Security Directory

Art Screen TV is a Swiss-based company specializing in representing contemporary artists and sponsoring prestigious international art events such as the Florence Biennale. The website serves primarily as an informational platform showcasing the company's partnerships, artist roster, and upcoming events. Technically, the site is built with basic HTML and CSS, leveraging external fonts and icon libraries, and hosted by Infomaniak Network SA, a reputable Swiss hosting provider. The website is accessible via HTTPS but lacks advanced security headers and DNSSEC, indicating room for improvement in security posture. Privacy and cookie policies are absent, which may impact compliance with GDPR and user trust. Overall, the site is functional but basic, with limited interactive features and minimal tracking or analytics.

B

Banque Cantonale du Fribourg

bcf.ch

58

Banque Cantonale du Fribourg (BCF) is a well-established Swiss cantonal bank providing a broad range of financial services including retail and private banking, asset management, and corporate banking primarily serving the canton of Fribourg and surrounding regions. The website reflects a professional and modern digital presence built on Nuxt.js with integrated user consent management, indicating a mature technical infrastructure. Security posture is strong with HTTPS enforcement, comprehensive security headers, and GDPR-compliant privacy and cookie policies. However, explicit security policies and incident response contacts are not publicly detailed, representing an area for improvement. Overall, the site is trustworthy, well-branded, and compliant with privacy regulations, supporting BCF's position as a reputable regional financial institution.

E

EQS Group AG

bkms-system.ch

57

The BKMS System website, operated by EQS Group AG, provides a compliance and whistleblowing platform targeted at businesses requiring secure reporting solutions. The current website content is minimal due to ongoing maintenance, limiting the availability of detailed information. The business is positioned as a specialized technology provider in compliance software, with a medium-sized presence in Switzerland. Technically, the website uses basic HTML and CSS without advanced frameworks or CMS detected. The site lacks visible security headers, privacy policies, and contact information, which reduces its compliance and security posture. No analytics or tracking technologies are present, indicating minimal user tracking. From a security perspective, the site is accessible without WAF or blocking mechanisms, but it lacks important security best practices such as HTTPS enforcement visibility and security headers. The WHOIS data aligns well with the business identity, supporting legitimacy. Overall, the site scores moderately due to limited content and missing compliance documentation. Strategic recommendations include adding comprehensive privacy and cookie policies, improving security headers and HTTPS enforcement, providing clear contact and incident response information, and enhancing technical SEO and accessibility to improve user experience and trust.

J

JAKALA

jakala.com

51

JAKALA is a global data, AI, and experiences company focused on delivering impactful business solutions across multiple industries including consumer goods, financial services, automotive, public sector, and more. The company leverages strategy, technology, and activations to provide tailored, transformative solutions with data and AI at the core. The website demonstrates a professional digital presence built on HubSpot CMS, integrating modern technologies such as Swiper.js and Google Tag Manager for analytics and marketing. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and explicit privacy policies indicates room for improvement. The lack of WHOIS data reduces domain trustworthiness, but the overall business credibility and content quality remain high. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving transparency around incident response and vulnerability disclosures.

H

HearNow

hearnow.com

70

HearNow is a specialized media service focused on providing musicians and artists with an easy-to-use platform to create one-page promotional websites for their CD Baby album releases. The service leverages integration with CD Baby to automatically import album information, streamlining the promotional process. The business operates on a subscription model with affordable monthly and yearly plans, targeting independent musicians seeking effective online promotion tools. Technically, the website is modern, fast, and mobile-optimized, hosted behind Cloudflare with a solid security posture including HTTPS and security headers. Privacy compliance is well addressed with a clear cookie consent mechanism and accessible privacy and cookie policies. However, there is room for improvement in publishing explicit security policies and enabling DNSSEC for enhanced domain security. Overall, the website presents a professional and trustworthy front with strong business credibility and technical maturity.

W

Domain Default page

waxmann-verlag.de

34

The website waxmann-verlag.de currently hosts only a default placeholder page generated by Plesk, indicating that no active website content or business information is published. The domain is configured with AWS DNS nameservers, suggesting hosting on Amazon infrastructure, but no SSL certificate or HTTPS enforcement is evident. The absence of privacy policies, contact information, or terms of service further indicates that the site is not yet operational or publicly serving business purposes. From a technical perspective, the site uses basic HTML, CSS, and JavaScript with Plesk platform integration but lacks advanced frameworks or CMS. Security posture is weak due to missing HTTPS and security headers, and no incident response or vulnerability disclosure mechanisms are present. Overall, the site presents a low trust profile and minimal digital maturity.

G

Google LLC

youtube.it

79

YouTube, owned by Google LLC, is the world's leading online video sharing and streaming platform. It offers a vast array of video content including entertainment, education, music, and user-generated videos, serving a global audience. The platform operates on an advertising-based business model supplemented by premium subscription services. Its market position is dominant in the online video industry, supported by a strong brand and extensive user base. Technically, YouTube employs a modern web technology stack including Polymer, Web Components, and Google APIs, hosted on Google Cloud infrastructure. The website is optimized for both desktop and mobile platforms, delivering fast performance and good accessibility. SEO and metadata practices are well implemented, enhancing discoverability. From a security perspective, YouTube enforces HTTPS, employs robust security headers, and integrates advanced bot protection mechanisms. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature privacy posture. No critical vulnerabilities or exposed sensitive data were detected in the analysis. Overall, YouTube demonstrates a high level of digital maturity, security, and compliance. The domain is legitimate and longstanding, with WHOIS privacy protection typical for large enterprises. The platform's extensive analytics and advertising integrations are balanced with strong privacy controls. Strategic recommendations include maintaining regular security audits, enhancing incident response transparency, and continuing to evolve privacy practices to meet emerging regulations.

