Security Directory

A

Aargau Tourismus AG

aargautourismus.ch

48

Aargau Tourismus AG operates as the regional tourism authority for the canton of Aargau in Switzerland, providing comprehensive tourism information, event promotion, and services such as meeting location facilitation and an online shop for vouchers. The website targets tourists, cultural enthusiasts, families, and event attendees, positioning itself as a trusted regional tourism hub with strong partnerships and certifications like Swisstainable. Technically, the site employs modern tracking and analytics tools including Google Analytics and Facebook Pixel, uses Bootstrap and jQuery UI for UI components, and is likely powered by the ZMS CMS platform. The site is mobile-optimized with good navigation and content quality. Security posture is solid with HTTPS enforced and cookie consent implemented, though it lacks explicit security policies and incident response information. Overall, the domain registration data aligns well with the business identity, supporting legitimacy and trustworthiness.

G

Gemeinde Hasliberg

hasliberg.ch

54

Gemeinde Hasliberg is the official municipal government website serving the Hasliberg region in Switzerland. It provides local administrative information, community services, tourism details, event announcements, and educational resources. The site targets residents and visitors, offering comprehensive local content in German. The business model is that of a government entity focused on public service and community engagement. Technically, the website is built on the concrete5 CMS platform, utilizing common JavaScript libraries and Google services such as Analytics and reCAPTCHA to enhance functionality and security. The site is mobile optimized and presents a professional design with clear navigation. Security posture is solid with HTTPS enforced and reCAPTCHA protecting forms, though it lacks some advanced security headers and explicit incident response policies. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy, legitimate, and well-maintained, reflecting its role as a government portal.

V

Vogt

vogt-la.com

10

Vogt is a professional landscape architecture firm presenting a well-structured website featuring their projects, case studies, publications, and news. The firm appears to have an international presence with awards and recognitions highlighted. The website targets professionals and clients interested in landscape architecture services. Technically, the site uses a range of JavaScript libraries including jQuery, Select2, and Slick Carousel, indicating a moderately modern tech stack. The site is mobile optimized and includes cookie consent mechanisms, reflecting awareness of privacy compliance. Security posture is solid with HTTPS enforced, though security headers are not explicitly detected. No critical vulnerabilities or exposed sensitive data were found. WHOIS data is unavailable, which reduces trust slightly but the professional presentation and social media presence support legitimacy. Overall, the site is well-maintained, secure, and compliant with basic privacy standards.

S

Schulthess Klinik

schulthess-klinik.ch

71

Schulthess Klinik is a leading orthopedic healthcare provider in Switzerland and Europe, specializing in a wide range of orthopedic surgeries and related medical services. The website reflects a mature digital presence with comprehensive content targeting patients, referring physicians, and healthcare professionals. It supports multiple languages and offers clear pathways for appointment scheduling and patient referrals. Technically, the site is built on Drupal 10 with modern front-end technologies and integrates Google Tag Manager for analytics. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although explicit security policies and vulnerability disclosures are not publicly detailed. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR requirements.

L

lernando

lernando.de

72

lernando.de is a German e-commerce website specializing in educational materials such as school books, learning aids, and exercise booklets for children of all school grades. The platform targets parents and children seeking verified publisher materials with convenient shipping options. Technically, the site is built on Drupal 11 with Commerce 3, leveraging modern web technologies including jQuery UI, Cookiebot for consent management, Google Tag Manager, and Meta Pixel for marketing and analytics. The website demonstrates good digital maturity with mobile optimization and SEO best practices. Security-wise, the site enforces HTTPS and employs a comprehensive cookie consent mechanism, but lacks explicit security policies or incident response contacts. Overall, the site is professional, trustworthy, and compliant with GDPR, though it could improve by adding Terms of Service and security disclosure information.

Hublot is a renowned Swiss luxury watch brand specializing in high-end timepieces for men and women. The company operates a professional and visually appealing website built on Drupal 10, showcasing its collections and brand heritage. The website demonstrates a mature digital infrastructure with modern technologies such as Google Tag Manager, reCAPTCHA, and AB Tasty for marketing and analytics. Security posture is strong with HTTPS enforced and standard security headers likely in place, although explicit security policies and incident response contacts are not publicly visible. Privacy compliance is partially addressed through a cookie consent mechanism, but the absence of a clear privacy policy and terms of service pages limits full compliance assurance. The domain WHOIS data is unavailable, which is unusual but likely due to privacy protection or registry limitations rather than malicious intent. Overall, the website is trustworthy, professional, and well-optimized for user experience and SEO.

C

ClubGolf Online Shop

clubgolfshop.ch

49

ClubGolf Online Shop is a Swiss-based e-commerce retailer specializing in golf-related products including apparel, equipment, and accessories. The website targets golf enthusiasts primarily in German-speaking Switzerland and operates on the PrestaShop platform. The site features a clear product catalog, partner golf club links, and standard e-commerce functionalities. Technically, the site uses modern web technologies and modules for payment and legal compliance, with good mobile optimization and basic accessibility. Security posture is solid with HTTPS and cookie consent implemented, though security headers are not evident. Privacy compliance is adequate with a privacy policy and cookie banner present. Contact is provided via a contact form, but no direct emails or phone numbers are visible. Overall, the site is professional and trustworthy with a moderate to good AI score of 79.

