Security Directory

B

Buchladen Rote Straße

roter-buchladen.de

58

Buchladen Rote Straße is a small, independent bookstore located in Göttingen, Germany, with a strong cultural and political focus on leftist, feminist, and queer literature. Founded in 1972, it has a longstanding presence in the community and offers both in-store and online book sales, as well as cultural events such as readings and concerts. The website reflects this niche positioning with relevant content and event announcements. Technically, the site is built on Joomla CMS with modern frontend technologies like Bootstrap and jQuery, hosted by webgo.de. The site is mobile-optimized and provides a good user experience with clear navigation and relevant metadata. Security posture is solid with HTTPS and CSRF protections, but lacks some security headers and a vulnerability disclosure mechanism. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professional, serving a specialized audience with minimal tracking or advertising.

F

Falling Walls Foundation

falling-walls.com

62

The Falling Walls Foundation is a well-established non-profit organization based in Germany, focused on fostering interdisciplinary communication and innovation in science. It organizes the annual Falling Walls Science Summit, attracting global science leaders, Nobel laureates, and policymakers. The foundation's website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content about its events, partners, and activities. Technically, the site is built on Drupal 10 with modern frameworks and includes privacy-respecting analytics and consent management. Security posture is good with HTTPS and cookie consent, though some security headers could be improved. Overall, the foundation demonstrates strong business credibility and compliance with GDPR. No critical security or content safety issues were detected.

A

APSL Tech

apsl.tech

66

APSL Tech is a Spanish technology company specializing in custom web development using Python, Django, React, and Vue, with a strong focus on cloud systems and AI-driven solutions. They position themselves as a trusted AWS partner and provide services including cloud architecture, data management, AI automation, agile product development, and business management software. Their market presence is supported by multiple enterprise clients and a partnership with Nagarro, indicating a medium-sized, credible technology firm founded in 2022. Technically, the website demonstrates a modern tech stack with responsive design, good SEO practices, and hosting on AWS infrastructure. The use of Bootstrap and JavaScript libraries enhances user experience and accessibility. Analytics are implemented via Google Analytics with appropriate cookie consent mechanisms, reflecting a mature digital presence. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, but lacks visible HTTP security headers and DNSSEC is not enabled. The domain registration is consistent with the business claims, and domain status flags provide transfer and update protections. Privacy and cookie policies are comprehensive and GDPR compliant, though incident response contacts and terms of service pages are missing. Overall, APSL Tech presents a professional, trustworthy, and secure online presence with room for improvement in security headers and legal completeness. The risk level is low, and the company is well-positioned in its market niche.

S

Solidarité Ukraine, Genève

solidariteukraine.ch

54

Solidarité Ukraine, Genève is a small non-profit organization dedicated to supporting Ukrainian refugees in Geneva. The website provides hotline services, social and administrative assistance, accommodation offers, and volunteer engagement opportunities. It targets both refugees and local residents willing to help. The organization appears to be well-positioned locally with a clear humanitarian mission and bilingual content in French and Ukrainian. The website uses WordPress with a modern tech stack including Bootstrap and React vendor scripts, and employs SEO and multilingual plugins to enhance accessibility and reach. Performance is moderate with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enforced and email obfuscation, but visible PHP warnings indicate minor backend issues that should be addressed. Privacy compliance is limited due to the absence of a privacy policy, though a cookie consent mechanism is present. Contact information is clearly provided, enhancing business credibility. Overall, the website is trustworthy and professional but could improve in security hygiene and privacy transparency.

The website www.websiteflatrate.de is operated by atrego GmbH, a small German technology company specializing in professional web design and CMS development since 2001. The company offers subscription-based web design flatrates tailored to small and medium businesses, freelancers, and agencies. The site demonstrates a mature digital infrastructure using ContentServer24 CMS, Bootstrap, and modern JavaScript libraries, with responsive design and good SEO practices. Security posture is strong with HTTPS, cookie consent, and anonymized analytics, though some security headers could be improved. Contact information and GDPR compliance are clearly addressed, enhancing trustworthiness. Overall, the site presents a professional and credible business presence with a good balance of technical and business maturity.

C

Canada Media Fund

made-nous.ca

56

MADE | NOUS is a Canadian media campaign focused on celebrating and promoting Canadian creators in film, television, and digital media. The initiative is supported by key industry players such as the Canada Media Fund and Telefilm Canada, positioning it as a collaborative and credible effort within the Canadian entertainment sector. The website serves as a promotional platform with multimedia content and social media integration to engage its target audience of creators and media consumers. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses video streaming via Vimeo. It incorporates analytics and marketing tools such as Google Analytics and Facebook Pixel, indicating a moderate level of digital maturity. The site is mobile-optimized and SEO-friendly, though some accessibility features are basic. From a security perspective, the site uses HTTPS and has domain protections in place, but lacks DNSSEC and security headers, which are recommended for enhanced security. Privacy compliance is partial, with a privacy policy and terms of service present but no cookie consent mechanism or explicit GDPR compliance indicators. No incident response or security policy information is publicly available. Overall, the website is professional and trustworthy with a good business credibility score. Strategic improvements in security headers, DNSSEC, and privacy compliance would enhance its security posture and user trust.

R

Rheinland-Pfälzische Technische Universität Kaiserslautern-Landau

rptu.de

61

Rheinland-Pfälzische Technische Universität Kaiserslautern-Landau (RPTU) is a leading technical university in Germany's Rheinland-Pfalz region, offering over 160 study programs across engineering, natural sciences, social sciences, and teacher education. The university emphasizes research excellence, innovation transfer, and international collaboration. The website reflects a mature digital presence with a modern TYPO3 CMS infrastructure, responsive design, and comprehensive content tailored to diverse audiences including prospective students, researchers, and partners. Privacy and cookie policies are well implemented with consent mechanisms, supporting GDPR compliance. Security posture is strong with HTTPS and no visible vulnerabilities, though some HTTP security headers could be improved. Overall, the domain and website present a trustworthy and professional academic institution.

