Security Directory

B

Branded Wor(l)ds

brandedworlds.online

56

The website brandedworlds.online is a small-scale online presence built using the Wix platform. It appears to be a basic website with minimal content and no visible business description or contact information. The site is not indexed by search engines due to the presence of a 'noindex' meta tag, limiting its discoverability. Technically, the site uses Wix's Thunderbolt framework and standard web technologies such as JavaScript, HTML5, and CSS3. Mobile optimization is adequate, but SEO and accessibility features are minimal. Security-wise, the site uses HTTPS but lacks important security headers and policies such as privacy or cookie policies, which are critical for compliance and user trust. No analytics or tracking scripts were detected, indicating minimal user data collection. Overall, the site has a low security posture and limited business credibility due to the absence of contact and policy information.

B

backslash AG

backslash.ch

75

backslash AG is a Swiss web agency specializing in accessible web design and content management systems tailored for eGovernment clients such as cantons, cities, municipalities, schools, and associations, as well as SMEs. Their market position is focused on providing specialized digital solutions that enhance accessibility and government digital services. The website demonstrates a professional and consistent brand presence with clear navigation and relevant content targeting Swiss public sector and business clients. Technically, the site employs modern JavaScript libraries including jQuery, Font Awesome 7 Pro, Swiper, and accessibility-focused tools like a11y-dialog, indicating a mature digital infrastructure. The CMS solutions mentioned, GOViS and intellio, suggest custom or specialized platforms for government digital needs. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and privacy policies are missing, representing areas for improvement. Overall, the site is safe, professional, and trustworthy with no signs of malicious content or blocking by security mechanisms.

B

backslash AG

govis.ch

71

GOViS is a Swiss-based modern content management system tailored for public sector institutions such as municipalities, cities, cantons, and schools. The platform is widely adopted with over 550 public institutions using it nationwide, positioning it as a leading solution in the Swiss e-government space. The company behind GOViS, backslash AG, demonstrates a strong market presence with over 20 years of experience and a commitment to continuous development and customer support. The website reflects a professional and trustworthy image with comprehensive information and customer testimonials.

E

EXPERTsuisse

expertsuisse.ch

67

EXPERTsuisse is a well-established Swiss professional association specializing in audit, tax, and fiduciary services. With nearly a century of history, it provides comprehensive training, certification, and support to federally certified experts. The website reflects a mature market position with a focus on professional education, industry news, and member services. Technically, the site employs modern web technologies including Turbo Frames, StimulusJS, and integrates privacy-conscious analytics. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR standards.

H

Hello Career

hello-career.ch

51

Hello Career is a Swiss educational platform dedicated to providing comprehensive information about the apprenticeship profession 'Kauffrau/Kaufmann Treuhand/Immobilien'. The website targets young individuals interested in pursuing apprenticeships in fiduciary and real estate sectors, offering resources such as career choice analysis, event listings, blog testimonials, and apprenticeship opportunities. The platform is well-positioned within its niche, supported by partnerships with reputable Swiss organizations, enhancing its credibility and trustworthiness. Technically, the website employs modern tracking technologies including Google Analytics and Google Tag Manager, integrated with a consent management system to comply with privacy regulations. The site demonstrates good mobile optimization, clear navigation, and a professional design, contributing to a positive user experience. However, there is room for improvement in accessibility and the implementation of advanced security headers. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, reflecting a solid baseline security posture. No critical vulnerabilities or exposed sensitive data were detected. The absence of a published security policy or incident response contact is noted as an area for enhancement to strengthen transparency and preparedness. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic recommendations include enhancing security headers, publishing a security policy, and considering a vulnerability disclosure framework to further bolster trust and security maturity.

G

gateway.one

gateway.one

48

gateway.one is a Swiss-based educational platform focused on connecting youth with apprenticeship opportunities and providing career guidance tools. The platform offers a comprehensive suite of services including apprenticeship search, aptitude tests, and employer services for posting apprenticeship positions. It targets students, parents, teachers, and companies, positioning itself as a key player in the Swiss vocational education market. The website is professionally designed, mobile-optimized, and rich in relevant content, supporting a positive user experience. Technically, the site leverages modern web technologies including jQuery, Google Tag Manager, Facebook Pixel, and Hotjar for analytics and user tracking. It is built on the Contao Open Source CMS, ensuring a robust content management framework. The site uses HTTPS with good SSL configuration, though security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Security posture is solid with secure login forms and encrypted connections, but lacks explicit incident response and vulnerability disclosure pages. The absence of WHOIS data limits domain registration transparency, but the overall business credibility and trust signals are strong. No adult or explicit content is present, making the site safe for general audiences. Overall, gateway.one demonstrates a mature digital presence with good security and privacy practices, serving an essential educational function in Switzerland. Strategic improvements in security headers and incident response transparency would further enhance trust and resilience.

