Security Directory

E

EXPO-BOOK

expo-book.com

45

EXPO-BOOK is an international exhibition portal and social network established in 2012, offering a comprehensive platform for exhibitions, companies, tenders, jobs, and communities related to the exhibition industry. The website targets exhibitors, visitors, and professionals seeking information and networking opportunities in the exhibition sector. It maintains a large database of exhibitions, companies, and members, positioning itself as a significant player in the international exhibition market. Technically, the website employs a custom CMS with a technology stack including jQuery, jQuery UI, Google Translate integration, and Yandex Metrika for analytics. The site demonstrates moderate performance and basic mobile optimization. SEO and accessibility features are present but could be improved. Hosting and domain registration are managed through RU-CENTER with privacy protection enabled. From a security perspective, the site uses HTTPS and has domain transfer protection but lacks DNSSEC and important security headers such as Content-Security-Policy and HSTS. No explicit security or incident response policies are published, and cookie consent mechanisms are absent, indicating partial compliance with privacy regulations. The site does not expose sensitive data or use vulnerable libraries visibly. Overall, the website is professionally designed and functional with a moderate security posture and basic privacy compliance. Strategic improvements in security headers, DNSSEC, and privacy mechanisms would enhance trust and compliance. The domain's long age and stable registration support the site's legitimacy, with no suspicious indicators detected.

D

Deutsche Apotheker- und Ärztebank

apobank.de

70

Deutsche Apotheker- und Ärztebank (apoBank) is a specialized financial institution serving healthcare professionals and their organizations in Germany. The website clearly communicates its banking and financial services tailored to this niche, including accounts, financing, asset management, and insurance products. The bank positions itself as the leading financial service provider in the healthcare sector, targeting professionals such as pharmacists, doctors, and related entities. The business model focuses on specialized banking solutions with a strong emphasis on customer service and sector expertise. Technically, the website is built on a modern infrastructure using Magnolia CMS, jQuery UI, and integrates consent management via Usercentrics and CAPTCHA protection through FriendlyCaptcha. The site is hosted on UltraDNS name servers and employs HTTPS with proper security headers, ensuring secure and reliable access. The design is professional, mobile-optimized, and accessible, providing a positive user experience. From a security perspective, the site demonstrates good practices including HTTPS enforcement, CAPTCHA on forms, and privacy compliance with GDPR. However, there is room for improvement by adding additional security headers and publishing incident response contacts or a security.txt file. No vulnerabilities or suspicious content were detected. Overall, the apoBank website is a trustworthy, professional, and secure platform that aligns well with its business goals and regulatory requirements. It effectively serves its target audience with clear communication and robust technical implementation.

S

Stiftung Leistungssport Hamburg

stiftung-leistungssport.de

10

Stiftung Leistungssport Hamburg is a non-profit foundation established in 2002 by the Hamburg Chamber of Commerce to sustainably support performance sports in Hamburg. The foundation focuses on talent management, youth promotion, and securing elite sports through its TEAM HAMBURG project. The website serves as an information and networking platform for athletes, sports organizations, and supporters. Technically, the site is built on WordPress with WooCommerce and membership plugins, employing modern JavaScript libraries and a responsive design. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy and cookie management. Overall, the site is professional, trustworthy, and well-positioned in its niche.

The website www.rkk-reinach.ch represents the Roman Catholic Parish St. Nikolaus located in Reinach, Switzerland. It serves as an informational portal for parishioners and the local community, providing updates on religious services, sacraments, community events, and social services. The site targets local church members and those interested in parish life, operating as a non-profit religious organization. The content is well-structured, relevant, and presented in German, with clear navigation and a consistent branding approach. Technically, the website is built on the Jimdo Creator CMS platform, utilizing standard web technologies including jQuery UI and POWr.io widgets. It is hosted by Jimdo GmbH and employs HTTPS with a cookie consent mechanism, ensuring basic privacy compliance. The site is moderately optimized for performance and mobile responsiveness, though accessibility features are basic. SEO optimization is present but could be enhanced. From a security perspective, the website enforces HTTPS and includes cookie consent controls, but lacks advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's local and religious nature, supporting legitimacy. No WAF or blocking mechanisms interfere with content access. Overall, the website demonstrates a solid foundation for a small non-profit parish site with good content quality and privacy compliance. Strategic improvements in security headers, incident response policies, and SEO could enhance its posture and trustworthiness further.

G

GerroMed Pflege- und Medizintechnik GmbH Hamburg

gerromed.de

50

GerroMed Pflege- und Medizintechnik GmbH Hamburg is a specialized provider of patient care and medical technology products, focusing on patient positioning and decubitus prophylaxis. The company has recently integrated its operations into Arjo Deutschland GmbH, which now manages its rental business. The website clearly communicates this transition and provides resources such as user manuals and contact information for existing customers. The target audience primarily consists of healthcare professionals and institutions requiring specialized patient care equipment. Technically, the website is built on the Contao CMS platform, utilizing modern JavaScript libraries such as jQuery and jQuery UI, and is hosted on a reputable provider (1&1 IONOS). The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and uses session cookies with CSRF protection, but lacks explicit security headers and published security policies. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, though terms of service and incident response information are absent. Overall, the website is trustworthy and professional, with room for improvement in security transparency and policy disclosures.