Q

Querfeld's Wiener Kaffeehaus GesmbH

cafe-wien.at

66

Querfeld's Wiener Kaffeehaus GesmbH operates an e-commerce platform dedicated to selling gift vouchers for its chain of cafés and restaurants in Vienna, Austria. The website offers a user-friendly interface with multiple voucher categories, a voucher value checking feature, and digital delivery options. The business targets general consumers looking to gift hospitality experiences. The company is positioned as a reputable regional hospitality brand with a medium-sized operation and consistent branding across its digital presence. Technically, the website employs a modern technology stack including Vue.js, jQuery, and various tracking and analytics tools such as Google Analytics, Facebook Pixel, and eTracker. It uses the Incert e-commerce system, which is specialized for tourism and hospitality sectors. The site is mobile-optimized and includes accessibility and SEO best practices, though accessibility could be further enhanced. From a security perspective, the site enforces HTTPS, implements cookie consent mechanisms via Klaro, and uses security headers to protect users. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks explicit security policies, incident response contacts, and vulnerability disclosure information, which are recommended for improved security posture. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. It effectively supports the business model of online voucher sales for hospitality services. Strategic recommendations include publishing security policies, adding incident response contacts, and enhancing accessibility features to further strengthen trust and compliance.

D

DenkBunt

denkbunt-thueringen.de

42

DenkBunt is a regional German program dedicated to promoting democracy, tolerance, and openness in the state of Thüringen. The website serves as an informational and resource platform for citizens, organizations, and institutions involved in democratic education, project funding, and social initiatives. The program offers project support, advisory services, training, and public relations activities aimed at strengthening democratic values and preventing extremism. Technically, the website is built on WordPress and employs common JavaScript libraries such as jQuery and FlexSlider to enhance user experience. It is hosted by a German hosting provider, ensuring regional relevance and performance. Security-wise, the site uses HTTPS but lacks advanced security headers and a cookie consent mechanism, which are recommended for improved compliance and protection. No vulnerabilities or suspicious elements were detected, and the site is fully accessible without WAF or blocking mechanisms. Overall, DenkBunt presents a professional, trustworthy, and content-rich platform aligned with its mission as a government or non-profit initiative.

L

Lucas Muñoz Muñoz

lucasmunoz.com

47

Lucas Muñoz Muñoz is a designer and artist specializing in sustainable, experimental, and upcycled furniture and installations. The website serves as a comprehensive portfolio showcasing a wide range of projects from 2006 through 2025, including collaborations with galleries and participation in international design festivals. The target audience includes design enthusiasts, galleries, and cultural institutions interested in innovative and sustainable design. Technically, the website uses modern JavaScript libraries such as jQuery, Masonry, and Vimeo API for dynamic content presentation, with a responsive design suitable for mobile devices. However, there is no evidence of HTTPS or security headers, and no privacy or cookie policies are present, indicating compliance and security gaps. The WHOIS data is missing, raising concerns about domain legitimacy, though the website content is professional and active. Overall, the site demonstrates good content quality and technical implementation but requires improvements in security, privacy compliance, and domain legitimacy verification.

A

ASKO - NÁBYTEK

asko-nabytek.cz

59

ASKO - NÁBYTEK is a prominent Czech furniture retailer offering a wide range of furniture and home accessories through its e-commerce platform. The website presents a comprehensive catalog of products including beds, chairs, tables, wardrobes, sofas, and various home textiles and decorations, targeting general consumers seeking quality home furnishings. The company appears to have a large market presence in the Czech Republic with a well-structured online shopping experience. Technically, the website employs modern JavaScript libraries such as jQuery, Splide, and Slick for UI components and galleries, alongside Google Tag Manager for analytics and marketing. The site is mobile-optimized and includes cookie consent mechanisms, indicating a moderate level of digital maturity. However, the absence of detailed WHOIS data limits the ability to fully verify domain legitimacy and ownership. From a security perspective, the site enforces HTTPS and includes basic security headers, but lacks advanced headers like Content-Security-Policy and HSTS. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is basic, with cookie consent present but no explicit privacy policy or terms of service found in the analyzed content. Overall, the website is professionally designed and functional, with a good user experience and clear navigation. The lack of WHOIS transparency and limited privacy documentation are areas for improvement. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and terms policies, and improving accessibility features to strengthen compliance and trust.

The International Fairs Directory, operated by Mulpor Company S.R.L., is a well-established online platform providing a comprehensive global overview of fairs and exhibitions. It serves as a key resource for fair exhibitors, visitors, and industry professionals seeking business connections worldwide. The platform offers detailed listings of fairs, exhibitors, and related business contacts, positioning itself as a leading directory in the international trade show and events sector. The business is headquartered in Costa Rica and has been operational since at least 2016, with the domain registered in 2021. Technically, the website employs a custom-built solution leveraging Bootstrap and jQuery frameworks, with integrations for Google Analytics and Tag Manager for user tracking and analytics. The site is hosted by HOSTINGER operations, UAB, a reputable hosting provider. The website demonstrates good mobile optimization and moderate performance, with a professional design and clear navigation structure. Cookie consent mechanisms are implemented, enhancing privacy compliance, though the privacy policy is basic and lacks explicit GDPR compliance details. From a security perspective, the site uses HTTPS with a valid SSL certificate and displays a Norton Secured seal, indicating a trustworthy encryption standard. However, DNSSEC is not enabled, and several security headers are missing, which could be improved to enhance protection against common web threats. There is no publicly available security policy or incident response information, which limits transparency in security governance. The WHOIS data is consistent with the website's business claims, showing no privacy protection and a domain age appropriate for the business history. Overall, the website presents a moderate risk profile with good business credibility and technical implementation but could benefit from enhanced security practices and more comprehensive privacy and security disclosures. Strategic improvements in these areas would strengthen trust and compliance, supporting the platform's role as a global business connector.

G

Genolve

genolve.com

54

Genolve operates as an AI-assisted design platform specializing in generating AI images, videos, and graphics from user input phrases. The website targets creative professionals and enthusiasts seeking to leverage AI technologies for content creation, offering tools such as AI image and video generators, WordPress plugins, and social media graphic makers. The platform integrates modern web technologies and Google services to enhance user experience and authentication. However, the absence of WHOIS registration data and lack of visible privacy or cookie policies present concerns regarding domain legitimacy and compliance. The site is visually appealing, mobile-optimized, and provides a moderate level of technical sophistication.