H

Honorix

honorix.ch

55

Honorix.ch is a website with minimal publicly accessible content, primarily serving as a digital presence with an Angular-based frontend. The site lacks visible business descriptions, contact information, or policy documents, limiting insight into its operations or market positioning. The technical infrastructure uses Angular 12.2.16 and Webpack, indicating a modern but basic frontend setup. However, the absence of visible content and metadata suggests the site may be under development or intended for limited use. From a security perspective, no HTTPS or security headers information is available, and no privacy or cookie policies are present, indicating potential compliance gaps. The lack of contact or incident response information further reduces the site's trustworthiness and security posture. WHOIS data shows consistent domain registration in Switzerland, aligning with the domain name and presumed business location, supporting legitimacy. Overall, the website's risk is moderate due to minimal content and lack of security and privacy features. Strategic recommendations include implementing HTTPS, publishing privacy and cookie policies, adding contact and incident response information, and enhancing security headers to improve compliance and trust.

WNG SA is a specialized digital communication and marketing agency based in Lausanne, Switzerland, targeting institutional clients in the French-speaking region of Switzerland. The company offers consulting, design, technology implementation, and marketing strategy services, positioning itself as a trusted partner for institutional actors. The website reflects a professional and consistent brand image with strong client references and certifications. Technically, the site is built on TYPO3 CMS and leverages modern JavaScript libraries and frameworks, ensuring good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS enforcement and basic security headers, although there is room for improvement in explicit security policies and incident response documentation. Privacy compliance is supported by a cookie consent mechanism, but a dedicated privacy policy page is not clearly found. Overall, the website demonstrates a mature digital presence with good business credibility and technical implementation.

U

UNDP Sverige

globalamalen.se

40

Globalamalen.se is an official informational and educational website operated by UNDP Sweden, focusing on the United Nations Sustainable Development Goals (Globala målen). The site serves as a comprehensive resource for the general public, educators, businesses, and organizations interested in sustainable development, offering educational materials, interactive tools, and news updates. The platform is well-branded with UNDP logos and maintains a professional and authoritative presence in the Swedish market. Technically, the website is built on WordPress with a modern tech stack including jQuery, Foundation CSS, and various plugins for analytics and social media integration. It is hosted by Loopia AB and uses HTTPS with good SSL configuration. Security practices are solid but could be enhanced by enabling DNSSEC and adding more security headers. Privacy compliance is strong, with clear cookie and privacy policies and consent mechanisms in place. However, no explicit terms of service or incident response policies are published. Overall, the website demonstrates a high level of professionalism, trustworthiness, and content quality, making it a reliable source for information on the Global Goals in Sweden.

S

SWEDMA - Swedish Data & Marketing Association

swedma.se

64

The website www.swedma.se appears to represent a marketing association or similar entity based in Sweden, as inferred from the domain and partial content. However, the domain WHOIS data is missing, indicating the domain may not be registered or is inactive, which raises significant trust and legitimacy concerns. The website content is minimal and truncated, with no visible privacy, cookie, or terms of service policies, and no contact information is provided. Technically, the site uses Google reCAPTCHA and lime-forms JavaScript libraries but lacks advanced security headers or analytics tools. Overall, the digital maturity is low, and the security posture is basic with no clear compliance indicators.

S

Sveriges Mediebyråer

sverigesmediebyraer.se

39

Sveriges Mediebyråer is a prominent Swedish media agency association representing 39 member agencies and managing significant communication investments. The organization provides industry insights, events such as StockholmMediaWeek, and publishes recommendations to foster collaboration and efficiency within the media agency sector. The website is built on WordPress with modern technologies including Google Analytics and reCAPTCHA, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and privacy compliance mechanisms in place, though improvements in security headers and incident response disclosures are recommended. Overall, the site presents a professional and trustworthy image aligned with its industry role.

S

Sveriges Kommunikatörer

sverigeskommunikatorer.se

45

Sveriges Kommunikatörer is a well-established professional association dedicated to supporting and developing communication professionals in Sweden. The organization offers memberships, educational programs, events, and a rich knowledge bank to empower communicators throughout their careers. Their market position is strong within the Swedish communication industry, serving over 6,000 members with a comprehensive suite of services including AI-focused courses and leadership programs. Technically, the website is built on modern frameworks such as React and Next.js, hosted likely on Microsoft Azure, and optimized for performance and mobile responsiveness. The site employs secure form handling and integrates Google Tag Manager for analytics, reflecting a mature digital infrastructure. From a security perspective, the site uses HTTPS and shows no signs of exposed sensitive data or vulnerabilities in the HTML content. However, explicit security headers were not detected in the provided data, suggesting room for improvement. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms. Overall, the website presents a low risk profile with strong business credibility and professional content. The main limitation is the absence of WHOIS data for the exact domain queried, which slightly impacts domain legitimacy verification. Strategic recommendations include enhancing security headers and maintaining rigorous privacy compliance.

S

Sveriges Annonsörer

sverigesannonsorer.se

70

Sveriges Annonsörer is a well-established independent interest organization founded in 1924, dedicated to promoting responsible and effective marketing practices exclusively for advertisers in Sweden. The organization offers a broad range of services including education, certification programs, networking opportunities, and advocacy on key industry issues such as brand safety, data ethics, and transparency in media buying. Their market position is strong within the Swedish advertising sector, supported by a professional and content-rich website that reflects their commitment to their members. Technically, the website is built on WordPress with modern plugins and tools, providing good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS and secure form handling, though some security headers could be improved. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms. Overall, the website and organization demonstrate high professionalism and trustworthiness, though WHOIS data for the domain was not available due to querying a subdomain.