A

ASKÖ Burgenland

wirbewegenburgenland.at

42

ASKÖ Burgenland is a regional non-profit sports association based in Austria, focused on promoting diverse sports activities and supporting local sports clubs. The organization offers a variety of services including training, event organization, funding facilitation, and health programs. It operates under the umbrella of the ASKÖ Bundesorganisation, indicating a structured and established presence in the Austrian sports sector. The website reflects a professional and consistent brand image, targeting sports clubs, athletes, and the general public interested in sports within the Burgenland region. Technically, the website is built on the Internetkonzepte.at CMS and utilizes modern JavaScript libraries such as jQuery, Font Awesome, and Owl Carousel to provide a responsive and user-friendly experience. The site is mobile optimized and includes SEO best practices, although accessibility features are basic. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and uses trusted external libraries but lacks explicit security headers and publicly available security policies or incident response information. Privacy compliance is strong, with a clear GDPR-compliant privacy policy and cookie consent mechanism. Contact information is transparent and professionally presented, enhancing trustworthiness. Overall, ASKÖ Burgenland's website is a well-maintained digital presence that supports its mission effectively. Strategic improvements in security headers and incident response transparency could further enhance its security posture and stakeholder confidence.

A

ASKÖ Sport GmbH

abc-ooe.at

45

ASKÖ Sport GmbH operates the ABC Bewegungscenter Oberösterreich, a regional sports and event center located in Linz, Austria. The company provides a range of services including sports activities, seminar facilities, accommodation, and restaurant services, targeting a general audience interested in sports and events. The website reflects a medium-sized regional business with consistent branding and clear contact information, supporting its market position as a trusted local service provider. Technically, the website is built on the Internetkonzepte.at CMS platform and utilizes modern JavaScript libraries such as jQuery, Owl Carousel, and integrates Google Analytics and Facebook SDK for tracking and marketing purposes. The site is mobile optimized with good navigation and SEO practices, although some accessibility features are basic. Performance is moderate, with room for improvement in loading speed and technical modernization. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, indicating basic privacy compliance. However, it lacks explicit security policies, incident response information, and security headers, which are recommended to enhance its security posture. No vulnerabilities or exposed sensitive data were detected, and the WHOIS data confirms the legitimacy of the domain and company. Overall, the website presents a professional and trustworthy digital presence with moderate technical and security maturity. Strategic improvements in security policies, technical modernization, and enhanced privacy compliance would further strengthen the site's reliability and user trust.

I

Internetkonzepte.at GmbH

internetkonzepte.at

46

Internetkonzepte.at GmbH is a small Austrian technology company specializing in custom web and software development, content management systems, hosting, and related IT services. With over 20 years of experience and numerous client references, the company holds a solid market position in the Austrian and German-speaking business sectors. Their website reflects a professional and consistent brand image, targeting businesses seeking tailored internet solutions. The company emphasizes security and support, with a 24/7 support offering and a strong partnership with their hosting provider myNET.at. Technically, the website employs a modern tech stack including jQuery, Font Awesome, and Matomo analytics, running on a proprietary CMS developed by the company. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security posture is strong with HTTPS and no visible vulnerabilities, but lacks some advanced security headers and formal policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the security posture is good, with no detected vulnerabilities or blocking mechanisms. The WHOIS data confirms the legitimacy and consistency of the business registration. Strategic improvements include implementing cookie consent, publishing security and incident response policies, and adding security headers to enhance protection and compliance.

Ö

ÖFT - Österr. Fachverband für Turnen

oeft.at

49

Turnsport Austria is the official Austrian federation representing approximately 450 gymnastics clubs with over 90,000 members across various disciplines including artistic gymnastics, rhythmic gymnastics, trampoline, sport aerobics, and more. The organization serves both grassroots and elite sports communities, providing event organization, training, and certification services. The website reflects a well-maintained digital presence with comprehensive event calendars, news updates, and social media integration, targeting athletes, coaches, clubs, and sports enthusiasts in Austria. Technically, the site uses a custom CMS by Internetkonzepte.at, leveraging modern JavaScript libraries such as jQuery and Owl Carousel, and is mobile responsive with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, indicating stable and accessible infrastructure. Overall, the site demonstrates a mature digital footprint appropriate for a national sports federation.

A

ASKÖ WAT Wien

askoewat.wien

42

ASKÖ WAT Wien is a well-established regional sports association based in Vienna, Austria, operating under the umbrella of the ASKÖ Bundesorganisation. The organization focuses on providing diverse sports programs, supporting sports clubs, and promoting health and fitness activities for a broad audience including athletes, clubs, and the general public. Their website reflects a professional and community-oriented approach with clear navigation and relevant content. Technically, the site uses a mix of established JavaScript libraries and a proprietary CMS, delivering moderate performance and good mobile responsiveness. Security posture is adequate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms, indicating room for improvement in compliance and security best practices. The absence of WHOIS data reduces transparency but does not detract significantly from the site's legitimacy given the professional presentation and active content. Overall, the site is trustworthy and serves its community well, though enhancements in privacy compliance and security hardening are recommended.

