Security Directory

A

Ajitora.asia

ajitora.asia

49

Ajitora.asia presents itself as a small-scale website branded as "The Asia Tiger from Cyberspace," with content dating back to 2015. The site uses WordPress with the Divi theme and Yoast SEO plugin, indicating a moderate level of digital maturity. The technical infrastructure is standard for small business or personal websites, with some modern JavaScript usage and a cookie consent mechanism in place. However, the absence of a privacy policy and terms of service pages, as well as lack of visible contact information, limits its compliance and business credibility. Security posture is basic with HTTPS enabled but no advanced security headers detected, and no vulnerability disclosure or incident response information available. Overall, the site is accessible without WAF or security challenges, but improvements in privacy compliance and security best practices are recommended.

G

Go.Asia

go.asia

54

Go.Asia is a non-profit digital platform dedicated to promoting social good, charity projects, and community engagement across Asia. The website serves as a hub for charity profiles, inspirational stories, and project information aimed at encouraging public involvement in social causes. The platform targets a general audience interested in philanthropy and community development. Technically, the site is built on WordPress using the Extra theme and integrates Google Analytics and Tag Manager for visitor tracking. The site is mobile-optimized with a moderate performance profile and basic accessibility features. Security-wise, the site enforces HTTPS but lacks advanced security headers and a vulnerability disclosure mechanism. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a cookie consent mechanism. WHOIS data is unavailable due to query failure, but the site appears legitimate based on content and active maintenance. Overall, Go.Asia presents a professional and trustworthy platform for non-profit engagement with room for security and privacy improvements.

P

Private by Design, LLC

netmission.asia

54

NetMission.Asia is a well-established non-profit organization focused on empowering youth in the Asia-Pacific region through education and advocacy in Internet governance and digital rights. The website serves as a hub for their flagship program, NetMission Academy, along with various youth forums, policy reports, and ambassador programs. The organization has a credible market position supported by a domain registered since 2008 and consistent business information. Technically, the site is built on WordPress with modern plugins and frameworks, hosted behind Cloudflare DNS, and uses HTTPS with Google Analytics and reCAPTCHA for user interaction and security. However, there are areas for improvement in security posture, such as enabling DNSSEC and implementing security headers. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional, content-rich, and trustworthy, serving a general audience safely.

Y

Youth Mobility Index | YMI.Asia | Young Asians Setting Out to Change the World

ymi.asia

9

The website 'Youth Mobility Index | YMI.Asia' serves as a platform aimed at young Asians focused on mobility and social change initiatives. The site is built on WordPress using the Divi theme, indicating a moderate level of digital maturity with a professional design and basic mobile optimization. However, the absence of visible contact information, privacy policies, and terms of service pages limits its transparency and trustworthiness. Security posture is moderate with no detected security headers or advanced protections, and the WHOIS data is privacy-protected, which is common but reduces domain registration transparency. Overall, the site is accessible and functional but would benefit from enhanced privacy compliance and security practices.

W

Wiener Linien

wienerlinien.at

78

Wiener Linien is the primary public transportation provider in Vienna, Austria, offering services including subway (U-Bahn), tram (Bim), bus, and alternative mobility options. The company holds a strong market position as the essential mobility provider for residents and visitors of Vienna. The website reflects a mature digital presence with comprehensive content tailored to its audience, including detailed service information and user support. Technically, the site employs modern web technologies and integrates advanced analytics and monitoring tools such as Dynatrace and Piwik PRO, ensuring performance monitoring and user experience optimization. Security posture is robust with enforced HTTPS, multiple security headers, and cookie consent mechanisms, although a dedicated security policy and incident response contact information are not explicitly published. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations including GDPR.

Ö

Österreichisches Umweltzeichen

umweltzeichen.at

51

The Österreichisches Umweltzeichen website represents a well-established Austrian governmental environmental certification program focused on promoting sustainable products, tourism, education, and culture. It enjoys strong institutional backing from the Bundesministerium für Land- und Forstwirtschaft, Klima- und Umweltschutz, Regionen und Wasserwirtschaft (BMLUK), positioning it as a trusted national eco-label authority. The site offers comprehensive content, clear navigation, and professional design, targeting businesses, educational institutions, and consumers interested in sustainability within Austria. Technically, the website employs modern web technologies including Bootstrap and Matomo analytics, ensuring good mobile responsiveness and accessibility. Performance is moderate with no critical technical issues detected. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of explicit security headers and incident response information suggests room for improvement. Privacy compliance is generally good, supported by a comprehensive privacy policy, but lacks a cookie consent mechanism. Overall, the site demonstrates a high level of trustworthiness and professionalism, with no indications of malicious activity or content safety concerns. Strategic recommendations include implementing cookie consent, publishing a security policy and incident response contacts, and enhancing security headers to further strengthen the security posture.

A

Art Fest

siff.bg

44

The Sofia International Film Festival (SIFF) website serves as the official digital presence for an established cultural event in Bulgaria, focusing on film screenings, festival news, and related activities. The site targets film enthusiasts, industry professionals, and cultural audiences, providing comprehensive information about the festival's schedule, awards, and partners. The business operates in the media sector with a medium-sized footprint and a history dating back to 2001. Technically, the website is built on the qLibra CMS platform and employs common web technologies such as jQuery and Bootstrap. It integrates Google Analytics and Facebook Pixel for tracking and Google Adsense for advertising. Hosting is provided by a Bulgarian hosting provider, inferred from the nameservers. The site is mobile-optimized with a moderate performance profile and basic SEO and accessibility features. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms aligned with GDPR requirements. However, it lacks explicit security headers such as Content-Security-Policy and X-Frame-Options, which could enhance protection against common web threats. No sensitive data exposure or vulnerabilities were detected in the content. The WHOIS data is privacy protected, consistent with GDPR, and the domain appears legitimate and aligned with the website's cultural mission. Overall, the website presents a professional and trustworthy front for the film festival, with room for improvement in security headers and contact transparency. The risk profile is low, but enhancing security best practices and providing clearer contact information would strengthen trust and compliance.