A

ASW gGmbH

asw-ggmbh.de

45

ASW gGmbH is a well-established educational institution in Saarland, Germany, specializing in dual study programs and continuing education with accredited bachelor degrees. The institution emphasizes practical and scientific education, small group teaching, and personal contact, supported by modern facilities. The website reflects a professional and trustworthy presence with clear contact information and accreditation badges. Technically, the site is built on TYPO3 CMS with modern frontend technologies and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking explicit security policies and incident response details. Overall, the site is low risk and credible, serving students and professionals seeking dual study and advanced training.

A

atrego GmbH

contentserver24.de

44

Contentserver24, operated by atrego GmbH, is a specialized provider of web content and digital solutions tailored for the energy sector, particularly fuel and mineral oil traders. The company offers a comprehensive suite of services including online shops, newsletters, daily pricing updates, and website development, positioning itself as a niche B2B service provider in Germany. The website reflects a professional and consistent brand image with clear navigation and relevant content for its target audience. Technically, the website employs modern frameworks such as Bootstrap 5 and jQuery, integrates Google Analytics with IP anonymization, and uses reCAPTCHA for form security. The site is mobile-optimized and demonstrates good SEO practices. However, some security headers are missing, and no explicit security or incident response policies are published, indicating room for improvement in security posture. The security evaluation shows a good baseline with HTTPS enforced and anti-spam measures in place, but lacks advanced security headers and formal incident response contacts. Privacy compliance is strong, with a clear GDPR-compliant privacy policy and cookie consent mechanism. WHOIS data is minimal, limiting full trust verification, but the website's professional presentation and business consistency support legitimacy. Overall, Contentserver24 presents a trustworthy and professional digital presence with solid technical foundations and privacy compliance, suitable for its specialized market. Strategic enhancements in security policies and domain transparency would further strengthen its risk profile.

FernUniversität in Hagen is Germany's only state distance university, offering a wide range of Bachelor and Master degree programs, continuing education, and academy studies. It serves a broad audience including prospective students, current students, alumni, researchers, and academic staff. The university maintains multiple campus locations across Germany and abroad, emphasizing accessibility and flexibility in education. The website reflects a professional and comprehensive digital presence aligned with its educational mission. Technically, the website employs modern web technologies such as Bootstrap 5 for responsive design, Matomo for privacy-conscious analytics, and SVG graphics for scalable visuals. Hosting appears to be managed via the German Research Network (DFN), supporting reliability and security. The site is well-optimized for mobile devices and accessibility, with clear navigation and rich content. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks some advanced HTTP security headers and a cookie consent mechanism, which are recommended for enhanced protection and compliance. No vulnerabilities or suspicious content were detected. Privacy compliance is strong, with a comprehensive privacy policy and a designated data protection officer contact. Overall, the website demonstrates a high level of professionalism, trustworthiness, and technical maturity, suitable for a large public educational institution. Strategic improvements in security headers and cookie consent would further strengthen its posture.

T

Turkticaret.net Yazilim Hizmetleri Sanayi ve Ticaret A.S.

myzcocharge.com

61

MYZ Co Charge is a Turkish-based service providing a mobile application platform to help electric vehicle owners locate nearby charging stations with real-time availability. The company targets EV drivers in Turkey, offering convenience through its app available on both the Apple App Store and Google Play. The business is newly established in late 2024, positioning itself in the growing energy and transportation sector focused on sustainable mobility solutions. Technically, the website uses modern frontend technologies such as Bootstrap, jQuery, and Swiper, hosted behind Cloudflare DNS services, ensuring decent performance and mobile responsiveness. However, DNSSEC is not enabled, and security headers are missing, indicating room for improvement in security hardening. The website is accessible without WAF or blocking challenges, and contact information including a corporate email and physical address is clearly provided, enhancing business credibility. Privacy and terms of service documents are present but cookie consent mechanisms are absent, which may affect GDPR compliance. Overall, the site demonstrates a good balance of content quality, technical implementation, and business credibility, scoring 74 out of 100 in AI evaluation.

N

Nesil Grup Teknoloji Tic. A.Ş

cerezgo.com

70

Nesil Grup Teknoloji Tic. A.Ş operates the Cerezgo platform, a cookie consent management solution designed to help websites comply with Turkish KVKK and GDPR regulations. The company has over 15 years of experience in technology and data protection consultancy, serving a broad range of sectors in Turkey. Their website reflects a professional and trustworthy business with clear service offerings and certifications such as ISO 27001. Technically, the site uses modern web technologies including Bootstrap and jQuery, and integrates multiple analytics and marketing tools. Security posture is solid with HTTPS and domain transfer protections, though improvements like DNSSEC and security headers are recommended. Privacy compliance is partially addressed with a detailed cookie policy and consent mechanism, but lacks a dedicated privacy policy and terms of service pages. Overall, the website and business demonstrate a mature digital presence with room for enhanced security and compliance documentation.

L

Les communes genevoises

geneve-communes.ch

52

Les communes genevoises website serves as an official informational platform representing the 45 communes of the Geneva canton in Switzerland. It provides comprehensive information about the diverse public services offered by the communes, including childcare, education, sports, culture, public safety, and infrastructure maintenance. The site targets residents and citizens of Geneva, aiming to increase awareness and transparency of municipal activities. Technically, the website is built on Drupal 10 with Bootstrap 5, uses Matomo for analytics with privacy-conscious settings, and integrates modern web fonts and icons. The design is professional, mobile-optimized, and accessible, providing a good user experience. Security posture is solid with HTTPS and privacy-respecting analytics, but lacks explicit privacy and cookie policies, and contact information is not clearly presented. Overall, the site is trustworthy and legitimate, aligned with its government sector role, but could improve privacy compliance and user contact options.

