although explicit contact details and privacy policies are missing. Security-wise, the website uses HTTPS but lacks important security headers and explicit incident response or vulnerability disclosure information, indicating room for improvement in security posture and compliance. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy of the website and company.

S

Stamm Bau AG

stamm-bau.ch

63

Stamm Bau AG is a well-established Swiss construction company with a history dating back to 1844. The company offers a comprehensive range of construction, renovation, and building services, consolidating 12 specialized trades under one roof. Their market position is strong as the largest construction company in their region, serving both private and commercial clients. The website reflects a professional business model focused on full-service project delivery from concept to maintenance. Technically, the website is built on Silverstripe CMS 5.2 and incorporates modern JavaScript libraries such as jQuery, Swiper, and Photoswipe. The site is mobile-optimized, well-structured, and SEO-friendly, with good performance and accessibility features. Privacy and cookie policies are implemented with consent mechanisms, and the site uses Google Analytics with compliance considerations. From a security perspective, the site enforces HTTPS, employs security headers, and avoids exposing sensitive data. However, there is no explicit incident response contact or vulnerability disclosure policy visible. The domain registration is consistent with the business identity, showing a long history and legitimacy. Overall, the security posture is solid but could be enhanced with formalized incident response and disclosure policies. The overall risk assessment is low, with the website demonstrating professionalism, trustworthiness, and compliance with privacy regulations. Strategic recommendations include adding incident response contacts, publishing a vulnerability disclosure policy, and enhancing accessibility compliance to further strengthen security and trust.

The website www.muenchenstein.ch serves as the official online presence of the Einwohnergemeinde Münchenstein, the municipal government of Münchenstein, Switzerland. It provides comprehensive information and services for residents, families, seniors, foreign residents, and local businesses. The site offers access to administrative services, community news, event announcements, waste disposal information, and local project updates, positioning itself as a key resource for the local population. The business model is that of a governmental service provider focused on community engagement and service delivery. Technically, the website employs modern web technologies including Bootstrap for responsive design, Matomo for analytics, and ES modules for JavaScript. The site is mobile optimized and accessible, with good SEO practices and a clear navigation structure. The CMS used appears to be i-web, a specialized platform for municipal websites. Performance is moderate, with asynchronous loading of analytics scripts and modular JavaScript enhancing user experience. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, it lacks explicit security policy documentation, incident response contacts, and vulnerability disclosure mechanisms such as security.txt. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy and consistency with the municipal identity. Overall, the website is a trustworthy, well-maintained municipal portal with good content quality and technical implementation. Strategic improvements include publishing a security policy, adding incident response contacts, and enhancing security headers to further strengthen the security posture.

D

Discover-Culture

discover-culture.com

63

Discover-Culture is a small media company based in Germany, specializing in digital cultural tours, VR experiences, and interactive cultural media. The website offers digital tours and cultural films accessible without restrictions after purchase, targeting a general audience interested in culture and art. The business model is primarily e-commerce focused on digital content delivery. Technically, the website is built on WordPress with WooCommerce, integrating modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and HubSpot. Hosting is via Amazon AWS infrastructure, ensuring reliable performance and scalability. Security posture is good with HTTPS enforced and domain transfer protection, though the absence of DNSSEC and explicit security headers suggests room for improvement. Privacy compliance is partial, with a cookie policy and consent mechanism present but lacking explicit privacy and terms of service pages. Overall, the website is professional, well-branded, and functional, with moderate trustworthiness and a solid technical foundation.

B

Boch & Fernsh

bochfernsh.com

46

Boch & Fernsh is a well-established creative advertising agency based in Mumbai, India, with over two decades of experience. The company offers a comprehensive suite of services including branding, advertising campaigns, video production, digital marketing, social media management, and web design. Their market position is strong, supported by multiple industry awards and a reputable client portfolio. Technically, the website employs modern web technologies and integrates various analytics and marketing tools, hosted on DreamHost. The site is mobile-optimized and professionally designed, providing an excellent user experience. Security posture is good with HTTPS enforced, but lacks some advanced security headers and explicit privacy compliance mechanisms. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and trustworthiness.

