Security Directory

R

Rat auf Draht

rataufdraht.at

68

Rat auf Draht is a prominent Austrian non-profit emergency helpline and counseling service dedicated to children, youth, and young adults. It offers multiple communication channels including phone, chat, and peer counseling, operating under the well-known emergency number 147. The website reflects a strong national presence with consistent branding and a focus on mental health and social support. Technically, the site uses modern web technologies such as jQuery, Font Awesome, Google Analytics, and Usercentrics for consent management, built on an ASP.NET WebForms CMS platform. Security posture is solid with HTTPS enforced and CSRF protections in place, though some security headers could be improved. Privacy compliance is partial, with cookie consent mechanisms present but no explicit privacy policy or terms of service found. Overall, the site is trustworthy, professional, and well-positioned in its sector.

A

A1 digital.campus

a1digitalcampus.at

70

A1 digital.campus is an Austrian educational initiative providing free, innovative workshops focused on digital future topics such as coding and robotics for children and youth. The platform offers a variety of programs including school workshops, media literacy sessions, hackathons, and a startup school, positioning itself as a key player in STEM education within Austria. The website is professionally designed, well-structured, and optimized for SEO and mobile use, leveraging WordPress and modern plugins to deliver content effectively. Privacy and cookie compliance are well implemented, reflecting a mature approach to data protection. Security posture is solid with HTTPS and standard best practices, though there is room for improvement in explicit security policies and incident response information. Overall, the site is trustworthy, safe, and serves its educational mission effectively.

Internet Service Providers Austria (ISPA) is a well-established industry association representing the Austrian internet economy and internet service providers. The organization focuses on shaping economic and legal conditions for the internet while bearing social responsibility. Their website reflects a professional and comprehensive digital presence, offering resources, news, events, and member services. ISPA maintains strong partnerships with recognized entities such as EuroISPA, Stopline, and Saferinternet.at, reinforcing its market position as a leading voice in Austria's internet sector. Technically, the site is built on TYPO3 CMS with privacy-conscious analytics via Matomo, demonstrating a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers and explicit security policies could enhance trust. Overall, ISPA's website is a trustworthy, well-maintained platform serving its target audience effectively.

Ö

Österreichische Forschungsförderungsgesellschaft FFG

ffg.at

65

The Österreichische Forschungsförderungsgesellschaft (FFG) is Austria's national funding agency dedicated to supporting business-related research, development, and innovation. The organization operates a professional and comprehensive website that provides detailed information about funding programs, initiatives, and services targeted at Austrian companies and research institutions. The site is well-structured, mobile-optimized, and built on Drupal 10, reflecting a modern technical infrastructure. Analytics tracking is implemented via etracker, and a cookie consent mechanism is active, indicating attention to privacy compliance, although no explicit privacy policy or terms of service were found in the analyzed content. Security posture is moderate with HTTPS implied and some best practices observed, but there is room for improvement in publishing security policies and incident response contacts. Overall, the domain registration data aligns well with the organization's profile, supporting its legitimacy and trustworthiness.

Verizon is a leading telecommunications company in the United States offering a broad range of services including wireless mobile plans, home internet solutions such as Fios and 5G, TV, and phone services. The website reflects a mature, enterprise-level digital presence with a focus on consumer and business customers. The company maintains a strong market position with extensive network coverage and brand recognition. Technically, the website is built on Adobe Experience Manager with modern analytics and consent management tools, ensuring a responsive and accessible user experience across devices. Security posture is strong with HTTPS enforcement and secure sign-in portals, although explicit security policies and incident response information are not publicly detailed. The absence of WHOIS data is likely due to registry privacy policies and does not detract from the site's legitimacy. Overall, the website demonstrates professionalism, trustworthiness, and compliance with privacy regulations.

Verizon is a leading telecommunications company in the United States, offering a wide range of services including wireless mobile plans, home internet solutions such as Fios and 5G, TV, and phone services. The website reflects Verizon's strong market position with professional design, comprehensive service offerings, and clear targeting of both consumer and business audiences. The digital infrastructure is modern, leveraging Adobe Experience Manager for content management and advanced analytics tools like Quantum Metric and Adobe Analytics to optimize user experience and marketing effectiveness. Security posture is robust with HTTPS enforcement, security headers, and privacy compliance mechanisms in place. Although WHOIS data for the queried subdomain is unavailable, the overall trustworthiness and legitimacy of the site are high based on content and technical indicators. Strategic recommendations include maintaining security best practices, enhancing incident response visibility, and continuous auditing of third-party scripts to mitigate risks.

A

Alamode Film

alamodefilm.de

66

Alamode Film is a specialized film production and distribution company focusing on sophisticated cinema and film re-releases. Their website showcases current and upcoming films, home entertainment releases, news, trailers, and company information, targeting film enthusiasts and media professionals primarily in Germany. The company maintains a professional digital presence with active social media channels and a modern WordPress-based website. Technically, the site uses contemporary plugins and libraries, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers and incident response details are missing. Privacy compliance is well addressed with a comprehensive privacy policy and cookie management. Overall, the website reflects a trustworthy and professional business with room for enhanced security practices and transparency in incident handling.

