Security Directory

S

Sport- und Erlebnisdorf Hinsbeck des Landessportbundes Nordrhein-Westfalen e.V.

hinsbeck.nrw

60

Sport- und Erlebnisdorf Hinsbeck, operated by the Landessportbund Nordrhein-Westfalen e.V., provides sports, leisure, and accommodation services primarily targeting clubs, school classes, and families in the NRW region of Germany. The website is professionally designed with a strong emphasis on accessibility, user experience, and comprehensive content about their offerings including accommodations, sports activities, and event hosting. Technically, the site uses modern JavaScript libraries, a consent management platform, and multimedia content to engage users effectively. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Overall, the site demonstrates strong compliance with GDPR and privacy regulations, providing clear contact and legal information. The domain registration details align well with the business entity, supporting high legitimacy and trustworthiness.

The Nationale Plattform zur Bekämpfung der Manipulation von Sportwettbewerben is an official German government initiative under the Bundesministerium des Innern und für Heimat, dedicated to combating manipulation in sports competitions. The platform provides comprehensive information, monitoring, prevention strategies, and a reporting mechanism to stakeholders including public authorities, sports organizations, and the general public. It holds a strong market position as a trusted governmental resource in Germany for sports integrity. Technically, the website is built on the Government Site Builder CMS, employing modern web technologies such as HTML5, CSS3, JavaScript, and accessibility tools like ReadSpeaker. The site is mobile-optimized, accessible, and includes SEO best practices. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism with options for anonymous statistical tracking. However, it lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were found in the content. The WHOIS data is consistent and transparent, reinforcing the site's legitimacy. Overall, the platform demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable source for its intended audience. Strategic improvements in security policy transparency and header implementation could further enhance its security posture.

K

KERN CHERKEH Rechtsanwälte Partnerschaft mbB

sportrechtskanzlei.de

58

KERN CHERKEH Rechtsanwälte Partnerschaft mbB is a specialized German law firm focusing on sports law and related legal services. The firm serves a broad clientele including sports federations, professional clubs, athletes, sponsors, and agencies, positioning itself as a leading expert in the sports legal domain in Germany. Their website reflects a professional and consistent brand image with comprehensive service offerings in sports sponsorship, contracts, labor law, doping, compliance, and more. Technically, the website uses modern web technologies such as HTML5, CSS3, and JavaScript with Swiper.js for UI elements, delivering a good user experience with mobile optimization and clear navigation. Security-wise, the site uses HTTPS and avoids exposing sensitive data but lacks advanced security headers and formal security policies. Privacy compliance is partially addressed with a privacy policy but lacks cookie consent mechanisms. Overall, the site is trustworthy and professional, with room for improvement in security and privacy transparency.

Hotel Des Alpes is a well-established family-run hospitality business located in the picturesque Saanenmöser-Gstaad region of Switzerland, with a history dating back to 1904. The website reflects a professional and consistent brand image, offering hotel accommodation, gastronomy, and event services. The target audience includes tourists and travelers seeking premium mountain hospitality experiences. The business maintains a strong market position through its tradition and partnership with Hotel Kernen. Technically, the website employs modern web technologies including Google Tag Manager and Cookiebot for analytics and cookie consent management, ensuring GDPR compliance and user privacy. The site is mobile-optimized with good SEO and accessibility basics. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. However, explicit security policies and incident response information are absent, representing an area for improvement. Overall, the website is trustworthy, secure, and compliant, supporting the business's credibility and customer engagement.

D

domainwebhosting.de

domainwebhosting.de

48

The website domainwebhosting.de is currently a parked domain primarily monetized through Bodis advertising services. It lacks active business content, contact information, or any clear company identity. The site serves ads and related search results but does not provide any direct services or products. Technically, the site uses basic HTML, CSS, and JavaScript with no detected CMS or advanced frameworks. The hosting is via Bodis name servers, indicating domain parking rather than active hosting. Security posture is weak with no visible HTTPS enforcement or security headers, and privacy compliance is minimal with only a basic privacy policy page and no cookie consent mechanism. Overall, the site presents a low trust profile and limited business credibility.