S

Solothurner Filmtage

solothurnerfilmtage.ch

57

Solothurner Filmtage is a well-established Swiss film festival dedicated to showcasing Swiss cinema and supporting filmmakers. The website serves as a comprehensive platform for festival programming, industry offerings, media information, and ticketing services. It targets film professionals, media representatives, and the general public interested in Swiss film culture. The business model revolves around event organization, cultural promotion, and partnerships with sponsors and media entities. Technically, the website employs modern JavaScript libraries and analytics tools, ensuring good performance and mobile optimization. Security posture is strong with HTTPS and security headers, though it lacks visible cookie consent mechanisms and a published security policy. Overall, the site is professional, trustworthy, and compliant with GDPR in terms of privacy policy availability, but could improve transparency on cookie usage and incident response.

Z

Zurich Film Festival

zff.com

60

The Zurich Film Festival (ZFF) is a well-established non-profit cultural organization that hosts an internationally recognized film festival in Zurich, Switzerland. The website serves as a comprehensive platform for festival information, ticket sales, event schedules, and merchandise. It targets film enthusiasts, industry professionals, and cultural supporters, offering a rich program of auteur films, side events, and exclusive memberships. The festival enjoys strong partnerships with reputable brands such as UBS, Mercedes-Benz, and NZZ, reinforcing its market position. Technically, the website is built on modern frameworks including Next.js and React, with integration of Shopify for e-commerce and DatoCMS for content management. It leverages Cloudflare DNS and CDN services, ensuring fast performance and good mobile optimization. The site implements privacy compliance mechanisms such as Cookiebot for cookie consent and maintains comprehensive legal documentation. Analytics and marketing tools like Google Analytics, Facebook Pixel, and Google Tag Manager are used with user consent. From a security perspective, the site enforces HTTPS, uses clientTransferProhibited domain status, and employs cookie consent for privacy. However, DNSSEC is not enabled, and no explicit security.txt or incident response contacts are published. No vulnerabilities or exposed sensitive data were detected. Overall, the security posture is strong but could be improved with additional DNS security and public vulnerability disclosure. The overall risk assessment is low, with the website demonstrating professionalism, trustworthiness, and compliance with GDPR. Strategic recommendations include enabling DNSSEC, publishing a security.txt file, and enhancing security headers. These steps will further strengthen the site's security and trustworthiness for users and partners.

F

Filmarchiv Austria

filmarchiv.at

54

Filmarchiv Austria is Austria's national film archive and cultural institution dedicated to the collection, documentation, preservation, and presentation of the country's film heritage. The organization operates a professional website offering film screenings, archival access, virtual exhibitions, and educational content targeting film enthusiasts, researchers, and the general public. The website demonstrates a high level of digital maturity, employing modern web technologies such as the Elixir Phoenix framework, Alpine.js, and Swiper.js, alongside privacy tools like Klaro for cookie consent. The site is well-structured, mobile-optimized, and provides rich multimedia content including videos and images. Security posture is solid with HTTPS enforcement and CSRF protection, though some security headers could be improved. Privacy compliance is strong with a clear privacy policy and cookie consent mechanism. No WHOIS data was available from NIC.AT, likely due to privacy protection, which is reasonable for this type of institution. Overall, the website is trustworthy, professional, and serves its cultural mission effectively.

D

Diagonale – Festival des österreichischen Films

diagonale.at

52

Diagonale – Festival des österreichischen Films is a prominent Austrian cultural festival dedicated to showcasing Austrian cinema. The website serves as a comprehensive platform for festival programming, film awards, industry networking, and educational film mediation. It targets film professionals, enthusiasts, and the general public interested in Austrian film culture. The organization maintains a strong market position as a leading film festival in Austria with significant governmental and cultural sponsorships. Technically, the website is built on WordPress with modern plugins such as WPML for multilingual support and Real Cookie Banner Pro for GDPR-compliant consent management. The site demonstrates good performance, mobile optimization, and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site is professional, trustworthy, and compliant with privacy regulations, making it a reliable digital presence for the festival.

B

Berlin International Film Festival

berlinale.de

73

The Berlin International Film Festival website serves as the official digital presence for one of the world's leading film festivals. It provides comprehensive information about the festival's profile, programming, awards, partners, and news, targeting film professionals, media, and enthusiasts globally. The site is well-funded by government bodies and principal partners, reflecting its cultural significance and large-scale operations. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and VideoJS for media playback, with a focus on responsive design and accessibility. Analytics are handled via Etracker, with a cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved and formal security policies published. Overall, the site demonstrates high professionalism, trustworthiness, and content quality, supporting the festival's prestigious market position.

DER STANDARD is a prominent Austrian media company providing news and editorial content primarily in German. The website analyzed is a consent management page supporting GDPR compliance, reflecting the company's commitment to privacy and user choice. The business operates a subscription and advertising-based model targeting German-speaking audiences in Austria and Germany. The site demonstrates a professional digital presence with modern JavaScript technologies and tracking mechanisms for analytics and advertising. Security posture is generally strong with HTTPS and consent management, though explicit security headers and incident response information are absent. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but does not detract from the site's legitimacy given its established brand and content quality.