A

ASKÖ Salzburg

askoe-salzburg.at

47

ASKÖ Salzburg is a well-established regional non-profit sports association based in Salzburg, Austria, focused on promoting diverse sports activities, supporting local sports clubs, and providing training and community programs. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to sports enthusiasts and community members in the region. Technically, the site uses a modern JavaScript stack including jQuery and FontAwesome, built on the Internetkonzepte.at CMS platform, and is mobile-optimized with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and incident response disclosures. Overall, the site is trustworthy, GDPR compliant, and provides comprehensive contact information and partner links.

A

ASKÖ Oberösterreich

askoe-ooe.at

52

ASKÖ Oberösterreich is a regional non-profit sports association dedicated to promoting diverse sports activities and supporting sports clubs in Upper Austria. The organization provides a wide range of services including club support, sports education, fitness and health programs, and competitive sports event organization. It serves sports clubs, athletes, and community members, positioning itself as a key regional player in sports promotion. The website reflects a professional and consistent brand image aligned with its mission. Technically, the website uses a moderate technology stack including jQuery, FontAwesome, Owl Carousel, and a proprietary CMS by Internetkonzepte.at. The site is mobile optimized and performs moderately well, with basic SEO and accessibility features. Privacy and cookie policies are present and GDPR compliant, though explicit security policies and incident response contacts are not found. From a security perspective, the site enforces HTTPS and uses secure external scripts but lacks advanced security headers and a vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the website's claims, indicating a legitimate and established organization. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. Strategic improvements in security headers, incident response transparency, and accessibility could enhance its security posture and user trust.

C

Caritas beider Basel

caritas-beratung.ch

52

Caritas beider Basel operates the Caritas Beratung website, providing free social counseling services to individuals facing temporary financial difficulties in the Basel region of Switzerland. The organization offers budget relief advice, information on social benefits, and potential financial bridging. The website is well-structured, primarily in German, and targets local residents seeking social support. It holds recognized certifications such as SQS and ZEWO, enhancing its credibility and trustworthiness. Technically, the site is built on WordPress with popular plugins like Yoast SEO and Elementor, ensuring good SEO and user experience. Security posture is adequate with HTTPS enforced, though some security headers could be improved. Privacy compliance is basic but present, with a cookie consent mechanism and a privacy policy page. Overall, the site is professional, trustworthy, and serves a clear non-profit social service mission.

C

Caritas

kulturlegi.ch

57

KulturLegi.ch is a Swiss non-profit initiative operated by Caritas that provides a discount card to individuals with limited financial means, enabling access to over 4,200 offers in culture, sports, education, and health sectors across Switzerland. The website is well-branded, consistent, and targets socially disadvantaged groups to promote inclusion. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and integrates Google Analytics and Tag Manager for analytics. The site is mobile-optimized and SEO-friendly with good navigation and content quality. Security posture is solid with HTTPS enforced and privacy compliance evident through cookie consent and a comprehensive privacy policy. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the domain registration aligns well with the business claims, enhancing trust and legitimacy.

Lumeum Verein Bethanien operates a cultural and spiritual venue in St. Niklausen, Switzerland, offering an immersive 360° film experience centered on the historical figures Niklaus von Flüe and Dorothee Wyss. The organization targets visitors interested in culture, spirituality, and history, providing ticketing, visitor information, and group visit services. The website is professionally designed, consistent in branding, and provides clear contact details and social media presence, positioning it as a trustworthy small non-profit entity in the hospitality and media sectors. Technically, the website is built on the Contao CMS platform and employs modern JavaScript libraries such as jQuery, Handorgel, and Swipe.js. It integrates third-party booking and tracking services from Smeetz and Google Analytics. The site is mobile-optimized with moderate performance and basic accessibility and SEO features. From a security perspective, the site uses HTTPS with good SSL configuration but lacks explicit security headers and visible security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information is clearly provided, but incident response and vulnerability disclosure information are absent. Overall, the website is safe, family-friendly, and professionally maintained with a good security posture but could improve privacy compliance and security transparency. No WAF or blocking mechanisms were detected, allowing full content access and analysis.

A

Arosa Tourismus Genossenschaft

arosalenzerheide.swiss

61

Arosa Tourismus Genossenschaft operates the website arosalenzerheide.swiss, promoting the Arosa and Lenzerheide ski areas in Switzerland. The site targets tourists and winter sports enthusiasts, offering information about regional activities and attractions. The business is positioned as a regional tourism leader in Graubünden, Switzerland, with a medium-sized cooperative structure founded in 2015. Technically, the website employs modern frontend technologies such as Bootstrap 4, jQuery UI, and Cookiebot for cookie consent management. The site is served over HTTPS with a valid SSL certificate, but lacks some security headers and explicit privacy and terms of service documents. Security posture is moderate with room for improvement in headers and incident response contact information. Overall, the website is professional and trustworthy, but could enhance privacy compliance and security transparency to improve user trust and regulatory adherence.

