Security Directory

N

National Geographic Partners, LLC

nationalgeographic.com

65

National Geographic Partners, LLC operates the National Geographic website, a globally recognized media organization specializing in science, exploration, geography, and environmental journalism. The website serves a broad audience interested in educational and documentary content, supported by flagship publications and television programming. Owned by The Walt Disney Company, it maintains a strong market position with consistent branding and high-quality content. Technically, the website employs modern web technologies including React and integrates advanced monitoring and consent management tools such as New Relic and OneTrust. Security posture is robust with HTTPS enforcement, security headers, and no detected vulnerabilities, although explicit vulnerability disclosure and incident response contacts are not publicly available. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the site demonstrates a mature digital presence with excellent content quality and user experience, suitable for a large enterprise media entity.

N

National Geographic España

nationalgeographic.es

55

National Geographic España operates as a prominent media brand delivering high-quality content focused on science, nature, history, and travel. The website serves a broad general audience with a mix of free and subscription-based content, supported by advertising partnerships and e-commerce through affiliated domains. The brand is well-established in Spain, leveraging multimedia content and digital subscriptions to maintain market relevance. Technically, the website employs a modern tech stack including advanced advertising technologies, consent management via Didomi, and multimedia delivery through JWPlayer. The site is mobile-optimized and uses HTTPS with appropriate security headers, reflecting a mature digital infrastructure. However, some areas such as explicit privacy policy publication and accessibility could be improved. Security posture is solid with HTTPS enforcement and consent mechanisms, but lacks visible vulnerability disclosure or incident response contacts. The absence of WHOIS data limits domain trust verification, though the website's professional presentation and branding strongly indicate legitimacy. Overall, the site presents a low-risk profile with good content quality and technical implementation, but should enhance transparency around privacy, contact information, and security disclosures to strengthen trust and compliance.

B

BOSS TONE EXCHANGE

bosstoneexchange.com

56

BOSS TONE EXCHANGE is a specialized online platform launched in 2022 that enables users of BOSS musical products to share original Livesets globally. The platform targets musicians and music producers who use BOSS gear, providing a community-driven service focused on content sharing. The website is professionally designed with good SEO and mobile optimization, leveraging modern web technologies and third-party services such as Google Analytics and OneTrust for cookie consent management. Hosting appears to be on AWS infrastructure, ensuring reliable performance. Security posture is adequate with HTTPS enforced and cookie consent implemented; however, DNSSEC is not enabled and security headers are missing, representing areas for improvement. No direct contact information or detailed security policies are published, which could impact user trust. Overall, the domain registration is consistent and legitimate, supporting the platform's credibility. The site contains no adult or questionable content and maintains a safe environment for general audiences.

A

ANSARO

ansaro.ch

62

ANSARO is a Swiss-based coffee roastery specializing in freshly roasted coffee beans and retailing coffee products. The company positions itself as a local Swiss quality brand with a focus on authentic taste and craftsmanship. The website is professionally designed using the Wix platform, indicating a moderate level of digital maturity suitable for a small retail business. The technical infrastructure leverages Wix's Thunderbolt framework, ensuring reasonable performance and mobile optimization. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and visible privacy compliance mechanisms. Overall, the website is trustworthy and functional but would benefit from enhanced privacy and security features to meet compliance standards. Strategic recommendations include implementing privacy and cookie policies, adding security headers, and improving accessibility.

S

Swiss Olympic

coolandclean.ch

64

The website coolandclean.ch represents a national youth sports prevention program operated under the auspices of Swiss Olympic. It focuses on promoting healthy behaviors, fair play, and substance abuse prevention among young athletes and their leaders. The platform offers educational content, training tips, a material shop, and community support including regional ambassadors and consultation services. The site is well-branded, professionally designed, and targets youth sports organizations and their stakeholders in Switzerland. Technically, the site employs modern web technologies including Google Analytics, Facebook Pixel, and Google Maps API, likely built on a CMS such as Adobe Experience Manager. Security posture is strong with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response contacts are not visible. Overall, the domain registration aligns well with the business identity, supporting legitimacy and trustworthiness.

SWISS is a major international airline operating under the Lufthansa Group, providing comprehensive flight booking and travel services globally. The website is professionally designed, mobile-optimized, and offers a rich user experience with clear navigation and extensive travel-related content. Technically, the site leverages modern JavaScript frameworks, Adobe Helix RUM for performance monitoring, and Tealium for tag management, hosted on Akamai CDN ensuring fast and reliable delivery. Security posture is strong with HTTPS enforcement, secure login mechanisms, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates high business credibility and trustworthiness, aligned with the Lufthansa Group's reputation.