S

Sveriges Kommunikationsbyråer

komm.se

57

Sveriges Kommunikationsbyråer (Komm) is a well-established Swedish industry association founded in 2004, serving communication agencies and companies involved in marketing, PR, design, digital media, and related fields. The organization provides membership services, industry news, educational resources, events, and legal guidance to its members, positioning itself as a key player in Sweden's communication sector. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the site is built on WordPress with modern SEO tools like Yoast SEO and uses Plausible Analytics for privacy-conscious visitor tracking. The site is mobile-optimized, accessible, and performs moderately well. Hosting and domain registration are stable and consistent with the business profile, with no signs of suspicious activity or privacy protection that would obscure legitimacy. From a security perspective, the site enforces HTTPS and uses secure forms but lacks advanced security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good with a comprehensive privacy policy and GDPR adherence, though a cookie consent mechanism is missing. Overall, the website is trustworthy, professional, and well-maintained, with minor recommendations to enhance security headers and cookie consent to further improve compliance and security posture.

B

brucy.io

brucy.io

64

Brucy.io is a Swedish-based technology company offering a comprehensive website-as-a-service platform. Their business model is subscription-based, targeting small to large businesses seeking professional, fully managed websites with additional digital marketing and branding services. The company positions itself as a provider of high-quality, easy-to-use digital solutions with strong customer support and ongoing maintenance. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, hosted on Google Cloud Platform, and employs Google reCAPTCHA for form security. The site is well-optimized for performance, mobile responsiveness, and SEO. Security posture is good with HTTPS enforced, though some security headers are missing and no explicit cookie consent mechanism is present. WHOIS data is unavailable due to privacy protection, but the website's professional content and contact details support its legitimacy. Overall, the site demonstrates a mature digital presence with room for improvement in privacy and security transparency.

S

ShowHeroes Studios

showheroes-studios.com

55

ShowHeroes Studios is a media production company specializing in editorial, commercial, and digital video production services targeted at publishers and advertisers. The company operates under the parent entity ShowHeroes Group and maintains a professional online presence with a well-structured website optimized for SEO and user experience. The website leverages modern web technologies including JavaScript ES modules and Google Analytics for tracking. Security posture is solid with HTTPS enforced and domain transfer protections in place, though improvements can be made by enabling DNSSEC and adding security headers. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of service available, but lacks a cookie consent mechanism. Overall, the site is trustworthy, professional, and well-positioned in the media industry.

S

ShowHeroes Group

showheroes-group.com

59

ShowHeroes Group is a medium-sized, Germany-based company specializing in contextual video and CTV advertising solutions. It operates multiple subsidiary brands providing advanced video technology and advertising platforms targeting digital publishers and advertisers primarily in Europe. The website demonstrates a high level of professionalism, with excellent content quality and clear business messaging. The technical infrastructure leverages modern JavaScript modules, HubSpot marketing tools, and is hosted on DigitalOcean, indicating a mature digital presence. Security posture is strong with HTTPS enforced and domain transfer protection, though DNSSEC is not enabled and explicit security policies are absent. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the website and domain registration data align well, supporting the legitimacy and trustworthiness of the business.

H

Finden Sie Ihren Traumpartner mit heimatflirt.de

heimatflirt.de

66

heimatflirt.de is a German regional online dating platform focused on helping users find partners in Westfalen. The website offers basic dating services with a straightforward user interface and content primarily in German. The technical infrastructure relies on AWS hosting and custom fonts, with moderate performance and basic mobile optimization. However, the site lacks critical privacy and security policies, contact information, and advanced security headers, which lowers its overall security posture. No evidence of security incident response or vulnerability disclosure mechanisms was found, indicating limited security maturity. Overall, the platform serves a niche adult audience but requires significant improvements in privacy compliance and security to enhance trust and regulatory adherence.

M

Merkle Inc.

securedvisit.com

59

The website www.rkdms.com currently serves a restricted access page that blocks visitors from the EU to comply with GDPR regulations. The page is minimalistic, providing information about GDPR compliance and linking to Merkle Inc.'s privacy and legal policies. Merkle Inc. is a recognized marketing technology company specializing in data-driven customer experience management. The website content reflects a focus on privacy and compliance but lacks interactive elements or detailed business information on this restricted page. Technically, the site uses basic HTML and CSS with responsive design elements but does not include advanced frameworks or visible analytics/tracking scripts on this page. No security headers or SSL configuration details were available from the provided data, and no WHOIS registration data could be retrieved, raising concerns about domain legitimacy. The absence of contact information and cookie consent mechanisms further limits the site's compliance and trust signals. From a security perspective, the site demonstrates awareness of GDPR and privacy policies but lacks visible technical security controls such as security headers or incident response contact details on this page. The WHOIS data absence is a critical risk factor, reducing overall trustworthiness. No WAF or blocking mechanisms were detected, and the content is accessible without challenge. Overall, the site scores moderately on privacy compliance and business credibility but is limited by missing WHOIS data and minimal content. Strategic improvements in security headers, contact transparency, and WHOIS registration verification are recommended to enhance trust and compliance.