N

NAJU (Naturschutzjugend im NABU)

trashbusters.de

47

Trashbusters.de is a German non-profit youth environmental campaign website operated under the umbrella of NAJU, the youth organization of NABU. The site focuses on mobilizing youth and environmental activists to combat plastic pollution through cleanup actions, political engagement, and educational initiatives. The website is well-branded, consistent, and provides relevant content for its target audience. Technically, it is built on the Jimdo Creator CMS platform, leveraging jQuery UI and third-party widgets such as POWr.io and Google Maps. The site is mobile-optimized and uses HTTPS with cookie consent mechanisms, reflecting good privacy compliance. However, explicit contact information and formal security or incident response policies are not present, which limits direct communication and security transparency. Overall, the site is trustworthy and professionally maintained, suitable for its non-profit mission.

D

Diözese St. Pölten

aufsendung.at

66

The website www.aufsendung.at serves as an informational and community engagement platform for the Diocese of St. Pölten, Austria. It focuses on the Synodal Process initiated by the Catholic Church, providing resources, event information, and contact details for church members and the general public. The site is part of a broader diocesan web presence and links to official church and charitable organizations. Technically, the site uses the siteswift CMS platform with a modern JavaScript stack including jQuery and cookie consent management via Klaro. While the site is well-structured and mobile-optimized, some SEO metadata is incomplete and accessibility features are basic. Security posture is moderate with CSRF protections and cookie consent but lacks explicit security headers and published incident response policies. Overall, the site is legitimate, trustworthy, and serves its community purpose effectively.

1

1&1 Internet Inc

moneyyy.me

56

moneyyy.me is an online platform launched in 2018 that facilitates users in requesting money via multiple popular payment platforms such as Venmo, PayPal, Cash App, Patreon, and OnlyFans through a single aggregated link. The service targets individuals and content creators who receive payments across these platforms, offering convenience and streamlined payment requests. The website is professionally designed with good user experience and mobile optimization, leveraging common web technologies including jQuery, Bootstrap, and FontAwesome, and integrates Google Analytics for user tracking. From a technical perspective, the site is hosted under the registrar IONOS SE (1&1 Internet Inc), with a domain age consistent with the business timeline. The technical stack is modern but lacks advanced security configurations such as DNSSEC and security headers. The site uses HTTPS, but no explicit security headers were detected in the HTML content. Privacy and cookie policies are absent, which impacts compliance and user trust. The registration form collects sensitive user data including email, username, password, and payment platform links, but no visible security or privacy disclosures are provided. Security posture is moderate with room for improvement. The absence of DNSSEC, security headers, and privacy policies are notable gaps. No incident response or vulnerability disclosure information is available. The domain registration is transparent and consistent with the website content, indicating legitimacy. No adult or explicit content is present, making the site safe for general audiences. Overall, moneyyy.me presents a niche financial service with a good user interface and functional design but requires enhancements in privacy compliance, security best practices, and transparency to improve trust and regulatory adherence.

R

Robert Steiner

robertsteiner.at

47

Robert Steiner is a family entertainer based in Austria, offering a diverse range of media content including radio shows on ORF Radio Wien, TV programming on ORF 1, podcasts for children, and publishing the KidsKrone magazine. The website serves as a hub for his media presence and family entertainment ventures, targeting families and children. Technically, the site is built on WordPress with a modern theme and plugins, delivering a good user experience with mobile optimization and moderate performance. Security posture is solid with HTTPS and cookie consent, though lacks some advanced security headers and a privacy policy. WHOIS data is unavailable due to registry quota limits, limiting domain trust analysis. Overall, the site is professional, content-rich, and trustworthy for its audience.

H

Hallesche Wasser und Stadtwirtschaft GmbH

hws-halle.de

61

Hallesche Wasser und Stadtwirtschaft GmbH is a regional utility company based in Halle, Germany, providing essential municipal services including water supply, wastewater management, waste disposal, and city cleaning primarily targeting private customers. The company operates as part of the larger SWH Gruppe, which encompasses multiple related entities in energy, transportation, and municipal services. Their website reflects a structured and comprehensive presentation of services, targeting local residents and businesses with clear navigation and service menus. Technically, the website employs modern frontend technologies such as jQuery, FontAwesome, and Slick Carousel, alongside privacy-conscious tools like Usercentrics for consent management and Matomo for analytics. The site is mobile optimized and demonstrates moderate performance and accessibility standards. However, some security headers are not explicitly detected, and there is no visible security policy or incident response information. From a security perspective, the site enforces HTTPS and uses consent management, but lacks published security policies and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were found in the provided content. The WHOIS data aligns well with the website's claims, indicating a legitimate and trustworthy domain registration. Overall, the website presents a professional and trustworthy digital presence for a municipal utility provider, with room for improvement in security policy transparency and enhanced privacy compliance documentation.

N

NETZ HALLE GmbH

netzhalle.de

60

NETZ HALLE GmbH operates as a regional energy network operator in Halle (Saale), Germany, providing essential services such as electricity, gas, and heat network connections, metering, and customer support. The company is part of the larger Stadtwerke Halle group, which includes various utility and service subsidiaries. The website reflects a professional and regionally focused utility provider with clear service offerings and customer engagement channels. Technically, the website employs a legacy CMS (SixCMS) with common JavaScript libraries like jQuery and Modernizr, enhanced by user consent management via Usercentrics and analytics through Matomo. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Hosting appears to be managed by EVH, consistent with the regional focus. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible advanced security headers and a public security policy or vulnerability disclosure. No critical vulnerabilities or suspicious content were detected. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent. Overall, the website is trustworthy, professionally maintained, and suitable for its target audience. Recommendations include enhancing security headers, publishing a security policy, and improving accessibility features to further strengthen compliance and security posture.