B

Bodensee Energie

bodensee-energie.de

60

Bodensee Energie is a regional energy provider in Germany offering electricity and gas services with a focus on certified eco-friendly energy. The website targets residential and commercial customers in the Bodensee region, emphasizing competitive pricing and customer service excellence. The digital infrastructure includes modern web technologies such as jQuery, Google Tag Manager, and an advanced accessibility tool by digi·access GmbH, reflecting a mature digital presence. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The site demonstrates good privacy compliance with a comprehensive cookie policy and GDPR adherence. Overall, the website is professional, accessible, and trustworthy, supporting the company's market position as a reliable regional energy supplier.

Müllverbrennung Kiel GmbH & Co. KG (MVK) operates a highly efficient and environmentally friendly waste-to-energy facility in Kiel, Germany, processing approximately 140,000 tons of household and commercial waste annually. The company serves around 500,000 residents and employs about 70 staff members. Ownership is split between the City of Kiel (51%) and REMONDIS GmbH (49%), positioning MVK as a key regional player in waste management and energy recovery. The website reflects a professional and consistent brand image with clear business information and contact details. Technically, the site is built on the Contao CMS platform, utilizing common JavaScript libraries and a cookie consent mechanism compliant with GDPR requirements. Analytics are handled via Matomo, ensuring privacy-conscious tracking.

한미글로벌 E&C is a South Korean construction management company specializing in responsible Construction Management (CM) services. The company showcases a portfolio of architectural projects emphasizing customer-centric construction processes and quality assurance. The website reflects a medium-sized business with a focus on the Korean market and related construction sectors. Technically, the website uses legacy JavaScript libraries such as jQuery 1.12.4 and bxSlider, with basic mobile optimization and moderate performance. Security posture is limited, with no visible HTTPS enforcement or security headers, and no privacy or cookie policies present, indicating gaps in compliance and security best practices. The domain registration is consistent with the business claims, registered since 2016 with a reputable Korean registrar, supporting legitimacy. Overall, the website is professional and functional but requires improvements in security, privacy compliance, and modern technical standards.

LMD is a South Korean real estate development company specializing in premium residential and commercial projects primarily in Seoul. The website highlights several key projects and presents the company as a medium-sized player in the real estate sector with a focus on quality development and consulting services. The technical infrastructure relies on legacy JavaScript libraries such as jQuery 1.12.4 and uses fullPage.js for navigation, indicating moderate digital maturity. The website is accessible and well-structured but lacks modern security headers and visible HTTPS enforcement, which impacts its security posture. Contact information is clearly provided, but privacy and cookie policies are absent, indicating gaps in compliance. Overall, the site is professional but could improve in security and privacy transparency.

O

Otak

otak.com

55

Otak, Inc. is a professional integrated design and project delivery firm specializing in architecture, engineering, environmental consulting, planning, and project management services. The company emphasizes sustainability, integrity, and community engagement as core values, serving government agencies, developers, and communities primarily in the United States. Their market position is that of a medium-sized, reputable firm with a strong focus on delivering community-centric projects and sustainable solutions. Technically, the website is built on WordPress with a modern technology stack including Google Analytics, Google Tag Manager, and various performance and SEO optimization plugins. The site is well-optimized for mobile devices, features good accessibility, and demonstrates excellent SEO practices. The infrastructure appears robust with fast loading times and a professional design. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms compliant with GDPR. However, it lacks visible security headers, a published security policy, and incident response contact information. The absence of WHOIS domain registration data raises some concerns about domain transparency, although the website content and social media presence support its legitimacy. Overall, Otak presents a professional and trustworthy online presence with minor gaps in security transparency and domain registration information. Strategic improvements in security policy publication and domain WHOIS transparency would enhance trust and compliance.

J

JUNG KOREA ELECTRIC CO., LTD.

jungswitch.co.kr

50

JUNG KOREA ELECTRIC CO., LTD. operates a corporate website representing the premium German electrical switch brand JUNG in Korea. The company offers customized electrical switch products and smart floor heating control systems, targeting residential and commercial customers. The website showcases global project references and provides access to an online store, reflecting a medium-sized business with a focus on energy sector products. The digital presence is professionally designed with responsive layouts and modern JavaScript libraries, supporting a good user experience across devices. However, the technical infrastructure lacks explicit security headers and cookie consent mechanisms, indicating room for improvement in security and privacy compliance. The WHOIS data is transparent and consistent with the business identity, supporting legitimacy. Overall, the site is functional, trustworthy, and business-focused but would benefit from enhanced security and privacy features.

Duravit.no is the Norwegian localized website of Duravit, a well-established international brand specializing in bathroom furniture and porcelain products. The company has a long history dating back to 1817 and collaborates with renowned designers to offer high-quality, stylish, and functional bathroom solutions. The website provides rich content including product categories, design inspiration, and tools for customers to plan their bathrooms. Technically, the site uses modern JavaScript libraries, consent management tools, and performance monitoring, hosted likely on a CDN with good SSL configuration. Security posture is solid but could be improved with additional headers and explicit security policies. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a clearly accessible privacy policy page in the provided content. No WHOIS data is publicly available due to Norwegian domain registry privacy policies, but the domain appears legitimate and consistent with the brand. Overall, the website is professional, trustworthy, and well-positioned in the retail bathroom products sector.