N

Nkom

nkom.no

74

Nkom is the Norwegian Communications Authority responsible for ensuring robust, equitable, and future-oriented postal and electronic communication services across Norway. As a government regulatory body, it oversees frequency management, market regulation, security, and emergency preparedness in the telecommunications sector. The website reflects its authoritative role with comprehensive information, regulatory documents, and public resources targeted at Norwegian citizens, businesses, and communication providers. Technically, the website employs modern web standards including HTML5, CSS3, JavaScript, and SVG graphics, with Adobe Fonts integration and Fathom Analytics for privacy-conscious user tracking. The site is mobile-optimized, accessible, and well-structured, providing a professional user experience. Security best practices such as HTTPS and cookie consent mechanisms are implemented, though some security headers could be enhanced. The security posture is strong with no visible vulnerabilities or exposed sensitive data. However, the absence of a published vulnerability disclosure policy and incident response contact details suggests room for improvement in transparency and readiness. Privacy compliance is robust, with clear privacy and cookie policies aligned with GDPR requirements. Overall, Nkom's website is a trustworthy, professional government portal with high content quality and technical maturity. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and providing explicit incident response contacts to further strengthen trust and security posture.

A

Amedia

plussalt.no

59

The website www.plussalt.no is a Norwegian media subscription platform branded as +Alt, operated by Amedia. It offers users access to over 100 local newspapers, exclusive podcasts via the Untold app, and live sports streaming through Direktesport. The platform targets Norwegian consumers interested in comprehensive news and sports content in a single subscription. The site is professionally designed with good content quality and consistent branding, reflecting a mature digital media business. Technically, the site uses modern JavaScript libraries and ad platforms, including Google Tag Manager, Prebid.js, and DoubleClick, indicating a sophisticated advertising and analytics infrastructure. Security posture is moderate with HTTPS implied but lacks explicit security headers and incident response information. Privacy compliance is supported by a comprehensive privacy policy, though no cookie consent mechanism was detected. WHOIS data is not publicly available, likely due to privacy protection, which is common and justified for this business type. Overall, the site is legitimate and well-positioned in the Norwegian media market, but could improve security and privacy transparency.

F

Filemail Inc.

filemail.com

61

Filemail Inc. operates a mature and professional cloud-based file transfer service specializing in sending and sharing large files securely. The company targets a broad audience including individuals, teams, businesses, and enterprises, offering a free tier and multiple paid subscription plans with advanced features such as managed file transfer, compliance certifications, and custom branding. The website demonstrates a strong market position with over 50 million users and global data centers, emphasizing security and ease of use. Technically, the website is built on modern frameworks like Next.js and React, with native applications available across major platforms including desktop, mobile, and Outlook. The site is well-optimized for performance, mobile responsiveness, accessibility, and SEO. Security is robust with HTTPS, multiple security headers, end-to-end encryption, 2FA, virus scanning, and regular penetration testing. The security posture is strong, with compliance to standards such as ISO 27001, HIPAA, GDPR, and Cyber Essentials UK. However, explicit incident response and vulnerability disclosure policies are not publicly found, representing an area for improvement. The absence of WHOIS data limits domain registration trust analysis, but the overall business credibility and website professionalism mitigate concerns. Overall, Filemail presents a low-risk profile with a secure, compliant, and user-friendly service offering. Strategic recommendations include publishing incident response and vulnerability disclosure policies, adding a security.txt file, and providing Data Protection Officer contact details to enhance transparency and trust.

The analyzed content corresponds to an internal Chrome browser error page (chrome-error://chromewebdata/) that includes the embedded offline dinosaur game. There is no commercial or business-related content, no privacy or cookie policies, and no contact or security information. The page is designed to provide a user-friendly offline experience within the browser rather than serve as a public website. The technical infrastructure is focused on JavaScript and HTML5 Canvas for game rendering, with no external dependencies or analytics. Security posture is minimal due to the nature of the page, and no vulnerabilities or sensitive data exposure are detected. Overall, this is a safe, internal browser page with limited scope for business or security analysis.