E

Erzdiözese Salzburg

edsbg.at

59

Erzdiözese Salzburg operates as a large, established Catholic diocese serving the Salzburg region and Tiroler Unterland in Austria. The website functions as an informational and community engagement platform, offering news, event details, and religious content tailored to its Catholic audience. The organization maintains a consistent brand presence and leverages social media channels to extend its outreach. Technically, the site uses the siteswift CMS platform with modern JavaScript libraries, ensuring a responsive and user-friendly experience. Security measures include HTTPS enforcement, CSRF protection on forms, and a comprehensive cookie consent mechanism, although explicit security headers and incident response policies are not publicly documented. Overall, the site demonstrates a good balance of content quality, technical implementation, and privacy compliance, reflecting the organization's credibility and commitment to user trust.

S

Stadtwerke Halle GmbH

swh.de

62

Stadtwerke Halle GmbH is a large municipal utility company serving the city of Halle (Saale) and surrounding region in Germany. The company provides a broad range of essential services including electricity, natural gas, district heating, water supply, waste management, public transportation, and leisure facilities. It operates through multiple subsidiaries and partner organizations, reflecting a diversified municipal service portfolio. The website presents these services clearly and professionally, targeting local residents and businesses. Technically, the website uses a modern technology stack including jQuery, Slick Carousel, FontAwesome, and a consent management platform (Usercentrics) alongside Matomo analytics for privacy-conscious user tracking. The site is mobile optimized and structured for good SEO and accessibility, though some accessibility features could be enhanced. Hosting and CMS appear stable and appropriate for the business scale. From a security perspective, the site enforces HTTPS and uses consent management for cookies, indicating good privacy practices. However, no explicit security policy, incident response contacts, or vulnerability disclosure mechanisms are publicly available, which could be improved. No vulnerabilities or suspicious content were detected in the analysis. Overall, the website is trustworthy, professionally maintained, and aligned with the business's public utility role. Strategic improvements in transparency around security policies and GDPR compliance documentation would enhance trust and compliance posture.

Indiebookday.de is a German initiative by the mairisch Verlag aimed at promoting independent book publishing through an annual event encouraging readers to purchase books from indie publishers and share their support on social media. The website serves as an informational platform providing event details, downloadable promotional logos, and multilingual access. The business operates as a small cultural initiative with a niche market position and a focus on community engagement rather than commercial sales. Technically, the website is built on the Jimdo Creator CMS platform, hosted via domaincontrol.com nameservers, and uses standard web technologies including jQuery and Jimdo's proprietary scripts. The site is mobile-optimized with moderate performance and basic SEO and accessibility features. Privacy and cookie policies are implemented with a consent mechanism, reflecting compliance with GDPR requirements. From a security perspective, the site enforces HTTPS and includes cookie consent but lacks explicit security headers and documented incident response policies. No vulnerabilities or exposed sensitive data were detected. The domain registration data is consistent and legitimate, supporting the trustworthiness of the site. Overall, the website presents a professional and trustworthy front for its cultural mission, with room for improvement in security hardening and enhanced business contact transparency.

Z

Zusammen für Demokratie

zusammen-fuer-demokratie.de

41

Zusammen für Demokratie is a German non-profit coalition comprising 73 civil society organizations dedicated to defending democracy and human rights. The website serves as a platform to provide resources, campaign materials, and support for local initiatives and activists. It positions itself as a significant player in the democratic advocacy space within Germany, offering workshops, donation facilitation, and educational content. The target audience includes civil society groups, activists, and the general public interested in democratic values. Technically, the website is built on WordPress 6.8.3, utilizing common libraries such as jQuery and jQuery UI, along with plugins like Udesly WP App and Koko Analytics for analytics. Hosting is provided by agenturserver, indicated by the nameservers. The site demonstrates moderate performance with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS with excellent SSL configuration but lacks several security headers that could enhance protection. No vulnerabilities or exposed sensitive data were detected. However, the absence of a cookie consent mechanism and explicit security or incident response policies indicates room for improvement in compliance and security posture. Overall, the website is professional, trustworthy, and well-aligned with its non-profit mission. Strategic recommendations include implementing GDPR-compliant cookie consent, adding security headers, publishing a vulnerability disclosure or security.txt file, and enhancing incident response transparency to strengthen trust and compliance.

The Deutscher Verlagspreis website represents an official German federal government cultural initiative aimed at supporting and awarding independent publishers in Germany. The site provides comprehensive information about the award, participation, jury, and prize winners, targeting publishers and cultural stakeholders. The business model is government-funded, focusing on cultural promotion rather than commercial activities. Technically, the site is built on the Contao CMS platform, leveraging modern JavaScript libraries such as jQuery and Modernizr to enhance user experience. The site is mobile-optimized, accessible, and SEO-friendly with clear navigation and structured content. Security posture is solid with HTTPS enforced and basic session and CSRF protections, though some advanced security headers and policies are missing. Privacy compliance is good, with a cookie consent mechanism and a privacy policy in place, but no explicit terms of service or security policy pages were found. Overall, the site is trustworthy, professional, and safe for general audiences.

M

MyGiftCard

mygiftcard.it

68

MyGiftCard is an established Italian e-commerce platform specializing in the sale of gift cards from major brands across various sectors including retail, food, electronics, and travel. The website offers services such as online activation and balance verification of gift cards, targeting Italian consumers seeking convenient gifting solutions. The platform also features MyGiftCardPlus, a loyalty or enhanced service program. Technically, the site is built on Magento with a mix of modern and legacy JavaScript libraries, and integrates Google Analytics and Tag Manager with privacy-conscious configurations like IP anonymization. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though improvements in security headers and explicit security policies are recommended. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the site scores well on content quality, privacy compliance, and business credibility, making it a trustworthy platform for gift card purchases.