P

Prosegur Deutschland

prosegur.de

72

Prosegur Deutschland is a leading security and cash management service provider in Germany, specializing in secure transportation and handling of physical and digital assets. The company positions itself as the market leader in Germany, serving B2B clients including banks, public institutions, and enterprises. Their comprehensive service portfolio includes cash management outsourcing, cash deposit solutions, technical services, and high-security storage. Technically, the website employs modern tracking and consent management tools, hosted on a reputable CDN provider (Akamai), and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, supporting Prosegur's strong market presence.

A

Armaguard

prosegur.com.au

55

Armaguard Australia, part of the Linfox Armaguard Group, is a leading provider of secure currency supply chain and technology solutions across Australia, New Zealand, and Southeast Asia. Established in 1938, the company serves major banks, financial institutions, ATM networks, and retailers with services including currency management, secure transport, and precious cargo protection. The website reflects a mature business with a strong market position and a broad service portfolio. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses essential plugins such as Yoast SEO and Contact Form 7. The site is mobile-optimized and demonstrates good SEO practices, though performance is moderate. Security measures include HTTPS and Google reCAPTCHA on forms, but the absence of DNSSEC and security headers indicates room for improvement. From a security perspective, the site shows a solid baseline with encrypted connections and form protections but lacks published security policies and incident response contacts. No critical vulnerabilities or suspicious content were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional, trustworthy, and business-focused, with recommendations to enhance security headers, DNS security, and privacy compliance to further strengthen its posture.

P

Prosegur

prosegur.cl

73

Prosegur Chile is a prominent security services provider specializing in alarm systems, video surveillance, and cash management solutions tailored for both residential and business customers. The website reflects a mature digital presence with comprehensive service offerings and a strong focus on customer engagement through interactive forms and clear calls to action. Technically, the site employs modern web technologies including Bootstrap, Google Tag Manager, TikTok Pixel, and Microsoft Clarity, indicating a well-maintained infrastructure with attention to analytics and marketing. Security-wise, the site enforces HTTPS and cookie consent mechanisms, though some security headers could be improved for enhanced protection. The absence of WHOIS data for the queried subdomain is likely a technical querying issue rather than a legitimacy concern, as the website content and structure strongly support a trustworthy business. Overall, Prosegur Chile demonstrates a solid security posture and compliance with privacy regulations, making it a reliable platform for its users.

F

Flüchtlingsrat RLP e.V.

civi-kune-rlp.de

46

civi kune RLP is a non-profit project operated by Flüchtlingsrat RLP e.V., focusing on refugee support, community engagement, and volunteer coordination in the German state of Rheinland-Pfalz. The website serves as an informational hub providing news, event updates, and resources for volunteers and refugees. It maintains a consistent brand identity aligned with its parent organization and regional government partners. Technically, the site is built on WordPress, leveraging standard web technologies and hosted by Manitu GmbH. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks some advanced security headers and formal security policies. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, serving its community-focused mission effectively.

E

European Union Intellectual Property Office

tmdn.org

54

The European Union Intellectual Property Network (EUIPN) website serves as the official portal for intellectual property information and services across the European Union. Operated by the European Union Intellectual Property Office (EUIPO), it provides resources, tools, and updates relevant to IP professionals, government entities, and the public. The site is positioned as an authoritative source within the government sector, supporting IP management and cooperation among EU member states. Technically, the website employs modern web technologies including React and JavaScript, with Matomo analytics for privacy-conscious user tracking. The site demonstrates good mobile optimization, accessibility, and a professional design consistent with government standards. However, some security headers and explicit security policies are not evident, suggesting room for enhancement in security posture. From a security perspective, the site benefits from HTTPS and GDPR-compliant privacy and cookie policies, including a consent mechanism. No critical vulnerabilities or suspicious indicators were found. The WHOIS data is unavailable or malformed, which is typical for EU domains, but the domain's legitimacy is supported by consistent branding and official content. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic recommendations include improving security headers, publishing explicit security policies, and enhancing incident response transparency to further strengthen trust and security maturity.