Neue Pierrot le Fou operates as a specialized film distribution company focusing on DVD and Blu-Ray releases, primarily targeting German-speaking film enthusiasts and collectors. The website presents a professional and consistent brand image with clear navigation and relevant content about upcoming and available films. The company maintains an active presence on major social media platforms to engage its audience. Technically, the website employs a traditional HTML5 and CSS3 structure enhanced with JavaScript libraries such as jQuery and Video.js for media playback. The site is responsive and includes a comprehensive cookie consent mechanism compliant with GDPR, indicating a mature approach to privacy. However, some modern security headers and updated libraries could improve the technical posture. Security-wise, the site uses HTTPS and provides cookie consent with granular controls, but lacks explicit security policies or incident response contacts. No critical vulnerabilities or blocking mechanisms were detected, suggesting a stable but improvable security environment. Overall, the website scores well in content quality, business credibility, and privacy compliance, with moderate technical and security scores. Strategic improvements in security headers, updated libraries, and explicit security documentation would enhance trust and resilience.

K

Katholisches Filmwerk GmbH

filmwerk.de

46

Katholisches Filmwerk GmbH operates a specialized media platform focused on the distribution and licensing of educational and cultural films primarily targeting schools, media centers, and parish communities in Germany. The website provides film catalogs, didactic materials, and informational content to support educational use. The company maintains a professional online presence with clear contact information and legal disclosures, positioning itself as a niche player in the German educational media market. Technically, the site is built on WordPress with Bootstrap and uses standard plugins, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit incident response policies. Privacy compliance is mostly met with a comprehensive privacy policy, though no cookie consent mechanism is present. Overall, the site is trustworthy and professionally maintained, with room for improvement in security and privacy features.

The website www.videoload.de is currently inaccessible, returning a 403 Forbidden error page with no visible content. This prevents extraction of any meaningful metadata, business information, or security policies. The domain is hosted on nameservers associated with Deutsche Telekom AG, suggesting a legitimate infrastructure backing. However, the lack of accessible content severely limits the ability to assess the company's business model, services, or compliance posture. From a technical perspective, the site appears to be either restricted or protected by access controls, which may be intentional or due to misconfiguration. Security posture cannot be evaluated due to absence of headers, scripts, or forms. Overall, the site is currently non-functional for external users, resulting in a very low AI score and limited insights.

V

videociety GmbH

maxdome.de

63

maxdome, operated by videociety GmbH, is a prominent German online video rental and purchase platform offering a wide range of movies and TV series in HD and 3D formats. Positioned as one of the largest streaming services in Germany, maxdome targets a broad audience including families and general viewers, providing content without monthly subscription fees. The platform leverages modern streaming technology such as the Bitmovin Player to deliver high-quality video experiences across multiple devices including Smart TVs, computers, and mobile devices. The website demonstrates good digital maturity with responsive design, clear navigation, and comprehensive metadata for SEO and social media integration. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, although there is room for improvement in publishing explicit security policies and incident response contacts. Overall, maxdome presents a trustworthy and professional service with a strong market presence in the German media streaming sector.

The website www.energiarenovable.com is an informational platform focused on renewable energy topics such as solar, wind, hydro, bioenergy, geothermal, and marine energy. It targets a general audience interested in sustainable energy solutions and provides educational content along with news and financing information. The site is managed by a French team based in Spain and monetizes through advertising networks. Technically, the site uses standard web technologies including HTML, CSS, JavaScript, Google Fonts, and integrates Google Adsense and StatCounter for ads and analytics. A consent management platform is implemented to comply with GDPR cookie consent requirements. However, the site lacks explicit privacy policy and terms of service pages, and no direct contact information is provided, which impacts trust and compliance perception. Security posture is basic with no visible security headers and unknown SSL status due to lack of header data. The WHOIS data is unavailable, indicating either an unregistered domain or privacy protection, which reduces domain legitimacy confidence. Overall, the site is functional and safe but requires improvements in transparency, security, and business credibility to enhance trust and compliance.

A

actfest

actfest.org

61

The website www.actfest.org represents a cultural non-profit organization focused on the promotion and organization of a free theatre festival in Bulgaria. It offers detailed information about international and local theatre selections, parallel events such as workshops and discussions, and is supported by notable Bulgarian cultural institutions like the Ministry of Culture and Sofia Municipality. The site targets theatre enthusiasts, artists, and the general public interested in cultural events. Technically, the site is built on the Super Website CMS platform using Ember.js, integrates Google reCAPTCHA Enterprise for bot protection, and Facebook Pixel for tracking. The site is hosted by SuperHosting.BG and demonstrates moderate performance with good mobile optimization and SEO practices. Security-wise, HTTPS is enforced and some security best practices are observed, but explicit security headers and privacy policies are missing, which are areas for improvement. WHOIS data is privacy protected, which is typical for such organizations, but reduces transparency slightly. Overall, the site is professional, trustworthy, and serves its niche audience well, though it would benefit from enhanced privacy compliance and security disclosures.

T

t. Theaterschaffen Schweiz

kuenstlerboerse.ch

45

The Schweizer Künstlerbörse website represents a well-established Swiss cultural event organized by t. Theaterschaffen Schweiz, serving as a key networking and presentation platform for the Swiss theater scene. The site effectively targets artists, theater organizers, agencies, and media professionals, providing event information, application forms, and multimedia content. The business model is non-profit, focusing on cultural promotion and professional networking within the Swiss arts sector. Technically, the site is built on WordPress with a modern tech stack including Bootstrap, jQuery, and multilingual support via WPML, ensuring good mobile optimization and SEO. Security posture is adequate with HTTPS and reCAPTCHA, but could be improved by adding security headers and a cookie consent mechanism. Overall, the site is professional, trustworthy, and compliant with basic GDPR requirements, though some privacy enhancements are recommended.

