Security Directory

P

Plose Ski AG

plose.org

50

Plose Ski AG operates a professional tourism website focused on the Plose mountain area in South Tyrol, Italy, offering winter and summer mountain activities such as skiing, hiking, and mountain biking. The website targets families and tourists seeking leisure and sports in the Dolomites region. It holds a strong regional market position with key services including ski lifts, accommodation, equipment rental, and guided tours. The digital presence is supported by a modern WordPress CMS with Divi theme and multiple plugins, ensuring good user experience and mobile optimization. The site integrates GDPR-compliant cookie consent via Usercentrics but lacks a clearly accessible privacy policy and contact information, which are areas for improvement. Security posture is solid with HTTPS and standard security practices, though explicit security headers and vulnerability disclosure mechanisms are absent. WHOIS data is unavailable or malformed, limiting domain trust verification, but the website's content and social media presence support its legitimacy. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and compliance documentation.

A

Astra

astrabx.com

64

Astra Brixen is a cultural non-profit center located in Brixen, Italy, focused on providing a platform for cultural exchange, artistic experimentation, and production. Managed by the Verein Jugendhaus Kassianeum, it serves artists, collectives, and cultural organizations, offering event spaces and hosting film screenings. The website reflects a local cultural hub with a clear mission and target audience of young and engaged cultural actors. Technically, the site is built on WordPress with common plugins for event management and GDPR compliance, leveraging Google Tag Manager for analytics. Security posture is generally good with HTTPS enabled and cookie consent mechanisms in place, though DNSSEC is not enabled and no explicit security policies or vulnerability disclosures are published. Overall, the site is professional, trustworthy, and compliant with GDPR, suitable for its non-profit cultural mission.

I

Im Tschumpus

tschumpus.com

48

Im Tschumpus is a cultural summer festival organizer based in Brixen, Italy, focusing on providing a unique cultural experience titled 'Kultursommer hinter Gittern'. The website serves as an information and reservation platform for their events and productions, supported by public and private sponsorships. The organization targets a general audience interested in cultural events and local festivals. Technically, the website is built on Webflow CMS, uses Typekit fonts, and includes jQuery for interactivity. The site is mobile-optimized with a good design and clear navigation, though accessibility features are basic. Security posture is moderate with HTTPS implied but lacking explicit security headers and cookie consent mechanisms. The absence of WHOIS data for the domain is a notable anomaly, reducing trust in domain legitimacy despite the professional and transparent nature of the website content. Overall, the site is functional and trustworthy for its cultural event purpose but would benefit from enhanced security and privacy compliance measures.

B

Brixen Tourism / Brixen.org

brixen.org

46

The website www.brixen.org is a regional tourism portal dedicated to promoting holidays in Brixen, Italy, located in South Tyrol. It provides comprehensive information about local attractions, outdoor activities, cultural events, and accommodation options. The site targets tourists and holidaymakers interested in exploring the region's natural and cultural offerings. The business model focuses on tourism promotion and facilitating holiday planning through rich content and booking links. The website is positioned as an important regional player in the hospitality sector, leveraging official regional tourism branding and consistent design. Technically, the site is built on the TYPO3 CMS platform, integrating modern marketing and analytics tools such as Google Tag Manager, Hotjar, and Usercentrics for cookie consent management. The site demonstrates good mobile optimization and SEO practices, although performance is moderate. The technical infrastructure is solid but could benefit from enhanced security headers and clearer privacy documentation. From a security perspective, the website enforces HTTPS and uses cookie consent mechanisms, which are positive indicators. However, the absence of explicit privacy policy and terms of service pages, lack of security.txt or vulnerability disclosure information, and missing WHOIS transparency reduce the overall security posture. No WAF or blocking mechanisms were detected, and no vulnerabilities were apparent in the provided content. The domain WHOIS data is incomplete or malformed, limiting trust verification. Overall, the website is a professional and trustworthy tourism information portal with good content quality and user experience. Strategic improvements in privacy compliance, security headers, and WHOIS transparency would enhance trust and security posture. The risk level is moderate with no critical issues detected.

C

Comune di Bressanone

bressanone.it

53

The website www.brixen.it is the official digital presence of the Comune di Bressanone, serving as a comprehensive portal for municipal information, public services, news, and community engagement. It targets residents and visitors, providing multilingual support and detailed resources related to local governance, cultural events, and administrative procedures. The site demonstrates a solid market position as the authoritative source for Bressanone's municipal affairs. Technically, the website employs a modern JavaScript stack including libraries such as Moment.js and Usercentrics for cookie consent management, alongside Google Analytics with IP anonymization to balance analytics needs with privacy compliance. The site is mobile optimized, accessible, and structured with clear navigation, reflecting a mature digital infrastructure suitable for public sector needs. From a security perspective, the site enforces HTTPS and integrates privacy mechanisms such as cookie consent banners. However, explicit security headers like Content-Security-Policy and incident response contacts are absent, representing areas for improvement. No vulnerabilities or suspicious activities were detected, and the domain registration data aligns well with the official municipal identity, supporting a high legitimacy score. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, though it would benefit from enhanced security policies and transparency around incident response. Strategic recommendations include implementing additional security headers, publishing a security policy, and establishing clear security contact channels to further strengthen trust and resilience.