A

ASW gGmbH

asw-berufsakademie.de

45

ASW gGmbH is a well-established educational institution based in Saarland, Germany, specializing in dual study programs and professional continuing education. The organization offers state-recognized and accredited bachelor degrees with a strong emphasis on practical and scientific learning. Their market position is supported by accreditations such as AQAS and recognition in the CHE ranking, positioning them as a reputable player in the education sector. The website targets prospective students and professionals seeking advanced training, providing comprehensive information and personalized counseling services. Technically, the website is built on TYPO3 CMS with Bootstrap 5, leveraging modern web technologies including jQuery and Leaflet.js for interactive maps. The site demonstrates good mobile optimization, accessibility, and SEO practices, ensuring a positive user experience. Hosting is managed via DomainControl, and the site uses HTTPS with a cookie consent mechanism to comply with privacy regulations. From a security perspective, the site enforces HTTPS and includes cookie consent management, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Tracking is limited and consent-based, primarily using Google Tag Manager and OnSite tracking. Overall, the security posture is solid but could be enhanced by implementing additional security headers and formalizing incident response disclosures. The overall risk assessment is low, with the website presenting a professional, trustworthy, and compliant digital presence. Strategic recommendations include adding security headers, publishing a security policy, and introducing a vulnerability disclosure program to further strengthen trust and security culture.

G

Genesys

mypurecloud.ie

74

Genesys is a leading enterprise technology company specializing in cloud-based contact center and customer experience solutions. Their flagship product, Genesys Cloud CX, leverages AI-powered orchestration to enhance customer journeys across multiple channels. The company targets large enterprises seeking scalable and innovative customer engagement platforms. The website reflects a mature digital presence with professional branding and comprehensive service descriptions. Technically, the site employs modern web technologies including Bootstrap 5 and JavaScript frameworks, optimized for performance and mobile responsiveness. The use of Intellimize indicates advanced marketing personalization capabilities. The CMS is WordPress, indicating a flexible content management approach. SEO and accessibility features are well implemented. From a security perspective, the site enforces HTTPS, includes key security headers, and demonstrates compliance with industry standards such as SOC 2, ISO 27001, and HIPAA. Privacy and cookie policies are clearly presented with consent mechanisms, and a vulnerability disclosure program is in place. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a low-risk profile with strong business credibility and security posture. The lack of WHOIS data is consistent with privacy protection practices common for enterprise domains. Strategic recommendations include tightening CSP policies and enhancing public security documentation to further build trust.

A

APSL Tech

apsl.net

66

APSL Tech is a Spanish technology company specializing in custom web development using Python, Django, React, and Vue, with a strong focus on cloud systems and AI-driven solutions. As an AWS partner, they provide cloud architecture, data management, AI automation, and agile product development services. Their market position is reinforced by partnerships with notable clients and institutions, and a parent company relationship with Nagarro. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content relevant to their business domain. Technically, the website leverages modern frameworks and cloud platforms, primarily AWS and Google Cloud, with a responsive design optimized for mobile devices. The use of Bootstrap and JavaScript libraries supports a good user experience. Performance is moderate, with room for optimization. Security practices include HTTPS enforcement, CSRF protection, and cookie consent mechanisms, although DNSSEC is not enabled and some security headers could be improved. From a security standpoint, APSL Tech demonstrates a solid posture with no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Incident response and security policies are documented and accessible. The domain registration is consistent with the business profile, enhancing trustworthiness. Overall, APSL Tech presents a low-risk profile with a professional and secure online presence. Strategic recommendations include enabling DNSSEC, enhancing security headers, and conducting regular security audits to maintain and improve their security posture.

S

Sparkasse

eure-trainer-gesucht.de

66

Eure Trainer Gesucht is a German-language platform dedicated to promoting and honoring volunteer sports trainers across Germany. Supported primarily by the Sparkassen-Finanzgruppe and partners such as Deka and Deutsche Leasing, the initiative encourages public nominations and voting to award financial grants and special prizes to deserving trainers and their clubs. The website is professionally designed with clear navigation, mobile optimization, and a focus on community engagement in amateur sports. Technically, the site leverages modern web technologies including ES modules, Bootstrap 5, and Cloudflare services for DNS and CDN. It employs secure form handling with CSRF tokens and client-side validation, alongside a comprehensive cookie consent mechanism compliant with GDPR. Google Analytics is used for moderate user tracking with transparent privacy controls. From a security perspective, the website demonstrates good practices such as HTTPS enforcement, secure cookies, and input validation. However, it lacks explicit security policy or incident response pages and does not provide a vulnerability disclosure mechanism. No critical vulnerabilities or suspicious content were detected, and the domain registration is consistent with the website's branding and purpose. Overall, Eure Trainer Gesucht presents a trustworthy, well-maintained platform with strong business credibility and a clear mission to support volunteer sports engagement in Germany. Strategic improvements could include enhanced accessibility, formal security policies, and incident response contact information to further strengthen trust and compliance.