The website ctaonline.it is currently a parked domain landing page with minimal content primarily aimed at advertising the domain for sale. There is no visible business presence, contact information, or privacy and security policies. The technical infrastructure relies on basic HTML, CSS, JavaScript, and an iframe loading external content over HTTP, which poses security concerns. The domain is newly registered in January 2024 and lacks DNSSEC and other trust indicators. Overall, the site lacks professionalism, security maturity, and compliance, making it unsuitable for business operations in its current state.

E

entour.it

entour.it

4

The website entour.it appears to be a parked domain primarily serving advertising content related to travel keywords. There is no clear business presence, contact information, or meaningful content describing services or company details. The technical infrastructure relies on basic HTML, CSS, and JavaScript with Google Adsense and Bodis advertising networks integrated. No CMS or advanced frameworks are detected. Security posture is weak with no HTTPS detected in the provided data, no security headers, and no privacy or cookie consent mechanisms. The domain WHOIS is privacy protected, which is typical for parked domains but reduces trust. Overall, the site lacks professionalism and business credibility, posing a low trust risk but minimal security risk due to limited functionality.

W

World Association of Girl Guides and Girl Scouts

wagggs.org

67

The World Association of Girl Guides and Girl Scouts (WAGGGS) operates as the largest voluntary global movement dedicated to empowering girls and young women. Their website reflects a professional and well-structured platform offering educational programs, leadership development, advocacy, and capacity building for national associations. The organization targets a global audience of girls, young women, supporters, and volunteers, emphasizing non-profit and social impact activities. The site includes clear calls to action for donations and volunteering, supported by comprehensive privacy and cookie policies, indicating a mature digital presence. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, Google Tag Manager, Facebook SDK, and Google Analytics. The site is mobile-optimized with good accessibility and SEO practices, delivering a moderate performance. Security posture is strong with HTTPS enforced and no exposed sensitive data, though there is room for improvement in publishing explicit security policies and enhancing HTTP security headers. No signs of WAF or content blocking were detected, and the site is fully accessible. WHOIS data is unavailable due to privacy protection, which is common for non-profit organizations. The domain appears legitimate and consistent with the organization's branding and global presence. Social media integration is robust, linking to official Instagram, Facebook, LinkedIn, and YouTube channels. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. Strategic recommendations include publishing a dedicated security policy, adding vulnerability disclosure mechanisms, and enhancing security headers to further strengthen the security posture.

W

Wirtschaftskammer Wien

wkw.at

66

Wirtschaftskammer Wien is the official chamber of commerce for Vienna, Austria, providing a wide range of services, information, and consulting to local entrepreneurs and businesses. The website serves as a portal for business support, event information, and sector-specific resources, targeting primarily Vienna-based business owners. The site is well-branded and professionally designed, reflecting its governmental and institutional nature. Technically, the website employs modern web standards including responsive design, JavaScript, CSS, and Google Tag Manager for analytics. The site is accessible and optimized for mobile devices, with good SEO practices evident in meta tags and structured content. However, no explicit CMS or hosting provider information was detected. From a security perspective, the site uses HTTPS and includes consent management scripts, indicating awareness of privacy regulations. However, no explicit security headers or vulnerability disclosure mechanisms were found, and WHOIS data for the domain is unavailable, limiting domain legitimacy verification. No contact emails or phone numbers were explicitly found in the provided content, which could be improved for transparency. Overall, the website presents a trustworthy and professional front for the chamber of commerce, but could enhance privacy compliance visibility and security posture by publishing detailed policies and security contact information.

The website www.twint.ch is currently inaccessible due to a Cloudflare security challenge page that requires human verification via Turnstile captcha. This prevents access to any substantive content, including business information, policies, or contact details. The site appears to be related to the finance sector, likely a payment or financial service given the domain and industry context, but no direct content confirms this. The technical infrastructure includes Cloudflare protection, indicating a focus on security, but the lack of accessible content limits further analysis. Security posture cannot be fully assessed due to the blocked content, but the presence of Cloudflare WAF is a positive indicator. Overall, the site’s risk assessment is limited by the lack of accessible data, and strategic recommendations focus on improving transparency and accessibility post-WAF challenge.

B

Berufsbildungswerk Leipzig für Hör- und Sprachgeschädigte gGmbH

bbw-leipzig.de

58

The BBW-Leipzig-Gruppe is a well-established non-profit social enterprise based in Leipzig, Germany, specializing in education, employment, and inclusion services for people with special support needs. Founded in 1991, it operates as a group of social institutions and subsidiaries, providing a broad range of services including vocational training, kindergartens, youth assistance, and diaconal services. The organization enjoys a strong market position within the regional social sector and is affiliated with the Diakonisches Werk der Ev.-Luth. Landeskirche Sachsen e.V., enhancing its trustworthiness and community integration. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies and providing a responsive, accessible, and SEO-optimized user experience. The site includes comprehensive privacy and cookie policies with explicit consent mechanisms, reflecting good GDPR compliance. Social media integration and external trusted links further enhance its digital presence. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, with no critical vulnerabilities or exposed sensitive data detected. However, it lacks a publicly available security policy, incident response contacts, and a vulnerability disclosure framework, which are recommended for improving security maturity. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance, with moderate tracking and marketing tools used transparently. Strategic improvements in security policy publication and incident response readiness would further strengthen its security posture and stakeholder confidence.