A

Alamode Film

bachmannfilm.com

55

Alamode Film is a specialized film distribution and production company focused on high-quality and sophisticated cinema releases, primarily serving German-speaking audiences. The company maintains a professional online presence with detailed film promotion, social media engagement, and a dedicated e-commerce platform for DVD sales. Their market position is niche but well-defined, targeting cinephiles and cultural film enthusiasts. Technically, the website is built on WordPress with modern plugins and APIs, offering a responsive and content-rich experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some advanced security headers and policies could be improved. Overall, the site is trustworthy, compliant with GDPR, and free from suspicious content or vulnerabilities.

D

D'Filmakademie

dfilmakademie.lu

52

D'Filmakademie is a Luxembourg-based film academy dedicated to promoting cinema and audiovisual arts within the country. It organizes key cultural events such as the Lëtzebuerger Filmpräis, supports film professionals, and fosters community engagement through various activities and membership programs. The organization holds a significant position in Luxembourg's cultural landscape, supported by official sponsors including the Chamber of Commerce Luxembourg, CNA, and FilmFund Luxembourg. Technically, the website is built on WordPress, utilizing modern plugins and frameworks such as WPBakery Page Builder, Smart Slider 3, and Contact Form 7. It employs standard web technologies including jQuery, Tailwind CSS, and integrates Google Analytics and Tag Manager for analytics. Hosting is provided by OVH, a reputable provider. The site is mobile-optimized with good SEO practices and a professional design. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and publicly available security policies or incident response documentation. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the hosting provider and shows no suspicious patterns, supporting the legitimacy of the domain. Overall, the website demonstrates a strong commitment to privacy compliance and user experience, with clear contact information and trust indicators. Strategic improvements include enhancing security headers, publishing security policies, and adding vulnerability disclosure mechanisms to further strengthen the security posture.

N

novomind

novomind.com

65

novomind AG is a technology company specializing in software solutions for digital commerce and customer service. Their portfolio includes products for digital commerce platforms, customer service software, AI agents, and data platforms, targeting businesses seeking to enhance their digital sales and customer interaction capabilities. The company positions itself as a comprehensive provider offering both software products and professional services such as integration, long-term support, and custom software development. The website reflects a professional and modern digital presence, indicating a medium-sized enterprise based in Germany with a clear B2B focus. Technically, the website is built on WordPress using the Elementor page builder, incorporating modern web technologies such as jQuery and Google Tag Manager for analytics and marketing. The site is mobile-optimized and includes GDPR-compliant cookie consent management via Usercentrics. Performance is moderate with good SEO and accessibility basics, though some improvements in accessibility could be made. From a security perspective, the site enforces HTTPS and uses consent management for tracking scripts, but lacks explicit published security policies or incident response information. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain reduces the overall trust score, as it prevents verification of domain ownership and age, which is unusual for a professional business domain. Overall, novomind AG presents a trustworthy and professional digital commerce software provider with a solid technical foundation and good privacy compliance. Strategic recommendations include enhancing security transparency, publishing incident response and vulnerability disclosure policies, and improving WHOIS data transparency to strengthen trust and compliance posture.

B

BVMW - Bundesverband mittelständische Wirtschaft

bvmw.de

56

BVMW (Bundesverband mittelständische Wirtschaft) is a prominent German association representing small and medium-sized enterprises (SMEs) and self-employed professionals. The organization focuses on networking, advocacy, and providing support services to the Mittelstand sector in Germany. Their website reflects a mature digital presence with comprehensive content, professional design, and clear navigation tailored to their target audience of SMEs. The business model centers on membership services, events, and industry representation, positioning BVMW as a leading voice for the German Mittelstand.

E

ECON TEL GmbH

econ-tel.de

67

ECON TEL GmbH is a well-established German company specializing in sales outsourcing and customer acquisition services primarily for the technical and construction-related industries. With over 30 years of experience, they provide tailored solutions including telephone acquisition, LinkedIn networking, market analysis, and customer management to help SMEs and mid-sized companies expand their market reach and increase sales. The company positions itself as a trusted partner with a strong focus on transparency, real-time reporting, and personalized service teams. Technically, the website is built on the Webflow CMS platform, leveraging modern web technologies such as jQuery and embedded Vimeo videos. The site is well-optimized for mobile devices, offers good accessibility features, and includes a robust cookie consent mechanism via CookieFirst. Hosting is managed through Webflow's CDN, ensuring fast load times and reliable performance. From a security perspective, the site enforces HTTPS and employs cookie consent management, but lacks explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data indicates consistent domain registration practices with no privacy protection, supporting the legitimacy of the business. Overall, ECON TEL's digital presence reflects a professional, trustworthy, and mature business with strong compliance to privacy regulations and a solid technical foundation. Strategic improvements could include publishing a formal security policy, adding vulnerability disclosure information, and enhancing security headers to further strengthen their security posture.