S

SauerlandKurier

sauerlandkurier.de

58

SauerlandKurier is a regional news media outlet serving the Sauerland region in Germany, focusing on local news, events, and community information. The website is professionally designed with a consistent brand presence and offers a variety of content including news articles, photos, and videos. It operates under the parent company Ippen.Media, leveraging a modern technical infrastructure with multiple third-party integrations for advertising and user engagement. The site employs HTTPS and consent management to ensure privacy compliance, although explicit security and incident response policies are not publicly disclosed. Overall, the website demonstrates a mature digital presence suitable for its regional audience.

D

Digitale Kreativ Agentur

digitale-kreativ-agentur.de

57

Digitale Kreativ Agentur is a small, full-service advertising and marketing agency based in Kassel, Germany. They specialize in crossmedia marketing solutions including print, digital marketing, social media management, employer branding, content creation, graphic design, and multimedia production. The agency serves a diverse client base ranging from auto dealerships to healthcare and real estate sectors, positioning itself as a trusted regional partner with a strong local presence. Their website reflects a professional and modern digital footprint with comprehensive service offerings and client testimonials that reinforce their market position. Technically, the website is built on WordPress with modern JavaScript libraries such as Swiper.js and jQuery, and employs SEO best practices via the Rank Math plugin. Cookie consent is managed through the Borlabs Cookie plugin, ensuring GDPR compliance. The site is mobile-optimized and performs moderately well, with good accessibility and SEO optimization. No significant technical debt or performance bottlenecks were detected. From a security perspective, the website uses HTTPS with an excellent SSL configuration. However, security headers are not explicitly detected, and no formal security or incident response policies are published. There are no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. The WHOIS data is consistent with the website's claims, indicating a legitimate and trustworthy domain registration. Overall, the website demonstrates a high level of professionalism, security awareness, and compliance, making it a reliable digital presence for the agency. Strategic improvements in security headers and incident response transparency could further enhance their security posture.

D

dunp

dunp.it

48

dunp is a well-established communication agency based in Rome, Italy, founded in 2009. It serves a diverse clientele including entrepreneurs, startups, SMEs, large international players, and public institutions. The agency offers a broad range of services such as digital marketing, web development, advertising campaigns, consultancy on grants and funding, and digital transformation support. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive service descriptions. Technically, the site uses ASP.NET WebForms with modern front-end libraries and integrates Google services for analytics and advertising. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. The agency holds multiple Google certifications, enhancing its credibility. Contact information is clearly provided, supporting trust and accessibility.

T

Telegram

telegram.me

72

Telegram.org is the official website of Telegram Messenger, a globally recognized cloud-based messaging platform emphasizing security, speed, and privacy. The site offers comprehensive information about the app's features, including multi-device synchronization, encrypted messaging, and an open API for developers. The platform targets a broad audience seeking secure and fast communication tools. Technically, the website is well-structured, mobile-optimized, and uses modern web technologies such as Bootstrap and SVG graphics. Hosting is managed via Google Cloud DNS, ensuring reliable performance and uptime. Security-wise, the site enforces HTTPS and employs domain locking mechanisms but lacks visible security headers and a cookie consent mechanism, which are areas for improvement. The WHOIS data confirms a long-standing domain registration consistent with Telegram's market presence, enhancing trustworthiness. Overall, the website demonstrates strong business credibility and technical maturity but could enhance privacy compliance and security transparency.

E

eMarketeer

emarketeer.com

68

eMarketeer is a well-established marketing automation platform founded in 2003, specializing in lead generation, management, and sales delivery. The company targets businesses seeking comprehensive marketing tools to optimize lead workflows and measure campaign success. The website reflects a mature digital presence built on WordPress with Elementor, integrating modern marketing and analytics technologies such as Google Tag Manager and Google Analytics. Hosting is provided by Amazon Web Services, indicating a robust infrastructure. Security posture is solid with HTTPS enforced and domain registration protections, though additional HTTP security headers could enhance defenses. The site demonstrates strong GDPR compliance with a detailed cookie consent mechanism and a comprehensive privacy policy. Contact is primarily via embedded forms, with no direct emails or phone numbers publicly listed. Overall, the website is professional, trustworthy, and well-optimized for its target audience.

S

Sveriges Radio

sr.se

71

Sveriges Radio operates as Sweden's national public radio broadcaster, delivering up-to-date news, podcasts, and live radio streaming services. The website serves a broad audience interested in Swedish and international news, culture, sports, and science. It is positioned as a leading media entity in Sweden with a strong public service mandate. The digital platform is built on modern web technologies, notably Next.js and React, ensuring a responsive and performant user experience across devices. The site features rich multimedia content including audio news articles and podcasts, reflecting a mature digital media infrastructure. Security posture is solid with HTTPS enforced and no evident vulnerabilities in the HTML content, though explicit security headers and privacy policies are not clearly linked in the provided snapshot. Overall, the site demonstrates high professionalism and trustworthiness consistent with a public service broadcaster. Strategic recommendations include enhancing transparency around privacy and cookie policies, publishing security and incident response information, and implementing explicit security headers to further strengthen security posture.