E

EFCO & HPA

efcohpa.eu

10

EFCO & HPA is a European industry association representing the camping and caravan sector at the European level. The organization focuses on advocacy and representation to European authorities to promote and defend the interests of campsite, holiday, and caravan park businesses. The website is professionally designed using the Wix platform and provides relevant information for tourism professionals and industry stakeholders. Technical infrastructure is standard for Wix-hosted sites, with moderate performance and basic mobile optimization. Security posture is good with HTTPS enforced, though security headers and incident response contacts are absent. Privacy and cookie policies are present, indicating GDPR awareness. Overall, the website reflects a credible and established industry body with room for improvement in security and contact transparency.

A

AVI.DAT GmbH

hortpro.de

47

HortPRO, operated by AVI.DAT GmbH, is a specialized digital solution designed for child care and after-school care facilities in Germany. The platform offers a comprehensive web-based attendance and group book system tailored to the needs of kindergartens and similar institutions. It leverages modern technologies such as RFID for efficient child check-in/out and provides an intuitive user experience accessible from any internet-enabled device. The company positions itself as a niche provider with a strong focus on GDPR compliance and operational efficiency for childcare providers. Technically, the website is built on WordPress with modern plugins like Yoast SEO and Borlabs Cookie for SEO and privacy compliance. The infrastructure supports mobile responsiveness and good performance, with hosting servers located in Germany ensuring data sovereignty. The site employs HTTPS with excellent SSL configuration but lacks some advanced security headers. The cookie consent mechanism is robust, reflecting a mature approach to privacy. From a security perspective, the site demonstrates good practices including secure forms and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced trust and compliance. The WHOIS data is partially consistent with the business claims, showing no suspicious patterns. Overall, HortPRO presents a professional, trustworthy, and GDPR-compliant digital service for childcare providers, with room for improvement in security transparency and technical hardening. The website quality and business credibility are high, supporting its market position as a specialized SaaS provider in the education sector.

M

Mediaset Infinity

mediaset.it

64

Mediaset Infinity is a prominent Italian media streaming platform offering free access to a wide range of TV programs, live channels, movies, documentaries, and kids content. It operates under the Mediaset brand, a major player in the Italian media industry. The platform targets a general audience interested in Italian television and streaming services, providing both free and premium content through Infinity+. The website demonstrates a high level of digital maturity with a modern tech stack based on React and Next.js, ensuring fast performance and excellent mobile optimization. Security measures such as HTTPS and security headers are properly implemented, contributing to a strong security posture. However, the absence of visible privacy and cookie policies, as well as lack of explicit contact information, indicates gaps in privacy compliance and user transparency. Overall, the site is professional and trustworthy but would benefit from enhanced privacy disclosures and incident response information.

A

Apps2me

apps2.me

55

Apps2me is a newly launched technology platform focused on providing a store and hosting environment for Telegram mini apps. The platform targets Telegram users and developers interested in mini apps, positioning itself as a niche player in the Telegram ecosystem. The business model revolves around offering a centralized place to explore and add new Telegram mini apps, leveraging the popularity of Telegram's mini app capabilities. The company is small and recently founded in 2024, with domain registration consistent with a startup phase. Technically, the website uses modern web technologies including jQuery 3.7.0 and ES modules for JavaScript, with a responsive design optimized for mobile devices. Hosting is provided by Spaceship, Inc., and the site uses HTTPS, though lacks advanced security headers and DNSSEC. SEO and accessibility are basic but functional. The site includes a cookie consent banner but lacks comprehensive privacy or terms of service documentation. From a security perspective, the site benefits from HTTPS but is missing important security headers and DNSSEC, which reduces its security posture. No incident response or security policies are published, and no contact information is provided, which limits transparency and trust. The WHOIS data shows privacy protection and a recent domain registration, typical for a small tech startup, with no suspicious indicators. Overall, the site is functional and moderately trustworthy but has gaps in privacy compliance and security best practices. Strategic improvements in security headers, privacy policies, and contact transparency would enhance trust and compliance.

The website at adocnazionale.it is currently inaccessible due to a 403 Forbidden error, indicating that access to the content is blocked or restricted. The domain is well-established, created in 2012 with DNSSEC enabled, suggesting legitimacy and a stable registration. However, the lack of accessible content, absence of privacy and cookie policies, and no visible contact information severely limit the ability to assess the business or its services. Technically, the site uses basic HTML and CSS with Google Fonts, but lacks modern frameworks or CMS indicators. Security posture is moderate due to DNSSEC and SSL presence, but missing security headers and policies reduce overall security confidence. Overall, the site appears to be down or access-restricted, resulting in a low AI score and limited insights.

U

Unoenergy S.p.a.

unogas.it

71

Unoenergy S.p.a. is a medium-sized Italian energy company specializing in electricity and gas supply for residential, condominium, and business customers. With over 20 years of experience, it holds a strong market position as one of the main private operators in Italy's energy sector. The company offers a broad portfolio of services including photovoltaic systems, electric mobility charging stations, and climate control solutions. The website reflects a professional and customer-centric approach, emphasizing quality, sustainability, and personalized service. Technically, the site is built on WordPress with modern web technologies, optimized for SEO and mobile responsiveness, and integrates Google Tag Manager and customer engagement tools. Security posture is solid with HTTPS and no visible vulnerabilities, though it lacks explicit security policies and vulnerability disclosure mechanisms. Contact information is clearly presented, including email, phone, physical address, and social media channels. Overall, the site demonstrates high professionalism and trustworthiness, though improvements in privacy and cookie policy transparency are recommended.