AB Hyllteknik is a well-established Swedish manufacturer specializing in strong and flexible shelving and sken systems since 1957. The company serves B2B customers primarily in the Nordic region, including offices, schools, libraries, and furniture resellers. Their product portfolio includes office furniture, library shelving, school cloakroom furniture, and related interior systems. The website reflects a mature business with a consistent brand presence and a clear market position as a leader in their niche. Technically, the site uses a modern tech stack with popular JavaScript libraries, CDN hosting, and standard analytics tools, providing a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS and CSRF protections, though improvements are recommended in DNSSEC deployment and security headers. Privacy compliance is basic with cookie usage disclosed but lacking a formal privacy policy and consent mechanism. Overall, the domain registration data supports the legitimacy and trustworthiness of the business, with a domain age consistent with the company's long history.

K

Komm.ONE

komm-one.net

70

Komm.ONE is a medium-sized IT service provider focused on delivering specialized solutions to municipal and state administrations in Baden-Württemberg, Germany. The company offers a range of services including consulting, cloud solutions, innovation management, and security services tailored for public sector clients. The website reflects a professional and consistent brand presence with clear navigation and relevant content targeted at government entities. Technically, the site employs a modern technology stack with popular JavaScript libraries and frameworks, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism, leveraging Matomo analytics for privacy-conscious tracking. Overall, the domain registration details align well with the business profile, indicating legitimacy and trustworthiness.

P

Primarschule Turbenthal

ps-turbenthal.ch

48

Primarschule Turbenthal is a public primary school serving approximately 500 children across multiple school units in Turbenthal, Switzerland. The institution provides comprehensive educational services including kindergartens, special education, and various support offerings such as speech therapy and school social work. The website is professionally designed using WordPress and includes clear navigation and contact information targeted at parents and the local community. The school holds a stable market position as a key educational provider in the region. Technically, the site uses common WordPress plugins and libraries, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and CAPTCHA on forms, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and well-maintained, suitable for its educational purpose.

S

Schinkels

schinkels-brauhaus.de

56

Schinkels is a regional German brewery and hospitality business offering craft beers, a restaurant experience, and event hosting services. The company emphasizes quality, sustainability, and creating memorable moments for its customers. Their website is professionally designed using WordPress with SEO and event management plugins, providing a rich user experience and structured event data. Security posture is good with HTTPS and cookie consent mechanisms, though explicit privacy and security policies are missing. Overall, the site reflects a mature digital presence suitable for their business model and target audience.

Burgergemeinde Bern is a municipal government entity serving the city and canton of Bern, Switzerland. It provides a broad range of social, cultural, environmental, educational, and scientific services aimed at improving the quality of life for its residents. The website reflects a well-established public institution with clear communication of its mission and services, supported by active social media channels and event listings. Technically, the site is built on the Plone CMS platform, leveraging modern JavaScript libraries and a responsive design that supports good user experience across devices. Security posture is solid with HTTPS enforced and CSRF protections in place, though some improvements in security headers and incident response transparency are recommended. Privacy compliance is good with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a notable gap. Overall, the website is professional, trustworthy, and aligned with the expectations for a government organization.

K

Kirchgemeinde Zürich

kirche-zh.ch

50

The kirche-zh.ch website functions as a portal for the Kirchgemeinde Zürich, serving as a gateway to various church communities in Zurich. It provides basic information and links to affiliated church websites, targeting local residents and church members. The site is modest in content and design, reflecting its non-profit and community-oriented nature. Technically, the site uses a variety of JavaScript libraries including jQuery, Bootstrap, and Piwik/Matomo for analytics, but lacks modern CMS identification and advanced SEO or accessibility features. Security posture is basic with no visible security headers or privacy policies, and no forms or user input mechanisms are present. The domain uses privacy protection in WHOIS, which is justified for this type of organization. Overall, the site is functional but could benefit from improved privacy compliance, security hardening, and richer content to enhance user trust and engagement.

Heitech Service GmbH is a small German web agency specializing in web design, hosting, and consulting services primarily for regional clients. Their website is professionally designed using the Contao CMS and offers hosting under the Lausitz-Hosting brand. The technical infrastructure includes modern JavaScript libraries and a cookie consent mechanism, indicating GDPR awareness. However, the absence of WHOIS registration data raises concerns about domain legitimacy. Security posture is moderate with HTTPS enabled but lacking security headers and explicit incident response information. Overall, the website is functional and trustworthy in appearance but requires verification of domain registration and enhanced security practices.