K

Kanne Brottrunk

kanne-brottrunk.de

42

Kanne Brottrunk is a German company specializing in the production and sale of organic fermented bread drink products, with a history spanning approximately 35 years. The website targets health-conscious consumers interested in vegan and organic beverages. The business operates primarily in the retail sector, emphasizing natural and alcohol-free products. The website demonstrates consistent branding and good content quality, supporting its market position as an established organic health beverage provider. Technically, the website employs modern technologies including Google Tag Manager, Cookiebot for GDPR-compliant cookie management, and Google reCAPTCHA for bot protection. The site is served over HTTPS, ensuring secure communication. While no explicit CMS or hosting provider is identified, the site shows moderate performance and good mobile optimization. SEO and accessibility features are basic to good. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms aligned with GDPR. However, some common security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected, representing an area for improvement. No vulnerabilities or exposed sensitive data were found. The site lacks a published security policy or incident response contact, which could enhance trust and compliance. Overall, the website is safe, professional, and trustworthy, with no adult or questionable content. The domain registration data is consistent with the business claims, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and providing clearer contact information to improve user trust and compliance.

O

OFFICE Partner

office-partner.de

68

OFFICE Partner is a German-based e-commerce retailer specializing in office technology and supplies, including printers, monitors, and consumables. The website targets business customers and office supply purchasers within Germany, offering convenient payment options such as invoice and installment purchases. The company appears to have been established around 2014 and maintains a consistent brand presence with integration of trusted third-party services like Trusted Shops and Amazon Payments. Technically, the website is built on the Shopware CMS platform and utilizes modern JavaScript libraries and analytics tools including Google Tag Manager, econda, and Microsoft UET. The site demonstrates good mobile optimization and accessibility features, with a moderate performance profile. Hosting is provided via Creoline Server, as indicated by the nameservers. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy compliance is partial, with cookie consent present but no visible privacy or terms of service pages. Overall, OFFICE Partner presents a professional and trustworthy e-commerce platform with room for improvement in privacy disclosures and security transparency. Strategic enhancements in these areas would strengthen compliance and customer trust.

H

Hohenzollern Apotheke

hohenzollern-apotheke.de

50

Hohenzollern Apotheke operates as a local pharmacy business with three physical locations in Münster, Germany, providing retail pharmacy services and customer consultation. The website targets local customers seeking pharmaceutical products and services, emphasizing extended opening hours and good customer service. The business model is retail-focused with a clear local market presence. Technically, the website employs modern web technologies such as Google Tag Manager, Cookiebot for cookie consent management, and Google reCAPTCHA for bot protection. The CMS appears to be ProcessWire, and hosting is managed via DomainControl nameservers, likely GoDaddy. The website is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit policies are missing. Privacy compliance is partial, with a cookie consent banner but no visible privacy policy or terms of service pages. No contact information or data protection officer details are found, which limits transparency. Overall, the website is functional and professional but would benefit from enhanced privacy and security disclosures to improve trust and compliance.

S

Stadtwerke Münster

stadtwerke-muenster.de

64

Stadtwerke Münster is a large regional public utility provider based in Münster, Germany, offering essential services such as energy supply, public transportation, water, and waste management. The company positions itself as a local solution provider addressing global challenges, targeting residents and businesses within the Münster region. The website reflects a professional and consistent brand image with good content quality and user experience tailored for its audience. Technically, the site leverages modern technologies including Pimcore CMS, Google Tag Manager, and Cookiebot for consent management, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive cookie policy and GDPR-aligned consent management. Overall, the site demonstrates high trustworthiness and business credibility, with room for enhancements in security policy transparency and incident response disclosures.

L

lanius.com

lanius.com

73

lanius.com is a professional e-commerce website specializing in sustainable and fair fashion since 1999. The company positions itself as a medium-sized retailer focused on organic and ethically produced clothing, targeting environmentally conscious consumers. The website is built on the Shopify platform, leveraging modern web technologies and integrations with marketing and analytics tools such as Klaviyo and Facebook Pixel. The site demonstrates strong digital maturity with excellent design, mobile optimization, and user experience. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response contacts are not found. The absence of WHOIS data for the domain reduces trustworthiness slightly but does not detract significantly from the professional presentation and compliance indicators. Overall, the website is a credible and well-maintained online retail platform with a focus on sustainability.

R

Remmers

remmers.de

71

Remmers GmbH is a well-established family-owned manufacturing company specializing in innovative system solutions for the construction and woodworking industries. With over 75 years of tradition, the company offers a broad portfolio including building protection, wood coatings, flat roof solutions, and tools. The website reflects a mature digital presence with comprehensive product information, strong branding, and multi-language support across 21 countries. Technically, the site leverages modern JavaScript libraries, SAP Commerce platform, and cloud hosting, ensuring good performance and mobile optimization. Security posture is solid with HTTPS, secure login forms, and consent management, though explicit security headers could be improved. The absence of WHOIS data is a minor concern but does not detract significantly from the overall trustworthiness given the professional content and certifications. Strategic recommendations include enhancing security headers, publishing incident response contacts, and establishing a vulnerability disclosure policy.

R

Rapunzel Naturkost GmbH

rapunzel.de

46

Rapunzel Naturkost GmbH is a well-established German company specializing in the production and retail of organic and fair trade food products since 1974. The company operates both B2B and B2C channels, including a webshop and a visitor center called Rapunzel Welt. Their market position is strong within the organic food sector, supported by certifications such as Bio and Demeter, and a dedicated fair trade program called HAND IN HAND. The website reflects a mature digital presence with comprehensive product information, recipes, and sustainability initiatives targeting consumers interested in organic lifestyles. Technically, the website uses a modern tech stack including Bootstrap, jQuery, Font Awesome, and integrates a consent management platform (Usercentrics) alongside Google Tag Manager for analytics. The site is mobile optimized, accessible, and SEO friendly, though performance is moderate. Security posture is good with HTTPS enforced and privacy compliance mechanisms in place, but lacks explicit security policies or vulnerability disclosure channels. Overall, the security posture is solid with no visible vulnerabilities or exposed sensitive data. The WHOIS data aligns with the business claims, showing a consistent and legitimate domain registration. The website is safe for general audiences with no adult or questionable content detected. Strategically, Rapunzel Naturkost should enhance its security transparency by publishing a security policy and incident response contacts, implement security headers, and consider a vulnerability disclosure program to further strengthen trust and compliance.