Unilever Italia is a regional branch of the global consumer goods giant Unilever PLC, offering a wide range of well-known brands focused on daily consumer needs. The website reflects a mature enterprise with a strong market position in Italy, emphasizing sustainability and corporate responsibility. The digital infrastructure uses modern web technologies including Astro framework and service workers, ensuring fast performance and excellent mobile optimization. Privacy and cookie compliance are well implemented with clear policies and consent mechanisms. Security posture is solid with HTTPS and cookie management, though explicit security headers and incident response information are absent. Overall, the site is professional, trustworthy, and compliant with GDPR, serving a general audience with corporate and product information.

The website www.berufsausweis.com serves as an informational platform for the EuropeanExpertCard, a unified professional identification card for experts and appraisers across Europe. It is closely associated with the Deutsche Gutachter und Sachverständigen Verband e.V. (DGuSV), which acts as the primary issuing body in Germany. The site targets professionals in the appraisal and expert evaluation sector, aiming to facilitate cross-border recognition of qualifications within the EU. The business model is based on membership and fee-based issuance of the card, positioning itself as a niche but important player in the European professional certification landscape. Technically, the website employs standard web technologies including HTML, CSS, and JavaScript, with cookie consent managed via Usercentrics. The site is accessible without any WAF or security challenges, uses HTTPS, but lacks advanced security headers and comprehensive mobile optimization. SEO and accessibility are basic but functional. No CMS or hosting provider details are evident from the source. From a security perspective, the site benefits from HTTPS and cookie consent mechanisms, but lacks explicit security policies, incident response contacts, and security headers that would enhance protection against common web threats. The absence of WHOIS registration data for the domain is a notable risk factor, potentially indicating privacy protection or registration issues, which impacts domain legitimacy and trust. Overall, the website is professional and trustworthy in content and presentation but would benefit from improved security practices and transparency in domain registration. Strategic improvements in security headers, mobile responsiveness, and explicit security policies are recommended to enhance trust and compliance.

C

cayou media

cayou-media.de

48

Cayou media is a small, specialized web and graphic design agency based in Halle and Leipzig, Germany. They provide a range of digital services including responsive web design, web programming, SEO, online shop development, corporate identity, and social media management. The company emphasizes innovation, individuality, and user-friendly solutions tailored to client needs, positioning itself as a trusted local partner with a professional and consistent brand presence. Technically, the website is built on WordPress using modern themes and plugins, including LayerSlider and Usercentrics for consent management, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and privacy compliance well addressed via GDPR-aligned policies and cookie consent mechanisms, though security headers and incident response information are lacking. Overall, the site is professional, trustworthy, and compliant, with room for improvement in security best practices and accessibility.

B

Best Western Plus Atrium Hotel

meinbestwesternulm.de

61

Best Western Plus Atrium Hotel Ulm is a 4-star hospitality business located in Ulm, Germany, offering accommodation, meeting facilities, gastronomy, and local city guide services. The website targets travelers and business guests seeking mid-range hotel services with event hosting capabilities. The business operates under the reputable Best Western brand, enhancing its market position and trustworthiness. Technically, the website employs standard web technologies including JavaScript, CSS, and Google Analytics with IP anonymization, indicating a moderate level of digital maturity. The site is moderately optimized for mobile devices and SEO, with a clean navigation structure and professional content presentation. From a security perspective, the site uses HTTPS and anonymizes IP addresses in analytics, but lacks visible security headers, cookie consent mechanisms, and published security policies or incident response information. No vulnerabilities or malicious content were detected, but improvements are recommended to enhance compliance and security posture. Overall, the website is professional, trustworthy, and functional with room for improvement in privacy compliance and security best practices to reduce risk and increase user trust.

M

Media City Atelier GmbH

mdr-die-studiotour.de

54

MDR Die Studiotour is a small media-focused business operating in Germany, offering guided tours through the studios of Mitteldeutscher Rundfunk and the media city Leipzig. The website provides detailed information about tour offerings, booking procedures, and related catering services through a partner. The business targets a general audience including children aged 12 and above, positioning itself as a niche regional provider of educational and entertainment tours in the media sector. Technically, the website is built on WordPress with modern plugins and scripts, ensuring a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though some HTTP security headers are missing. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-maintained, with no signs of malicious content or blocking mechanisms.

N

netpoint media gmbh

netpoint-media.de

56

Netpoint Media GmbH is a German-based online advertising company established in 2001, specializing in high-quality online media marketing with a strong focus on travel and tourism sectors. The company operates a broad portfolio of digital advertising services including programmatic advertising and addressable TV, targeting media planners, advertisers, and publishers. Their market position is that of a leading independent online media marketer in Germany, supported by memberships in industry bodies such as AGOF, OVK, and BVDW. Technically, the website is built with standard modern web technologies (HTML5, CSS3, JavaScript) and hosted on professional infrastructure (dogado.de). The site is mobile-optimized with good SEO and basic accessibility features. Security posture is moderate with HTTPS and a Content-Security-Policy header implemented, but lacks additional security headers and cookie consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and compliant with GDPR in terms of privacy policy presence, though cookie consent is missing. Contact is primarily via a web form, with social media presence on Xing and LinkedIn. The domain registration data aligns well with the business claims, indicating legitimacy and consistency.