Z

zurichnetgroup ag

netgroupcloud.ch

56

Zurichnetgroup ag is a Swiss ICT service provider specializing in cloud solutions tailored for small and medium-sized enterprises (KMU). The company leverages strong partnerships with Microsoft and Swisscom to offer a range of cloud services including private, public, hybrid clouds, and Microsoft 365 cloud solutions. Their market position is solidified by certifications such as ISO 9001, 14001, and 27001, and their focus on Swiss data protection standards appeals to privacy-conscious KMU clients. Technically, the website demonstrates a mature digital infrastructure with modern web technologies, responsive design, and good SEO practices. The use of JSON-LD structured data and lazy loading images enhances performance and search engine visibility. Hosting is implied to be with Swisscom, aligning with their service offerings. From a security perspective, the site enforces HTTPS, employs multiple security headers, and benefits from the robust encryption standards of their cloud partners. No critical vulnerabilities or exposed sensitive data were detected. However, explicit incident response and vulnerability disclosure policies are not publicly available, representing an area for improvement. Overall, the website and business present a trustworthy, professional image with strong compliance to privacy regulations and security best practices. The company is well-positioned in the Swiss KMU market with a comprehensive portfolio of cloud and IT services.

The website stefan-aufdermaur.ch serves as a personal or professional portfolio site for Stefan Auf der Maur, likely showcasing artistic or photographic work. The site is minimalistic with limited metadata and no structured data, focusing primarily on visual content. The target audience appears to be general visitors interested in the individual's work, with no commercial or transactional features evident. Technically, the site uses basic HTML, CSS, and JavaScript with lazy loading for images, but lacks advanced SEO, accessibility, and performance optimizations. Security posture is weak, with no visible security headers or privacy policies, and no HTTPS status confirmed from the provided data. No contact information or forms are present, limiting user engagement and trust signals. Overall, the site is functional but basic, with room for significant improvements in security, privacy compliance, and user experience.

Genossenschaft Haus Oslo Ateliers is a small cooperative likely focused on providing atelier spaces or community services for artists and creatives in Switzerland. The website is primarily informational, presented in German, and built on the CraftCMS platform. The technical infrastructure is moderate with HTTPS enabled and hosted on an Apache server, but lacks advanced security headers and privacy compliance features. No contact or policy information is provided, which limits user trust and compliance with regulations such as GDPR. The site does not employ analytics or advertising technologies, indicating a minimal digital footprint. Overall, the website serves its niche audience but requires improvements in privacy, security, and contact transparency to enhance credibility and compliance.

Julian Salinas Fotografie is a small photography business based in Switzerland, focusing on artistic and commissioned photography services primarily in Basel and Zurich. The website presents basic information about the business and its offerings, including art works, commissioned projects, exhibitions, portraits, and video projects. The target audience is general, including art enthusiasts and potential clients seeking photography services. Technically, the website is built using React and standard web technologies such as JavaScript and CSS. The site appears moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. There are no detected content management systems or third-party analytics or advertising tools integrated. From a security perspective, the website lacks visible security headers and privacy or cookie policies, indicating a low maturity level in security and compliance. No forms or data collection mechanisms are present, reducing immediate data protection concerns but also limiting user engagement. The absence of HTTPS information prevents a full SSL configuration assessment. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the website presents a basic but functional online presence for a small photography business. Key recommendations include implementing HTTPS, adding privacy and cookie policies, improving security headers, and providing clear contact information to enhance trust and compliance.

J

Jugendkulturfestival Basel (JKF)

jkf.ch

45

Jugendkulturfestival Basel (JKF) is a small-scale cultural festival focused on youth engagement in Basel, Switzerland. The website serves as an informational platform for the festival's upcoming events, providing program links, partner information, and contact details. The festival targets youth and cultural enthusiasts in the region, positioning itself as a key local cultural event. Technically, the site is built on WordPress with modern web standards, including HTTPS and responsive design, but lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS enabled but missing important security headers and no visible incident response or security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is functional and professional but could improve in compliance and security transparency.

The analyzed URL corresponds to a Chrome internal error page (chrome-error://chromewebdata/) which serves as a placeholder when the browser cannot load the requested website content. The page includes the offline dinosaur game scripts and styles but contains no actual business or website content. Consequently, there is no identifiable company information, business description, or market positioning. The technical infrastructure is limited to client-side JavaScript for the embedded game, with no server-side or hosting details available. Security posture cannot be assessed due to the absence of real website content, security headers, or HTTPS information. Privacy compliance elements such as privacy policies, cookie consent, or contact information are missing. Overall, this is not a functional website but a browser error page, and thus the risk assessment is that no meaningful business or security evaluation can be performed.

A

ARS Architektur AG

ars-architektur.ch

52

ARS Architektur AG is a Swiss architecture firm located in Münchenstein, Basel region, specializing in architecture, interior design, general planning, project development, and area development. The website presents a professional image with project showcases and a clean, modern design using the Svelte framework. The technical infrastructure is moderately modern with good mobile optimization and SEO practices, but lacks explicit CMS or hosting details. Security posture is weak due to absence of security headers, privacy policies, and incident response information. No HTTPS or SSL configuration details were available from the provided data. Overall, the site is functional and professional but requires improvements in security and privacy compliance to meet modern standards. The risk level is moderate with no critical vulnerabilities detected but gaps in security best practices and compliance.