I

ibau GmbH

ibau.de

55

ibau GmbH operates a specialized information service focused on tenders and contracts within the construction industry in Germany. The company provides subscription-based access to relevant business opportunities, targeting decision makers in the construction sector. The website is professionally designed, with good content quality and clear navigation, catering to business professionals seeking procurement information. Technically, the site employs modern JavaScript libraries, Google Tag Manager, Cookiebot for consent management, and integrates marketing and analytics tools such as HubSpot and Hotjar. The site is mobile optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response information are not published. The domain registration uses privacy and brand protection name servers, which is typical for such businesses and does not raise concerns. Overall, the website is trustworthy, compliant with GDPR, and provides a professional user experience.

E

EGN Entsorgungsgesellschaft Niederrhein mbH

entsorgung-niederrhein.de

60

EGN Entsorgungsgesellschaft Niederrhein mbH is a regional full-service provider specializing in waste disposal and recycling services for commercial, industrial, municipal, and private sectors. The company emphasizes sustainable and resource-efficient circular economy solutions, offering a broad range of services including container rental, construction site services, hazardous waste disposal, and event services. Their market position is strong within the Niederrhein region, supported by a network of subsidiaries and partners that enhance their service offerings. Technically, the website is built on modern frameworks such as React and Next.js, ensuring fast performance, mobile optimization, and good SEO practices. The infrastructure appears professionally managed with no signs of blocking or WAF interference, and the site includes a cookie consent mechanism compliant with GDPR requirements. From a security perspective, the site enforces HTTPS, includes standard security headers, and avoids exposing sensitive data. However, explicit security policies and incident response information are not published, representing an area for improvement. The absence of a vulnerability disclosure or security.txt file also suggests opportunities to enhance transparency and trust. Overall, the website presents a professional, trustworthy, and well-maintained digital presence aligned with the company's business objectives. Strategic recommendations include publishing detailed security and incident response policies, adding vulnerability disclosure mechanisms, and explicitly listing data protection officer contacts to strengthen compliance and user trust.

E

Entsorgungsgesellschaft Krefeld GmbH & Co. KG

egk.de

62

The Entsorgungsgesellschaft Krefeld GmbH & Co. KG (EGK) is a regional municipal waste management and environmental services company based in Krefeld, Germany. The company operates a unique combination of waste incineration and sewage treatment plants, generating electricity and district heating for thousands of households. Additionally, EGK maintains an accredited laboratory for water and waste analysis and serves as a significant local employer with approximately 250 staff members. The website reflects a well-structured and professional digital presence, targeting local residents, businesses, and potential employees. It emphasizes environmental responsibility, energy production, and community engagement. Technically, the site is built on modern frameworks such as Next.js and React, with integrations for cookie consent (Usercentrics) and analytics (Google Tag Manager, Microsoft Application Insights). Security best practices are observed with HTTPS enforcement and security headers, although explicit security policies and incident response information are not published. Overall, the site is trustworthy, compliant with GDPR, and provides clear information about services and career opportunities.

D

Digital Campus Zollverein

campus-zollverein.de

47

Digital Campus Zollverein is an educational and innovation hub based in Germany, focusing on digital transformation and technology development. The website presents a professional and well-structured platform built on WordPress with the Divi theme, targeting students, researchers, and digital professionals. The business model revolves around providing digital education, innovation projects, and community engagement at the Zollverein site. Technically, the site uses modern web technologies and plugins, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is credible and trustworthy but would benefit from enhanced privacy and security measures.

W

Westfälische Hochschule

w-hs.de

60

Westfälische Hochschule is a German university of applied sciences with campuses in Gelsenkirchen, Bocholt, and Recklinghausen. The institution focuses on practical education in engineering, business, and natural sciences, offering degree programs, research, and cooperation with industry partners. The website is built on TYPO3 CMS and features a modern, accessible design with active news and event updates. Security posture is adequate with HTTPS enabled but lacks visible security headers and explicit privacy or cookie policies. No contact emails or phone numbers were found in the provided content, which may impact user trust and compliance. WHOIS data confirms the domain's legitimacy and institutional affiliation. Overall, the website is professional and trustworthy but could improve privacy compliance and security best practices.

S

Stadt Gelsenkirchen

gelsenkirchen.de

70

The website www.gelsenkirchen.de serves as the official digital portal for the city government of Gelsenkirchen, Germany. It provides extensive information and services related to municipal administration, education, culture, tourism, social services, and citizen engagement. The site targets residents, businesses, and visitors, offering a comprehensive range of online services and up-to-date news. The business model is that of a public sector entity focused on transparent communication and service delivery to its community. The website demonstrates consistent branding and high content quality, reflecting its authoritative position as a government resource. Technically, the site is built on ASP.NET WebForms with a modern frontend leveraging jQuery, Leaflet for mapping, Bootstrap grid for layout, and Klaro for cookie consent management. The infrastructure appears stable and moderately performant, with good mobile optimization and accessibility features. The use of HTTPS and cookie consent mechanisms indicates a mature approach to privacy and security compliance. From a security perspective, the site enforces HTTPS and employs secure form handling via ASP.NET viewstate. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident and should be implemented to enhance protection. No vulnerabilities or exposed sensitive data were detected. Privacy policies and terms of service are clearly linked and comprehensive, supporting GDPR compliance. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and maintaining up-to-date third-party libraries to sustain security posture and trustworthiness.