L

Landessportverband Schleswig-Holstein e.V.

lsv-sh.de

11

The Landessportverband Schleswig-Holstein e.V. is a regional non-profit sports association dedicated to supporting sports clubs and organizations in Schleswig-Holstein, Germany. The website provides comprehensive information about the association's services, including sports promotion, education, funding opportunities, and community projects. It targets sports clubs, volunteers, and sports enthusiasts within the region. The organization holds a strong market position as the leading sports association in Schleswig-Holstein, supported by reputable partners and sponsors. Technically, the website is built on the TYPO3 CMS platform, utilizing modern JavaScript libraries such as jQuery and Owl Carousel for enhanced user experience. The site is mobile-optimized, accessible, and SEO-friendly, with a well-structured navigation system. Privacy compliance is robust, featuring GDPR-compliant privacy and cookie policies with active consent mechanisms. From a security perspective, the site enforces HTTPS and employs cookie consent tools, with no visible vulnerabilities or exposed sensitive data. However, it lacks publicly available security policies and incident response contacts, which could be improved to enhance trust and preparedness. Overall, the website is professional, trustworthy, and well-maintained, reflecting the organization's commitment to transparency and community engagement. Strategic recommendations include publishing a dedicated security policy, incident response information, and enhancing security headers to further strengthen the security posture.

H

HBF Furniture

hbf.com

67

HBF Furniture is a premium manufacturer specializing in contract office seating, tables, and hospitality furniture, with a strong legacy and market presence supported by its parent company, HNI Corporation. The website is built on a modern Drupal 10 CMS platform, leveraging contemporary web technologies and third-party services such as Google Tag Manager and Facebook Pixel for analytics and marketing. The site demonstrates good mobile optimization, accessibility, and SEO practices, providing a professional user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response policies are not published. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the professional branding and external domain relationships. Strategic recommendations include enhancing security header implementation, publishing security and incident response policies, and improving transparency around domain registration.

APARTHOTEL-aarau-WEST is a small hospitality business located in Aarau, Switzerland, offering modern 1-3 room apartments suitable for short and long stays. The business also provides seminar and group rooms, targeting both leisure and business travelers. The website is professionally designed with clear navigation and includes booking tools, 360° apartment views, and comprehensive contact information. The parent company is AARGAUHOTELS.CH, indicating a regional hospitality network. Technically, the site uses Orchard CMS with a mix of modern and legacy technologies including jQuery 1.11.1, Google Analytics, and Matomo for analytics, and Google reCAPTCHA for form security. The site is mobile optimized and SEO friendly but could improve accessibility and update outdated libraries. Security posture is good with HTTPS and input validation, though additional security headers and explicit security policies are recommended. Privacy compliance is basic with a privacy policy and cookie consent banner present. Overall, the site is trustworthy and professionally maintained with moderate user tracking and no suspicious content.

한

한국여성건축가협회 (Korean Institute of Female Architects)

kifaonline.com

9

The Korean Institute of Female Architects (한국여성건축가협회) is a professional non-profit organization dedicated to supporting and promoting female architects in Korea. The website serves as a hub for membership services, event announcements, publications such as newsletters and eBooks, and advocacy for women in architecture. It targets female architecture professionals, students, and related stakeholders within Korea. The organization appears established with a consistent brand presence and active social media engagement.

P

PRÜM-Türenwerk GmbH

tuerenhandbuch-pruem.de

61

PRÜM-Türenwerk GmbH operates a professional website focused on door manufacturing and providing detailed door handbooks and specification texts. The site targets professionals in construction and architecture sectors, offering specialized product information. The company maintains a medium-sized manufacturing business based in Germany with consistent branding and a good quality web presence. Technically, the website is built on TYPO3 CMS with modern frontend technologies such as Bootstrap and jQuery UI. The site is moderately performant, mobile-optimized, and includes SEO best practices. Cookie consent and privacy policies are well implemented, reflecting GDPR compliance. However, explicit security headers and incident response policies are not published. Security posture is adequate with HTTPS and cookie management but could be improved by adding security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected. Tracking includes Google Analytics and Facebook Pixel with user consent mechanisms. Overall, the website is professional, trustworthy, and compliant with privacy regulations. The domain WHOIS data is partially consistent with the website content, supporting legitimacy. No blocking or WAF challenges were detected, allowing full content analysis.

U

Universitätsklinikum Ulm

uniklinik-ulm.de

65

Universitätsklinikum Ulm is a prominent university hospital in Germany, providing advanced medical care, research, and education. The website reflects a well-structured institution focused on patient services, clinical studies, and academic excellence. The digital infrastructure is built on TYPO3 CMS with modern frontend technologies, ensuring a responsive and accessible user experience. Privacy compliance is robust, leveraging Usercentrics for consent management and self-hosted Matomo for analytics, indicating a strong commitment to data protection. Security posture is good with HTTPS enforced, though the absence of certain security headers suggests room for enhancement. Overall, the domain registration and website content align well, confirming legitimacy and trustworthiness.

Sporthotel Fuchsbachtal GmbH operates a regional hotel located in the Deisterlandschaft near Hannover, Germany, offering a blend of accommodation, gastronomy, wellness, and sports activities. The hotel targets general audiences including leisure travelers and sports professionals, with a notable reputation for hosting football teams. The website is built on TYPO3 CMS and integrates modern web technologies including jQuery and Google Analytics with privacy-conscious configurations such as IP anonymization and cookie consent mechanisms. The site is well-structured, mobile-optimized, and provides clear contact information and customer testimonials, enhancing trust and user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though formal security policies and incident response contacts are absent. Overall, the website reflects a professional hospitality business with good digital maturity and compliance with GDPR requirements.