B

BASIS Vinschgau Venosta

basis.space

52

BASIS Vinschgau Venosta operates as a social activation hub based in South Tyrol, Italy, focusing on regional and social development through economy, culture, education, and social affairs. The organization leverages a multi-lingual website to engage a diverse audience including artists, educators, businesses, and community members. Their business model centers on coworking spaces, events, workshops, and residency programs, positioning them as a niche regional player fostering community and cultural growth. Technically, the website is built on WordPress with the Divi theme, incorporating modern analytics and user experience tools such as Google Analytics, Hotjar, and reCAPTCHA v3. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. Security posture is adequate with HTTPS enforced and basic protections, but lacks advanced security headers and DNSSEC. Privacy compliance is well addressed with cookie consent and a privacy policy, though no explicit security or incident response policies are published. Overall, the website is professional, trustworthy, and aligned with its social mission, but could improve in security transparency and technical hardening.

C

climateaction.bz

climateaction.bz

63

Climate Action is a small non-profit organization focused on climate justice and mobilizing community groups in South Tyrol, Italy. The website is built on WordPress using Kadence Blocks and is hosted with Cloudflare DNS services. It features a cookie consent mechanism compliant with GDPR, but lacks explicit privacy policy and terms of service pages in the provided content. The technical infrastructure is modern but could benefit from enabling DNSSEC and adding security headers. The security posture is good with HTTPS enabled and domain transfer protections in place. No contact emails or phone numbers are explicitly provided, which may affect user trust and engagement. Overall, the website is professional and serves its advocacy purpose well but could improve transparency and security practices.

W

Wortmann Group

wortmann-group.com

64

The Wortmann Group is a well-established European footwear manufacturer and distributor, operating since 2001. The company manages a portfolio of strong shoe brands including Tamaris, s.Oliver Shoes, Marco Tozzi, Jana, Caprice, and Peter Kaiser, serving a global market with localized sales support. Their website reflects a professional and consistent brand image with multilingual support and clear navigation. Technically, the site is built on the Contao CMS platform using jQuery and related libraries, delivering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, though DNSSEC is not enabled and security headers are not evident. Privacy compliance is basic but present, with privacy and cookie policies accessible. No direct contact emails or phone numbers are visible on the homepage, but contact forms are provided. Overall, the site is trustworthy and professionally maintained.

W

Wortmann Group

wortmann.com

64

Wortmann Group is a large European footwear manufacturing and distribution company with a strong portfolio of brands including Tamaris, s.Oliver Shoes, Marco Tozzi, Jana, Caprice, and Peter Kaiser. The company targets retailers, distributors, and consumers interested in quality footwear. Their website is professionally designed, multilingual, and built on the Contao CMS platform, indicating a moderate level of digital maturity. The technical infrastructure uses common JavaScript libraries and provides a responsive user experience. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and advanced security headers. Privacy compliance is addressed with a privacy and cookie policy, though no explicit security or incident response policies are published. Overall, the website is trustworthy and professionally maintained, supporting the company's market position as a leading footwear group in Europe.

D

Deutsche Kinderschutzstiftung Hänsel + Gretel

haensel-gretel.de

58

Deutsche Kinderschutzstiftung Hänsel + Gretel is a well-established German non-profit foundation dedicated to protecting and empowering children against physical, emotional, and sexual violence. Founded in 1997, the foundation operates numerous projects across Germany, targeting children, youth, parents, schools, and childcare professionals. The website reflects a professional and consistent brand presence with clear contact information and active social media engagement. Technically, the site is built on TYPO3 CMS, hosted on nroute.de nameservers, and employs modern web practices including HTTPS and Google Tag Manager for analytics. Security posture is solid with no critical vulnerabilities detected, though improvements could be made by adding security headers and formal security policies. Privacy compliance is moderate due to the absence of explicit privacy and cookie policies. Overall, the site is trustworthy, safe, and well-suited for its target audience.

PETR du Pays d'Arles is a regional governmental and non-profit entity focused on coordinating sustainable development projects and citizen initiatives within the Pays d'Arles territory in France. The website serves as an informational and engagement platform for residents, local authorities, and partners. It presents a clear organizational structure and mission aligned with public territorial cooperation. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates Google Analytics for user insights. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks DNSSEC and explicit security headers. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the domain registration and hosting details support the legitimacy of the entity. Strategic improvements in privacy compliance and security hardening are recommended to enhance trust and regulatory adherence.