U

unterdessen.ch

unterdessen.ch

48

The website unterdessen.ch presents minimal accessible content with no visible business description, contact information, or policies. The site uses a modern JavaScript framework (SvelteKit) and custom fonts, indicating some technical maturity, but lacks SEO, accessibility, and user engagement features. Security posture is weak due to absence of security headers and privacy policies, and WHOIS data is privacy protected, limiting transparency. Overall, the site appears to be a small or early-stage project with limited public-facing information, resulting in low trust and credibility scores.

S

Stück Labor Basel

stuecklabor.ch

47

Stück Labor Basel is a well-established cultural initiative founded in 2008 by Theater Basel to promote new Swiss dramaturgy. The program annually supports selected playwrights and collaborates with major Swiss theaters such as Theater Basel, Bühnen Bern, and Luzerner Theater. The website reflects this cultural focus with professional design and consistent branding, targeting theater professionals and audiences interested in Swiss dramaturgy. Technically, the site uses modern JavaScript frameworks (Svelte) and demonstrates good mobile optimization and SEO practices, although some accessibility features are basic. Security posture is moderate with no HTTPS or security headers explicitly detected in the provided data, and no privacy or cookie policies are present, indicating room for improvement in compliance and security best practices. Overall, the domain registration data aligns well with the website's claims, supporting legitimacy and trustworthiness.

A

ateliernord.ch

ateliernord.ch

44

The website ateliernord.ch presents minimal accessible content with no metadata, structured data, or visible business information. The site uses the SvelteKit JavaScript framework, indicating a modern technical foundation, but lacks visible SEO, accessibility, or security features. No privacy, cookie, or terms of service policies are found, and no contact information or forms are present, limiting user engagement and trust. Security posture cannot be fully assessed due to lack of headers and SSL details. Overall, the site appears to be in an early or minimal state with limited business or security maturity.

Christine Moser's website serves as an online portfolio showcasing her art exhibitions and objects, primarily targeting art enthusiasts and museum visitors. The site highlights projects such as 'Double Face' at the Museum für Gestaltung Zürich, positioning her as a niche artist in the contemporary art and design space. The business model is centered on artistic presentation rather than commercial sales or services. Technically, the website employs modern frontend technologies including Svelte and Swiper.js for interactive galleries, indicating a moderate level of digital maturity. The site appears mobile-optimized with good design quality and navigation clarity, although accessibility features are basic. No CMS or hosting provider details are evident. From a security perspective, the site lacks key security headers and explicit privacy or cookie policies, which lowers its compliance posture. The absence of contact information and incident response details further limits trust and security transparency. However, no vulnerabilities or suspicious elements were detected, and the content is safe for general audiences. Overall, the website is functional and professionally presented but would benefit from enhanced security practices, privacy compliance, and clearer contact information to improve trustworthiness and regulatory adherence.

The website mirjamplattner.ch appears to be a minimal personal or professional portfolio site built using the SvelteKit framework. The content is very limited, primarily displaying a logo image with no additional textual or metadata content. There is no evidence of privacy policies, cookie consent mechanisms, or terms of service, indicating a basic digital maturity level. The technical infrastructure is modern in terms of framework choice but lacks visible SEO, accessibility, or performance optimizations. Security posture is minimal with no detected security headers or HTTPS confirmation in the provided data, and no contact or incident response information is available. Overall, the site presents a low-risk profile due to minimal content and no suspicious elements, but it lacks many standard compliance and security features expected for professional or business websites.

S

szenografieschweiz.ch

szenografieschweiz.ch

43

The website szenografieschweiz.ch currently presents minimal accessible content, primarily consisting of a basic HTML structure with JavaScript modules loaded via the SvelteKit framework. There is no visible textual content, metadata, or structured data to provide insights into the business operations, services, or market positioning. The absence of privacy, cookie, or terms of service policies, as well as contact information, limits the ability to assess compliance and user engagement. Technically, the site uses modern JavaScript frameworks but lacks visible performance or security optimizations. Security posture is weak due to missing HTTPS/SSL information and absence of security headers or policies. Overall, the site appears to be in an early or placeholder state, with significant gaps in content, compliance, and security.

M

Miranda Roux

mirandaroux.net

51

Miranda Roux is a Danish artist based in Geneva, specializing in figurative art that explores surrealism, classical sculpture, and taboo themes. The website serves as a portfolio showcasing her selected works, biography, news, texts, and contact information. The site targets art enthusiasts, collectors, and galleries interested in contemporary European art. Technically, the website is built using the modern Svelte framework, hosted by Infomaniak Network SA, and employs HTTPS with domain transfer protection. However, it lacks DNSSEC and a defined Content-Security-Policy header, which are recommended for enhanced security. The site does not provide privacy or cookie policies, nor does it include direct contact emails or phone numbers, relying solely on a contact form for communication. No tracking or advertising technologies are detected, indicating a privacy-conscious approach but also a lack of compliance documentation. Overall, the website is professional and well-structured but would benefit from improved security headers and privacy compliance measures.