T

Tinexta Infocert S.p.A.

legalmail.it

75

Tinexta Infocert S.p.A. operates the website www.legalmail.infocert.it, providing certified electronic mail (PEC) services primarily targeting business and individual users in Italy. The company is positioned as a leading provider in the Italian market for certified email solutions, offering customizable and comprehensive PEC mailboxes. The website content is professional, well-structured, and consistent with the corporate branding of Tinexta Infocert. The business model focuses on digital communication services with a strong emphasis on legal and certified email solutions.

K

Kufgem GmbH

kufgem.at

64

Kufgem GmbH is a well-established Austrian IT service provider specializing in digital solutions for municipalities, businesses, and organizations. With over 34 years of experience, Kufgem offers a broad portfolio including IT infrastructure, security, cloud services, municipal management software, and ERP solutions. The company serves a significant client base of 450 municipalities and 500 companies, positioning itself as a trusted partner in the regional technology market. The website reflects a professional and consistent brand image, emphasizing digital transformation and secure IT operations. Technically, the site is built on TYPO3 CMS with modern frontend technologies and integrates privacy-conscious analytics via Matomo. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, Kufgem demonstrates a mature digital presence aligned with its business model and market position.

GEM2GO is a digital platform operated by RIS GmbH, providing modern communication solutions for municipalities, cities, and regions primarily in German-speaking countries. The platform offers apps, websites, and digital signage to facilitate barrier-free, GDPR-compliant citizen communication. With over 1,400 municipalities as clients and more than one million app downloads, GEM2GO holds a strong market position in the government digital communication sector. The website is professionally designed, mobile-optimized, and accessible, reflecting a mature digital presence. Technically, the site uses a RIS CMS backend with jQuery, FontAwesome, and Matomo analytics for tracking. It integrates Google Maps API and supports accessibility features aligned with WCAG 2.2 AA standards. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers could enhance protection. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is justified given the business nature. The domain is actively maintained with recent updates. Social media presence is robust across Facebook, Instagram, YouTube, LinkedIn, and TikTok, supporting community engagement. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, GEM2GO demonstrates a strong, trustworthy digital platform for government communication with good security and privacy practices. Strategic improvements in security headers and incident response transparency could further strengthen its posture.

M

mesrdv.com

mesrdv.com

54

mesrdv.com is a French-based online appointment scheduling platform established in 2014, offering professionals a SaaS solution to optimize their appointment management and client interactions. The website promotes its mobile applications for iOS and Android, targeting professionals and their clients seeking efficient scheduling tools. The business operates in the technology sector with a small company size and a clear focus on user-friendly, real-time appointment management. Technically, the website uses a combination of jQuery, AOS for animations, and tarteaucitron.js for cookie consent management. The site is moderately optimized for mobile devices and performance, with basic SEO and accessibility features. Hosting and domain registration are consistent and transparent, though DNSSEC is not enabled, and no advanced security headers were detected. From a security perspective, the site implements basic protections such as captcha on contact forms and cookie consent mechanisms. However, it lacks published security policies, incident response contacts, and vulnerability disclosure information. The absence of DNSSEC and security headers suggests room for improvement in hardening the site against attacks. No critical vulnerabilities or blocking mechanisms were detected. Overall, mesrdv.com presents a professional and trustworthy online presence with moderate technical maturity and security posture. Strategic improvements in security policies, DNS security, and enhanced privacy compliance would strengthen its risk profile and user trust.

L

La Maison du Bien-Être

bien-etre-massages.be

10

La Maison du Bien-Être is a small, recently founded wellness center located in Namur, Belgium, specializing in a variety of massage therapies including relaxing, therapeutic, sports, and aromatherapy massages. The business also offers private cabin rentals for wellness professionals. The website presents a professional and comprehensive digital presence with clear service descriptions, customer testimonials, and multiple contact channels. The company holds relevant certifications such as IFAPME, enhancing its credibility in the local market. Technically, the website uses modern web technologies including jQuery, Google Tag Manager, and service workers for PWA capabilities. It is mobile-optimized with good SEO practices and accessibility features, although some security headers are missing. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but the absence of WHOIS transparency and security.txt reduces trust. The WHOIS data is restricted by the registry, showing a 'NOT ALLOWED' status, which is common for .be domains but impacts domain legitimacy assessment. Overall, the website is trustworthy and professional, serving its target audience effectively. Strategic improvements in security headers and transparency would further enhance trust and compliance.

G

G-E Motors

garage-gemotors.be

58

G-E Motors is a small, locally focused automobile garage based in Aubel, Belgium, specializing in vehicle maintenance, repair, diagnostics, and sales of used cars. The company emphasizes a personalized, family-oriented approach and rapid vehicle delivery, positioning itself as a trusted partner for local customers. The website is professionally designed, mobile-optimized, and rich in relevant content, reflecting a mature digital presence for a small business. Technically, the site uses modern JavaScript libraries, Google Tag Manager, and reCAPTCHA for security and analytics, with a service worker for progressive web app capabilities. Security posture is good with HTTPS enforced and privacy mechanisms in place, though some security headers could be improved. WHOIS data is unavailable due to registry restrictions, which is common for .be domains, but the website content and business information support legitimacy. Overall, the site presents a trustworthy and professional image with strong business credibility and compliance with privacy regulations.