D

Département des Bouches-du-Rhône

departement13.fr

67

The Département des Bouches-du-Rhône website serves as the official digital portal for the regional government entity in France, providing extensive information and services related to local administration, social welfare, culture, environment, education, and community engagement. The site targets residents, local officials, associations, and businesses within the department, offering a comprehensive resource for accessing government programs and updates. Technically, the website is built on Drupal 10, leveraging modern web technologies including JavaScript and CSS3, and integrates Matomo for analytics and tarteaucitron.js for GDPR-compliant cookie management. The hosting is provided by ScaleWay, a reputable provider, and the site demonstrates good mobile optimization, accessibility, and SEO practices. From a security perspective, the site enforces HTTPS and employs domain transfer protection. While explicit security headers and policies are not fully documented, the site avoids exposing sensitive data and uses a consent mechanism for cookies. No critical vulnerabilities or suspicious activities were detected, indicating a solid security posture appropriate for a government website. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a reliable resource for its audience. Strategic recommendations include enhancing security headers, publishing a security policy, and adding incident response contacts to further strengthen trust and compliance.

T

Terre de Provence Agglomération

terredeprovence-agglo.com

56

Terre de Provence Agglomération is a French regional government entity serving 13 communes, providing a broad range of public services including urban planning, waste management, cultural activities, and economic development. The website is well-structured, professionally designed, and targets residents and businesses within the region. Technically, the site uses the SPIP CMS, Bootstrap framework, and integrates cookie consent management and Google Analytics for tracking. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and explicit policies are missing. The WHOIS data is notably absent, which is unusual for a government domain and slightly reduces trustworthiness. Overall, the site is safe, compliant with GDPR, and provides clear contact information and social media presence.

M

Majid Al Futtaim

majidalfuttaim.com

81

Majid Al Futtaim is a prominent integrated lifestyle provider operating in sectors including shopping malls, hotels, cinemas, hypermarkets, and lifestyle brands primarily in the Middle East. The company positions itself as a leading enterprise offering diverse consumer experiences and business services. The website reflects a mature digital presence with comprehensive content, clear navigation, and consistent branding, targeting consumers and business partners in retail and hospitality sectors. Technically, the website employs modern tracking and analytics technologies such as Google Analytics, Facebook Pixel, LinkedIn Insight Tag, and uses Akamai for hosting and content delivery. The site is mobile optimized, accessible, and SEO friendly, with a cookie consent mechanism implemented via OneTrust, indicating good privacy compliance. Performance is moderate with room for optimization. From a security perspective, the site enforces HTTPS and uses reputable third-party scripts. However, explicit security headers are not evident in the provided data, and no public security or incident response policies are found. The absence of WHOIS data limits domain registration transparency, but the overall digital footprint and corporate content suggest legitimacy. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates a strong business and technical foundation with good privacy and security practices, though improvements in security header implementation and public security policies are recommended to enhance trust and compliance.

E

Emirates Foundation

emiratesfoundation.ae

57

Emirates Foundation is a prominent UAE-based non-profit organization dedicated to empowering youth and fostering community engagement through volunteer programs and social initiatives. The foundation operates several key programs including Takatof, Sanid, Dawamee, and Nema, which focus on volunteering, emergency response, remote job facilitation, and food waste reduction respectively. The website serves as an information portal primarily in Arabic with English language support, targeting UAE residents interested in social development and volunteering opportunities. Technically, the site uses standard frontend technologies such as jQuery, Bootstrap, and Font Awesome, hosted under Etisalat's domain infrastructure, indicating a stable and regionally appropriate hosting environment. However, the site lacks explicit privacy and cookie policies, security headers, and visible contact information, which are areas for improvement in compliance and transparency. Overall, the website is professionally designed with good content relevance and navigation but would benefit from enhanced security and privacy practices to align with modern standards.

A

Aldar Properties

aldar.com

74

Aldar Properties is a prominent real estate developer and investment company based in Abu Dhabi, UAE, offering a wide range of premium residential, commercial, hospitality, and educational properties and services. The company targets UAE residents and investors, providing property sales, rentals, investment opportunities, and related e-services through a professionally designed and well-structured website. The site demonstrates a mature digital presence with integration of modern analytics and tracking technologies, including Datadog, Microsoft Clarity, TikTok Pixel, and Facebook Pixel, alongside a cookie consent mechanism via OneTrust. The technical infrastructure suggests hosting on Microsoft Azure and use of Sitecore CMS, supporting good performance and mobile optimization. Security posture is strong with HTTPS enforced and sandboxed iframes for interactive elements, though explicit security headers and policies are not fully visible. The absence of WHOIS registration details is a notable anomaly, possibly due to privacy protection or query failure, but the website content and external references strongly support legitimacy. Overall, Aldar's digital presence aligns with its market position as a leading real estate entity in the UAE, though improvements in privacy policy visibility and security disclosures are recommended.

The website at firstabudhabibank.com/lander is a minimal parking or placeholder page with no substantive content or business information. It appears to be associated with a domain registered in 2021 via GoDaddy.com, LLC, but lacks any visible branding, contact details, or compliance policies. The site includes only basic scripts related to Google Adsense and a parking lander system, indicating it is not an active business website. The technical infrastructure is minimal, with no detected CMS or advanced frameworks beyond basic JavaScript. Security posture is weak due to lack of visible HTTPS enforcement, security headers, or privacy compliance mechanisms. Overall, the site does not present itself as a legitimate or operational business platform.