The website vittoriosantoro.info serves as an online portfolio for the artist Vittorio Santoro, showcasing current and past exhibitions, recent works, and publications. It targets art enthusiasts, galleries, and cultural institutions interested in the artist's work. The business model is primarily promotional, focusing on visibility and information dissemination rather than direct sales. The site is niche and small scale, consistent with an individual artist's portfolio. Technically, the site is built using modern JavaScript technologies, specifically the SvelteKit framework, and includes interactive elements such as a swiper for featured content. The site is mobile optimized and has a good design quality, though accessibility and SEO optimizations are basic. No CMS or hosting provider details are evident from the content. From a security perspective, the site lacks visible security headers and privacy-related policies, which lowers its security posture. No HTTPS or SSL configuration details were available from the data, and no contact or incident response information is provided. The WHOIS data is incomplete due to unsupported TLD WHOIS queries, limiting domain trust assessment. Overall, the site appears legitimate but would benefit from improved security and compliance measures. The overall risk is moderate with recommendations to implement security headers, add privacy and cookie policies, provide contact information, and verify SSL/TLS configurations to enhance trust and compliance.

S

Stücheli Pestalozzi Schiratzki Architekt*innen ETH SIA

stuepetzki.ch

44

Stücheli Pestalozzi Schiratzki Architekt*innen ETH SIA is a small architecture firm based in Zürich, Switzerland, specializing in architecture and urban planning projects ranging from new constructions to renovations. The website showcases a portfolio of projects with extensive imagery, targeting clients interested in architectural services. The technical infrastructure is modern, leveraging the SvelteKit framework and JavaScript modules, indicating a contemporary digital presence. However, the site lacks critical privacy and security policies, contact information, and security best practices, which impacts its overall security posture. No WAF or blocking mechanisms were detected, and the site is fully accessible. The WHOIS data aligns well with the business claims, supporting legitimacy. Strategic improvements in privacy compliance, security headers, and contact transparency are recommended to enhance trust and compliance.

The eMuseum website serves as the digital archive platform for the Museum für Gestaltung Zürich and the Archive of the Zurich University of the Arts (ZHdK). It provides extensive access to a large collection of design and art objects, positioning itself as the largest Swiss online database in this domain. The platform targets researchers, curators, designers, collectors, and the general public interested in design and art history. The business model is non-profit, focusing on cultural preservation and digital access rather than commercial activities. Technically, the website is built on a custom CMS leveraging the Apache Tapestry framework, with frontend technologies including Bootstrap, jQuery, OpenLayers, and Font Awesome. It employs Matomo for analytics and AddToAny for social sharing. The site is mobile-optimized with moderate performance and basic accessibility features. SEO optimization is basic, with room for improvement in structured data and meta tags. From a security perspective, the site enforces HTTPS and uses secure form tokens, but lacks several security headers and published policies such as privacy, cookie, and incident response. No vulnerabilities or malicious content were detected. The WHOIS data aligns well with the institutional identity, confirming legitimacy and trustworthiness. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance, improved security headers, and more transparent contact and incident response information to strengthen user trust and regulatory adherence.

B

Beisheim Holding

beisheim.com

61

Beisheim Holding operates as a holding and capital management company with a professional online presence focused on corporate stakeholders and investors. The website is structured using modern web technologies including Nuxt.js and integrates Cookiebot for comprehensive cookie consent management, reflecting a commitment to privacy compliance. However, the absence of WHOIS registration data raises concerns about domain legitimacy, despite the professional appearance and GDPR-compliant cookie practices. The site lacks explicit contact information, terms of service, and security policies, which limits transparency and user trust. Security posture is moderate with HTTPS enforced but missing key security headers and incident response information. Overall, the website is functional and compliant in privacy aspects but would benefit from enhanced transparency and security disclosures.

H

Hofheim

hofheim.de

54

Hofheim am Taunus operates an official municipal website providing comprehensive information and services to residents, visitors, and local stakeholders. The site covers a broad range of topics including culture, tourism, politics, administration, and community life, positioning itself as the primary digital interface for the city. The website is built on TYPO3 CMS, a robust open-source content management system, and demonstrates good technical maturity with responsive design and structured data for SEO and accessibility. Security posture is adequate with HTTPS enabled and no exposed sensitive data, though improvements are recommended in security headers and privacy compliance documentation. Overall, the website reflects a trustworthy and professional government presence with clear contact information and consistent branding.

T

Techniker Krankenkasse

tk.de

66

Techniker Krankenkasse (TK) is a leading statutory health insurance provider in Germany, offering comprehensive health coverage, digital health services, and personalized member support. The website reflects a mature digital presence with a strong focus on user experience, accessibility, and privacy compliance. The technical infrastructure leverages modern web technologies and a custom design system, hosted on reliable infrastructure with Versatel. Security posture is solid with HTTPS, CSRF protection, and a consent manager, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and well-aligned with the business's market position.