G

GEOMAR Helmholtz-Zentrum für Ozeanforschung Kiel

geomar.de

50

GEOMAR Helmholtz-Zentrum für Ozeanforschung Kiel is a prominent German research institution specializing in oceanographic and climate research. The website serves as a comprehensive platform for scientific information, research programs, expeditions, and public outreach. It targets researchers, students, policymakers, and the general public interested in marine and climate sciences. Affiliated with the Helmholtz Association, GEOMAR holds a strong market position in the education and government research sectors. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries such as jQuery and Slick Slider, providing a responsive and accessible user experience. The site demonstrates good SEO practices and mobile optimization, though performance is moderate. Security posture is solid with HTTPS enforced and some security headers present, but could be improved by adding more comprehensive headers and visible incident response policies. Overall, the site is trustworthy and professional, with clear branding and consistent content quality. However, it lacks a visible cookie consent mechanism and explicit security contact information, which are areas for improvement. The domain registration data aligns well with the website content, reinforcing legitimacy and trustworthiness.

K

Katholische Kirche Steiermark

graz-seckau.at

68

Katholische Kirche Steiermark operates as the official Catholic Diocese of Graz-Seckau, Austria, providing religious, educational, and community services. The website serves as a comprehensive portal for diocesan news, parish information, faith education, and community engagement. It holds a strong regional position as a trusted religious authority with a history dating back to 1218. Technically, the site is built on the siteswift-CMS platform, leveraging modern JavaScript libraries such as jQuery and Swiper.js, and integrates Google Maps and Matomo analytics. The site is mobile-optimized and accessible, with a clear navigation structure and professional design. Security posture is solid with HTTPS, security headers, and CSRF protections, though explicit security policies and incident response details are not publicly disclosed. Privacy compliance is well managed with a comprehensive privacy policy and cookie consent mechanism. Overall, the site is trustworthy, professional, and well-maintained, serving its target audience effectively.

B

Berlin Buch

berlin-buch.com

57

Berlin Buch is a well-established biomedical and healthcare cluster located in Berlin, Germany, with a history dating back over 100 years in medical research and clinical care. The website serves as a portal to the cluster's institutes, companies, and services, targeting healthcare professionals, researchers, and the general public interested in health and biomedical innovation. The business model focuses on fostering collaboration and innovation within the life sciences sector, supported by reputable partners and EU funding. Technically, the website uses a modern but traditional tech stack including jQuery, Bootstrap, and Matomo analytics configured for privacy. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS and domain transfer protection, but lacks DNSSEC and security headers, and does not provide explicit security or incident response policies. Privacy compliance is partially met with a privacy policy and GDPR-respecting analytics, but lacks a cookie consent mechanism. Overall, the website is professional, trustworthy, and serves its audience well, though improvements in security headers and privacy transparency are recommended.

T

Touch Medical Media IME

touchime.org

68

Touch Medical Media IME operates as a global leader in independent medical education, providing healthcare professionals worldwide with trusted, faculty-led educational content across multiple specialized therapy areas. The company emphasizes scientific integrity, collaboration, and innovation to improve patient care outcomes. Their business model leverages a multi-platform approach with dedicated therapy area websites and a broad global reach, serving healthcare professionals in over 150 countries. Technically, the website is built on WordPress with modern front-end technologies including jQuery, Select2, and FontAwesome, optimized for performance using WP Rocket and served via Cloudflare infrastructure. The site demonstrates excellent mobile optimization, accessibility, and SEO practices, although some security headers and DNSSEC are missing. From a security perspective, the site enforces HTTPS and uses Cloudflare DNS but lacks DNSSEC and some recommended security headers like CSP and X-Frame-Options. No privacy policy or terms of service pages were found, which is a compliance gap. Cookie consent is implemented via Borlabs Cookie plugin, and tracking includes Facebook Pixel and Google Tag Manager. No critical vulnerabilities or WAF blocking were detected. Overall, the website presents a professional, trustworthy, and well-structured platform for medical education with strong business credibility. Strategic improvements in privacy compliance and security hardening are recommended to enhance trust and regulatory adherence.

M

Medical Informatics Initiative

medizininformatik-initiative.de

58

The Medical Informatics Initiative is a German government-funded program aimed at enhancing medical research and patient care through improved data integration and sharing across university hospitals and research institutions. The initiative operates a comprehensive website built on Drupal 10, featuring multilingual content, a cookie consent mechanism, and privacy-respecting analytics via Matomo. The site demonstrates strong digital maturity with good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS enforced and consent-based tracking, though explicit security policies and incident response contacts are not published. Overall, the website reflects a professional, trustworthy, and well-maintained digital presence aligned with its healthcare research mission.

M

Münchener Hypothekenbank eG

muenchenerhyp.de

53

Münchener Hypothekenbank eG is a well-established cooperative bank specializing in long-term real estate financing for private and commercial clients, with a strong emphasis on sustainability and member benefits. The bank operates primarily in Germany with additional presence in Western Europe and the USA. Their website reflects a mature digital presence built on Drupal 10, incorporating modern web technologies and analytics tools such as Matomo and Google Tag Manager. The site is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content including press releases, career opportunities, and investor information. Security posture is solid with HTTPS enforced and cookie consent managed via Cookiebot, though some security headers and explicit security policies could be improved. WHOIS data aligns well with the business claims, indicating a trustworthy and legitimate domain. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations.