W

Wiener Wohnen

wienerwohnen.at

64

Wiener Wohnen operates as the largest municipal housing provider in Europe, delivering affordable and quality public housing in Vienna. The website serves tenants and prospective tenants with comprehensive information about housing options, application procedures, tenant services, and community news. The organization maintains a strong market position as a key government entity in the real estate sector, focusing on social housing and tenant support. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates multimedia players and accessibility tools such as JWPlayer and ReadSpeaker. The site is mobile-optimized, accessible, and uses Matomo analytics with a clear cookie consent mechanism, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses cookie consent banners, and avoids exposing sensitive data. However, it lacks explicit security policy documentation and incident response contacts, which are recommended for enhanced transparency and readiness. No vulnerabilities or suspicious elements were detected. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. It effectively serves its public sector mission with clear navigation, relevant content, and user-friendly services. Strategic recommendations include publishing a dedicated security policy, incident response information, and implementing additional security headers to further strengthen the security posture.

P

Pronosoft

pronosoft.com

70

Pronosoft is a French media website specializing in sports betting assistance, offering pronostics, betting tips, live scores, statistics, contests, and proprietary software products. The site targets French-speaking sports bettors and pronostiqueurs, providing a comprehensive platform with a long-standing presence since 2000. The business model relies on content, software sales, advertising, and affiliate marketing partnerships. Technically, the site uses a traditional web stack with jQuery, Google Analytics, and multiple ad networks integrated via header bidding technologies. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security-wise, the site enforces HTTPS and cookie consent but lacks advanced security headers and published security policies. The WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency. Overall, the site is professional and trustworthy for its niche audience but could improve security posture and transparency.

B

Brest en vue

brestaim.fr

57

Brest en vue is a French public local enterprise specializing in the management of major public equipment and the creation of events within Brest métropole. The company positions itself as a dynamic and responsive entity serving the public interest with a focus on innovation, entertainment, discovery, entrepreneurship, and regional influence. The website reflects a medium-sized organization with a clear mission and a strong local government sector presence. Technically, the site is built on WordPress with Yoast SEO, featuring modern web standards and mobile optimization, though some security headers are missing. Security posture is solid with HTTPS and cookie consent but could be improved with additional headers and explicit security policies. Overall, the site is professional, trustworthy, and compliant with GDPR, with clear contact information and legal disclosures.

A

Domain Default page

araoo.tech

44

The website araoo.tech currently hosts a default placeholder page generated by Plesk, a popular web hosting control panel. The content is informational about Plesk services and related tools but does not represent an active business or service offering. The domain is registered with OVH since 2016, indicating a legitimate registration, but the website itself is not yet developed or customized. Technically, the site uses standard HTML5, CSS3, and JavaScript with Plesk branding assets. It is hosted on OVH infrastructure and shows moderate performance and good mobile optimization. However, there are no advanced frameworks or CMS detected, and no analytics or tracking scripts are present. The site lacks security headers and DNSSEC is not enabled, which are areas for improvement. From a security perspective, the site uses HTTPS (implied by the URL scheme), but no additional security headers or policies are implemented. There are no privacy, cookie, or terms of service policies, and no contact or incident response information is provided. No vulnerabilities or suspicious content were detected, but the lack of security best practices and compliance documentation lowers the security posture. Overall, the site is a basic placeholder with minimal content and low business credibility. It is safe for general audiences but lacks any meaningful business or security features. Strategic recommendations include enabling DNSSEC, adding security headers, publishing privacy and cookie policies, and providing contact information to improve trust and compliance.

F

Finanz Informatik

fi-update.de

40

The website fi-update.de serves as a platform for the FI Update 2025, a management event targeted at the leadership level within the Sparkassen-Finanzgruppe, a major financial group in Germany. The site primarily functions as an informational and event management portal, with a focus on finance professionals. The business is positioned as an enterprise-level entity within the finance sector, leveraging its parent company Finanz Informatik's brand and network. The content is concise and oriented towards event promotion and user engagement through social media channels such as LinkedIn and Instagram. Technically, the website employs modern web technologies including JavaScript, CSS, and the PrimeReact framework. It integrates etracker analytics with respect for Do Not Track settings, indicating a moderate level of digital maturity and privacy awareness. The site is hosted with DNS services provided by DomainControl (GoDaddy), suggesting a professional hosting environment. Performance and mobile optimization are basic but functional, with room for improvement in accessibility and SEO. From a security perspective, the site uses HTTPS and includes some privacy-conscious analytics configurations. However, it lacks explicit security headers and cookie consent mechanisms, which are important for compliance and protection. No forms or direct contact information are present on the main page, limiting data exposure risks but also reducing user engagement options. The absence of a published security policy, incident response contacts, and vulnerability disclosure reduces transparency and preparedness indicators. Overall, the website presents a moderate risk profile with no critical vulnerabilities detected. Strategic improvements in security headers, privacy compliance, and user contact options would enhance trust and compliance. The business credibility is supported by consistent branding and legitimate domain registration, but the content and technical implementation could be further developed to improve user experience and security posture.

The website www.icloud.com is the official web portal for Apple's iCloud service, a cloud storage and cloud computing platform integrated deeply within the Apple ecosystem. It offers users access to photos, mail, notes, documents, and other personal data synced across Apple devices. The site is professionally designed with consistent branding and clear navigation, targeting Apple device users and general consumers seeking secure cloud services. The business model is subscription-based with free and paid tiers, positioning Apple as a leading technology provider in consumer cloud services. Technically, the site employs modern web technologies including strict Content-Security-Policy headers, HTTPS encryption, and Apple proprietary JavaScript libraries. The infrastructure is hosted on Apple’s own platforms, ensuring high performance and excellent mobile optimization. Accessibility and SEO practices are well implemented, contributing to a positive user experience. From a security perspective, the site demonstrates strong best practices such as strict CSP, HTTPS enforcement, and restricted form actions. However, it lacks visible cookie consent mechanisms and publicly available security policies or incident response contacts, which are areas for improvement. No vulnerabilities or suspicious elements were detected in the provided content. Overall, the site is trustworthy and professional with a high security posture and excellent business credibility. The absence of WHOIS data is likely due to privacy protections common for large corporations. Strategic recommendations include adding explicit cookie consent, publishing security policies, and providing vulnerability disclosure information to enhance transparency and compliance.