G

Gerhard Ettmayer - Institut für Personalentwicklung e.U.

gbv-akademie.at

47

GBV Akademie is a specialized educational institution serving the non-profit housing sector in Austria. It offers a range of seminars, webinars, certified courses, and inhouse training programs tailored to professionals in this niche market. The organization is closely affiliated with the Austrian Association of Non-Profit Housing Associations (GBV), reinforcing its market position and credibility. The website reflects a professional and consistent brand image, emphasizing quality and compliance through certifications such as ISO 17024 and EBQ. Contact and legal information are clearly provided, supporting transparency and trust. Technically, the website is built on Joomla CMS with modern frameworks like Bootstrap 5 and integrates essential security features such as HTTPS and Google reCAPTCHA v3. The site demonstrates good mobile optimization and SEO practices, although accessibility features could be enhanced. No blocking mechanisms or WAF challenges were detected, allowing full content access and analysis. From a security perspective, the site maintains a good posture with encrypted connections and no visible vulnerabilities or exposed sensitive data. However, some security headers are not confirmed and could be implemented to strengthen defenses. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms aligned with GDPR requirements. Overall, GBV Akademie presents a trustworthy, professional, and secure online presence suitable for its educational mission. Strategic improvements in security headers, incident response transparency, and accessibility would further enhance its posture and user trust.

W

Webologic Solutions Limited

erotikads.ch

62

ErotikAds.ch operates as an adult classified advertising platform primarily targeting the Swiss adult entertainment market. The business is owned by Webologic Solutions Limited, a Malta-based company, which aligns with the website's footer information. The platform offers a variety of adult services including escort listings, erotic massages, fetish services, and adult product sales. The site incorporates an age verification modal to restrict access to users under 18, reflecting compliance with legal requirements for adult content. The website is professionally designed with a consistent brand presence and clear navigation, optimized for both desktop and mobile users.

M

myCicero srl

mycicero.eu

50

myCicero srl operates as the first Global Distribution System (GDS) for mobility services in Italy, providing a digital platform that integrates over 600 mobility operators. The company offers a suite of services including resale of mobility services, white-label app development, API integration, and back-office software solutions. Positioned as a pioneer in the Mobility as a Service (MaaS) sector, myCicero targets companies, public entities, and large organizations seeking to digitize and expand their mobility offerings. The website demonstrates a mature digital presence with professional design, clear navigation, and compliance with GDPR and cookie regulations via Iubenda. Technically, the site is built on WordPress with modern frameworks and includes security features such as HTTPS and Google reCAPTCHA. However, security headers and incident response policies are not explicitly published. Overall, the site reflects a trustworthy and professional business with strong market positioning in the Italian transportation technology sector.

A

Association des communes genevoises

acg.ch

54

The Association des communes genevoises (ACG) website serves as the official institutional platform representing all 45 communes within the canton of Geneva, Switzerland. It functions as a non-profit association dedicated to defending and promoting the interests of its member municipalities. The site provides information about the association's governance, affiliated entities, and news updates relevant to local government officials and stakeholders. The target audience primarily includes municipal authorities and local government representatives within the Geneva region. Technically, the website is built on Drupal 10 with Bootstrap 5 for responsive design and incorporates Matomo analytics for user tracking. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The use of deferred and asynchronous script loading enhances page load efficiency. However, there is room for improvement in security headers and explicit privacy compliance mechanisms. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. Nonetheless, it lacks visible security headers and published policies related to incident response or vulnerability disclosure. The absence of explicit privacy and cookie policies, as well as consent mechanisms, represents a compliance gap, particularly concerning GDPR requirements. Overall, the website is trustworthy and professionally maintained, reflecting its role as a government-related institutional entity. Strategic recommendations include implementing comprehensive privacy and cookie policies with consent management, enhancing security headers, and publishing incident response and vulnerability disclosure information to strengthen security posture and regulatory compliance.

The website silgeneve.ch serves as the official legislative and legal information portal for the canton of Geneva, Switzerland. It provides access to current laws, federal jurisprudence, and other legal documents relevant to the region. The site is operated by the Service de la législation under the Chancellerie d'Etat of the République et canton de Genève, positioning it as a trusted government resource for legal professionals and the public. Technically, the site employs a standard ASP.NET web forms architecture with jQuery and Bootstrap for frontend functionality and styling. The design is professional and mobile-optimized, though some accessibility and SEO features are basic. Performance is moderate, with no evident use of advanced CMS or modern frameworks. The site does not appear to use third-party analytics or advertising technologies, indicating a focus on privacy and minimal tracking. From a security perspective, the site uses HTTPS and standard ASP.NET security mechanisms but lacks visible security headers such as CSP or HSTS, which could enhance protection against common web attacks. No privacy or cookie policies are present on the login page, which is a compliance gap. Contact information is clearly provided with official government email and phone numbers, supporting business credibility. Overall, silgeneve.ch is a legitimate, government-operated website with good content quality and business credibility but could improve its privacy compliance and security posture by adding explicit policies and security headers. The risk level is low given the official nature and content safety, but enhancements in security best practices are recommended.

N

njumii - Das Bildungszentrum des Handwerks

njumii.de

53

njumii.de is the official website of njumii - Das Bildungszentrum des Handwerks, an educational center affiliated with the Handwerkskammer Dresden, Germany. The organization offers a broad range of vocational training, master craftsman courses, continuing education, and company training primarily targeting skilled trades professionals. The website is well-structured, professionally designed, and uses TYPO3 CMS with modern frontend technologies to deliver a responsive and accessible user experience. While the site demonstrates strong business credibility and good technical implementation, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security posture is moderate with HTTPS usage but no visible security headers or incident response information. Overall, the site is trustworthy and serves its educational purpose effectively but could improve privacy compliance and security transparency.

S

Shopper Approved

shopperapproved.com

65

Shopper Approved is a professional ecommerce SaaS platform specializing in growth tools that enhance traffic, sales, and conversions through trust signals, user-generated content, and social proof. The company holds a strong market position as a highly rated review platform and is one of the few Google and Bing review partners worldwide. Their key services include store and product ratings, video reviews, reputation management, Q&A software, and website security solutions tailored for ecommerce businesses. Technically, the website is built on modern frameworks such as Bootstrap and integrates with HubSpot for forms and marketing automation. It employs Google Tag Manager and tracking pixels for analytics and retargeting, demonstrating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, providing a high-quality user experience. From a security perspective, the site uses HTTPS and secure form handling but lacks explicit security headers and a public vulnerability disclosure policy. No WHOIS data was found, which is unusual and slightly reduces trust, but the overall professionalism and trust indicators on the site mitigate this concern. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, Shopper Approved presents a low-risk profile with strong business credibility and technical maturity. Strategic improvements in security headers, incident response transparency, and WHOIS data visibility would further enhance trust and compliance.