C

CONSTRUCTS SOLUTIONS

construct-solutions-renovation.be

57

CONSTRUCTS SOLUTIONS is a small, established construction and renovation company based in Belgium, serving Brussels and surrounding areas. With over 30 years of experience, it offers a comprehensive range of services including new construction, complete renovation, electrical work, plumbing, and exterior and interior works. The company emphasizes quality, compliance with standards, and customer satisfaction. The website is professionally designed, mobile-optimized, and includes structured data for local business identification. Technically, it uses modern web technologies such as jQuery, Google Tag Manager, and reCAPTCHA to enhance user experience and security. Security posture is good with HTTPS and CAPTCHA protections, though some security headers and explicit policies are missing. Privacy and cookie policies are present and GDPR compliant. WHOIS data is unavailable due to registry restrictions, which slightly impacts trust but the website content and business information appear legitimate and professional.

C

Cabinet Fabre Avocat

cabinetfabre-avocats.fr

55

Cabinet Fabre Avocat is a specialized law firm based in Montigny-le-Bretonneux, France, with over 20 years of experience in criminal law and personal injury indemnification. The firm focuses on defending victims and accused parties with a rigorous and strategic approach, serving clients primarily in the Yvelines region. Their services include criminal defense, victim support, road traffic law, and legal consultation. The website reflects a professional and modern legal practice with strong client testimonials and certifications, positioning the firm as a trusted local legal expert. Technically, the website employs modern web technologies such as jQuery, Google Tag Manager, Google reCAPTCHA, and service workers for PWA capabilities. It is well-optimized for SEO, mobile-friendly, and includes accessibility features. Security practices include HTTPS enforcement and spam protection on forms, although some security headers could be improved. Privacy and cookie policies are present and GDPR compliant, enhancing user trust. The security posture is solid with no detected vulnerabilities or exposed sensitive data. However, the WHOIS data for the domain is unavailable, which limits verification of domain registration details and raises a moderate concern about domain legitimacy. Despite this, the website content and business information strongly support the firm's credibility. Overall, the website is professional, secure, and user-friendly, serving its target audience effectively. Strategic improvements in security headers and domain registration transparency are recommended to further enhance trust and compliance.

P

Purple Motorsport

garage-motorsport.be

63

Purple Motorsport is a small, local automotive garage based in Andenne, Belgium, specializing in comprehensive vehicle repair and maintenance services including bodywork, mechanical repairs, glazing, tires, and circuit vehicle servicing. The company positions itself as a trusted expert with a focus on customer satisfaction, offering personalized services such as free loaner vehicles and flexible scheduling. The website reflects a professional and consistent brand image with clear contact information and service descriptions. Technically, the site uses modern web technologies including jQuery, Google Tag Manager, and a cookie consent framework, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though HTTP security headers are not explicitly detected. The WHOIS data is unavailable due to registry restrictions, which slightly impacts domain trustworthiness, but the website content and business information appear legitimate and professional. Overall, the site scores well on content quality, technical implementation, privacy compliance, and business credibility, making it a reliable online presence for the garage.

H

Healthyfit Be Free

healthyfitbefree.com

57

Healthyfit Be Free is a small French healthcare business specializing in personalized sports coaching and nutritional guidance primarily serving the Paris 8 and 16 arrondissements and nearby areas. Founded in 2021 by Éric Capel, the company offers in-home and corporate coaching services, complemented by a line of nutritional products under the Beautysané brand. The website demonstrates a professional and consistent brand presence with strong customer trust signals such as positive Google reviews and active social media profiles. Technically, the site uses modern web technologies including Google Tag Manager, jQuery, and cookie consent management, and is optimized for mobile and accessibility. Security posture is good with HTTPS and cookie consent but lacks published security policies or incident response contacts. The WHOIS data is missing or unavailable, which raises concerns about domain registration transparency and legitimacy. Overall, the site is well-built and trustworthy from a user perspective but would benefit from improved domain registration transparency and enhanced security disclosures.

The website lavoix.com is currently inaccessible, returning a 403 Forbidden error page which blocks access to any meaningful content. The domain is registered since 1997 with a reputable registrar, indicating a potentially long-standing presence, but the lack of accessible content severely limits the ability to assess the business or its services. No metadata, contact information, or security policies are publicly available, and no HTTPS or security headers are detected, indicating a weak security posture. Due to the blocked content, the overall risk assessment is high, and the site cannot be fully analyzed for compliance or trustworthiness.

A

Aachen-Termine

aachen-kalender.de

59

Aachen-Kalender.de is a localized event calendar platform focused on providing comprehensive listings of cultural, sports, and community events in Aachen and its surrounding region. The website targets residents and visitors interested in staying informed about local happenings. It leverages WordPress CMS with popular plugins such as The Events Calendar and Yoast SEO to deliver structured event data and optimized search engine presence. The platform offers event search, filtering, and calendar export features, enhancing user engagement and utility. Technically, the website is built on a modern WordPress infrastructure with Elementor for design and jQuery for interactivity. It employs HTTPS with proper security headers, ensuring secure data transmission and basic protection against common web threats. The site is mobile-optimized and provides good accessibility and SEO features, although some accessibility enhancements could be beneficial. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and security headers but lacks explicit privacy and cookie policies, as well as incident response contact information. No vulnerabilities or suspicious activities were detected in the provided content. The absence of cookie consent mechanisms and privacy documentation represents compliance gaps, particularly under GDPR regulations. Overall, Aachen-Kalender.de is a trustworthy and professionally maintained local event platform with solid technical foundations. To enhance its security posture and regulatory compliance, it should implement comprehensive privacy and cookie policies, introduce consent mechanisms, and provide clear incident response contacts.