Holz-Zentralblatt is a leading German trade magazine specializing in forestry and the wood industry, operated by DRW-Verlag. It offers professional news, premium articles, classifieds, and event information targeting industry professionals. The website is built on WordPress with a modern plugin ecosystem supporting content management, advertising, and GDPR-compliant cookie consent. The site demonstrates good digital maturity with mobile optimization and privacy-conscious analytics via Matomo without cookies. Security posture is solid with HTTPS enforced and cookie management in place, though security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected. Overall, the site is professional, trustworthy, and compliant with European privacy regulations.

P

Papoo Software & Media GmbH

ccm19boros.de

47

The website ccm19boros.de serves as a login portal for CCM19, a cookie consent management software product developed by Papoo Software & Media GmbH. The business focuses on providing software solutions to help website operators manage cookie consent in compliance with privacy regulations. The site targets businesses requiring cookie consent management and offers a multilingual login interface. The market position appears niche, with a small company footprint and limited publicly available business information. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and jQuery. The infrastructure is hosted on servers indicated by the nameservers your-server.de and second-ns.de. The site shows moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. No CMS or major frameworks are detected beyond custom theme scripts. From a security perspective, the site uses HTTPS (assumed from URL) and a POST login form with autocomplete attributes. However, no security headers such as Content-Security-Policy or HSTS are present, and no privacy or cookie policies are visible on the login page. There is no contact information or incident response details provided, which limits transparency and trust. The WHOIS data is minimal, showing only nameservers without registrant details, reducing domain trustworthiness. Overall, the website is functional for its login purpose but lacks comprehensive privacy, security, and business transparency features. The risk level is moderate due to missing policies and security headers. Strategic improvements in privacy compliance, security hardening, and business information disclosure are recommended to enhance trust and compliance.

Kuhn Organ Builders Ltd is a Swiss-based company specializing in the manufacturing, restoration, and maintenance of pipe organs. With a heritage spanning approximately 150 years, the company emphasizes Swiss craftsmanship and quality, producing organs entirely in Switzerland. Their website reflects a professional and well-structured digital presence, targeting musicians, churches, concert halls, and cultural institutions worldwide. The company maintains a consistent brand image and provides clear contact information and multilingual support, enhancing its international appeal. Technically, the website is built on the Contao Open Source CMS platform, utilizing modern JavaScript libraries such as jQuery and Swipe.js for interactive features. The site is mobile-optimized with good SEO practices, though performance is moderate. Security-wise, HTTPS is used, but explicit security headers and policies are not evident. No cookie consent mechanism or detailed privacy compliance indicators are present, suggesting room for improvement in GDPR adherence. The security posture is adequate with no visible vulnerabilities or exposed sensitive data, but the absence of a published security policy or incident response contact limits transparency. The WHOIS data aligns well with the company's claims, showing a consistent and legitimate registration. Overall, the website is trustworthy, professional, and safe, with minor gaps in privacy and security policy disclosures.

F

Fondation Beyeler

fondationbeyeler.ch

51

Fondation Beyeler is a well-established Swiss museum specializing in modern and contemporary art, located in Riehen/Basel. The institution offers a rich program of exhibitions, educational workshops, events, and a museum shop, targeting art enthusiasts, families, and educators. The website reflects a mature digital presence with multilingual support and comprehensive visitor information. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and integrates various third-party services for analytics and marketing. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

A

AFTRAL

aftral.com

64

AFTRAL is a leading French organization specializing in professional training and education in the transport and logistics sectors. The website offers a comprehensive catalog of courses ranging from CAP to BAC+6 levels, supported by a network of over 120 training centers and multiple campuses. The business targets professionals and students seeking qualifications and certifications in transport, logistics, and supply chain management. The site is well-structured, with clear navigation and a professional design consistent with its market position. Technically, the website is built on Drupal 7 with a variety of contributed modules and libraries such as jQuery UI and Apache Solr for search functionality. It integrates modern tracking and consent management tools including Google Tag Manager, TikTok Pixel, and Cookiebot, indicating a moderate level of digital maturity. Performance and mobile optimization are adequate, though some technical debt is implied by the use of older jQuery versions. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible advanced security headers and explicit security or incident response policies. The absence of WHOIS domain registration data raises concerns about domain legitimacy, though the website content and branding strongly suggest a legitimate and established entity. No critical vulnerabilities or exposed sensitive data were detected. Overall, AFTRAL's website presents a professional and trustworthy front for its educational services, but would benefit from enhanced transparency in privacy policies, contact information, and domain registration details to strengthen trust and compliance.

S

SORA Bern

sora-bern.ch

56

SORA Bern is a Swiss non-profit organization providing social support services primarily targeting families with children up to 18 years and young adults including young parents. Their services focus on strengthening parenting competencies, child welfare, housing skills, and personal development. The website is built on the Plone CMS platform and uses modern web technologies such as jQuery and Handlebars.js. It features a clear navigation structure and is mobile optimized, providing a good user experience. Security-wise, the site enforces HTTPS but lacks several security headers and explicit security policies. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professional but could improve in security and privacy transparency.