G

Génération Grand R

generation-grand-r.fr

48

Génération Grand R is a regional educational network focused on agricultural training and professional development in the Pays de la Loire region of France. The website presents a comprehensive offering of vocational education, short courses, and international mobility programs targeting students and adult learners interested in agriculture, horticulture, viticulture, and related sectors. The organization positions itself as a key player in agricultural education with strong regional partnerships and a focus on innovation and practical training. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, and SEO plugins, hosted by OVH. It features good mobile optimization, social media integration, and moderate performance. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and formal security policies. No critical vulnerabilities or blocking mechanisms were detected. Overall, the site is professional, trustworthy, and compliant with GDPR, though it could improve in security policy transparency and incident response readiness.

И

Изипей АД

easypay.bg

58

EasyPay AD is a well-established Bulgarian payment services company founded in 2006, providing a broad range of financial services including utility bill payments, money transfers, and payment cards. The company operates both physical payment offices and digital platforms, targeting the general public and businesses within Bulgaria. Their market position is strong, supported by partnerships and certifications such as TUV and PCI DSS, which enhance their credibility and trustworthiness. Technically, the website employs standard web technologies including Bootstrap and jQuery, offering a responsive and user-friendly interface. While the site performs moderately well with good mobile optimization, there is room for improvement in accessibility and SEO. The absence of visible security headers and privacy policies indicates areas where the digital maturity could be enhanced. From a security perspective, the site uses HTTPS (assumed) and does not expose sensitive data visibly. However, the lack of explicit privacy and cookie policies, security headers, and incident response contacts suggests gaps in compliance and security best practices. No WAF or blocking mechanisms were detected, and the domain registration data aligns well with the business claims, indicating legitimacy. Overall, the website is professional and trustworthy but would benefit from improved privacy compliance and enhanced security measures to align with modern standards and regulatory requirements.

The website at centrosantachiara.it is currently inaccessible, returning a 403 Forbidden error page which blocks access to any meaningful content. The domain is well-established, created in 2000, and is not privacy protected, indicating a legitimate registration. However, the lack of accessible content prevents analysis of business operations, services, or contact information. Technically, the site uses Google Fonts but no other detectable technologies or analytics. Security posture is minimal with no DNSSEC and no security headers detected. Privacy compliance is absent due to no visible policies or consent mechanisms. Overall, the site appears to be blocked or restricted, limiting the ability to assess its digital maturity or business credibility.

S

Stiftung Südtiroler Sparkasse

sparkassengalerie.it

57

The Stiftung Südtiroler Sparkasse operates as a non-profit foundation supporting the Südtiroler Sparkasse AG's extensive art collection and cultural initiatives in the Tirol region of Italy. The foundation manages a collection of approximately 500 artworks, focusing on promoting local artists and preserving cultural heritage. The website serves as a digital gallery and informational platform for art enthusiasts and the local community. Technically, the site uses a variety of JavaScript libraries for UI enhancements and carousel displays, with a basic but functional mobile-optimized design. Security posture is moderate with HTTPS enabled but lacking advanced security headers and DNSSEC. Privacy compliance is adequate with clear cookie and privacy policies, though no explicit security or incident response policies are published. Overall, the site is trustworthy and professionally maintained, reflecting the foundation's cultural mission.

A

Acri

acri.it

60

Acri is a well-established Italian non-profit organization representing banking foundations and savings banks, with a history dating back to 1912. It coordinates significant social, cultural, and economic development initiatives funded by its members, managing substantial assets and disbursing billions of euros over the years. The website reflects a professional and consistent brand presence, targeting stakeholders in the finance and non-profit sectors. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates multiple analytics platforms, demonstrating a moderate to good level of digital maturity. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response information are absent. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact information and partner links.

Freunde der Eisenbahn Krefeld e.V. is a small non-profit organization dedicated to preserving and promoting historical railway heritage in Krefeld, Germany. Their key activities include operating the historic steam train 'Schluff', managing the SWK-Verkehrsmuseum, and organizing related events and excursions. The website serves as an informational portal for enthusiasts and the local community, providing updates, contact information, and downloadable resources. The organization holds membership in the Deutsche Gesellschaft für Eisenbahngeschichte (DGEG), enhancing its credibility within the railway heritage sector. Technically, the website is built on the cm4all CMS platform and hosted by Strato. It uses older JavaScript libraries such as jQuery 1.7 and Prototype 1.7.3, which may present security risks. The site implements HTTPS and a cookie consent mechanism, indicating awareness of privacy compliance, including GDPR. However, the absence of modern security headers and outdated libraries suggests room for improvement in security posture. The website is moderately optimized for performance and mobile use, with basic accessibility features. From a security perspective, the site benefits from HTTPS and cookie consent but lacks explicit security policies and incident response information. The use of outdated libraries and missing security headers could expose the site to vulnerabilities. No signs of malware, phishing, or WAF blocking were detected. Privacy compliance is supported by a GDPR-aligned privacy policy and cookie consent, but no terms of service or vulnerability disclosure policies are present. Overall, the website is trustworthy and professional for its niche audience but would benefit from technical and security updates to enhance protection and compliance. Strategic recommendations include updating JavaScript libraries, implementing security headers, and publishing clear security and incident response policies to strengthen user trust and resilience against threats.