archive.is is a web archiving service established in 2012 that allows users to capture and preserve snapshots of web pages permanently. The service targets general internet users who require a reliable method to archive web content. The website is currently protected by a CAPTCHA security check, indicating the presence of a Web Application Firewall or similar security mechanism to mitigate automated access and abuse. This security layer restricts direct access to the site's content, limiting the ability to fully analyze the website's features and policies. Technically, the site uses standard web technologies including HTML5 and JavaScript, with Google reCAPTCHA integrated for bot protection. The domain is hosted by Hetzner Online GmbH and uses HTTPS, but lacks advanced security headers and DNSSEC, which are recommended for enhanced security. No privacy, cookie, or terms of service policies are present on the landing page, and no contact or business information is disclosed, which impacts the site's transparency and compliance posture.

H

Hetzner Online GmbH

your-objectstorage.com

78

Hetzner Online GmbH is a well-established German hosting and data center operator founded in 1997, offering a broad range of IT infrastructure services including dedicated servers, cloud hosting, and scalable S3-compatible Object Storage solutions. The company emphasizes GDPR compliance, sustainability through 100% green electricity, and transparent pricing models. Their Object Storage product targets businesses and private customers needing flexible, secure, and scalable storage solutions with pay-as-you-go billing. Technically, the website is built on modern web technologies including HTML5, CSS3, JavaScript, and uses SilverStripe CMS. It integrates Matomo analytics for privacy-conscious user tracking and provides a responsive, accessible, and well-structured user experience. The hosting is self-managed by Hetzner, ensuring good performance and reliability. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms, and secures forms with CSRF tokens. However, explicit security headers are not clearly visible in the HTML, and no dedicated security or incident response pages are found. The WHOIS data for the domain is unavailable, which limits domain registration trust analysis but does not detract from the professional presentation and trust signals on the site. Overall, Hetzner Online demonstrates a strong security posture, excellent privacy compliance, and a mature business model. Strategic recommendations include publishing explicit security policies, enhancing security headers, and providing clear incident response contacts to further strengthen trust and compliance.

S

Startseite » Studierzimmer Münster

studierzimmer-muenster.de

35

Studierzimmer Münster is a community-driven campaign focused on facilitating affordable student housing in the city of Münster, Germany. The website serves as a platform to connect landlords, investors, and students seeking housing, emphasizing social support and local collaboration. The campaign is supported by local institutions including the City of Münster, University of Münster, Fachhochschule Münster, and Studentenwerk Münster, indicating strong community ties and trust. Technically, the website is built on the SilverStripe CMS platform, utilizing standard web technologies such as HTML5, CSS, JavaScript, and jQuery. The site demonstrates moderate performance and basic mobile optimization. However, there is room for improvement in accessibility and SEO optimization. The hosting is provided by kasserver.com, a known hosting provider. From a security perspective, the site uses HTTPS as indicated by the base URL, but lacks visible security headers and formal privacy or cookie policies, which are critical for GDPR compliance. No forms with sensitive inputs are present on the homepage, reducing immediate risk exposure. The absence of vulnerability disclosure and incident response information suggests limited security maturity. Overall, the website is a trustworthy and professional community resource with moderate technical and security posture. Strategic improvements in privacy compliance, security headers, and transparency would enhance trust and compliance with data protection regulations.

F

Football Agency Cup GmbH

agency-cup.com

56

Football Agency Cup GmbH operates a well-established football tournament event for Germany's marketing and creative agencies, positioning itself as the largest industry event of its kind since 1988. The website is professionally designed using the Wix platform, offering good content quality and user experience tailored to its target audience. However, the technical infrastructure is basic with moderate performance and limited advanced SEO or accessibility features. Security posture is average with no evident security headers or policies, and privacy compliance is lacking due to missing privacy and cookie policies. The absence of WHOIS data raises concerns about domain registration legitimacy, which should be addressed to enhance trust. Overall, the digital maturity is moderate with room for improvement in security and compliance.

H

Hopp Foundation for Computer Literacy & Informatics gGmbH

hopp-foundation.de

50

The Hopp Foundation for Computer Literacy & Informatics gGmbH is a small non-profit organization based in Germany focused on promoting digital education in the Rhein-Neckar metropolitan region. Their website offers comprehensive information about workshops, teaching materials, and support services for teachers, school leaders, students, and parents. The foundation emphasizes practical and innovative learning formats to foster digital literacy and informatics skills. Technically, the website is built on a modern stack with Kirby CMS, uses JavaScript libraries for UI enhancements, and is hosted on a domain managed by DomainControl. The site is mobile-optimized, well-structured, and provides clear navigation and professional design. Security-wise, the site enforces HTTPS and cookie consent but lacks explicit security policies or incident response contacts. No tracking or advertising scripts were detected, reflecting a privacy-conscious approach. WHOIS data is minimal but consistent with a legitimate educational entity. Overall, the website is trustworthy, professional, and well-suited for its educational mission.