A

Associazione per la Decrescita

decrescita.it

53

The website decrescita.it represents the Associazione per la Decrescita, a small Italian non-profit organization dedicated to promoting the philosophy and practice of degrowth, ecological sustainability, and social equity. The site serves as a platform for publishing articles, organizing events, and fostering community engagement around these themes. The organization has a well-established presence since 2005, supported by a domain with consistent WHOIS data and DNSSEC enabled for security. Technically, the website is built on WordPress 6.8.3, utilizing a range of plugins such as Events Manager, Photo Gallery, Contact Form 7, and Cookie Notice, alongside modern JavaScript libraries like jQuery and Owl Carousel. The site is hosted behind Cloudflare services, including the Turnstile captcha for form security, and employs HTTPS with good SSL configuration. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site follows best practices including HTTPS enforcement, DNSSEC, and CAPTCHA protection on forms. However, it lacks explicit security policies, vulnerability disclosure mechanisms, and advanced security headers. Privacy compliance is well addressed with a cookie consent banner and a privacy policy page in Italian, indicating GDPR awareness. Overall, the website is trustworthy, professionally maintained, and focused on its niche audience. There are no indications of malicious activity or content safety concerns. Strategic recommendations include enhancing security policies, adding a security.txt file, and improving accessibility compliance to further strengthen the site's security posture and user experience.

A

AFLAMUNA

daleel.film

45

Daleel.film is a specialized non-profit platform created by AFLAMUNA and partners to support independent Arab filmmakers by providing comprehensive guides focused on social and environmental engagement in filmmaking. The website offers multiple guides including funding resources, impact organizations, green production practices, and impact campaign toolkits. It targets independent filmmakers in the Arab region and aims to facilitate their journey with accessible, open resources. Technically, the website uses a modern tech stack including jQuery, Bootstrap, and Google Analytics, with a responsive design optimized for mobile users. Security posture is solid with HTTPS and CSRF protections, though it lacks visible security headers and privacy/cookie policies. The absence of WHOIS data suggests privacy protection, which is reasonable for this type of non-profit entity. Overall, the site is professional, trustworthy, and serves a niche community effectively.

K

Katholische Kirche in Oberösterreich, Diözese Linz

meinbeitrag.at

62

meinbeitrag.at is a professionally maintained non-profit website affiliated with the Catholic Church in Upper Austria (Diözese Linz). It provides diverse content related to Christian faith, church contributions, and community engagement. The site targets individuals interested in Christianity and church activities in the region. Technically, it uses a modern CMS (siteswift), popular JavaScript libraries, and implements GDPR-compliant cookie consent mechanisms. Security posture is moderate with room for improvement in HTTP security headers and explicit incident response policies. The website is fully accessible without WAF or blocking mechanisms, and content is safe for general audiences.

Ö

Österreichische Ordenskonferenz

ordensgemeinschaften.at

63

The website www.ordensgemeinschaften.at represents the Österreichische Ordenskonferenz, a non-profit organization serving as the central representative body for 191 religious orders in Austria. The site provides comprehensive information about these orders, their social, educational, and cultural activities, targeting the general public interested in religious and spiritual matters. The organization positions itself as a key advocate and information hub for religious communities in Austria. Technically, the website is built on the siteswift-CMS platform and employs a modern tech stack including jQuery, Swiper.js, and Matomo analytics. It features a responsive design optimized for mobile devices and includes a robust cookie consent mechanism via Klaro. The site demonstrates good SEO practices and accessibility features, although some improvements could be made. From a security perspective, the site enforces HTTPS, implements CSRF protection on forms, and includes standard security headers. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear privacy and cookie policies and GDPR-aligned consent management. However, the site lacks explicit security policies, incident response information, and terms of service. Overall, the website is trustworthy, professionally maintained, and aligned with its non-profit mission. Strategic recommendations include publishing security and incident response policies, enhancing accessibility, and providing clearer direct contact information to improve user trust and compliance.

B

BEZIEHUNGLEBEN.AT

beziehungleben.at

64

BEZIEHUNGLEBEN.AT is a regional non-profit organization based in Upper Austria focused on providing relationship counseling, marriage preparation, family support, and educational seminars. The website serves as an information and service portal targeting couples, families, and individuals seeking support in these areas. The organization appears well-established with a professional online presence and clear service offerings. Technically, the website is built on the siteswift-CMS platform and uses modern JavaScript libraries such as jQuery and Magnific Popup. It implements HTTPS with good security practices including CSRF tokens and cookie consent management via Klaro. However, some security headers could be improved. Privacy compliance is strong, with clear links to comprehensive privacy and cookie policies hosted on the diocesan domain. No terms of service or explicit security policies were found. Overall, the site is trustworthy, safe, and professionally maintained.

C

Commune de Russin

russin.ch

50

Commune de Russin is a small local government entity in the Canton of Geneva, Switzerland, serving approximately 540 residents. The website provides comprehensive community information, local news, administrative services, and tourism details. It is built on WordPress with common plugins and libraries, offering a functional and user-friendly experience. The site is well-branded and consistent with its government role, targeting residents and visitors. Technically, the site uses modern web technologies but lacks advanced security headers and privacy compliance features. Security posture is moderate with HTTPS enabled but missing some best practices. Overall, the website is trustworthy and professional but could improve privacy and security policies to enhance compliance and user trust.

H

Häussler Leihservice

haeussler-leihservice.de

46

Häussler Leihservice is a German-based company specializing in rental services for table culture and event equipment, catering to both private and commercial customers. The company operates multiple physical locations and offers a wide range of products including crockery, cutlery, glasses, furniture, and gastronomy equipment. Their website reflects a professional and consistent brand image with detailed product information and customer service options. Technically, the website is built on the Contao Open Source CMS platform and utilizes modern JavaScript libraries such as jQuery and Google Tag Manager for analytics. The site is moderately optimized for performance and mobile devices, with good SEO and basic accessibility features. Hosting is provided via rzone.de, as indicated by the nameservers. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and published security or incident response policies, which are areas for improvement. Privacy compliance is partially met with a privacy policy present, but no cookie consent mechanism is detected, which may pose GDPR compliance risks. Overall, the website is trustworthy and professionally maintained, with a solid business presence. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance their security posture and compliance standing.