S

Sparkasse

sparkasse.it

70

Sparkasse is a well-established financial institution in Italy focusing on retail banking services for private individuals and families. The website presents a professional and consistent brand image with a clear focus on banking products and services. The technical infrastructure leverages modern analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, Hotjar, and Cookiebot for cookie consent management, indicating a mature digital presence. The site is built on the Umbraco CMS platform and integrates multimedia content via Vimeo and YouTube APIs. Security posture is strong with HTTPS enforced and cookie consent implemented, although explicit security headers could be improved. No privacy policy or terms of service were detected on the analyzed page, which is a gap in compliance documentation. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

Z

Zebralog GmbH

meinungfuer.koeln

53

The website meinungfuer.koeln is an official public participation portal for the city of Cologne, operated by Zebralog GmbH. It serves as a platform for citizens to engage in city planning and local projects, offering information on ongoing and past participations, events, and news. The site targets residents of Cologne and promotes transparent civic engagement. Technically, it is built on Drupal 10 with modern frontend libraries and uses Matomo Analytics respecting user privacy. The site is well-structured, mobile-optimized, and accessible, reflecting a mature digital infrastructure for a government service. Security posture is solid with HTTPS, security headers, and domain transfer protections, though DNSSEC is not enabled and no explicit security policies are published. Privacy compliance is strong with clear cookie consent and GDPR-aligned policies. Overall, the site is trustworthy, professional, and safe for general audiences.

K

Koeln.Business

koeln.business

60

Koeln.Business is a regional economic development agency focused on supporting businesses, startups, and investors in Cologne, Germany. The website provides comprehensive information and services related to investment, business establishment, funding consultation, and networking opportunities. It positions itself as a key facilitator for economic growth in the Cologne region, targeting entrepreneurs and startups primarily. The technical infrastructure is built on TYPO3 CMS, leveraging modern JavaScript libraries such as Slick Slider and Owl Carousel for enhanced user experience. The site is well-optimized for mobile devices and accessibility, with a clear navigation structure and professional design. Cookie consent and privacy compliance are robustly implemented using Cookiebot, ensuring GDPR adherence. From a security perspective, the website enforces HTTPS and employs cookie consent mechanisms but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The domain WHOIS data is privacy protected, which is common and acceptable for this type of public-facing business support entity. Overall, Koeln.Business presents a trustworthy and professional digital presence with moderate to good security posture and strong privacy compliance. Strategic recommendations include enhancing security headers, publishing security policies, and establishing incident response contacts to further strengthen trust and compliance.

Kölnmagazin.net is a media-focused website targeting audiences interested in Cologne, Germany. The site is currently in maintenance mode, displaying a placeholder page with no active content or business details. The domain is well-established, registered since 2010 with IONOS SE, indicating a stable presence. The website uses WordPress CMS with jQuery and Open Sans font, reflecting a standard technical setup for small media sites. However, the lack of active content, privacy policies, and contact information limits its current business visibility and user engagement. From a technical perspective, the site shows basic implementation with HTTPS enabled but lacks advanced security headers and DNSSEC, which are recommended for improved security posture. The presence of a login form on the maintenance page could pose security risks if not properly protected. No analytics or advertising technologies were detected, suggesting minimal tracking or marketing activities at this time. Security-wise, the site benefits from domain transfer protection but misses DNSSEC and security headers, which are important for preventing DNS spoofing and clickjacking attacks. The absence of privacy and cookie policies indicates non-compliance with GDPR and related regulations, which is a critical gap for websites operating in the EU. Overall, the security posture is moderate but requires improvements to meet best practices. Given the current maintenance status and limited content, the overall risk is low but the site lacks transparency and compliance features expected from a professional media outlet. Strategic recommendations include enabling DNSSEC, implementing security headers, publishing privacy and cookie policies, securing the login form, and enhancing content and contact information to improve trust and user experience.

S

Sächsische Landesstiftung Natur und Umwelt

lanu.de

51

The Sächsische Landesstiftung Natur und Umwelt (LaNU) is a government-affiliated foundation focused on the protection, preservation, and education related to nature and the environment within the Free State of Saxony, Germany. The website serves as a comprehensive portal for environmental education, nature conservation projects, funding opportunities, and volunteer engagement programs. It targets citizens, educational institutions, and environmental stakeholders in the region. The foundation positions itself as a key regional player in environmental protection and education, leveraging digital channels and social media to engage its audience. Technically, the website employs a modern tech stack including jQuery, Materialize CSS, Froala Editor, and SystemJS modules, indicating a custom CMS or framework. The site is mobile-optimized, accessible, and SEO-friendly with proper meta tags and structured navigation. Performance is moderate, with room for optimization. Privacy compliance is strong, featuring a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent for tracking technologies like Google Analytics. However, it lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The WHOIS data is minimal but consistent with the website's regional and governmental nature, supporting legitimacy. Overall, the website presents a professional, trustworthy, and compliant digital presence for a regional environmental foundation. Strategic improvements in security headers, incident response transparency, and contact information visibility could further enhance trust and security posture.

O

Otovo GmbH

otovo.at

64

Otovo GmbH is a medium-sized energy sector company specializing in photovoltaic solar solutions for private homeowners primarily in Austria and Europe. The company operates a marketplace model connecting customers with certified local installers, offering both purchase and leasing options for solar systems. Their website demonstrates a high level of digital maturity, utilizing modern technologies such as Next.js, React, and Sanity CMS, hosted likely on Vercel, ensuring fast performance and excellent mobile optimization. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although a dedicated security policy and incident response information are not publicly available. Overall, Otovo presents a professional, trustworthy, and user-friendly online presence aligned with its business goals.