T

The CentOS Project

centos.org

68

The CentOS Project is a well-established, community-driven open source initiative focused on delivering robust Linux distributions, primarily CentOS Stream and CentOS Hyperscale. It serves a broad audience including developers, enterprises, and open source enthusiasts, positioning itself as a key player in the Linux ecosystem closely aligned with Red Hat Enterprise Linux. The project offers extensive community engagement through forums, mailing lists, chat, events, and documentation, supported by a wide range of sponsors and partners. Technically, the website employs modern frontend technologies such as Bootstrap 5, Font Awesome, and Highlight.js, ensuring a responsive, accessible, and performant user experience. The site is well-structured with clear navigation and optimized for mobile devices. Hosting details are not explicitly disclosed, but the site uses HTTPS with strong SSL configuration, though DNSSEC is not enabled. From a security perspective, the site demonstrates good practices including HTTPS enforcement and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security headers, a published security policy, incident response contacts, and a vulnerability disclosure mechanism. Privacy compliance is supported by a comprehensive privacy policy and terms of service, but no cookie consent mechanism is present, which is a minor compliance gap. Overall, the CentOS website is professional, trustworthy, and technically sound, with a strong community focus. Strategic improvements in security transparency and privacy mechanisms would further enhance its posture and compliance.

The website dcm-emag.de currently serves only a default Apache HTTP server test page powered by CentOS, indicating that the site is either under construction or inactive. There is no business-related content, contact information, or compliance policies present. The technical infrastructure is minimal, relying on Apache and CentOS with basic Bootstrap styling. No advanced technologies, CMS, or analytics are detected. Security posture is weak due to lack of HTTPS and security headers, and no privacy or cookie policies are implemented. Overall, the site lacks credibility and trust indicators, making it unsuitable for business or customer engagement in its current state.

T

Texas A&M University

tamu.edu

72

Texas A&M University is a large, established public research university founded in 1876, serving students and researchers primarily in the United States. The website reflects a professional and comprehensive digital presence with a focus on education and research. The technical infrastructure includes modern JavaScript libraries and analytics tools such as Google Tag Manager and Microsoft Clarity, indicating a mature digital strategy. Security posture is moderate with HTTPS usage and deferred script loading, but lacks visible security headers in the provided content. Privacy and cookie policies were not detected, suggesting room for improvement in compliance transparency. Overall, the site is trustworthy and well-maintained, consistent with a major educational institution.

The domain uniroma1.it corresponds to Sapienza Università di Roma, a large and historic public university in Italy. However, the website content is currently inaccessible, returning a 404 Not Found error on the main page, indicating a misconfiguration or missing content. There is no metadata, structured data, or contact information available on the page. The domain is well-established, registered since 1996, and DNSSEC enabled, which supports its legitimacy. The lack of HTTPS and security headers, combined with missing privacy and cookie policies, indicates a poor security posture and compliance status. Overall, the website is non-functional in its current state, severely limiting its usability and trustworthiness.

S

Senckenberg Gesellschaft für Naturforschung

senckenberg.de

61

Senckenberg Gesellschaft für Naturforschung is a well-established non-profit research institute founded in 1817, specializing in biodiversity and natural sciences. It holds a strong market position as a leading research entity in Germany and internationally. The website reflects a mature digital infrastructure built on WordPress with comprehensive multilingual support and integration of various media and social platforms. Security measures include HTTPS, Wordfence, Google reCAPTCHA, and a robust cookie consent mechanism, indicating a strong security posture. No critical vulnerabilities or compliance gaps were detected. Overall, the website demonstrates professionalism, trustworthiness, and compliance with GDPR requirements.

R

Royal Botanic Gardens Kew

kew.org

69

Royal Botanic Gardens Kew is a globally recognized non-profit botanical institution based in the United Kingdom, dedicated to plant science, conservation, and public education. The website serves a diverse audience including researchers, families, schools, and general visitors, offering access to botanical collections, scientific resources, educational programs, and membership opportunities. The institution holds a strong market position as a leading botanical garden and research center. Technically, the website is built on Drupal 10, leveraging modern web technologies and integrating tools such as Google Tag Manager and Visual Website Optimizer for analytics and user experience optimization. The site demonstrates good performance, excellent mobile responsiveness, and accessibility features, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, employs standard security headers, and integrates a comprehensive cookie consent mechanism compliant with GDPR. However, it lacks a publicly visible dedicated security policy or incident response contact, and no vulnerability disclosure or security.txt file is present. No vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and secure, with strong privacy compliance and clear business credibility. The absence of WHOIS data limits domain registration insights but does not detract from the site's legitimacy. Strategic recommendations include publishing explicit security policies and incident response information to enhance transparency and trust.

R

Re:wild

rewild.org

69

Re:wild is a well-established non-profit organization dedicated to protecting and restoring wild places and wildlife globally. Their website reflects a mature digital presence with clear messaging focused on environmental conservation, biodiversity, and climate change solutions. The organization leverages modern web technologies including Next.js, React, and integrates analytics and marketing tools such as Google Tag Manager, Hotjar, and Microsoft Clarity to optimize user engagement and track impact. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although formal security policies and vulnerability disclosures are absent. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates high professionalism, trustworthiness, and effective communication of their mission and impact.