E

Eidgenössische Turnveteranen-Vereinigung (ETVV)

etvv.ch

66

The Eidgenössische Turnveteranen-Vereinigung (ETVV) is a Swiss non-profit association dedicated to veteran gymnasts aged 50 and above within the Swiss Gymnastics Federation. The organization promotes camaraderie, ethical values, and the ideals of Swiss gymnastics, while also supporting youth sports through sponsorships. The website is bilingual (German and French), professionally designed, and provides clear organizational and contact information. Technically, it is built on the Jimdo Creator CMS platform, uses modern web technologies, and includes standard privacy and cookie consent mechanisms. Security posture is good with HTTPS enforced and appropriate security headers, though no explicit security policy or incident response information is provided. Overall, the site is trustworthy, compliant with GDPR, and serves its niche audience effectively.

The website www.grossenhain.de is the official online presence of the city administration of Großenhain, Germany. It serves as a comprehensive information portal for residents, visitors, and local businesses, offering city news, event calendars, citizen services, and tourism information. The site is well-structured, primarily in German, and reflects the identity and functions of a municipal government entity. The business model is focused on public service and community engagement, positioning itself as a trusted local government resource. Technically, the website is built on the Contao Open Source CMS platform and leverages several JavaScript libraries such as jQuery, bxSlider, and Usercentrics for cookie consent management. Hosting is provided by heitech.net, as indicated by the nameservers. The site demonstrates moderate performance and good mobile optimization, with basic accessibility features and solid SEO practices. The presence of structured data (JSON-LD) enhances search engine understanding. From a security perspective, the site uses HTTPS with a good SSL configuration and employs a consent management platform to comply with GDPR. However, explicit security headers are not detected, and no dedicated security or incident response policies are published. No vulnerabilities or exposed sensitive data were found in the HTML content. The WHOIS data aligns well with the website's claims, supporting its legitimacy and trustworthiness. Overall, the website is professional, trustworthy, and suitable for its intended audience. It maintains good privacy compliance and provides clear contact information. Strategic improvements could include adding explicit security headers, publishing security policies, and enhancing accessibility features to further strengthen its security posture and user experience.

D

digicube AG

bienen.ch

58

bienen.ch is a comprehensive Swiss platform dedicated to providing high-quality, scientifically grounded information about honey and wild bees, beekeeping, and environmental issues. The platform is supported by organizations focused on improving bee health and habitats, offering educational resources, services, and a marketplace for beekeeping supplies. The website targets beekeepers, environmentalists, and the general public interested in bees within Switzerland. Technically, the site is built on a modern WordPress infrastructure with a rich plugin ecosystem, optimized for performance, mobile responsiveness, and accessibility. Security posture is solid with HTTPS enforced and no obvious vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and minimal user tracking via Plausible Analytics. Overall, the site demonstrates high professionalism, trustworthiness, and a strong alignment between WHOIS data and business claims.

The Deutscher Behindertensportverband e.V. (DBS) is the largest disabled sports association globally, serving as the National Paralympic Committee for Germany. The website provides comprehensive information about disabled sports, athlete support, events, and educational resources, targeting individuals interested in Paralympic and disabled sports. The organization operates as a non-profit entity with a strong market position in Germany. Technically, the website is built on the Contao CMS platform, utilizing modern JavaScript libraries such as jQuery and Colorbox, and is hosted by agenturserver. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security-wise, the site enforces HTTPS, uses CSRF protection cookies, and implements a cookie consent mechanism with GDPR compliance. However, it lacks explicit security policy pages and incident response contacts. Overall, the website is professional, trustworthy, and well-maintained, with active social media engagement and clear branding.

C

ClubDesk

clubdesk.com

61

ClubDesk is a Swiss-based online club management software provider offering a comprehensive SaaS platform for associations and clubs to manage members, accounting, events, and websites. The company targets a broad range of clubs including sports, cultural, and hobby groups, with a strong presence in Switzerland and Germany. The website is professionally designed, mobile-optimized, and integrates modern technologies such as Contao CMS, jQuery, and Google Tag Manager. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers and explicit privacy policies are missing. The business demonstrates legitimacy through transparent WHOIS data and partnerships with reputable financial and sports organizations. Overall, ClubDesk presents a mature digital infrastructure with a strong market position in the club management software niche.

D

DRDH Architects

drdharchitects.co.uk

41

DRDH Architects is a London-based architectural practice with a portfolio showcasing cultural, residential, and civic projects across Europe, including Belgium and the UK. The firm targets clients seeking architectural design and masterplanning services, positioning itself as an established mid-sized player in the real estate and architectural sector. The website presents a professional portfolio with clear contact information but lacks modern privacy and security disclosures. Technically, the site relies on legacy JavaScript libraries and does not show evidence of modern CMS or hosting details. Security posture is weak due to missing HTTPS confirmation and security headers, and no privacy or cookie policies are present, which may impact compliance. The absence of WHOIS data for the domain raises concerns about domain legitimacy, although the website content itself appears professional and trustworthy. Overall, the site demonstrates moderate digital maturity but requires improvements in security and compliance to enhance trust and risk posture.