N

Northwestern University Knight Lab

knightlab.com

57

Northwestern University Knight Lab is an academic and research community focused on advancing journalism and media innovation through exploration, experimentation, and open-source storytelling tools. The Lab serves a diverse audience including students, educators, journalists, and media makers, providing tools, classes, and research initiatives that push the boundaries of storytelling and media technology. The Lab is well-positioned as a leader in media innovation with strong ties to Northwestern University and a global user base for its open-source projects. Technically, the website employs modern web standards with HTML5, CSS3, and JavaScript, including Google Analytics for tracking. The site is mobile-optimized with good SEO and accessibility basics, hosted likely on Northwestern's infrastructure or associated CDNs. However, there is room for improvement in security headers and privacy compliance, as no explicit privacy or cookie policies are found, and no cookie consent mechanism is implemented. From a security perspective, the site uses HTTPS with good SSL configuration and no visible vulnerabilities in the provided content. The absence of security headers and privacy policies are notable gaps. The WHOIS data is unavailable, typical for edu subdomains, but the domain's affiliation with Northwestern University and consistent website content support legitimacy. Overall, the site demonstrates a solid security posture but could enhance compliance and transparency. The overall risk is low given the academic nature and reputable affiliation, but strategic improvements in privacy, security headers, and user consent would strengthen trust and compliance.

myCicero is an established Italian mobility services platform founded in 2012, offering a range of mobility management solutions for transport operators, public entities, large companies, and events. The website promotes both B2B services and a consumer-facing mobility app, MooneyGo, which replaces the original myCicero app. The platform positions itself as the first Global Distribution System (GDS) for mobility in Italy, targeting a broad audience from institutional clients to end users. The site content is professionally presented with good design and navigation, though it lacks visible privacy and security policy disclosures. Technically, the website uses modern frontend technologies including Bootstrap 5 and Google Fonts, with a responsive design suitable for mobile devices. However, no CMS or backend technologies are evident from the homepage HTML. Performance is moderate, and SEO and accessibility features are basic but present. No analytics or tracking scripts were detected in the provided content, indicating minimal user tracking. From a security perspective, the site uses HTTPS (implied by domain), but no DNSSEC is enabled and no security headers are visible in the HTML content. There are no published privacy, cookie, or terms of service policies, nor any contact information for security incidents or data protection officers. The WHOIS data shows a consistent and legitimate domain registration since 2012 with no privacy protection, supporting trustworthiness. Overall, the security posture is moderate but could be improved with better policy disclosures and technical security controls. The overall risk is moderate with no critical vulnerabilities detected in the visible content. Strategic recommendations include publishing comprehensive privacy and cookie policies, enabling DNSSEC, adding security headers, and providing clear contact information for security and privacy concerns to enhance trust and compliance.

Gruppo Trentasei is a small Italian digital design studio that recently transformed into the Digital Design Studio of Jakala Civitas, indicating a strategic partnership or acquisition. The website serves primarily as an announcement page with limited content, focusing on branding and corporate messaging. Technically, the site uses modern HTML5 and CSS3 standards with Google Fonts integration, and it is mobile optimized with a moderate performance profile. Security posture is adequate with HTTPS and DNSSEC enabled, but lacks security headers and visible privacy or cookie policies, which are important for compliance and trust. No contact information or forms are present, limiting user engagement and transparency. Overall, the site is professional but minimalistic, with room for improvement in privacy compliance and security best practices.

S

Setup Type

setuptype.com

57

Setup Type is a Slovak-based design studio and type foundry specializing in font creation, branding, and lettering services. Founded in 2009 by Ondrej Jób, the company targets creative professionals and agencies seeking high-quality typographic and branding solutions. The website reflects a niche market position with a strong focus on design aesthetics and font retail. Technically, the website employs modern web technologies including HTTPS, Google Analytics, and cookie consent mechanisms, providing a good user experience with responsive design and clear navigation. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and incident response disclosures. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and social media presence support business credibility. Overall, the site is professional and trustworthy but would benefit from improved transparency in domain registration and enhanced security practices.

B

Bundesanstalt für Materialforschung und -prüfung (BAM)

bam.de

61

The Bundesanstalt für Materialforschung und -prüfung (BAM) is a German federal scientific research institute specializing in material research and testing. It operates under the Federal Ministry for Economic Affairs and Energy and serves a broad audience including researchers, industry professionals, and government entities. The website provides comprehensive scientific content, official portals, and public services related to material safety and technology transfer. Technically, the site uses modern web technologies with good mobile optimization and accessibility. Security posture is strong with HTTPS and privacy-respecting analytics (Matomo) that anonymize user data and require consent. No critical vulnerabilities or blocking mechanisms were detected. Overall, the site reflects a professional, trustworthy government entity with excellent content quality and privacy compliance.

D

DRI and Syloé

produhost.net

51

The website serves as a login portal for ÉVA Pilote, an extranet management platform developed collaboratively by DRI and Syloé. It targets business users who require tailored tools to manage hosted applications and services, including eco-indicators for digital sobriety. The platform positions itself as a niche B2B SaaS solution with a focus on visibility and control over application environments. Technically, the site employs standard web technologies such as HTML5, CSS3, JavaScript, jQuery, and Bootstrap, delivering a responsive and professional user interface. However, the absence of visible security headers and unclear SSL status suggests moderate security maturity. The lack of privacy and cookie policies indicates gaps in compliance with data protection regulations. WHOIS data is missing, raising concerns about domain registration legitimacy despite the professional appearance and partner affiliations. Overall, the site is functional and business-focused but requires improvements in security posture and compliance documentation.

SG Productions Editions International (SGPE) is a Swiss-based small media company specializing in music production, publishing, digital distribution, and art promotion. Founded in 1996, it operates a Latin music radio station and an art promotion platform, positioning itself as a niche player in the international music and art markets. The website provides basic informational content with limited interactive features and minimal contact details. Technically, the site uses a simple hosting page builder with standard web technologies and is hosted on Infomaniak infrastructure. The site lacks advanced SEO, accessibility, and mobile optimization features. Security posture is weak due to absence of security headers, privacy policies, and incident response information, although no critical vulnerabilities or malicious content were detected. Overall, the site is functional but requires improvements in privacy compliance and security best practices to enhance trust and user confidence.