N

NatureServe

natureserve.org

62

NatureServe is a well-established nonprofit organization specializing in biodiversity data and conservation science across North America. With a 50-year history, it collaborates with a broad network of scientists and organizations to provide authoritative data that supports conservation efforts. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistent with its mission. Technically, the site is built on Drupal 10 with modern frameworks like Bootstrap and integrates multiple analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Mailchimp. The site is mobile-optimized and accessible, though performance is moderate. Security posture is solid with HTTPS and some security headers, but could be enhanced with additional headers and explicit cookie consent mechanisms. Overall, the security and privacy compliance is good, with a comprehensive privacy policy and clear contact information. The WHOIS data is limited due to privacy protection, but the domain and website content align well with the organization's claims, supporting legitimacy. No critical vulnerabilities or suspicious indicators were found. Strategically, NatureServe should focus on enhancing security headers, implementing explicit cookie consent, and maintaining transparency to further strengthen trust and compliance.

The Missouri Botanical Garden is a well-established non-profit organization focused on botanical research, conservation, education, and providing a public garden experience. The website reflects a mature digital presence with comprehensive content, including event information, educational programs, visitor services, and donation opportunities. The organization targets a broad audience including families, researchers, students, and garden enthusiasts. Technically, the website is built on ASP.NET WebForms with DNN CMS, leveraging modern JavaScript libraries and analytics tools such as Google Analytics, Hotjar, and Facebook Pixel. The site is mobile-optimized and provides a professional user experience with clear navigation and rich multimedia content. Security posture is strong with HTTPS enforcement and appropriate security headers, though there is room for improvement in publishing explicit security policies and incident response information. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms. Overall, the website demonstrates high business credibility and trustworthiness, despite the absence of detailed WHOIS data due to privacy protection.

C

Conservation International

conservation.org

77

Conservation International is a well-established non-profit organization founded in 1987, dedicated to protecting oceans, forests, and other vital ecosystems globally. The organization targets a broad audience including donors, environmental advocates, and the general public. Their business model focuses on conservation efforts, scientific research, community partnerships, and advocacy. The website reflects a mature digital presence with integrated donation capabilities and active social media engagement. Technically, the website is built on the Sitefinity CMS platform, utilizing modern technologies such as Bootstrap, jQuery, and various third-party widgets for fundraising and analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices, supported by comprehensive privacy and cookie policies with user consent mechanisms. From a security perspective, the site enforces HTTPS, employs standard security headers, and avoids exposing sensitive data. However, it lacks publicly available security policies, incident response details, and vulnerability disclosure mechanisms, which are recommended for enhanced transparency and trust. Overall, the website is professional, trustworthy, and secure, with minor areas for improvement in security communication and incident handling. The absence of WHOIS data is due to privacy protection, which is justified for this type of organization. The domain and website content align well, supporting a high legitimacy score.

B

Botanic Gardens Conservation International

bgci.org

54

Botanic Gardens Conservation International (BGCI) is a non-profit organization dedicated to promoting and developing efficient, cost-effective plant conservation strategies through botanic gardens worldwide. The website serves as a professional platform to support conservationists, researchers, and the general public interested in plant conservation. BGCI positions itself as a global leader in this niche environmental sector, offering key services such as conservation promotion, networking, and resource development for botanic gardens. Technically, the website is built on WordPress 6.4.3 with modern web technologies including jQuery, Google Tag Manager, and Cookiebot for consent management. The site demonstrates good SEO practices with comprehensive metadata and structured data, and it is mobile-optimized with a moderate performance profile. However, some accessibility features are basic and could be improved. From a security perspective, the site uses HTTPS with an excellent SSL configuration and implements cookie consent mechanisms. There is no evidence of exposed sensitive data or vulnerable libraries in the HTML content. However, security headers are not explicitly detected, and there is no visible security or incident response policy, which are areas for improvement. Overall, the website is trustworthy and professional, with a strong focus on its mission. The lack of explicit privacy and terms of service pages, as well as contact information, slightly reduces privacy compliance and business credibility scores. The WHOIS data is privacy protected or unavailable, which is typical for non-profit organizations and does not raise immediate concerns. Strategic recommendations include adding explicit privacy and terms pages, enhancing security headers, and providing clear contact channels for security incidents.

B

BirdLife International

birdlife.org

74

BirdLife International is a globally recognized non-profit organization dedicated to bird conservation and environmental protection. It operates as the largest international partnership for nature conservation, focusing on research, advocacy, and public engagement to protect bird species and their habitats worldwide. The website reflects a mature and professional digital presence, targeting conservationists, researchers, donors, and the general public interested in environmental issues. Technically, the website is built on WordPress and leverages modern technologies including Google Analytics, Cookiebot for consent management, Cloudflare Turnstile for bot protection, and Vimeo for media content. The site demonstrates good mobile optimization, accessibility, and SEO practices, ensuring a positive user experience across devices. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. While explicit security headers are not fully detailed in the provided data, the use of reputable third-party services and absence of exposed sensitive data indicate a solid security posture. However, the lack of publicly available WHOIS data and absence of explicit security policies or incident response contacts suggest areas for improvement in transparency. Overall, BirdLife International's website is trustworthy, professionally maintained, and compliant with privacy standards. The primary risks relate to enhancing security header implementation and publishing more detailed security and incident response information to bolster user trust and compliance.