M

Métropole Nice Côte d'Azur

nicecotedazur.org

54

Métropole Nice Côte d'Azur is the official metropolitan government entity for the Côte d'Azur region in France, encompassing 51 communes. The website serves as a comprehensive portal for residents, businesses, and visitors to access information about local governance, environmental initiatives, urban planning, transportation, social services, and economic development. It holds a strong market position as the first metropolitan authority created in France, providing essential public services and community engagement. Technically, the website is built on WordPress with Bootstrap framework, leveraging modern web technologies and accessibility standards. It employs Matomo analytics for user tracking and uses tarteaucitron.js for cookie consent management, reflecting a mature digital infrastructure. The site is mobile-optimized and demonstrates good SEO practices with structured data and meta tags. From a security perspective, the site enforces HTTPS, implements key security headers, and respects user privacy with a comprehensive cookie policy and GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a public security policy or incident response contact suggests areas for improvement. Overall, the website is professional, trustworthy, and well-maintained, with a high level of content quality and user experience. The lack of WHOIS registrant data is likely due to privacy protection, which is justified for a government entity. No WAF or blocking mechanisms interfere with content accessibility, enabling full analysis.

D

DMO GmbH

dmo.de

56

DMO GmbH operates a modern, regional data center located at the Münster Osnabrück Airport, focusing on high availability, sustainability, and digital resilience. The company is a joint venture of items GmbH & Co. KG and TKRZ Stadtwerke GmbH, leveraging extensive IT expertise and regional energy partnerships. Their services emphasize energy efficiency, secure infrastructure, and compliance with international standards such as ISO 27001 and DIN EN 50600 VK3. The website reflects a mature digital presence with professional design, clear navigation, and GDPR-compliant privacy and cookie policies. Embedded HubSpot forms and Leadinfo tracking support customer engagement and marketing efforts. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Overall, the site and business demonstrate high trustworthiness and professionalism.

E

ELEKTRIKER-ÖSTERREICH

e-marke.at

57

ELEKTRIKER-ÖSTERREICH is a professional association platform serving electricians and electrical technicians in Austria. It provides networking opportunities, industry information, and digitalization surveys to its members. The website is built on a modern WordPress infrastructure using Elementor and Yoast SEO, ensuring good technical quality and SEO optimization. The site integrates essential services such as Google Analytics for visitor insights and Google reCAPTCHA for spam protection, alongside a GDPR-compliant cookie consent mechanism. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. Contact information is primarily via email and contact forms, with no phone numbers or physical addresses explicitly detailed. Overall, the website demonstrates a good balance of professionalism, compliance, and technical maturity suitable for its target audience.

G

Graz Tourismus

graztourismus.at

72

Graz Tourismus operates as the official tourism board for the city of Graz, Austria, providing comprehensive information and booking services for accommodation, sightseeing, and events. The website targets tourists and visitors interested in exploring Graz, positioning itself as a trusted source for travel planning in the region. The business model focuses on tourism promotion and visitor engagement, leveraging digital channels to enhance the city's attractiveness. Technically, the website employs modern web technologies including Bootstrap 5 for responsive design, Google Tag Manager for analytics, and Cookiebot for GDPR-compliant cookie management. The presence of Pimcore personalization scripts suggests a mature digital infrastructure aimed at delivering tailored user experiences. The site demonstrates good performance, mobile optimization, and accessibility standards. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements key security headers. Cookie consent mechanisms are in place, and privacy policies are comprehensive and GDPR compliant. However, there is no explicit security policy or incident response contact published, which could be improved to enhance transparency and readiness. Overall, the website is professional, trustworthy, and well-aligned with its business purpose. The risk profile is low, with no detected vulnerabilities or suspicious activities. Strategic recommendations include publishing a dedicated security policy, adding incident response contacts, and considering a security.txt file to facilitate vulnerability disclosures.

K

k5|Next Entwicklungspartner

k5next.at

62

k5|Next is a specialized Austrian software solution provider focused on modernizing municipal administration through digital services and efficient management tools. Their platform offers modules for contact management, election processing, citizen services, and resident registration, targeting local government entities. The website is professionally designed, leveraging TYPO3 CMS and modern frontend technologies, with a focus on usability and mobile responsiveness. Security posture is solid with HTTPS and two-factor authentication mentioned, though some security headers are missing and no explicit security policy is published. Privacy compliance is strong with a GDPR-compliant privacy policy and cookie consent mechanism. Overall, the site reflects a trustworthy and mature business with strong local partnerships and a clear market position in government technology.

S

Skiperformance AS

skiperformance.com

57

Skiperformance AS operates a specialized e-commerce platform focused on online sales solutions for ski resorts, touristic venues, museums, and events. The company offers a modular system enabling clients to sell lift tickets, skipasses, event tickets, and related products with advanced features such as dynamic pricing, wallet and refund management, membership, and B2B ticketing. With over 240 customers across 14 countries, Skiperformance holds a solid market position in the ski and tourism e-commerce niche. The website reflects a professional and consistent brand image with clear business offerings and contact information. Technically, the site is built on Joomla CMS with Gantry5 and Bootstrap frameworks, leveraging modern JavaScript libraries like jQuery and Font Awesome for UI elements. The site is mobile optimized and SEO friendly but lacks some accessibility features.