IATI Connect is a well-established global community platform dedicated to aid transparency, serving practitioners and members of the IATI community. The website offers a rich set of resources, discussions, events, and guidance to support transparency initiatives worldwide. It positions itself as a niche but important platform within the non-profit and government sectors focused on international aid transparency. Technically, the site is built on Drupal CMS and integrates modern analytics and bot detection tools, providing a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS and some security best practices, though there is room for improvement in HTTP security headers. Privacy compliance is good with a clear privacy policy and GDPR considerations, though cookie consent mechanisms could be enhanced. Overall, the site demonstrates high professionalism and trustworthiness, despite the lack of publicly available WHOIS data due to privacy protection.

The d-portal website serves as a key tool within the International Aid Transparency Initiative (IATI) ecosystem, providing users with the ability to explore, search, and analyze international development and humanitarian aid data. The platform targets development professionals, NGOs, researchers, and policymakers, offering open access to detailed activity data from various reporting organizations. The site is well-branded and consistent with IATI standards, supporting multiple languages and providing helpful documentation links. Technically, the site employs a modern JavaScript stack including jQuery, Chartist.js for data visualization, and multiple analytics platforms such as Google Analytics, Matomo, and Plausible. The site is mobile-optimized with good navigation and user experience, though accessibility features are basic. Performance is moderate, with room for improvement in SEO and accessibility compliance. From a security perspective, the site uses HTTPS and avoids exposing sensitive data in the HTML. However, no explicit security headers were detected, and privacy and cookie policies are not present in the analyzed content, indicating gaps in privacy compliance. WHOIS data is unavailable or malformed, likely due to privacy protection, but the domain is consistent with the official IATI network, supporting legitimacy. Overall, the site is a credible and professional resource for aid transparency, but it would benefit from enhanced privacy disclosures, security header implementation, and accessibility improvements to strengthen its security posture and compliance.

I

IATI Registry

iatiregistry.org

50

The IATI Registry website serves as a centralized platform for organisations to register and publish datasets compliant with the International Aid Transparency Initiative (IATI) standard. It supports over 1800 organisations and provides tools such as a searchable datastore, dashboards for data quality, and API access. The site is positioned as a key resource in the aid transparency and open data ecosystem, targeting NGOs, governmental agencies, and data users interested in development aid information. Technically, the website is built on the CKAN open data platform, leveraging modern web technologies including jQuery, Bootstrap, and Font Awesome. Hosting and DNS services are provided via Cloudflare, ensuring reliable performance and security. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some improvements in security headers and cookie consent mechanisms are recommended. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks DNSSEC, security headers, and explicit incident response or vulnerability disclosure policies. Analytics usage includes Google Analytics and Plausible, with moderate user tracking and basic privacy compliance. No critical vulnerabilities or suspicious patterns were detected. Overall, the IATI Registry website is a trustworthy, professional platform with a solid technical foundation and clear business purpose. Strategic enhancements in security policies, cookie consent, and transparency documents would further strengthen its compliance and user trust.

W

WESER-KURIER

weser-kurier.de

62

WESER-KURIER is a regional news media company serving Bremen and Niedersachsen in Germany, providing comprehensive coverage of local news, politics, sports, culture, and economy. The website is professionally designed with consistent branding and targets a general audience interested in regional news. Technically, the site employs modern JavaScript libraries, ad delivery networks, and subscription management tools, hosted on German infrastructure. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and explicit privacy policies are missing. The site lacks explicit contact information and cookie consent mechanisms, which impacts privacy compliance. Overall, the site is trustworthy and well-positioned in its market but would benefit from enhanced privacy and security disclosures.

W

Waldeckische Landeszeitung

wlz-online.de

58

Waldeckische Landeszeitung operates as a regional news media portal serving the Waldeck, Frankenberg, and Nordhessen regions in Germany. The website offers a variety of local news content including articles, photos, videos, podcasts, and e-paper services. It targets local residents and readers interested in regional news and events. The business model is primarily advertising-supported digital media with a focus on community engagement and local reporting. The site is part of the Ippen Digital group, a known media company in Germany, indicating a stable market position within regional news media. Technically, the website employs modern web technologies such as RequireJS, Google Tag Manager, Braze for marketing automation, and a custom CMS platform. The site is mobile responsive and optimized for SEO, providing a good user experience. Security posture is solid with HTTPS enforced and consent management implemented for GDPR compliance, although explicit privacy policies and terms of service are not directly found in the provided content. Advertising and tracking scripts are standard for media sites, with no suspicious or malicious elements detected. Overall, the website is professional, trustworthy, and well-positioned in its market niche.