H

Hochschulen Fresenius GmbH

hs-fresenius.de

71

Hochschulen Fresenius GmbH is a large, well-established private higher education institution in Germany, founded in 1848. It offers a broad range of Bachelor and Master degree programs across multiple disciplines including Chemistry, Biology, Business, Media, Health, Social Sciences, and Fashion & Design. The university serves over 17,000 students with flexible study options including full-time, part-time, on-campus, and online formats. The website reflects a professional and modern digital presence, leveraging WordPress CMS, SEO best practices, and cookie consent management via Usercentrics. Hosting is provided by Adacor, with consistent DNS and SSL configurations ensuring secure access. However, explicit privacy and security policies are not readily visible, and security headers are not detected, indicating room for improvement in security posture. Overall, the website is trustworthy, well-branded, and compliant with basic GDPR cookie consent requirements.

IKEA Deutschland GmbH & Co. KG operates a comprehensive retail website offering affordable furniture and home accessories tailored for the German market. The site provides extensive product categories, planning services, and customer support, positioning IKEA as a leading furniture retailer in Germany. The website is well-branded, professionally designed, and optimized for mobile and accessibility, reflecting a mature digital presence. Technically, the site employs modern web technologies including JavaScript frameworks, cookie consent management via OneTrust, and A/B testing with Optimizely, ensuring a robust user experience. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response details are not publicly disclosed. Privacy compliance is well addressed with clear cookie and privacy policies, including GDPR adherence and a consent mechanism. The absence of WHOIS data limits domain registration trust analysis, but the overall site quality and brand reputation strongly indicate legitimacy. No adult or questionable content is present, making the site safe for general audiences.

T

Taunus Sparkasse

taunussparkasse.de

66

Taunus Sparkasse is a regional German savings bank offering a comprehensive range of financial services including online banking, accounts, credit cards, loans, investments, insurance, and real estate services. The website targets both private and corporate customers with a strong focus on accessibility, user experience, and digital service delivery. The bank maintains a strong local market position with trusted brand recognition and multiple customer contact channels including phone, chat, and video consultations. Technically, the site is built on modern web technologies and a robust CMS platform (Adobe Experience Manager), optimized for mobile and accessibility compliance. Security posture is strong with HTTPS enforcement, session management, and cookie consent mechanisms, though explicit security headers could be further confirmed. Privacy policies and cookie management are comprehensive and GDPR compliant. Overall, the site demonstrates high professionalism, trustworthiness, and digital maturity.

H

HACON

hafas.de

65

HACON is a medium-sized company specializing in digital mobility solutions, offering platforms and systems for Mobility as a Service, ticketing, operator business products, and transport planning. As a part of Siemens Mobility since 2017, HACON holds a strong market position in the transportation technology sector. The website reflects a professional and consistent brand image, targeting mobility service providers and transport operators. Technically, the site is built on TYPO3 CMS, employs modern JavaScript, and integrates Cookiebot for GDPR-compliant cookie consent, alongside Matomo for privacy-friendly analytics. Security posture is solid with HTTPS and consent mechanisms, though security headers and explicit incident response policies are absent. Overall, the site is trustworthy, well-structured, and compliant with privacy regulations, supporting HACON's business credibility and digital maturity.

Spitex Glattal is a Swiss non-profit association providing comprehensive home care and support services in the Glattal region, including nursing, psychiatric care, household assistance, and meal delivery. Established in 2013, it serves multiple municipalities with a team of approximately 100 employees, emphasizing empathy, professionalism, and multicultural diversity. The website reflects a well-structured and professional digital presence, leveraging modern web technologies such as Next.js and React, hosted with DigitalOcean Spaces for media assets. The site is mobile-optimized and offers clear navigation and relevant content for its target audience. From a security perspective, the website employs HTTPS with a strong SSL configuration and does not expose sensitive data or vulnerable libraries. However, it lacks some security headers and does not provide explicit security policies or incident response contacts. Privacy compliance is generally good, with a comprehensive privacy policy available, but the absence of a cookie consent mechanism is a notable gap. Overall, the domain registration details align well with the business claims, supporting the legitimacy and trustworthiness of the entity. The risk assessment indicates a low risk profile with recommendations to enhance security headers, implement cookie consent, and publish incident response information to strengthen compliance and trust. The website's content is safe for general audiences, focusing solely on healthcare services without any adult or questionable content.

The website 'Bonn hilft Cherson' is a humanitarian aid initiative led by the city of Bonn in partnership with the NGO Help – Hilfe zur Selbsthilfe e.V. It focuses on raising donations to support medical aid and infrastructure rebuilding in the Ukrainian city of Cherson. The site is well-structured, professionally designed, and provides comprehensive information about the project, donation methods, and partner organizations. The target audience includes citizens of Bonn, local organizations, and donors interested in humanitarian support. Technically, the website is built on TYPO3 CMS and uses modern web technologies including Bootstrap for responsive design. The site is mobile-optimized and SEO-friendly, though some accessibility features are basic. Hosting appears to be managed via German hosting providers, with no signs of blocking or WAF interference. From a security perspective, the site uses HTTPS and does not expose sensitive data. However, it lacks explicit security headers and a cookie consent mechanism, which are recommended for GDPR compliance. No incident response or vulnerability disclosure policies are published, which could be improved to enhance trust and security posture. Overall, the website scores well on content quality, business credibility, and technical implementation, with minor penalties for privacy and security policy gaps. It represents a trustworthy and professional platform for humanitarian fundraising and awareness.