V

VEXO Lichttechnik GmbH & Co. KG

vexo-licht.de

42

VEXO Lichttechnik GmbH & Co. KG is a German company specializing in manufacturing and designing outdoor lighting solutions, including object lighting, park and square lighting, and municipal lighting concepts. The company targets public and municipal sectors primarily within Germany, positioning itself as a regional and national supplier of high-quality outdoor lighting products. The website content is primarily in German and focuses on showcasing their lighting products and services with a basic but functional design. Technically, the website employs older JavaScript libraries such as jQuery 1.10.0, along with Slick Carousel and Fancybox for UI elements. The site shows basic mobile optimization and moderate performance but lacks modern CMS identification or advanced frameworks. There is no evidence of analytics or tracking tools, and no social media integration is visible. The hosting appears to be managed via servers indicated by the domain's nameservers. From a security perspective, the site lacks visible HTTPS confirmation and security headers, which lowers its security posture. The use of outdated JavaScript libraries may expose it to vulnerabilities. Privacy compliance is minimal, with a privacy policy page present but no cookie consent mechanism or terms of service found. Contact information is not directly visible on the homepage, which may affect user trust and compliance. Overall, the website is functional but basic, with moderate business credibility but room for improvement in security, privacy compliance, and technical modernization. Strategic recommendations include implementing HTTPS, updating libraries, adding cookie consent, and improving contact transparency to enhance trust and compliance.

S

Stackbox GmbH

stackbox.co

71

Stackbox GmbH is a specialized software solutions and consulting company focused on the eMobility sector, primarily serving businesses in energy and transportation. The company offers tailored services including business process design, IT solution architecture, system integrations, and operations support. Their market position is strengthened by a decade of experience and notable clients such as IONITY and Hubject. The website reflects a professional and consistent brand image with clear communication of services and team expertise. Technically, the website employs modern frameworks like Bootstrap and integrates analytics tools such as Amplitude with session replay capabilities, indicating a mature digital infrastructure. The site is mobile-optimized and well-structured, though some accessibility features could be enhanced. Performance is moderate with good SEO practices. From a security perspective, the site uses HTTPS and cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or sensitive data exposures were detected. Privacy compliance is strong with a comprehensive GDPR-aligned privacy policy. Overall, the website presents a low-risk profile with strong business credibility and good privacy practices. Strategic improvements in security headers, incident response transparency, and accessibility would further enhance trust and compliance.

O

Okeanos Smart Data Solutions GmbH

okeanos.ai

55

Okeanos Smart Data Solutions GmbH is a small German company specializing in water and environmental data solutions aimed at climate adaptation and hydrological hazard management. Their services include consulting, research collaboration, and tailored technological solutions for water cycle understanding, early detection of natural hazards, blue-green infrastructure monitoring, and wastewater treatment optimization. The company targets water management professionals, municipalities, and research institutions. The website is professionally designed with clear navigation and mobile optimization, reflecting a moderate level of digital maturity. The technical stack includes Bootstrap and several JavaScript libraries, but no CMS or advanced analytics tools were detected. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Contact information is clearly presented, enhancing business credibility. Overall, the website is trustworthy and functional but would benefit from improved privacy and security practices.

Verizon is a leading telecommunications company in the United States, offering a broad range of services including wireless mobile plans, home internet solutions such as Fios and 5G, TV, and phone services. The website reflects Verizon's strong market position with a professional, well-structured, and content-rich digital presence targeting both consumers and businesses. The site is optimized for mobile and desktop platforms, leveraging advanced technologies such as Adobe Experience Manager and various analytics tools to deliver a seamless user experience. Security posture is robust with HTTPS enforcement, security headers, and secure form handling, although explicit security policy and incident response information are not publicly detailed. The absence of WHOIS data is likely due to registry privacy or query restrictions rather than malicious intent, given the brand's legitimacy and extensive online footprint. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations including GDPR.

K

K-TEL Communications GmbH

ktel.de

49

K-TEL Communications GmbH is a German telecommunications consulting and service company with over 20 years of experience. They specialize in providing independent advice and transparent brokerage for business IT and telecommunications infrastructure, targeting a broad range of clients from global enterprises to regional startups. Their key services include strategic consulting, contract management, cloud solutions, mobile services, and smart IoT and 5G network deployments. The company positions itself as a trusted partner for modern, secure, and scalable communication solutions. Technically, the website is built on WordPress with a modern tech stack including jQuery and various plugins for user interaction, cookie compliance, and content management. Hosting appears to be with a German provider, and the site demonstrates good mobile optimization and SEO practices. The site uses HTTPS with strong SSL configuration and implements GDPR-compliant cookie consent mechanisms, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses cookie consent management but lacks explicit security headers and a public incident response or vulnerability disclosure policy. No vulnerabilities or exposed sensitive data were detected. WHOIS data is consistent with the business claims, and no privacy protection obscures registrant information, supporting legitimacy. Overall, the website is professional, secure, and compliant with privacy regulations, making it a trustworthy digital presence for K-TEL Communications GmbH. Strategic improvements could include adding security headers, publishing an incident response contact, and establishing a vulnerability disclosure policy to enhance security posture further.