S

Sednove Inc.

sednove.com

61

Sednove Inc. is a Canadian technology company specializing in custom digital solutions for businesses, including software, dashboards, system interconnection, mobile applications, and secure hosting. The company targets businesses needing rapid adaptation and digital transformation, positioning itself as a niche provider with a strong focus on tailored solutions. The website reflects a mature and professional business with a consistent brand and reputable client base. Technically, the site uses modern JavaScript libraries and frameworks, a CMS named Extenso, and is hosted with a registrar Tucows Domains Inc. The site is mobile optimized and SEO friendly but lacks some advanced security headers and privacy compliance features. Security posture is good with HTTPS and domain transfer protections but could be improved by enabling DNSSEC and adding explicit security policies. Overall, the website is trustworthy and professional, though it lacks explicit privacy and cookie policies, which impacts compliance scores.

C

Commune de Cologny

cologny.ch

54

The website www.cologny.ch is the official online presence of the Commune de Cologny, a local government entity in Switzerland. It provides municipal information, news, events, and contact details for residents and visitors. The site is built on Drupal 9 and incorporates modern web technologies such as Bootstrap, jQuery UI, and lazy loading for images. It includes a cookie consent mechanism and uses Google Tag Manager for analytics. Contact information for municipal offices including phone numbers, emails, and physical addresses is clearly presented. However, explicit privacy policy and terms of service pages are not found, which is a compliance gap. The WHOIS data aligns well with the website's claims, indicating high legitimacy.

The website ticket-cloud.ch currently presents an offline or error page indicating that the searched cinema cannot be found. There is no active business content or service information available on the site. The technical infrastructure uses common frontend libraries such as Bootstrap, FontAwesome, jQuery UI, and Video.js, but lacks advanced frameworks or CMS integration. No forms or data collection mechanisms are present. Security posture is minimal with no visible security headers or HTTPS confirmation in the provided data. Privacy and cookie policies are absent, and no contact information is provided, limiting trust and compliance. Overall, the site appears to be either under maintenance or discontinued, resulting in poor user experience and low business credibility.

T

tirol kliniken gmbh

tirol-kliniken.at

62

Tirol Kliniken GmbH is the largest healthcare provider in Western Austria, offering a wide range of hospital and patient services including neurology, healthcare education, and media communication. The website reflects a professional and comprehensive digital presence targeting patients, healthcare professionals, and the general public in the Tirol region. The business model is focused on public healthcare service provision with a strong market position in the region. Technically, the website uses a custom ColdFusion-based CMS with common JavaScript libraries such as jQuery and Modernizr. The site is moderately performant with good mobile optimization and accessibility features. SEO and navigation are well implemented, supporting a positive user experience. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and published security policies. The use of an older jQuery version may pose minor risks. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear privacy and cookie policies aligned with GDPR. Overall, the website is trustworthy and professionally maintained, with recommendations to enhance security headers, update libraries, and publish incident response information to further strengthen security posture and compliance.

L

Landesbund für Vogelschutz in Bayern e.V. (LBV)

botschafter-spatz.de

49

The website botschafter-spatz.de represents a non-profit environmental conservation project managed by the Landesbund für Vogelschutz in Bayern e.V. (LBV). It focuses on the protection and monitoring of building-nesting birds in Bavaria, such as sparrows, swallows, and swifts. The site provides educational resources, a reporting platform for bird nesting sites, and promotes citizen participation in urban nature conservation. The project is regionally significant and well-integrated with the LBV's broader conservation efforts. Technically, the website is built on the Contao Open Source CMS platform and leverages modern JavaScript libraries including jQuery and mmenu for responsive navigation. It is hosted on servers associated with kasserver.com and uses HTTPS with a good SSL configuration. The site includes cookie consent mechanisms and detailed privacy policies, reflecting compliance with GDPR requirements. Social media integration is present via Facebook and Instagram links. From a security perspective, the site employs HTTPS and cookie consent but lacks explicit security headers and incident response contact information. No vulnerabilities or suspicious content were detected in the provided HTML. The absence of a security.txt or vulnerability disclosure page suggests room for improvement in transparency and security posture. Overall, botschafter-spatz.de is a professionally maintained, trustworthy website serving a clear non-profit mission. Strategic recommendations include enhancing security headers, publishing incident response contacts, and maintaining up-to-date libraries to further strengthen security and compliance.

L

Leibniz-Gemeinschaft

leibniz-gemeinschaft.de

50

The Leibniz-Gemeinschaft website represents a major German non-university research organization uniting 96 independent research institutes across multiple scientific disciplines. The organization focuses on research, knowledge transfer, and advising policy and public stakeholders. The website is professionally designed using TYPO3 CMS and modern web technologies, providing comprehensive content and clear navigation targeted at researchers, policymakers, and the public. The technical infrastructure is solid, hosted via INWX with HTTPS and cookie consent mechanisms implemented. Security posture is good, though lacking explicit published security policies or incident response contacts. Overall, the site is trustworthy, compliant with GDPR, and well-positioned in its sector.