W

Werra-Rundschau

werra-rundschau.de

56

Werra-Rundschau is a regional news media outlet serving Eschwege and the surrounding Werra-Meißner-Kreis region in Germany. The website offers local news, sports coverage, panorama stories, multimedia content, and digital newspaper services such as an ePaper. It targets local residents and readers interested in regional developments. The business model relies on advertising and subscription-based digital content. The site is part of the Ippen Digital network, indicated by scripts and tracking tools used. Technically, the website employs modern JavaScript frameworks, responsive design, and integrates consent management platforms to comply with privacy regulations. Hosting is provided by Deutsche Telekom AG, with German nameservers ensuring regional consistency. Security posture is good with HTTPS enforced and some security headers implied, though explicit security policies and incident response contacts are not published. Privacy compliance is basic, lacking clearly visible privacy and cookie policies. Overall, the website is professional, trustworthy, and well-structured, serving its regional audience effectively.

Rheinische Post Online is a well-established German media company providing continuous news coverage through its digital platform. The website offers a freemium business model with free content supported by advertising and a paid subscription service (RP+) that provides additional content and reduced advertising. The platform targets a general audience interested in regional and national news. Technically, the website employs modern web technologies including custom web fonts, asynchronous JavaScript loading, and Google Tag Manager for analytics. Hosting and DNS services are managed via Cloudflare, enhancing performance and security. Security posture is solid with HTTPS enforced and user consent mechanisms for tracking and cookies implemented, though some security headers are not explicitly detected. Privacy compliance is strong, with clear links to privacy and cookie policies and GDPR adherence. No critical vulnerabilities or suspicious WHOIS data were found, indicating a trustworthy and professional online presence.

VRS Media GmbH & Co. KG is a specialized IT service provider and software house focused on delivering white-label SaaS solutions for over 120 newspaper publishers and 570 newspaper titles. Their offerings include themed internet portals, online classified ad markets, and ad submission systems tailored for media houses. The company holds a strong market position in Germany and surrounding countries, serving a medium-sized business segment with a comprehensive portfolio and full-service support including hosting, maintenance, and marketing assistance. Technically, the website is built on WordPress with a modern theme and plugins, optimized for mobile and SEO, and integrates privacy-respecting analytics via Matomo. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

C

ClimaGrün

climagruen.it

57

ClimaGrün is a specialized company focused on intelligent green roofing systems, with over 20 years of research and development in sustainable roof greening and technical greening solutions. The company targets planners, architects, landscape architects, investors, and private customers, offering patented thin-layer water storage technology integrated into their green roof systems. Their market position is that of an established niche player in the sustainable urban greening sector, primarily operating in Germany. The website demonstrates a high level of digital maturity, built on WordPress with Elementor, enhanced by SEO tools and modern JavaScript libraries for animations and user experience. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though formal security policies and incident response contacts are not explicitly published. Overall, the site is professional, trustworthy, and compliant with GDPR, providing a solid platform for business and customer engagement.

I

Institut Jacques Delors

institutdelors.eu

63

Institut Jacques Delors is a well-established European think-tank founded in 1996, focusing on research and policy analysis related to the European Union. The organization targets policymakers, academics, and the public interested in EU affairs, providing publications and events to influence European policy discourse. The website reflects a professional and consistent brand image, with comprehensive content and clear navigation. Technically, the site uses WordPress CMS, integrates Google Tag Manager and reCAPTCHA for analytics and security, and employs Cookiebot for GDPR-compliant cookie management. Hosting is provided by OVH SAS, a reputable French hosting provider. Security posture is strong with HTTPS, cookie consent, and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the site is trustworthy, compliant, and well-maintained, serving its non-profit mission effectively.

F

Fundación Universitaria San Pablo CEU

ceu.es

69

Fundación Universitaria San Pablo CEU is a well-established Spanish educational institution operating multiple centers across Spain, including universities, vocational training, and schools. The website reflects a professional and comprehensive digital presence targeting students and academic communities. The institution leverages modern web technologies such as Bootstrap, jQuery, and integrates analytics and marketing tools like Google Analytics, Facebook Pixel, and Cookiebot for privacy compliance. The website is well-structured, mobile-optimized, and provides clear privacy and cookie policies, demonstrating a commitment to GDPR compliance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers and explicit security policies could enhance protection. Overall, the domain and website present a trustworthy and credible educational entity with no signs of malicious activity or content blocking.

Via Charlemagne is an international non-profit association dedicated to promoting the cultural and historical heritage of Charlemagne and the Carolingian Empire across Europe. The organization focuses on educational and touristic circuits, cultural activities, and training programs related to European history and identity. The website is well-positioned as a recognized cultural itinerary certified by the Council of Europe, targeting history enthusiasts, tourists, educators, and cultural organizations. The business model centers on cultural promotion and education rather than commercial activities. Technically, the website is built on WordPress with modern technologies including Bootstrap, jQuery, Owl Carousel, and AOS for animations. SEO is enhanced by the Yoast SEO plugin, and Google Analytics and Tag Manager are used for visitor tracking. The site is mobile-optimized and provides a good user experience with clear navigation and multilingual support. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA v3 on contact forms, indicating a reasonable security posture. However, it lacks explicit security headers and a formal security or incident response policy. Privacy compliance is partially addressed with a privacy policy page, but no cookie consent mechanism is present, which could be improved to meet GDPR requirements fully. Overall, the website is professional, trustworthy, and serves its cultural and educational mission effectively. Strategic improvements in privacy compliance and security headers would enhance its security posture and regulatory adherence.