A

Arizona State University

asu.edu

70

Arizona State University (ASU) is a large, well-established public research university in the USA, offering a wide range of undergraduate and graduate degree programs, research initiatives, and community services. The website reflects a mature digital presence with consistent branding, comprehensive content, and a focus on accessibility and user experience. The technical infrastructure is based on Drupal 10 CMS with modern libraries and analytics tools, supporting a responsive and performant site. Security posture is good with HTTPS and secure forms, though explicit security headers and incident response information are not publicly disclosed. Privacy and cookie policies are present and GDPR compliant. The WHOIS data is unavailable, which limits domain registration trust analysis, but the overall legitimacy is supported by the website content and official social media presence.

C

City of Albuquerque

cabq.gov

62

The City of Albuquerque's official website serves as a comprehensive portal for residents, businesses, and visitors to access municipal services, city leadership information, community resources, and event details. The site is well-positioned as the authoritative source for city-related information and services, reflecting a large government entity's digital presence. Technically, the website is built on the Plone CMS platform, leveraging modern web technologies and integrating multiple analytics and tracking tools such as Google Analytics, CrazyEgg, and Monsido. The site demonstrates good performance, mobile optimization, and accessibility features, ensuring a positive user experience. Security-wise, the website enforces HTTPS, employs standard security headers, and avoids exposing sensitive data, although it lacks publicly available security policies or incident response information. The WHOIS data is incomplete, likely due to .gov domain privacy policies, but the domain's .gov TLD and content strongly indicate legitimacy. Overall, the website is professional, trustworthy, and serves its public sector mission effectively.

S

Sonuç Bilişim El. Ev Al.Ser.Tic.Ltd.Şti.

faturago.com

50

Fatura Ödemex is a Turkish online platform specializing in utility bill inquiry and payment services, covering electricity, water, telephone, natural gas, internet, and TV bills. The platform targets individual and corporate customers in Turkey, offering a user-friendly interface with over 300 institutions supported. It operates as a representative of N Kolay Ödeme ve Elektronik Para Kuruluşu A.Ş., indicating a solid partnership and market presence. The website is well-branded, mobile-optimized, and provides social media engagement and mobile applications to enhance accessibility. Technically, the site is built on ASP.NET Web Forms with custom JavaScript and uses common libraries such as FontAwesome. The performance is moderate with good SEO and mobile responsiveness. Security is adequate with HTTPS and 3D secure payment mentions, but lacks some modern security headers and explicit incident response or vulnerability disclosure policies. Analytics usage is moderate with GetClicky tracking. Overall, the security posture is good but could be improved by implementing additional HTTP security headers, cookie consent mechanisms, and publishing security policies. The business credibility is high with clear contact information, user testimonials, and consistent branding. No suspicious or malicious content was detected, and the site is safe for general audiences.

itrium is a small German software development company specializing in custom software solutions to support organizational processes across various industries. The company emphasizes combining IT and business expertise to improve workflow efficiency and has been active for approximately 15 years with a stable team based in Wuppertal. The website is built on the Contao CMS platform and uses modern JavaScript libraries like Isotope for UI enhancements. While the site is accessible and professionally designed with clear navigation, it lacks visible contact information and advanced privacy or security features. No forms or data collection mechanisms are evident on the main page, and no social media presence is linked. Security posture is moderate but could be improved by implementing HTTPS verification, security headers, and cookie consent mechanisms. The WHOIS data aligns well with the website's claims, showing consistent domain ownership and appropriate domain age.

F

Fairtrade International

fairtrade.net

66

Fairtrade International operates as a global non-profit organization dedicated to promoting fair trade practices worldwide. The organization provides certification, advocacy, and standards development to improve the livelihoods of producers and workers in developing countries. Their website reflects a professional and consistent brand presence, targeting businesses, consumers, and advocates interested in ethical trade and sustainability. The business model centers on certification and advocacy rather than commercial sales. Technically, the website is built on Adobe Experience Manager, utilizing modern technologies such as Google Tag Manager and Usercentrics for consent management. The site is mobile-optimized, accessible, and performs moderately well. However, some security headers are missing, and explicit privacy and security policies are not clearly presented, which could be improved to enhance compliance and trust. From a security perspective, the site enforces HTTPS and uses consent management tools, indicating a good baseline security posture. The absence of WHOIS data for the domain is a concern but does not necessarily indicate illegitimacy given the organization's global presence and branding consistency. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is trustworthy and professional, but improvements in transparency around privacy policies, security disclosures, and WHOIS information would strengthen its security and compliance posture. Strategic recommendations include publishing detailed privacy and security policies, adding security headers, and providing clear contact channels for incident response.

O

URL Shortener, Branded Short Links & Analytics | TinyURL

otolink.pl

50

The website otolink.pl serves as a branded URL shortening domain under the TinyURL platform, offering users the ability to create branded short links with analytics. The site content is minimal, primarily acting as a landing page directing users to TinyURL's main services and registration pages. Technically, the site uses standard web technologies including Bootstrap 4.6.2, jQuery, and SVG graphics, providing a basic but mobile-optimized user experience. Security posture is weak due to lack of visible security headers, privacy policies, and cookie consent mechanisms. The domain is relatively new (created in 2021) and registered by a domain reseller, which aligns with its purpose as a branded domain for TinyURL. Overall, the site is functional but lacks comprehensive compliance and security features.