G

GELSENWASSER AG

gelsenwasser.de

65

Gelsenwasser AG is a large German infrastructure company specializing in sustainable water supply, wastewater management, energy procurement and distribution, digital infrastructure, and circular economy solutions. The company targets municipalities, businesses, and consumers primarily in Germany, positioning itself as a regional leader with a strong sustainability focus. The website is professionally designed, mobile-optimized, and provides comprehensive information about the company's business fields, services, and customer offerings. Technically, the site uses TYPO3 CMS, integrates Google Tag Manager for analytics, and employs a robust cookie consent mechanism ensuring GDPR compliance. Accessibility features such as Eye-Able tools enhance usability. Security posture is good with HTTPS enforced and no visible vulnerabilities, though the site lacks a dedicated security policy or incident response information. Overall, the website reflects a mature digital presence with strong business credibility and compliance adherence.

Südtiroler Gemeindenverband Genossenschaft is a regional government cooperative representing municipalities and district communities in South Tyrol, Italy. The organization provides a variety of administrative, informational, and digital services to its members and the public, including GIS mapping, event coordination, and digital communication platforms. The website is professionally designed, well-structured, and targets local government officials and residents. It maintains a consistent brand presence and offers comprehensive contact and service information. Technically, the website is built on ASP.NET Web Forms with a mix of legacy and modern JavaScript libraries such as jQuery and Leaflet. It employs HTTPS with good SSL configuration and integrates Matomo analytics with user consent mechanisms. Accessibility and mobile optimization are well addressed, and the site includes privacy and cookie policies compliant with GDPR. Security posture is solid with HTTPS enforcement and no obvious vulnerabilities in the frontend code. However, some security headers are missing, and the jQuery version is outdated, which could pose risks. The absence of explicit security policies or incident response contacts is a gap. WHOIS data is missing or unavailable, which slightly reduces trust but does not contradict the legitimacy suggested by the website content and affiliations. Overall, the site is trustworthy, secure, and professionally maintained, serving an essential government function. Strategic improvements in security headers, updated libraries, and transparency in domain registration would enhance trust and security further.

W

WpOpal

wpopal.com

58

WpOpal is a specialized WordPress theme provider established in 2014, offering a wide range of free and premium themes targeting WordPress users and businesses seeking professional website designs. The company holds an Envato Power Elite Author status, indicating a strong market position and credibility within the WordPress theme ecosystem. Their business model revolves around theme sales and membership access, supported by demos, documentation, and customer support services. Technically, the website is built on WordPress 6.4.3 with modern plugins such as Elementor and Easy Digital Downloads, hosted on Bluehost with Cloudflare DNS, reflecting a mature digital infrastructure. The site demonstrates good mobile optimization, SEO practices, and a professional design, although performance is moderate and accessibility is basic. Security posture is adequate with HTTPS and domain transfer protection but lacks DNSSEC and security headers, which are recommended for enhancement. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Overall, the website is trustworthy and professional but could improve in privacy and security transparency.

S

Sterzing Südtirol: Urlaub in der Alpinstadt mit Charme

sterzing.com

52

The website www.sterzing.com is a professionally designed tourism portal focused on promoting the Sterzing region in South Tyrol, Italy. It provides comprehensive information about local attractions, events, accommodations, and activities targeting tourists and visitors interested in mountain vacations. The site uses a modern CMS (Consisto CMS) and integrates common web technologies including Google Tag Manager and Google Analytics for tracking and marketing purposes. The content is well-structured with clear navigation and good mobile optimization, supporting a positive user experience. However, the absence of WHOIS data raises concerns about domain registration legitimacy, which should be verified to ensure trustworthiness. Security posture is strong with HTTPS enforced and secure form handling, but privacy and cookie policies are not explicitly found, indicating room for compliance improvement. Overall, the site is suitable for general audiences with no adult or questionable content detected.

R

Skigebiet Rosskopf: Wandern Skifahren & Rodeln in Sterzing Südtirol

rosskopf.com

52

The website www.rosskopf.com represents a tourism and outdoor activity business focused on the Rosskopf ski and hiking area in Sterzing, South Tyrol, Italy. It offers information about skiing, hiking, tobogganing, and accommodation booking services. The site is professionally designed with good navigation and mobile optimization, leveraging modern technologies such as Consisto CMS, Google Analytics, and Tag Manager. Security posture is solid with HTTPS and security headers, though some headers like CSP are missing. Privacy compliance is limited, with no explicit privacy or cookie policies detected in the analyzed content. The WHOIS data is unavailable, which raises concerns about domain registration legitimacy but does not necessarily indicate malicious intent. Overall, the site appears trustworthy and suitable for general audiences interested in tourism in South Tyrol.

L

L'Associazione I Borghi più belli d’Italia

borghipiubelliditalia.it

44

L'Associazione I Borghi più belli d’Italia is a well-established non-profit organization dedicated to promoting the cultural and historical heritage of Italy's small towns. Founded in 2002, it certifies and supports over 360 Borghi, positioning itself as a leader in cultural tourism within Italy. The website serves as a comprehensive platform for information, events, publications, and community engagement targeting tourists and cultural enthusiasts. Technically, the site is built on WordPress with modern plugins and frameworks, offering good mobile optimization and SEO practices. Security posture is solid with HTTPS, DNSSEC, and cookie consent mechanisms, though additional security headers and vulnerability disclosure policies could enhance trust. Overall, the site reflects a mature digital presence aligned with its mission and audience.