W

waldbach medien

waldbachmedien.ch

50

waldbach medien is a small Swiss technology company specializing in web development, digital media, and consulting services with over 20 years of experience. The company targets businesses and organizations seeking tailored internet solutions including responsive websites, webshops, multimedia presentations, and IoT device development. Their market position is that of a niche local specialist in Winterthur, Switzerland, offering a broad range of digital services supported by a proprietary CMS platform (WebZen). The website reflects a professional and consistent brand image with clear navigation and relevant content.

E

Etat de Genève

ge.ch

70

The website www.ge.ch is the official online portal for the République et canton de Genève, serving as the authoritative source for government information, public services, and administrative procedures for residents and businesses in the Canton of Geneva, Switzerland. It offers comprehensive access to official news, e-demarches (online administrative procedures), publications, and institutional information, positioning itself as a critical government communication and service platform. Technically, the site is built on the Drupal CMS platform, leveraging modern web technologies including responsive design, JavaScript, and Matomo analytics for user tracking with consent. The site demonstrates good digital maturity with mobile optimization, accessibility features, and SEO best practices. Hosting details are not explicitly stated but are likely managed by government infrastructure. From a security perspective, the site enforces HTTPS and uses a consent-based cookie banner compliant with GDPR. While explicit security headers are not visible in the HTML, no vulnerabilities or exposed sensitive data were detected. The absence of a published security policy or vulnerability disclosure page is noted as an area for improvement. The WHOIS data confirms the domain is registered to the official government entity, reinforcing legitimacy. Overall, the site is highly trustworthy, professionally designed, and well-maintained, with strong privacy compliance and a clear focus on public service. No adult or questionable content is present, and the site is fully accessible without WAF or blocking mechanisms.

C

Commerzbank

commerzbank.com

64

Commerzbank's group website serves as the corporate portal for one of Germany's major banking institutions. The site provides information about the bank's corporate identity and services, targeting corporate clients, investors, and the general public interested in the bank's operations. The website demonstrates a professional design with consistent branding and a moderate level of technical maturity, including the use of modern web technologies and a cookie consent mechanism to comply with privacy regulations. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks visible security headers and explicit security policies. The absence of explicit privacy policy and terms of service in the provided content suggests areas for improvement in privacy compliance and transparency. Overall, the domain registration data aligns well with the business claims, indicating a legitimate and trustworthy online presence.

SmileReef is a small e-commerce business specializing in eco-friendly surf hats with integrated helmets, targeting environmentally conscious surfers. The company emphasizes sustainability by using recycled ocean plastics and supports reef conservation with a portion of sales. The website is professionally designed on the Shopify platform, featuring customer reviews and multi-language support, indicating a moderate level of digital maturity. Technically, the site uses modern web technologies and is hosted on Google Cloud via Shopify, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and no explicit security or incident response policies are published. WHOIS data shows anomalies such as a future domain creation date and country mismatch, which slightly reduce trustworthiness but do not negate the overall legitimacy. Privacy compliance is addressed with policies and cookie consent mechanisms. Overall, the site presents a trustworthy and professional e-commerce presence with room for improvement in security transparency and domain registration consistency.

F

403 - Forbidden

fondazione-experience.com

38

The website fondazione-experience.com currently serves a 403 Forbidden error page, indicating that access to the content is restricted or blocked. There is no visible business information, contact details, or policy documents available on the site. The domain is relatively new, registered in November 2022 via GoDaddy.com, LLC, and hosted on SiteGround servers. The technical infrastructure is minimal, with basic HTML and CSS and no advanced frameworks or CMS detected. Security configurations are basic, with no DNSSEC enabled and no security headers observed. The lack of accessible content and contact information significantly limits the ability to assess the business or security posture comprehensively.

A

AIESEC International Inc.

aiesec.it

42

AIESEC Italia is a well-established non-profit youth organization focused on leadership development through international exchange programs such as volunteering, internships, and teaching abroad. The website reflects a professional and consistent brand presence targeting young people and students interested in global leadership experiences. The organization has a strong market position with global reach and recognized affiliations with UN bodies. Technically, the website uses modern JavaScript libraries and tracking tools, with a moderate performance and good mobile optimization. Security posture is solid with HTTPS and DNSSEC enabled, but lacks some security headers and explicit privacy and terms policies. Cookie consent is implemented via Usercentrics CMP, indicating GDPR awareness. Overall, the website is trustworthy and professional with room for improvement in privacy transparency and security hardening.

M

Monte Cavallo

montecavallo.com

51

Monte Cavallo is a regional tourism website focused on promoting the Monte Cavallo ski and hiking area near Vipiteno in South Tyrol, Italy. The site offers information about skiing, sledding, hiking, and family-friendly outdoor activities, targeting tourists and families interested in alpine experiences. The business model revolves around tourism services including ticket sales and accommodation bookings. The website is professionally designed with consistent branding and multilingual support, reflecting a good level of digital maturity. Technically, it uses modern web technologies and a proprietary CMS (Consisto.CMS), with integrated analytics and consent management tools. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks some security headers and explicit privacy and terms of service pages. WHOIS data is not publicly available, which slightly reduces trustworthiness but does not strongly indicate malicious intent. Overall, the site is safe, well-structured, and suitable for general audiences interested in tourism in the region.