B

BigWetFish

bigwetfish.hosting

69

BigWetFish is a UK and Ireland based web hosting and domain registration provider established in 2015. The company offers a range of hosting services including single website hosting, reseller hosting, and enterprise hosting, targeting businesses and individuals in the UK and Ireland. Their market position is strong within their regional niche, supported by positive customer reviews and a focus on customer service with 24/7 support availability. Technically, the website is built on WordPress with modern plugins and themes, leveraging Cloudflare DNS for performance and security. The site is well-optimized for SEO and mobile devices, providing a good user experience. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though DNSSEC is not enabled and security headers are missing, representing areas for improvement. Privacy compliance is weak due to the absence of explicit privacy and cookie policies, which should be addressed to meet GDPR requirements. Overall, the website is professional, trustworthy, and technically sound, with room to enhance privacy and security transparency.

C

Circuits SAS

cirkwi.com

65

Cirkwi is a French company operating under the legal entity Circuits SAS, specializing in providing official hiking and walking routes to over 12 million travelers annually. The company supports more than 2,000 tourism professionals by offering a comprehensive platform and mobile application to explore over 45,000 official itineraries. Positioned as a leading provider in the French tourism sector, Cirkwi leverages technology to enhance outdoor travel experiences. Technically, the website is built on WordPress with Elementor, integrating modern web technologies such as Google Fonts, Google Analytics, Facebook Pixel, and consent management frameworks. The site demonstrates good SEO practices, mobile optimization, and moderate performance. The infrastructure supports a professional digital presence with a focus on user experience and accessibility. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements key security headers. However, it lacks publicly available security policies, incident response contacts, and vulnerability disclosure mechanisms, which are areas for improvement. The absence of WHOIS registration data reduces transparency but does not significantly detract from the site's legitimacy given the professional content and social media presence. Overall, Cirkwi presents a secure, professional, and user-friendly platform with strong business credibility in the tourism technology sector. Strategic enhancements in security transparency and WHOIS data availability would further strengthen trust and compliance.

E

Ezymob

ezymob.fr

57

Ezymob is a French technology company specializing in digital solutions for inclusive mobility, targeting a broad audience including transport authorities, event organizers, healthcare facilities, and tourism sites. Their offerings leverage AI and digital tools to enhance accessibility and autonomy for all users, especially those with disabilities. The company has established a strong market presence with multiple metropolitan clients and event partnerships, supported by a professional and content-rich website. Technically, the site is built on Webflow with modern technologies, optimized for performance, mobile responsiveness, and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit incident response policies are absent. The WHOIS data is not publicly available, indicating privacy protection, which is common and justified for this business type. Overall, the website and business demonstrate high professionalism, trustworthiness, and compliance with privacy regulations.

P

pkt.pl

pkt.pl

64

pkt.pl is a well-established Polish online business directory offering a comprehensive database of companies, products, services, user reviews, and articles. It targets Polish consumers and businesses seeking local providers across various industries. The platform is supported by WeNet Group S.A., indicating a solid corporate backing. Technically, the website employs modern JavaScript frameworks, lazy loading, and integrates marketing and analytics tools such as HubSpot and Google Analytics, ensuring a mature digital infrastructure. Security-wise, the site enforces HTTPS and uses reCaptcha for form protection, but lacks some advanced security headers and published security policies, which could be improved. Overall, pkt.pl presents a professional, trustworthy, and content-rich platform with good privacy compliance and user engagement features.

N

Gallery of country coats of arms. Select A COUNTRY

near-place.com

59

Near-place.com is a niche informational website providing a gallery of country coats of arms and related geographic information. The site targets a general audience interested in geography and heraldry. It offers a simple user interface with country selection and visual content. The business model appears to be advertising-supported, primarily through Google Adsense. The website is relatively small and was established in 2016, indicating moderate maturity in its niche. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and Google Fonts. It is hosted and registered via Cloudflare, ensuring reliable DNS and HTTPS support. The site is moderately optimized for mobile devices and has basic SEO and accessibility features. However, it lacks advanced frameworks or CMS indications. From a security perspective, the website uses HTTPS and has domain transfer protections enabled. However, it lacks important security headers and does not enable DNSSEC, which could improve DNS security. There is no visible privacy policy or terms of service, which impacts compliance and trust. The cookie consent banner indicates some GDPR awareness but may not be fully compliant. No contact or incident response information is provided, limiting user trust and security responsiveness. Overall, the website is functional and safe for general users but would benefit from enhanced privacy, security, and compliance measures. Strategic improvements in policy transparency, security headers, and contact information would strengthen its trustworthiness and regulatory posture.

W

WeNet sp. z o.o.

panoramafirm.pl

55

Panorama Firm is a well-established Polish business directory operated by WeNet sp. z o.o., a subsidiary of WeNet Group S.A. Founded in 1999, the platform offers the largest database of companies in Poland, providing users with search capabilities by industry and location, customer reviews, and informational articles. The website serves both businesses seeking advertising opportunities and consumers looking for reliable company information. Technically, the site employs modern web technologies including jQuery, Google Tag Manager, and HubSpot integrations, with a cookie consent mechanism ensuring GDPR compliance. The site is mobile-optimized and SEO-friendly, featuring structured data for enhanced search engine visibility. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements in security headers and incident response transparency are recommended. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a reliable resource in the Polish market.