The Office de tourisme du Cambrésis operates a comprehensive regional tourism website aimed at promoting the Cambrésis area in France. The site targets tourists, local visitors, and professionals interested in the region, offering services such as event promotion, accommodation and restaurant listings, group catalogues, brochures, and ticketing. The business model is focused on tourism promotion and visitor information, positioning itself as a key regional authority in hospitality and cultural tourism. Technically, the website employs modern web technologies including Bootstrap 5, jQuery, Owl Carousel, Matomo analytics, and Google Tag Manager, combined with a cookie consent manager (tarteaucitron) to ensure privacy compliance. The site is mobile-optimized with good SEO and accessibility basics, though some improvements in security headers could be made. From a security perspective, the site enforces HTTPS and uses privacy-conscious analytics configurations. However, no explicit security headers were detected, and no incident response or security policy information is publicly available. The WHOIS data is missing, which limits domain trust analysis, but the professional content and official contact information support legitimacy. Overall, the website presents a solid digital presence with good content quality and privacy compliance, though it would benefit from enhanced security headers and transparency around security policies. The lack of WHOIS data is a concern but does not outweigh the positive trust signals from the site content and contact details.

The Missouri Botanical Garden is a well-established non-profit organization focused on botanical research, conservation, education, and providing a public garden experience. The website reflects a mature digital presence with comprehensive content, including event information, educational programs, visitor services, and donation opportunities. The organization targets a broad audience including families, researchers, students, and garden enthusiasts. Technically, the website is built on ASP.NET WebForms with DNN CMS, leveraging modern JavaScript libraries and analytics tools such as Google Analytics, Hotjar, and Facebook Pixel. The site is mobile-optimized and provides a professional user experience with clear navigation and rich multimedia content. Security posture is strong with HTTPS enforcement and appropriate security headers, though there is room for improvement in publishing explicit security policies and incident response information. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms. Overall, the website demonstrates high business credibility and trustworthiness, despite the absence of detailed WHOIS data due to privacy protection.

S

SprzedajemyRosliny.pl

sprzedajemyrosliny.pl

52

SprzedajemyRosliny.pl is a Polish e-commerce business specializing in the retail sale of ornamental and fruit trees, shrubs, grasses, and seeds. The website offers a broad assortment of plants including American blueberries, hydrangeas, and ornamental grasses, targeting gardening enthusiasts and retail customers primarily in Poland and Europe. The business is relatively new, with domain registration in May 2023, consistent with the company's founding year. The platform uses the Sky-Shop e-commerce system and integrates modern web technologies such as AngularJS, Bootstrap 5, and jQuery, providing a good user experience with mobile optimization and clear navigation. Technically, the website is hosted likely by home.pl S.A., a reputable Polish hosting and registrar provider. The site enforces HTTPS and implements cookie consent with granular categories, indicating some level of privacy compliance. However, it lacks explicit privacy policy and terms of service pages, which are critical for GDPR compliance and user trust. Security headers are not detected, and no published security or incident response policies are found, which suggests room for improvement in security posture. Overall, the website is functional, professionally designed, and trustworthy based on WHOIS data and content analysis. The security posture is moderate but could be enhanced by adding security headers, publishing privacy and security policies, and implementing vulnerability disclosure mechanisms. The absence of contact emails is notable, though a phone number and contact form are provided. The site does not contain any adult or questionable content, making it safe for general audiences.

A

Advertising Media s.r.o.

advertising-media.cz

51

Advertising Media s.r.o. is a Czech-based digital marketing and web development company specializing in creating functional websites, e-shops, and tailored marketing campaigns. They serve a diverse clientele including small businesses, schools, and public institutions, offering scalable solutions from simple websites to complex e-commerce platforms. Their market position is that of a trusted local provider with a strong emphasis on measurable and profitable marketing services. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and integrates multiple analytics and advertising tools including Google Tag Manager, Microsoft Clarity, and Facebook Pixel, demonstrating a mature digital infrastructure. Security-wise, the site enforces HTTPS and uses consent management for tracking scripts but lacks explicit security headers and published privacy or incident response policies, indicating room for improvement in compliance and transparency. The absence of WHOIS data reduces domain trustworthiness, though the professional presentation and clear contact information mitigate some concerns. Overall, the website is well-designed, user-friendly, and business-focused, with moderate risk due to missing WHOIS transparency and privacy documentation.

Z

Zoo Duisburg

delfinarium-zoo-duisburg.de

52

The Delfinarium website is an official informational platform for the Zoo Duisburg's dolphinarium, providing educational content about dolphins, their care, and related zoological information. The site targets general visitors and animal enthusiasts, positioning itself as a regional zoological attraction with a focus on dolphin care and education. The business operates as a non-profit entity within the hospitality and non-profit sectors in Germany. Technically, the website is built on TYPO3 CMS with Bootstrap 5 for responsive design, integrating modern tools such as Google Analytics for visitor tracking and Usercentrics for cookie consent management. The site demonstrates good mobile optimization and basic accessibility features, with a moderate performance profile. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS and incorporates consent management, but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected, though improvements in security headers and formal security documentation are recommended to enhance the security posture. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, with clear contact phone information and social media presence. The absence of email contacts and terms of service pages are minor gaps. The site is safe for general audiences with no adult or questionable content. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure mechanisms to strengthen trust and compliance.