R

Rete Italiana Pace e Disarmo

retepacedisarmo.org

49

Rete Italiana Pace e Disarmo is a small Italian non-profit organization dedicated to peace and disarmament advocacy. The website serves as an information hub for campaigns related to arms control, nuclear disarmament, military spending, and peace education. It targets activists, NGOs, policymakers, and the general public interested in peace issues. The organization appears well-positioned within the Italian peace advocacy sector with active social media presence and regular content updates. Technically, the website is built on WordPress with a modern theme and plugins for SEO and caching. The infrastructure is standard for non-profit advocacy sites, with moderate performance and good mobile optimization. However, some technical improvements are possible, such as enabling DNSSEC and adding security headers. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks advanced security headers and DNSSEC. The Google Analytics plugin is installed but not configured, indicating incomplete analytics setup. No privacy, cookie, or terms of service policies are found, which is a compliance gap. No incident response or vulnerability disclosure information is provided. Overall, the website is professional and trustworthy but could improve privacy compliance and security posture. Strategic recommendations include implementing privacy and cookie policies, enabling DNSSEC, adding security headers, and configuring analytics properly.

The website represents Associazione Culturale Prospettive Mediterranee, a small cultural association. The site is currently down for maintenance, providing minimal business information and no active content for visitors. The business appears to be a non-commercial cultural entity with limited online presence and no visible marketing or e-commerce activities. Technically, the site uses Joomla CMS with common JavaScript libraries such as MooTools, jQuery, and Bootstrap. The site is served over HTTPS but lacks security headers and visible privacy or cookie policies, indicating a low level of security maturity. The login form is exposed on the maintenance page without additional protections, which could pose a security risk. Overall, the website quality and professionalism are poor due to the maintenance state and lack of content. The WHOIS data is unavailable due to EURid privacy restrictions, limiting domain trust assessment. The domain appears legitimate but lacks transparency in registrant details. Strategic recommendations include improving security headers, adding privacy and cookie policies, securing the login form, and enhancing content and user experience.

The Comitato Nazionale per i 150 anni dalla nascita di Luigi Einaudi is a small, government-affiliated non-profit organization dedicated to coordinating and promoting cultural and educational events commemorating the 150th anniversary of Luigi Einaudi's birth. The website serves as the official platform for event information, contests, and an innovative AI project allowing interaction with Luigi Einaudi's persona. Technically, the site is built on WordPress with modern SEO and cookie consent tools, providing a good user experience and mobile optimization. Security posture is solid with HTTPS, DNSSEC, and cookie consent, though some security headers and explicit policies could be improved. Overall, the site is trustworthy, professional, and compliant with GDPR, with clear contact information and social media presence.

R

REscEU

resceuescaperoom.eu

55

REscEU is an educational and cultural project that offers escape rooms across 11 European countries to promote the values and advantages of the European Union. The website is built on WordPress with Elementor and includes a cookie consent mechanism indicating GDPR awareness. The project is supported by multiple European partners and funded by the Europe for Citizens Programme of the EU. Technically, the site uses modern web technologies and has moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit security policies. WHOIS data is unavailable, likely due to privacy protection, but the website content and partner ecosystem suggest legitimacy. Overall, the site is professional and trustworthy with room for improvement in privacy and security disclosures.

D

Dignity In Europe

dignity-in-europe.com

46

Dignity in Europe is a youth-driven non-profit initiative focused on advocating for dignified reception and rights of migrants within the European Union. The platform is supported by multiple NGOs and local government entities, emphasizing legislative change and solidarity among EU member states. The website is built on WordPress with modern SEO and performance plugins, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks advanced security headers and DNSSEC. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the site presents a trustworthy and professional front for its advocacy mission.

The website stopborderviolence.org/lander currently serves as a minimal placeholder or parking page with very limited content. It lacks any meaningful business information, contact details, or policy documentation. The domain is registered with Tucows Domains Inc. since 2021, which is consistent with a new or developing site. Technically, the site uses basic JavaScript and loads external scripts from Google AdSense and wsimg.com, indicating monetization attempts via advertising but no substantive content or user engagement features. Security posture is weak due to absence of security headers, DNSSEC, and policy disclosures. There is no evidence of WAF or blocking mechanisms, and the site is accessible but offers minimal value or trust signals. Overall, the site appears to be in an early or inactive stage with significant gaps in content, compliance, and security.

I

IMS Design | Internet Marketing Solutions

imsdesign.eu

56

IMS Design is a small Italian technology company specializing in digital communication, web development, web marketing, and custom software solutions. Established since 2000, the company offers a broad range of services including website creation, social media management, branding, and app development. Their website reflects a professional and consistent brand image, supported by Google certification and a portfolio that includes public administrations. Technically, the site is built on WordPress using modern tools such as Elementor and Yoast SEO, with good mobile optimization and SEO practices. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive cookie policy and GDPR consent. The domain WHOIS data is not publicly available due to EURid privacy policies, which is typical for .eu domains, but no suspicious indicators were found. Overall, IMS Design presents a trustworthy and professional online presence suitable for its target market of Italian businesses and private clients.