N

Nordnorsk debatt

nordnorskdebatt.no

58

Nordnorsk debatt is a regional Norwegian online media platform focused on societal, political, and cultural debates in Northern Norway. It positions itself as the largest and best forum for northern Norwegian debate, targeting residents and stakeholders interested in regional issues. The platform offers opinion articles, debate forums, advertising opportunities, and subscription services, operating under the Amedia media group umbrella. Technically, the website employs modern JavaScript frameworks, service workers, and ad technologies such as Google Publisher Tags and Prebid.js, indicating a mature digital infrastructure with mobile app integration for iOS and Android. Security posture is strong with HTTPS enforcement and security headers, though explicit privacy and terms policies are lacking. The absence of WHOIS data limits domain legitimacy verification, but the website's professional branding and technology suggest a legitimate operation. Overall, the site is well-designed, content-rich, and trustworthy for its target audience.

N

Nord24

nord24.no

62

Nord24 is a Norwegian local news media outlet providing a wide range of content including local news, sports, culture, business news, and classifieds. It operates a subscription-based business model supplemented by advertising revenue. The website is professionally designed, mobile-optimized, and uses modern web technologies including service workers and JavaScript frameworks. The technical infrastructure supports a progressive web app experience and integrates multiple advertising networks and analytics services. Security posture is strong with HTTPS enforced and standard security headers present, though public security policies and incident response information are not found. The domain WHOIS data is unavailable, likely due to privacy protection, which is common for media companies. Overall, the site presents a trustworthy and professional presence in the Norwegian regional media market.

F

Fredriksstad Blad

f-b.no

66

Fredriksstad Blad is a regional Norwegian news media outlet providing local news, sports, culture, classifieds, and subscription-based premium content. The website targets local residents interested in community news and events. It operates under the parent company Amedia and offers digital and e-paper subscriptions alongside advertising revenue streams. The site demonstrates a mature digital infrastructure using modern JavaScript frameworks, service workers, and ad technologies. Security posture is strong with HTTPS, security headers, and privacy policies in place, though explicit security policy and incident response information are not publicly available. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, serving a general audience with safe content.

A

Avisa Valdres

avisa-valdres.no

66

Avisa Valdres is a regional Norwegian news media company providing local news, sports, culture, business, and community information primarily targeting residents of the Valdres region. The website supports subscription-based access to content including digital and e-paper editions. The company is part of the Amedia group, a major Norwegian media conglomerate. The site demonstrates a mature digital presence with modern web technologies, including progressive web app features and integration with advertising networks. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy compliance is evident with clear privacy and cookie policies and GDPR adherence. Overall, the site is professional, trustworthy, and well-maintained.

O

Oppland Arbeiderblad

oa.no

64

Oppland Arbeiderblad is a regional Norwegian newspaper providing local news, sports, culture, business, and community information primarily targeting the Oppland region. The website supports subscription services, advertising, and digital content delivery including e-paper and podcasts. The site is well-branded and consistent with a professional media outlet. Technically, the site uses modern JavaScript frameworks, service workers, and ad technologies to deliver a performant and mobile-optimized experience. Security posture is strong with HTTPS enforcement and standard security headers, though explicit incident response and vulnerability disclosure information is absent. Privacy and cookie policies are present and GDPR compliant. Overall, the site represents a legitimate, medium-sized media business with a solid digital presence.

G

Glåmdalen

glomdalen.no

64

Glåmdalen is a Norwegian regional news media website providing local news, sports, culture, business, and community information primarily targeting the Norwegian local audience. The site operates on a subscription-based model with premium content gated for subscribers and supported by advertising revenue. It is part of the Amedia group, a major Norwegian media company, which lends credibility and stability to its operations. The website demonstrates a mature digital infrastructure with modern web technologies including service workers and ad management frameworks. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-positioned in its market segment.

N

Nordlys

nordlys.no

10

Nordlys is a well-established Norwegian regional media company focused on delivering local news, sports, culture, and business content primarily for Northern Norway. The website supports a subscription-based business model complemented by advertising revenue. It is part of the Amedia group, a significant media conglomerate in Norway. The site demonstrates a professional digital presence with modern web technologies, including progressive web app features and advanced ad serving frameworks. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policy and incident response information are not publicly available. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the site is trustworthy and professionally maintained, serving a general audience with safe content.