H

Huwise

huwise.com

73

Huwise is a technology company specializing in providing a SaaS data product marketplace solution that enables organizations to centralize, manage, and share their data assets securely and interactively. The company targets data leaders, business teams, IT leaders, and CSR/ESG leaders across sectors such as energy, transport, banking, and government. Their market position is strong, supported by Gartner citations, a high NPS score, and a client base of over 350 organizations. The website reflects a mature digital presence with comprehensive content, multimedia, and customer testimonials. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses various JavaScript libraries for enhanced user experience. It integrates Matomo for analytics and Axeptio for cookie consent, indicating attention to privacy compliance. The site is mobile-optimized, fast-loading, and SEO-friendly. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms but lacks explicit security headers and incident response disclosures. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is a concern and should be investigated to confirm domain registration legitimacy. Overall, Huwise presents a professional and trustworthy online presence with strong business credibility. The main risk lies in the missing WHOIS information, which impacts domain trustworthiness. Strategic recommendations include enhancing security header implementation, publishing incident response contacts, and verifying domain registration status.

Z

Zoo Duisburg

zoo-duisburg.de

58

Zoo Duisburg operates as a well-established zoological park in Germany, providing animal exhibits, educational programs, and visitor services. The website reflects a medium-sized non-profit organization with a clear focus on conservation, education, and community engagement. The business model relies on ticket sales, donations, and sponsorships, supported by recognized certifications from major zoological associations. The site targets families, tourists, and animal enthusiasts, offering multilingual support and accessible navigation. Technically, the website is built on TYPO3 CMS with Bootstrap 5, integrating modern web technologies and consent management tools such as Usercentrics. The site demonstrates good mobile optimization, accessibility, and SEO practices. Performance is moderate, with asynchronous loading of scripts and structured navigation enhancing user experience. From a security perspective, the site enforces HTTPS and uses consent mechanisms for cookies, but lacks explicit security headers and a public security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the website domain, indicating legitimacy and consistent domain management. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, with room for improvement in security headers and incident response transparency.

P

Place du Village

place-du-village.fr

44

Place du Village is a French SaaS provider specializing in communication solutions for local governments and municipalities. Their platform offers a unified interface to manage multi-channel communication and citizen engagement, targeting public administrations with a subscription model starting at 68 €HT per month. The website reflects a niche market positioning with a professional and consistent brand presence. Technically, the site is built on WordPress and leverages modern libraries such as Bootstrap 5, jQuery, and Mapbox GL JS, hosted behind Cloudflare for performance and security. Security posture is adequate with HTTPS and cookie consent implemented, but lacks explicit security policies and vulnerability disclosure mechanisms. Privacy compliance is partial due to missing privacy and terms of service pages. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the business.

K

Kanguroo-event

kanguroo-event.fr

46

Kanguroo-event.fr is a French event management platform specializing in complex event scenarios such as protocol invitations, conferences, and sports federations. The company offers a customizable SaaS solution with features including invitation management, access control via QR codes, seating arrangements, payment processing, and multi-language support. The website is professionally designed using WordPress and modern web technologies, providing a good user experience and clear navigation. However, the absence of WHOIS data limits domain trust verification. Security posture is solid with HTTPS and some security headers, but could be improved with explicit policies and disclosures. Privacy compliance is basic with a cookie consent mechanism but no clear privacy policy page. Overall, the platform appears legitimate and professional, targeting organizers of specialized events.

A

Guide pour bien utiliser les antidépresseurs

antidepresseur.fr

37

The website www.antidepresseur.fr is an educational platform focused on providing detailed information about antidepressant medications, their categories, effects, and precautions. It targets a general French-speaking audience seeking mental health information. The site uses modern frontend technologies such as Bootstrap and various icon libraries, delivering a good user experience with mobile optimization and embedded multimedia content. However, the absence of privacy and cookie policies, lack of visible contact emails or phone numbers, and missing WHOIS registration data raise concerns about the site's legitimacy and compliance. Security posture is weak due to missing security headers and unknown SSL status. Overall, the site is functional and informative but requires improvements in transparency, security, and compliance to enhance trustworthiness.

P

premiers-secours.com

premiers-secours.com

45

The website premiers-secours.com is a newly created French-language educational platform focused on first aid guidance and emergency response techniques. It provides detailed textual content and multimedia resources to educate the general public on how to act in case of accidents or medical emergencies. The site positions itself as a niche informational resource with links to related first aid training services, targeting individuals seeking knowledge on lifesaving procedures. Technically, the site employs modern front-end technologies including Bootstrap 5, Google Fonts, and JavaScript libraries such as Swiper and Glightbox. It is hosted on AwardSpace servers with DNS managed via AwardSpace nameservers. The site is mobile optimized and has moderate performance but lacks advanced SEO and accessibility features. No CMS is detected, indicating a custom or static site build. From a security perspective, the site uses HTTPS but lacks DNSSEC and important security headers, which reduces its security posture. There are no privacy or cookie policies present, and no explicit contact emails or phone numbers are provided, limiting transparency and compliance with GDPR. Analytics are implemented via Statcounter with minimal tracking. The domain registration is transparent and consistent with the website content, registered recently in 2024 with a reputable registrar. Overall, the site is a functional and informative resource with good content quality but requires improvements in privacy compliance, security hardening, and contact transparency to enhance trust and regulatory adherence.

H

Huwise

opendatasoft.com

61

Huwise is a technology company specializing in providing a SaaS data product marketplace solution designed to centralize, govern, and distribute data assets for business teams, IT leaders, and data professionals. The company positions itself as a leading solution in the data product marketplace space, with recognition from Gartner and a strong customer base of over 350 clients across sectors such as energy, transport, banking, and government. Their platform offers a comprehensive suite of features including AI-enhanced search, metadata management, data lineage, and integration capabilities, aimed at accelerating data consumption and AI project success. Technically, the website is built on a modern WordPress CMS with Bootstrap 5, jQuery, and various JavaScript libraries for enhanced user experience and performance. The site is mobile-optimized, SEO-friendly, and integrates analytics via Matomo and marketing tools like Google Tag Manager. Privacy and cookie policies are well implemented with GDPR compliance, supported by a consent mechanism via Axeptio. From a security perspective, the site enforces HTTPS and uses cookie consent tools, but lacks visible HTTP security headers and a published security.txt file. No direct contact emails or phone numbers are publicly listed, which may limit immediate contact options. The absence of WHOIS data for the domain is a notable anomaly that reduces trustworthiness, although the professional website and customer testimonials provide mitigating trust signals. Overall, Huwise demonstrates a mature digital presence with strong business credibility and technical implementation. However, improvements in security header implementation, incident response transparency, and WHOIS registration clarity are recommended to enhance trust and compliance.