Valerio Novara Music Management is a specialized agency focused on the management and promotion of classical music artists and concerts, with a history dating back over two decades. The company operates primarily in Italy, serving classical musicians and cultural event organizers. The website presents a professional image with detailed concert schedules and artist biographies, targeting classical music audiences and event planners. Technically, the site uses standard web technologies including HTML5, CSS, and JavaScript, with Google Analytics for visitor tracking. However, the site lacks modern CMS frameworks and advanced technical features, resulting in moderate performance and basic mobile optimization. Security posture is limited, with no visible security headers or HTTPS status provided, and no privacy or cookie policies present, indicating compliance gaps. The domain registration is consistent and trustworthy, supporting the legitimacy of the business. Overall, the site is functional and professional but would benefit from enhanced security and privacy compliance measures.

O

Only Stage

onlystage.co.uk

60

Only Stage is a UK-based arts management and production company specializing in representing artists, organizing tours, and producing shows, recordings, documentaries, and competitions. The company also offers consulting and communication services within the performing arts sector. Their website demonstrates a professional and consistent brand presence, targeting performing arts professionals and cultural institutions. Technically, the site is built on WordPress with a modern plugin ecosystem, including event calendars and portfolio management tools, and integrates Iubenda for privacy and cookie compliance. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response contacts are not published. Overall, the website is well-structured, accessible, and compliant with GDPR, reflecting a mature digital presence. The WHOIS lookup failed due to querying an invalid subdomain, but the domain itself appears legitimate and established. Strategic recommendations include publishing security policies, adding vulnerability disclosure mechanisms, and enhancing accessibility.

S

Log in to edit your site

sitemodify.com

60

SiteModify is a technology platform providing website editing services through a secure login portal. The site integrates modern authentication mechanisms including Google OAuth and Google reCAPTCHA Enterprise to protect user access. The platform targets website owners and editors, offering a SaaS model for site management. Technically, the site uses a modern JavaScript stack with jQuery, jQuery UI, and asynchronous module loading, supported by external fonts and analytics services such as Mixpanel. Security posture is generally good with HTTPS enforced and bot protection in place; however, the absence of security headers and privacy policies indicates room for improvement. The lack of WHOIS registration data raises concerns about domain legitimacy and trustworthiness, impacting overall business credibility. No contact or compliance information is visible, limiting transparency and user trust.

A

Associazione Nuove Settimane Barocche

settimanebarocche.com

58

The website settimanebarocche.com represents the Associazione Nuove Settimane Barocche, a cultural organization dedicated to organizing and promoting the Settimane Barocche festival, a baroque music event in Brescia, Italy. The site targets enthusiasts of ancient and baroque music, offering information about the festival's editions, artists, and related cultural events. The business operates as a small-sized cultural entity with a clear focus on music and arts promotion. Technically, the website is built on the Flazio CMS platform, utilizing standard web technologies such as jQuery and Google Fonts. The site is moderately optimized for performance and mobile use, with basic SEO and accessibility features. The hosting provider is likely Flazio, and the site uses HTTPS for secure communication. From a security perspective, the site has HTTPS enabled but lacks advanced security headers and DNSSEC. No cookie consent mechanism is present, and the privacy policy is basic with limited GDPR compliance indicators. Tracking is done via sbbanalytics, indicating moderate user tracking. No critical vulnerabilities or blocking mechanisms were detected. Overall, the site is a professionally presented cultural festival website with moderate technical maturity and security posture. Strategic improvements in privacy compliance, security headers, and cookie consent would enhance trust and compliance with regulations.

V

Accueil

vivreva.com

51

Vivreva.com is a French travel and leisure website targeting retirees, offering stays, tours, cruises, hiking, and Nordic walking activities. The business appears to be small and niche-focused, with a domain age dating back to 2006, indicating an established presence. The website is built on Joomla CMS using the Helix Ultimate template and incorporates common web technologies such as jQuery, Bootstrap, and Font Awesome. Hosting is provided by OVH sas, a reputable provider. The site is mobile optimized and presents a professional design with relevant content for its target audience. However, no explicit privacy policy or terms of service were found, which may impact compliance and user trust. Cookie consent is implemented, showing some GDPR awareness. Security posture is moderate with HTTPS enabled and CSRF tokens in AJAX, but lacks DNSSEC and security headers, which are recommended for improvement. No contact emails, phone numbers, or social media links were detected in the provided content, limiting direct communication channels. Overall, the site is functional and relevant but could benefit from enhanced privacy, security, and contact transparency.

Marcaria.com International, Inc. is a medium-sized technology service provider specializing in international domain and trademark registration services. The company operates globally, serving individuals, small businesses, and multinational firms with a broad portfolio of domain extensions and trademark jurisdictions. Their market position is strong, supported by ICANN accreditation and multiple trust seals, indicating a reputable presence in the domain and trademark registration industry. The website offers comprehensive services including trademark watch, domain management, and hosting, with a user-friendly online interface and multilingual support. Technically, the site is built on ASP.NET WebForms with Kentico CMS, leveraging modern JavaScript libraries and multiple third-party analytics and tracking tools. Security posture is good with HTTPS and error monitoring, though some security headers are not explicitly detected. Privacy and cookie policies are comprehensive and GDPR compliant. However, the absence of WHOIS registrant data and explicit contact information on the site slightly reduces trustworthiness. Overall, the site is professional, well-structured, and trustworthy with room for improvement in transparency and security header implementation.