S

Super Partners

superpartners.com

62

Super Partners is a well-established affiliate marketing platform specializing in casino and sports betting brands. With a domain age dating back to 1999 and strong parent company ties to Super Group, it holds a reputable market position. The website showcases a comprehensive portfolio of globally recognized brands and partnerships with major sports teams, reflecting a mature and professional business model. Technically, the site leverages modern frameworks like Next.js and React, with Cloudflare DNS and robust analytics integrations, ensuring a fast, responsive, and accessible user experience. Security posture is strong with HTTPS enforcement and security headers, though DNSSEC is not enabled. Privacy compliance is evident with clear privacy and cookie policies and GDPR adherence. Overall, the site presents a trustworthy and professional front for affiliates and partners in the iGaming industry.

K

Kahnawake Gaming Commission

gamingcommission.ca

61

The Kahnawà:ke Gaming Commission operates as the official regulatory authority overseeing gaming activities within the Mohawk Territory of Kahnawà:ke, Canada. Established in 2008, it provides licensing, compliance, player protection, and dispute resolution services for both interactive and land-based gaming sectors. The Commission maintains a clear market position as a sovereign jurisdiction regulator with a focus on integrity and player safety. Technically, the website is built on WordPress, leveraging modern web technologies including jQuery and Google Analytics, with hosting and DNS services involving Go Daddy and Cloudflare. The site demonstrates good mobile optimization, SEO practices, and a professional design. Security posture is solid with HTTPS enforced and domain protections in place, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security disclosures.

The website imagethumb.com is currently inaccessible due to a Cloudflare 504 Gateway Timeout error, indicating backend server issues preventing content delivery. The domain is registered since 2009 with Lexsynergy Limited and uses Cloudflare for DNS and CDN services. Due to the lack of accessible content, no business description, contact information, or policies are available for analysis. The technical infrastructure shows use of Cloudflare but lacks DNSSEC and security headers, and no CMS or analytics technologies are detected. Security posture is limited by the backend failure and absence of visible security best practices. Overall, the site is not currently functional, resulting in a low AI score and inability to assess business credibility or privacy compliance.

The domain src-play.com is registered since 2018 with Lexsynergy Limited as the registrar. However, the website currently serves only a 404 Not Found error page with no accessible content, metadata, or business information. There are no visible contact details, privacy policies, or security disclosures. The technical infrastructure shows the site is served by nginx 1.29.2 and uses Cloudflare DNS, but no further hosting or CMS details are available. The lack of content and security headers indicates a minimal digital presence and poor technical maturity. Security posture cannot be properly assessed due to absence of data, but no WAF or blocking mechanisms are detected. Overall, the site is not operational or is under construction, resulting in a low trust and credibility score.

B

Baytree Interactive Ltd

royalvegascasino.com

57

Royal Vegas Casino is an established online gambling platform operated by Baytree Interactive Ltd, licensed by the Kahnawake Gaming Commission. The website offers a wide range of casino games including slots, table games, live dealer experiences, and progressive jackpots, targeting adult players globally. The platform supports multiple trusted payment methods and provides a loyalty rewards program to enhance player engagement. The website is professionally designed with good content quality and mobile optimization, reflecting a mature digital presence. Technically, the site employs modern JavaScript libraries such as jQuery and Swiper.js, integrates Google Tag Manager and analytics tools, and uses a custom ePrivacy plugin for cookie consent management. The site is fully accessible without WAF or security blocks, uses HTTPS with strong SSL configuration, and displays multiple trust certifications including eCogra and responsible gaming badges. However, some security best practices like HTTP security headers and incident response contacts are not explicitly visible. From a security perspective, the platform demonstrates a solid posture with encrypted connections, secure payment integrations, and privacy compliance including GDPR indicators. The absence of WHOIS domain registration data is a concern but may be due to privacy protection. Overall, the site is trustworthy with moderate risk, suitable for adult users interested in online casino gaming. Strategic recommendations include enhancing security headers, publishing a security.txt file, providing explicit incident response contacts, and improving accessibility compliance to further strengthen trust and security.

L

La Grande Ecole du Numérique

grandeecolenumerique.fr

56

La Grande Ecole du Numérique is a French government-affiliated portal dedicated to digital education, training, and employment. It provides resources such as a training search engine, an observatory of digital professions, and career orientation tools aimed at individuals seeking to enter or advance in the digital sector. The website is professionally designed using Drupal 9 and integrates modern technologies including Matomo analytics and a cookie consent manager to ensure user privacy compliance. While the site demonstrates good technical maturity and user experience, it lacks explicit privacy and terms of service policies, and no direct contact information is provided in the analyzed content. The absence of WHOIS registration data is a notable gap that affects trustworthiness, although the official branding and government association support its legitimacy.

V

Vertikale

vertikale.it

41

Vertikale is a well-established climbing center located in Brixen, Italy, founded in 2012. The business offers a variety of climbing and bouldering courses, private lessons, kids programs, summer camps, and bar services, targeting families, youth, and adult climbing enthusiasts. The website is professionally designed using WordPress with Elementor and WooCommerce, providing a user-friendly experience with good SEO and mobile optimization. Social media integration and structured data enhance its digital presence. Security posture is solid with HTTPS and DNSSEC enabled, though additional security headers and formal policies could improve resilience. Privacy compliance is strong with clear GDPR-aligned policies and cookie consent mechanisms. Overall, the site reflects a credible, transparent, and customer-focused business with a moderate to high level of digital maturity.