R

Romerikes Blad

rb.no

10

Romerikes Blad is a regional Norwegian news media company providing local news, sports, culture, and community information primarily targeting residents of the Romerike region. The website supports subscription and advertising revenue models, offering digital and print news access. It is part of the Amedia group, with several local subsidiary sites. The site is professionally designed with consistent branding and good content quality in Norwegian language. Technically, the site uses modern JavaScript frameworks, service workers, and ad technologies, ensuring good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response information are not published. Privacy compliance is good with clear privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy and well-maintained, serving a medium-sized regional media business.

S

Sandefjords Blad

sb.no

66

Sandefjords Blad is a regional Norwegian newspaper providing local news, sports, culture, and business information primarily targeting readers in Sandefjord and surrounding areas. It operates under the Amedia group, leveraging a subscription and advertising-based business model. The website demonstrates a professional digital presence with a focus on user engagement through subscription services and local classifieds. Technically, the site uses modern web technologies including service workers, header bidding for ads, and a proprietary CMS framework (Rodimus). The security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. The lack of WHOIS data is consistent with Norid's privacy policies for .no domains and does not detract from the site's legitimacy. Overall, the site is trustworthy, well-maintained, and serves its local audience effectively.

G

Gudbrandsdølen Dagningen

gd.no

10

Gudbrandsdølen Dagningen is a regional Norwegian news media company providing local news, sports, culture, and business content primarily targeting the Norwegian local population. The website supports subscription services and advertising revenue models, positioning itself as a trusted regional news source under the parent company Amedia. The digital infrastructure is built on a custom CMS and modern web technologies including service workers and advanced ad management frameworks. The site is mobile responsive and optimized for user experience with clear navigation and content relevance. Security posture is strong with HTTPS enforcement and security headers, though explicit vulnerability disclosure and incident response information are absent. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms. Overall, the website demonstrates a mature digital presence with good business credibility and technical implementation.

B

Bundesstadt Bonn

bonn.de

58

The website www.bonn.de serves as the official digital portal for the Bundesstadt Bonn, providing extensive information and services related to the city administration. It targets residents, visitors, and businesses, offering multilingual content and access to municipal services such as event calendars, service portals, and contact forms. The site is well-branded with consistent city imagery and logos, reflecting its authoritative position as a government entity. Technically, the site employs a modern CMS platform (Information Enterprise Server by Sitepark GmbH) and uses standard web technologies including JavaScript, CSS, and SVG icons. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Security best practices are observed with HTTPS enforcement, security headers, and cookie consent mechanisms. From a security perspective, the site demonstrates a solid posture with no visible vulnerabilities or exposed sensitive data. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not published, which could be improved to enhance transparency and trust. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent aligned with GDPR requirements. Overall, www.bonn.de is a professional, trustworthy, and well-maintained government website. It effectively balances user experience, privacy, and security, serving as a reliable resource for its audience. Strategic recommendations include publishing detailed security and incident response policies, adding vulnerability disclosure information, and providing data protection officer contact details to further strengthen compliance and user trust.

maxcluster GmbH is a German-based managed hosting provider specializing in scalable, high-performance cluster hosting solutions tailored for e-commerce platforms such as Shopware, Magento, WordPress, and others. Established in 2011, the company positions itself as Germany's leading e-commerce host, offering a comprehensive suite of hosting and managed services with a strong emphasis on security, performance, and customer support. Their target audience includes online shops, agencies, and e-commerce businesses seeking reliable and scalable hosting infrastructure. The website reflects a mature digital presence with professional design, clear navigation, and extensive content tailored to their market segment. Technically, the website is built on TYPO3 CMS and leverages modern web technologies including JavaScript frameworks, HubSpot forms for lead generation, and Iubenda for cookie compliance. The hosting infrastructure is TÜV-certified, with proprietary data centers and advanced security measures such as DDoS protection, malware scanning, and 24/7 monitoring. The site is mobile-optimized, SEO-friendly, and integrates marketing and analytics tools responsibly. From a security perspective, maxcluster demonstrates a strong posture with HTTPS enforcement, security headers, and proactive incident response capabilities. However, there is room for improvement in publishing a formal vulnerability disclosure policy and providing explicit data protection officer contact details. Overall, the domain registration data aligns well with the website content, reinforcing the legitimacy and trustworthiness of the business. The overall risk assessment is low, with no critical vulnerabilities or suspicious content detected. Strategic recommendations include enhancing transparency around vulnerability disclosures and incident response, which would further strengthen trust and compliance. The website scores highly across content quality, technical implementation, security, privacy compliance, and business credibility, making it a robust and professional digital asset for maxcluster GmbH.