A

Arany Vállalkozás

aranyvallalkozas.eu

55

Arany Vállalkozás is a Hungarian business rating and award platform that identifies and promotes the best-rated companies in Hungary based on aggregated online customer reviews from trusted sources such as Google Maps and Facebook. The website provides a searchable directory of awarded companies and offers them the right to use the 'Arany Vállalkozás' logo for promotional purposes. Technically, the site uses modern JavaScript and Google Tag Manager for analytics, is mobile-optimized, and served over HTTPS with no blocking mechanisms detected. Security posture is generally good but could be improved with additional security headers and cookie consent mechanisms. The site lacks direct contact emails or phone numbers, relying on a contact form instead. WHOIS data is unavailable due to privacy protection, which is common for EU domains and does not raise immediate concerns. Overall, the site is professional, trustworthy, and serves a niche business audience in Hungary.

F

Firma de Aur

firmadeaur.ro

55

Firma de Aur is a Romanian platform that awards and promotes the highest-rated companies based on verified online customer reviews from trusted portals such as Google Maps and Facebook. The platform targets both companies seeking recognition and consumers looking for reliable service providers. Technically, the website employs modern JavaScript and Google Tag Manager for analytics, with a responsive design optimized for mobile devices. Security posture is solid with HTTPS enforced, though it lacks some security headers and cookie consent mechanisms. The domain's WHOIS data is privacy protected under ROTLD policies, which is typical for Romanian domains and does not raise suspicion. Overall, the site presents a professional and trustworthy business presence with room for improvement in privacy compliance and security best practices.

D

Digiteka Technologies

digiteka.com

65

Digiteka Technologies is a France-based company specializing in video technology solutions for media brands and advertisers. Their platform offers comprehensive services including video capture, enrichment, management, distribution, streaming, and monetization. The company targets large media organizations seeking scalable and integrated video strategies. The website reflects a professional and consistent brand image with clear service offerings and client trust indicators. Technically, the site uses modern web technologies such as Bootstrap, Swiper.js, and Google Tag Manager, providing a good user experience with mobile optimization and SEO best practices. Security posture is moderate with HTTPS implied but lacking explicit security headers and incident response information. Privacy and cookie policies are present, though cookie consent mechanisms could be improved. WHOIS data is missing, which raises concerns about domain registration legitimacy despite the professional appearance of the site.

F

Freename

freename.com

64

Freename is a technology company founded in 2022 specializing in domain registration and management services, including traditional domains and emerging Web3 domains. Positioned as an emerging player in the domain registrar market, Freename offers a platform for users to search, buy, transfer, and manage domain names with additional features such as custom TLDs and domain import. The website demonstrates a professional design and consistent branding, targeting individuals and businesses seeking domain services with a focus on digital identity and Web3 integration. Technically, the site is built on modern frameworks such as React and Next.js, hosted with Cloudflare DNS services, and incorporates Google Tag Manager and Facebook Pixel for analytics and marketing purposes. While the site is mobile optimized and SEO friendly, it lacks explicit privacy, cookie, and security policies, which impacts its privacy compliance score. Security posture is generally good with HTTPS enabled and domain locking status, but DNSSEC is not enabled and security headers are missing. Overall, the website is functional and trustworthy but would benefit from enhanced privacy and security disclosures.

S

SWAROTEC

swarotec.com

58

SWAROTEC is a specialized business unit under SWAROVSKI OPTIK, focusing on the development and manufacturing of customized optical and optoelectronic system solutions for industrial applications. The company targets industrial clients requiring high-quality, precise optical technologies. Their market position is that of a niche, technologically advanced provider with a strong brand association to SWAROVSKI OPTIK. The website reflects a professional and consistent brand image with clear business descriptions and contact channels. Technically, the website employs modern web technologies including jQuery, UIkit framework, Google Tag Manager, and Usercentrics for consent management. It is built on the Neos CMS platform and shows good mobile optimization and SEO practices. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS and Google reCAPTCHA on forms, enhancing protection against automated abuse. However, DNSSEC is not enabled, and no explicit security policy or incident response information is published. The domain registration is consistent with the business claims, showing a stable and legitimate presence since 2012. Overall, the website is professional, secure, and compliant with privacy regulations, making it a trustworthy digital presence for SWAROTEC. Minor improvements in DNS security and security policy transparency could further enhance trust and security posture.

E

Easysize

easysize.me

67

Easysize is a specialized AI-powered SaaS platform focused on providing clothing size and fit recommendations to fashion brands and e-commerce retailers. The company positions itself as a trusted partner for forward-thinking fashion brands worldwide, offering integration primarily with Shopify and other e-commerce platforms. Their key services include an intuitive Fit Quiz product that enhances shopper experience by simplifying size selection without intrusive questions or body scans. The website demonstrates a professional and consistent brand image with strong trust indicators such as client logos, testimonials, and presence on the Shopify App Store. Technically, the website is built on modern web technologies including Webflow CMS, Google Fonts, and integrates multiple third-party services such as Intercom for customer support, Facebook Pixel and Google Analytics for tracking, and Finsweet Cookie Consent for privacy compliance. The site is well-optimized for performance, mobile responsiveness, and SEO, hosted via AWS Cloudfront CDN, ensuring fast and reliable delivery. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. While no explicit security policy or incident response information is published, no vulnerabilities or exposed sensitive data were detected. The absence of security.txt or vulnerability disclosure pages suggests room for improvement in transparency and incident readiness. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. The lack of WHOIS data due to privacy protection is common for SaaS businesses and does not detract from the legitimacy indicated by the site content and trust signals. Strategic recommendations include enhancing security headers, publishing a security policy, and providing explicit security contact channels to further strengthen trust and compliance.