A

Alleanza Italiana per lo Sviluppo Sostenibile (ASviS)

asvis.it

55

The Alleanza Italiana per lo Sviluppo Sostenibile (ASviS) is a reputable Italian non-profit alliance founded in 2016 to promote awareness and mobilization around the UN 2030 Agenda for Sustainable Development. It serves a broad audience including civil society, economic actors, and institutions, providing educational resources, reports, and advocacy campaigns. The website is professionally designed with consistent branding and comprehensive content focused on sustainable development goals. Technically, the site uses modern JavaScript libraries and frameworks, is mobile optimized, and implements GDPR-compliant privacy and cookie policies. Security posture is strong with HTTPS enforced and no critical vulnerabilities detected, though some security headers could be improved. WHOIS data confirms domain legitimacy and consistency with the organization's history. Overall, ASviS demonstrates a mature digital presence with good security and privacy practices, supporting its mission effectively.

E

European Civic Forum

civic-forum.eu

61

The European Civic Forum (ECF) is a well-established pan-European non-profit network comprising nearly 100 associations and NGOs across 29 countries. Founded in 2005, ECF focuses on protecting civic space, enabling civic participation, and fostering civil dialogue to promote equality, solidarity, and democracy in Europe. The website reflects a professional and consistent brand presence with comprehensive content about their advocacy, network, and monitoring activities. Technically, the site is built on WordPress using the Divi theme and several plugins, with good SEO and mobile optimization. Security posture is solid with HTTPS and cookie consent, though lacking some security headers and explicit security policies. Contact is primarily via forms, with no direct emails or phone numbers publicly listed. Overall, the site is credible and trustworthy, serving a specialized audience of civil society actors.

E

European Movement

europeanmovement.eu

52

European Movement is a non-profit organization advocating for European integration, democracy, and defence cooperation within the EU. The website serves as a platform for sharing opinion polls, organizing events, and promoting innovation, particularly focusing on European military cooperation and AI-driven initiatives. The organization targets European citizens, policymakers, and stakeholders interested in EU affairs. Technically, the website is built on WordPress using the Astra theme and Elementor page builder, with integrations such as Google Analytics and MonsterInsights for tracking. The site is hosted with a European registrar and uses a CDN for content delivery, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and no exposed sensitive data, but lacks some security headers and explicit privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

Formez PA is an established Italian government service and training center focused on the modernization and reform of public administration. Founded in 1997, it provides training, recruitment, project management, and international cooperation services targeted at public sector employees and government entities. The website reflects a professional government presence with consistent branding and a clear focus on public administration modernization. Technically, the site uses modern frameworks such as Bootstrap and Sitefinity CMS, with analytics powered by Matomo and cookie consent managed by Cookiebot, indicating a mature digital infrastructure. Security posture is good with HTTPS enabled and cookie consent implemented, though improvements such as enabling DNSSEC and adding security headers are recommended. The domain registration is consistent with the organization's government affiliation and long-term presence, enhancing trustworthiness. Overall, the website is well-designed, accessible, and compliant with privacy regulations, though explicit privacy and terms of service pages were not found in the provided content.

D

Das Gelbe Blatt

dasgelbeblatt.de

58

Das Gelbe Blatt is a regional German media outlet providing local news, events, and advertisements for the Bavarian areas of Bad Tölz, Wolfratshausen, Miesbach, and Penzberg. The website offers a variety of news content including local politics, sports, and community events, targeting local residents and readers interested in regional updates. Technically, the site uses a modern JavaScript stack with RequireJS, jQuery, and integrates multiple third-party advertising and tracking services such as Google Tag Manager, Braze, and Outbrain. Hosting appears to be managed via Deutsche Telekom's infrastructure. Security posture is adequate with HTTPS enforced and asynchronous script loading, but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of visible privacy and cookie policies or consent mechanisms. Business credibility is moderate with consistent branding and professional content but lacks explicit contact information and certifications. Overall, the site is safe for general audiences and functions well as a local news platform.

NHW Verlag GmbH operates the Heimat Nachrichten website, a regional media publisher focused on local news and advertising services across multiple communities in Hessen, Germany. The website serves as a digital presence for their print publications, offering contact information for advertising sales and editorial teams, as well as downloadable media data. The business targets local residents and businesses seeking regional news and advertising opportunities. The company maintains a consistent brand image and provides detailed contact points, enhancing trust and accessibility. Technically, the website uses basic web technologies including jQuery and standard HTML/CSS. The site is mobile responsive and offers a moderate performance experience. However, there is no evidence of advanced CMS platforms or modern frameworks. SEO and accessibility features are basic but functional. No analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the site lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance and user protection. The WHOIS data indicates a legitimate domain registration consistent with the business's regional focus. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the security posture is moderate but could be improved with HTTPS verification, security headers, and privacy enhancements. The overall risk is low given the nature of the business and content, but strategic improvements in security and privacy compliance are recommended to enhance trust and regulatory adherence.