E

Eventbanditz

eventcloud9.com

40

Eventbanditz appears to be a technology platform focused on event-related services, accessible via a login portal. The website content is minimal, primarily serving as an authentication gateway for users. The technical infrastructure leverages modern frontend technologies such as Bootstrap, jQuery, and OneUI framework, hosted on Microsoft Online infrastructure, indicating a professional setup. However, the site lacks public-facing business information, privacy policies, and security headers, which limits transparency and compliance visibility. Security posture shows basic best practices like POST method for login but lacks advanced protections such as DNSSEC and security headers. Overall, the site is functional but requires enhancements in privacy compliance, security hardening, and business transparency to improve trust and user confidence.

S

Sächsische Landesbibliothek – Staats- und Universitätsbibliothek Dresden

slub-dresden.de

62

The Sächsische Landesbibliothek – Staats- und Universitätsbibliothek Dresden (SLUB Dresden) operates as a major academic and public library institution in Germany, providing extensive library services, digital collections, research support, and cultural programming. The website reflects a mature digital presence with a comprehensive content offering targeting academic researchers, students, and the general public interested in cultural heritage. The institution's market position is strong within the regional and academic library sector, supported by government funding and a focus on open access and digital innovation. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries such as jQuery, Chartist, and Fancybox. The hosting infrastructure appears to be aligned with German research networks, ensuring reliability and performance. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the website enforces HTTPS and uses secure login mechanisms like Shibboleth SSO. While some security headers are implied, explicit implementation of Content-Security-Policy and other headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear GDPR-aligned privacy and cookie policies. However, the absence of a public security policy or vulnerability disclosure program suggests room for maturity in security governance. Overall, the website is trustworthy, professionally maintained, and aligned with the institution's public service mission. Strategic enhancements in security policy transparency and header implementation would further strengthen its security posture.

D

domicil gGmbH

domicil-dortmund.de

47

domicil gGmbH operates a well-established live music and cultural venue in Dortmund, Germany, specializing in jazz and creative music since 1969. The organization hosts a variety of events including the notable Jazztage Dortmund festival, offers event space rentals, gastronomy services, and a fan merchandise shop. The website reflects a medium-sized non-profit cultural institution with a strong community focus and recognized awards, positioning it as a trusted local cultural hub. Technically, the website is built on the Contao Open Source CMS platform and utilizes common JavaScript libraries such as jQuery, Swiper.js, and Colorbox. The site is moderately performant, mobile-optimized, and has basic accessibility and SEO features. Hosting is provided by a regional hosting provider indicated by the nameservers. While HTTPS is enabled, the site lacks advanced security headers and cookie consent mechanisms, which are recommended for improved security and compliance. From a security perspective, the site shows no signs of vulnerabilities or exposed sensitive data. However, it lacks published security policies, incident response contacts, and a cookie consent banner, which are important for GDPR compliance and user trust. The domain WHOIS data is consistent with the business claims, showing no privacy protection and a legitimate registration history. Overall, domicil-dortmund.de is a credible and professionally maintained cultural website with good content quality and business credibility. Strategic improvements in privacy compliance and security posture would enhance trust and regulatory adherence.

F

fit4internet

fit4internet.at

10

fit4internet is an Austrian non-profit association dedicated to raising digital competences across Austria. The organization provides a comprehensive digital competence framework (DigComp AT), self-assessment tools, certification and accreditation services, and a course catalog to support lifelong learning in digital skills. The website reflects a professional and consistent brand with a clear focus on education and digital literacy. It targets a broad audience including the general public, education providers, and portal users interested in digital competence development. The business model revolves around standardization, evaluation, and certification of digital skills, positioning fit4internet as a key player in Austria's digital education landscape. Technically, the website employs a modern JavaScript stack including jQuery, Bootstrap, and various UI and analytics libraries such as Matomo and Pinpoll. The site uses a custom CMS and shows good mobile optimization and SEO practices. Performance is moderate with room for improvement in accessibility compliance. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. However, no explicit security policy or incident response information is publicly available. Overall, the website is trustworthy, professionally maintained, and aligned with its educational mission. The WHOIS data confirms legitimacy and consistency with the website's Austrian association identity. There are no signs of malicious activity or content safety concerns. Strategic recommendations include publishing a dedicated security policy, adding incident response contacts, and enhancing accessibility standards to improve inclusivity and compliance.

Bestattungen Hackmann is a small, family-owned funeral service provider based in Ibbenbüren, Germany, with a long tradition dating back to 1924. The company offers a comprehensive range of funeral-related services including hygienic care of the deceased, traditional and modern burial options, a dedicated farewell house, and funeral pre-planning. The website reflects a professional local business with clear service offerings targeted at residents of the Tecklenburger Land region. Technically, the site is built on the Contao CMS platform, utilizing common JavaScript libraries such as jQuery and Colorbox, hosted by Schlund Technologies. The website is mobile-optimized and provides a good user experience with clear navigation and contact options. Security posture is adequate with HTTPS enforced and a cookie consent mechanism in place, though security headers are missing and no explicit security or incident response policies are published. Overall, the site is trustworthy and compliant with GDPR requirements, but could improve in security best practices and transparency.

S

Stadt Ulm

ulm.de

71

Stadt Ulm operates an official municipal website providing comprehensive information and services to residents, businesses, and visitors. The site covers city politics, culture, economy, tourism, and offers online citizen services. It holds a strong market position as the authoritative digital portal for the city of Ulm in Germany. The website is well-branded, consistent, and targets a broad audience including citizens and tourists. Technically, the website leverages modern frameworks such as Bootstrap and is built on the Sitecore CMS platform. It integrates privacy-respecting analytics via Matomo and offers multilingual support through Conword. Accessibility features and cookie consent management demonstrate a mature digital infrastructure focused on user experience and compliance. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks a publicly visible dedicated security policy or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the official city domain and name servers, confirming legitimacy. Overall, the website presents a low-risk profile with good privacy compliance and a professional digital presence. Strategic improvements could include publishing explicit security policies and incident response information to enhance transparency and trust.