A

Agence Nationale pour les Chèques-Vacances (ANCV)

ancv.com

61

The Agence Nationale pour les Chèques-Vacances (ANCV) is a French government public institution dedicated to facilitating access to vacations for a broad population including employees, public agents, families, seniors, and vulnerable groups. It operates through the issuance of Chèque-Vacances vouchers, Coupon Sport, and social aid programs, while also supporting the tourism and leisure sectors via partnerships. The website reflects a mature digital presence with a modern Drupal 10 CMS, Bootstrap 5 styling, and integrated analytics via Google Tag Manager. It provides comprehensive information, including privacy and cookie policies, and actively warns users about phishing attempts impersonating the agency. Security posture is generally good with HTTPS enforced and cookie consent mechanisms, though explicit security headers and incident response information are lacking. The absence of WHOIS data for the domain is a notable anomaly that reduces trust slightly, but the overall branding and content strongly indicate an official and trustworthy government entity.

K

Roundcube Webmail :: Welcome to Roundcube Webmail

klubk4.org

49

The website mail.kersnikova.org/roundcube hosts a Roundcube Webmail client interface, providing users with web-based email access. It is a technical service platform rather than a commercial business site, targeting users who require email access for the kersnikova.org domain. The site is minimalistic, focusing solely on login functionality without additional business or marketing content. The technical infrastructure is based on well-known open-source technologies including Roundcube 1.6.6, jQuery, jQuery UI, and Bootstrap, indicating a standard modern webmail deployment. The site is mobile optimized and uses secure form practices such as CSRF tokens and autocomplete off for password fields. However, no explicit security headers or privacy policies are present in the HTML content, which limits the security posture and privacy compliance. The WHOIS data for the domain is unavailable due to a malformed query response, which reduces confidence in domain legitimacy and registration transparency. Overall, the site serves its functional purpose but lacks business transparency and comprehensive security controls.

N

Nipos

mistnikultura.cz

62

Pro kulturu is a well-established Czech cultural news portal published by the National Institute for Culture (NIK), a government-affiliated organization. The website provides extensive articles, podcasts, and editorial cycles focused on cultural events and personalities across the Czech Republic. It targets the cultural community and general public interested in cultural affairs. The site demonstrates strong digital maturity with a modern WordPress CMS, Bootstrap framework, and SEO best practices including structured data and Open Graph metadata. Privacy compliance is robust, featuring GDPR-aligned policies and cookie consent management via Complianz. Security posture is good with HTTPS enforced and Matomo analytics configured to require consent, though the absence of security headers suggests room for improvement. The lack of WHOIS data is a notable anomaly that slightly reduces trustworthiness but does not detract from the site's professional presentation and government affiliation. Overall, Pro kulturu is a credible and authoritative source for cultural information in the Czech Republic.

L

Les Enfoiros de l'INSA

enfoiros.org

52

Les Enfoiros de l'INSA is a well-established non-profit student club based in Toulouse, France, dedicated to supporting the Restos du Cœur charity through annual fundraising events and performances. The organization has a strong market position as the leading private donor to the Restos du Cœur in Haute-Garonne since 2007, leveraging community engagement and student participation. Their website reflects a professional and consistent brand image with clear calls to action for donations and event participation. Technically, the site uses modern web technologies including Bootstrap 5 and Google reCAPTCHA, hosted by Scaleway SAS, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and spam protection on forms, though improvements are recommended in DNSSEC and security headers. Privacy compliance is partial, lacking explicit cookie consent and detailed GDPR statements. Overall, the site is trustworthy and well-maintained, serving its non-profit mission effectively.

S

Sologne Nature Environnement

sologne-nature.org

57

Sologne Nature Environnement is a well-established non-profit association dedicated to the protection and promotion of nature and the environment in the Sologne region of France. With over 40 years of expertise, the organization offers a variety of services including biodiversity studies, public and school educational programs, environmental consulting, and community engagement through events and advocacy. The website reflects a mature digital presence with clear branding, contact information, and active social media channels. Technically, the site is built on Joomla CMS with modern front-end technologies and includes interactive features such as event calendars and maps. Security posture is generally good with HTTPS enforced and cookie consent implemented, though some security headers and formal policies are missing. The absence of WHOIS data limits domain trust verification, but the overall content and transparency support legitimacy. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving domain registration transparency.

O

ONERA

onera.fr

60

ONERA is the French national aerospace research center, established in 1995, with a strong market position as a leading government research entity in aerospace. The website reflects a mature digital presence with comprehensive content targeting researchers, industry professionals, and academic audiences. Technically, the site uses Drupal 10, Bootstrap 5, and Matomo analytics, ensuring modern standards and good performance. Security posture is robust with HTTPS, security headers, and cookie consent mechanisms, though it lacks a dedicated security policy or incident response contacts. Overall, the site is professional, trustworthy, and compliant with GDPR, supporting ONERA's reputation as a credible research institution.

N

Next mind s.r.o.

nextmind.cz

44

Next mind s.r.o. is a Czech technology company specializing in artificial intelligence implementation, consulting, and training services for businesses, cities, and institutions. The company positions itself as a practical AI partner, offering tailored solutions from analysis to deployment and change communication. The website is bilingual (Czech and English), professionally designed, and provides detailed service and career information, reflecting a focused business model in the AI technology sector.