E

Eidgenössisches Institut für Geistiges Eigentum

ipi.ch

68

The Eidgenössisches Institut für Geistiges Eigentum (IGE) is the Swiss federal authority responsible for intellectual property rights including patents, trademarks, designs, geographical indications, and copyright. The website serves as a comprehensive portal for individuals, businesses, and IP professionals to access registration services, legal information, public registers, and educational resources. It maintains a strong market position as the central Swiss IP office with a clear government affiliation and authoritative content. The site offers multilingual support and a variety of online services to facilitate IP management. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as Google Tag Manager for analytics and slick sliders for UI. The site is mobile optimized, accessible, and SEO friendly with a professional design and clear navigation. Hosting details are not explicit but the site uses HTTPS with good SSL configuration. Security best practices are partially implemented, with room for improvement in security headers and published security policies. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms, and avoids exposing sensitive data. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms such as security.txt. No vulnerabilities or suspicious domains were detected. The WHOIS data confirms the domain is legitimately registered to a Swiss federal entity, reinforcing trust. Overall, the website is highly professional, trustworthy, and compliant with privacy regulations such as GDPR. It effectively serves its target audience with relevant content and services. Strategic recommendations include enhancing security headers, publishing a security policy, and implementing a vulnerability disclosure framework to further strengthen the security posture and trust.

E

Eidgenössisches Institut für Geistiges Eigentum

swissreg.ch

64

The website swissreg.ch is the official portal of the Swiss Federal Institute for Intellectual Property (Eidgenössisches Institut für Geistiges Eigentum). It serves as the authoritative source for intellectual property rights in Switzerland, including trademarks, patents, and design protections. The site targets businesses, legal professionals, inventors, and the general public seeking information and services related to intellectual property. As a government entity, it holds a strong market position as the official Swiss authority in this domain. Technically, the website employs modern web technologies such as Angular and Material Design components, ensuring a responsive and accessible user experience. The presence of Font Awesome icons and Dynatrace monitoring scripts indicates a mature digital infrastructure focused on usability and performance. The site is well-structured with good design quality and navigation clarity, optimized for mobile devices. From a security perspective, the site uses HTTPS and modern JavaScript frameworks, but lacks explicit security headers and detailed privacy or cookie policies. No forms or direct contact information were detected in the provided content, which limits user interaction and transparency in privacy compliance. The WHOIS data confirms the domain's legitimacy as a Swiss federal government asset, reinforcing trustworthiness. Overall, the website demonstrates a solid security posture and technical maturity appropriate for a government service portal. However, improvements in privacy compliance documentation and security header implementation are recommended to enhance user trust and regulatory adherence.

G

Government Communications Headquarters (GCHQ)

gchq-careers.co.uk

70

GCHQ Careers is the official recruitment portal for the Government Communications Headquarters, a UK government intelligence and cyber security agency. The website serves as a platform to attract and inform prospective candidates about career opportunities within GCHQ, emphasizing its mission to keep the UK safe. The site is professionally designed with clear navigation, mobile optimization, and comprehensive content about roles and application processes. Technically, the site employs modern JavaScript frameworks, Google Tag Manager, and Facebook Pixel for analytics and marketing, alongside a robust cookie consent mechanism ensuring GDPR compliance. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though additional security headers could enhance protection. The absence of WHOIS data is due to the domain being a subdomain or alias, common for government sites, and does not detract from the site's legitimacy. Overall, the site presents a trustworthy, professional front for GCHQ recruitment efforts.