B

Bankrolls Inc.

bankrolls.com

77

Bankrolls Inc. operates a specialized casino affiliate management platform designed to streamline payments, optimize affiliate earnings, and provide real-time analytics for casino affiliates and iGaming operators. Established in 2003 and headquartered in San Francisco, the company holds a strong market position with over 5,000 affiliates and 100+ casino partners. Their platform leverages AI to optimize offer walls and consolidates payments to simplify affiliate operations. Technically, the website is built on modern frameworks such as React and Next.js, hosted likely on Vercel, and demonstrates excellent performance, mobile optimization, and SEO practices. Security posture is strong with HTTPS, security headers, and reCAPTCHA integration, though DNSSEC is not enabled and explicit security policies or incident response contacts are absent. Overall, the business shows high credibility with verified reviews, consistent WHOIS data, and comprehensive contact information, making it a trustworthy and professional service in the iGaming affiliate sector.

A

Ardevar Ltd

gomblingo.com

66

Gomblingo is an online gambling platform launched in 2022, operated by Ardevar Ltd, targeting Finnish and international users with a multi-language website. The platform offers a wide range of services including online casino games, live casino, sports betting, virtual sports, and e-sports betting, supported by various promotions and bonuses. The website is professionally designed with good navigation and mobile optimization, leveraging modern technologies such as Vue.js and Cloudflare DNS/CDN services. Security posture is solid with HTTPS enforcement and standard security headers, though DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy compliance is supported by a comprehensive privacy policy and cookie consent mechanisms. The domain registration is transparent and consistent with the business claims, enhancing trustworthiness. Overall, the platform is a legitimate, adult-oriented gambling service with moderate to good technical and security maturity.

Y

Yoyospins Casino

yoyospin.com

56

Yoyospins Casino is a relatively new online gambling platform established in 2022, operating under a legitimate license from the Anjouan Gaming Authority in the Union of Comoros. The platform offers a wide range of casino games, live dealer options, and a comprehensive sportsbook, supporting multiple cryptocurrencies and providing various bonuses and promotions to attract adult users interested in gambling and sports betting. The website is professionally designed with good content quality, clear navigation, and excellent mobile optimization, making it accessible and user-friendly for its target audience. Technically, the site uses modern resources such as FontAwesome and Cloudflare DNS, but lacks some advanced security features like DNSSEC and explicit security headers. Security posture is moderate with HTTPS enforced and KYC/AML checks mentioned, but incident response and security policies are not publicly detailed. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism detected. Overall, the platform demonstrates a moderate to good level of business credibility and technical maturity, suitable for its niche market.

A

ADN Tourisme

offices-de-tourisme-de-france.org

44

The website represents the Fédération Nationale des Offices de Tourisme de France, now merged into ADN Tourisme, serving as an informational and intranet access portal for members. The business operates as a national federation supporting institutional tourism offices across France, targeting members and stakeholders in the tourism sector. The site content is minimal, primarily redirecting users to the new ADN Tourisme websites for further engagement. Technically, the website is built with basic HTML and CSS, with no detected CMS or advanced frameworks. It is mobile responsive and uses HTTPS, but lacks modern security headers and advanced SEO or accessibility features. The site does not collect user data or contain forms, indicating low digital maturity. Security posture is moderate due to HTTPS usage but is weakened by the absence of security headers and lack of privacy or cookie policies. The WHOIS data is malformed and unavailable, which reduces domain trustworthiness and raises concerns about registration transparency. No contact or incident response information is provided. Overall, the website is functional for its limited purpose but requires improvements in security, privacy compliance, and transparency to enhance trust and user confidence.

P

Picto Access par APF France handicap

pictoaccess.fr

64

Picto Access, operated by APF France handicap, is a specialized provider of digital accessibility solutions aimed at improving inclusion and compliance for public establishments, workplaces, housing, and transport networks primarily in France. The company leverages modern web technologies including Next.js and Material-UI, hosted on OVH with Cloudflare CDN, ensuring a performant and secure user experience. The website demonstrates a strong security posture with HTTPS, security headers, and use of Google reCAPTCHA to protect forms. Privacy compliance is well addressed with clear privacy and cookie policies, and GDPR adherence is evident. Overall, the site is professional, trustworthy, and well-positioned in the accessibility technology market.

D

DICE

dice.fm

61

DICE is a digital platform specializing in live music event ticketing and personalized event recommendations. Founded in 2013, it offers a mobile app and website for users to discover and purchase tickets for concerts, festivals, and club nights. The platform targets music fans and event goers, positioning itself as a convenient and upfront pricing alternative in the live event ticketing market. Technically, the site leverages modern web technologies including React and Next.js, hosted with Cloudflare DNS and CDN services, and integrates multiple marketing and analytics tools such as Google Analytics, Braze, and Branch.io. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though some security headers are not explicitly detected and no public security policy or incident response contacts are published. Privacy compliance is partial, with a cookie consent mechanism via CookieHub but no explicit privacy policy or terms of service found in the analyzed content. Overall, the website is professional, well-designed, and technically mature, but could improve transparency and compliance documentation.