D

Deutscher Schwimm-Verband e. V.

dsv.de

59

The Deutscher Schwimm-Verband e. V. (DSV) is a well-established non-profit sports federation founded in 1886, representing swimming sports across Germany. It unites regional swimming associations and supports approximately 600,000 members in around 2,500 clubs. The organization focuses on promoting swimming disciplines, organizing competitions, and enforcing anti-doping policies in cooperation with national agencies. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistent with its institutional stature. Technically, the website employs a modern CMS (AmphiCMS), uses JavaScript libraries such as jQuery and Owl Carousel, and implements lazy loading for performance optimization. Hosting is managed via DomainControl.com, and the site is secured with HTTPS and cookie consent mechanisms, indicating good digital maturity. Accessibility and SEO practices are well addressed, supporting a broad user base including mobile users. From a security perspective, the site enforces HTTPS and uses cookie consent management, but lacks explicit security headers like Content-Security-Policy and does not publish vulnerability disclosure or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a comprehensive privacy policy and GDPR adherence. Overall, the DSV website presents a low-risk profile with high trustworthiness and professionalism. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure information, and maintaining regular security audits to sustain compliance and trust.

D

Deutscher Tischtennis-Bund e.V.

tischtennis.de

34

The Deutscher Tischtennis-Bund e.V. (German Table Tennis Association) operates the website tischtennis.de as the official platform for table tennis in Germany. The site serves as a comprehensive resource for players, clubs, fans, and stakeholders, offering news, event information, training resources, and organizational details. It holds a strong market position as the national governing body for the sport in Germany, supported by subsidiaries such as Tischtennis Marketing GmbH and TTBL Sport GmbH. The business model is non-profit and community-focused, targeting the German table tennis ecosystem.

D

Deutscher Ruderverband e.V.

rudern.de

55

The website www.rudern.de is the official digital presence of the Deutscher Ruderverband e.V., the German Rowing Federation. It serves as a comprehensive resource for rowing athletes, clubs, and enthusiasts in Germany, offering detailed information on national teams, competitions, youth programs, and organizational governance. The site demonstrates a high level of professionalism with excellent content quality, clear navigation, and consistent branding. Technically, it is built on Drupal 10, employs modern web standards, and is optimized for mobile devices. Security practices include HTTPS enforcement and a GDPR-compliant cookie consent mechanism, though some security headers and explicit incident response policies are absent. Overall, the domain and website content align well, indicating legitimacy and trustworthiness.

D

Deutscher Leichtathletik Verband

leichtathletik.de

48

leichtathletik.de is the official athletics portal for the Deutscher Leichtathletik Verband (DLV), serving as the leading source of news, event information, athlete profiles, and anti-doping resources for the German-speaking athletics community. The website is well-structured, content-rich, and targets athletics enthusiasts, athletes, and stakeholders in Germany. Technically, the site is built on the TYPO3 CMS platform, employs modern JavaScript libraries such as Splide.js for carousels, and integrates consent management and analytics tools like Consentmanager.net and eTracker. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though explicit security headers are not detected. Privacy compliance is moderate, with cookie consent implemented but no visible privacy policy or terms of service links in the provided content. Overall, the domain and website appear legitimate and consistent with an official sports federation, with no signs of suspicious activity or adult content.

O

Olympiabewerbung München

olympiabewerbung-muenchen.com

55

The website www.olympiabewerbung-muenchen.com is a professionally designed government-related campaign site promoting Munich's bid for the Olympic and Paralympic Summer Games starting from 2036. It targets citizens and stakeholders in Munich and Bavaria, aiming to inform and engage the public about the bid's vision, concept, and benefits. The site uses WordPress CMS with modern front-end technologies including JavaScript libraries like Plyr and Swiper, and employs Matomo for analytics. The content is rich, well-structured, and visually appealing, supporting a positive user experience and clear navigation. However, the site lacks explicit privacy and cookie policies, security headers, and incident response contact information, which are important for compliance and security posture. The WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration legitimacy, though the official nature of the content suggests a legitimate campaign. Overall, the site scores well on content quality and business credibility but needs improvements in privacy compliance and security best practices.

The website fuer-ihr-gutes-recht.de serves as an informational platform for legal advisory services primarily in labor, traffic, tenancy, medical, and family law. It is affiliated with the Sozialverband Deutschland (SoVD) in Niedersachsen, a significant social welfare association in Germany. The platform connects users with qualified lawyers across multiple regional locations, emphasizing social welfare legal support. The business model focuses on providing accessible legal representation and advice through a network of individual lawyers tied to a reputable non-profit organization. Technically, the website is built on TYPO3 CMS version 6.1, an outdated content management system, which may pose security and maintenance challenges. The site uses standard web technologies such as CSS and JavaScript but lacks modern performance and security enhancements. The hosting appears to be managed via your-server.de based on the nameservers. The site shows basic mobile optimization and accessibility features but could benefit from modernization and improved SEO practices. From a security perspective, no HTTPS or SSL configuration details were confirmed, and no advanced security headers or policies are evident. The absence of cookie consent mechanisms and privacy policy details indicates limited GDPR compliance. No incident response or security contact information is provided. The site does not employ analytics or tracking technologies, which reduces privacy concerns but also limits business intelligence capabilities. Overall, the website is functional and provides relevant content for its target audience but requires significant improvements in security posture, privacy compliance, and technical modernization to enhance trustworthiness and resilience against emerging threats.