R

RE|STRUCTURED NEWS | Real Estate Market Inside News

restructurednews.com

59

The website 'Restructured News' appears to be a small-scale news or informational site hosted on the Wix platform. The site uses standard Wix technologies and includes Google Analytics and Google Tag Manager for tracking, along with an ad network script from PageBooster. However, the site lacks substantive business information, contact details, and compliance policies such as privacy or cookie policies. The absence of WHOIS registration data is a significant concern, as it suggests the domain may not be properly registered or the data is not publicly available, which undermines trust and legitimacy. Technically, the site is moderately optimized for mobile and performance but lacks advanced security headers and visible security best practices. Overall, the security posture is basic, and privacy compliance is poor, indicating room for improvement in governance and transparency.

Wienerberger is an international manufacturer and supplier of building and infrastructure solutions, specializing in energy-efficient and sustainable construction materials such as bricks, roof tiles, pipelines, and solar panels. The website serves primarily as a recruitment platform targeting job seekers interested in joining the company’s diverse workforce across multiple locations in Belgium. The company positions itself as a large, established player with a family-oriented culture and a strong focus on innovation and sustainability. Technically, the website uses modern web technologies including JavaScript, CSS, Google Tag Manager, and Cookiebot for consent management. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site employs HTTPS and cookie consent mechanisms but lacks visible security headers and explicit security policies. WHOIS data is inconsistent, showing a future domain creation date and a registrar that does not match the company, which raises some trust concerns. Overall, the website is professional and functional but could improve in privacy transparency and security posture.

Q

Quality2Build

quality2build.be

57

The website 'Quality2Build' presents minimal accessible content, primarily a JavaScript-driven single page with no visible business descriptions, contact information, or policies. The domain WHOIS data is restricted with a 'NOT ALLOWED' status, preventing extraction of registrar or registration dates, which limits trust and legitimacy assessment. Technically, the site uses JavaScript and Google Tag Manager for analytics but lacks security headers and privacy compliance indicators. The security posture is basic with no visible vulnerabilities but also no advanced protections. Overall, the site appears to be in an early or placeholder state, lacking critical business and security information, which poses risks for trust and compliance.

G

GVB Privatversicherungen AG

gvb-privatversicherungen.ch

69

GVB Privatversicherungen AG is a Swiss insurance company specializing in supplementary building insurance products that complement the obligatory building insurance in Switzerland. The company targets property owners across Switzerland, offering tailored insurance solutions and online contract services. The website reflects a professional and consistent brand image with clear business focus and relevant content for its audience. Technically, the site employs modern technologies including Adobe's tag management and analytics platforms, Cookiebot for cookie consent, and CDN services for hosting and media delivery. Security posture is strong with HTTPS enforcement and security headers, although explicit privacy and terms of service documents are missing. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

W

wetteralarm.ch

wetteralarm.ch

74

Wetteralarm.ch is a Swiss-focused weather application providing free weather forecasts, precipitation radar, severe weather warnings, and access to over 500 live webcams. The service targets the general public in Switzerland, offering multilingual support and mobile app availability for iOS and Android. The website demonstrates a professional digital presence with consistent branding and good content quality. Technically, it employs modern JavaScript libraries, Adobe analytics, and Cookiebot for consent management, hosted likely on a CDN for performance. Security posture is solid with HTTPS and security headers, though explicit privacy and security policies are missing. Overall, the site is trustworthy and well-positioned in its niche.

Hausinfo.ch is a Swiss-based advisory website operated by GVB Services AG, providing neutral guidance around house and garden topics, primarily targeting homeowners and property owners in Switzerland. The site is positioned as a service linked to the Swiss Homeowners Association, offering insurance-related advice and consultation services. The business model focuses on providing informational content and facilitating insurance and property management services through digital forms and advisory tools. The website demonstrates a consistent brand presence and targets a niche market segment effectively. Technically, the website employs modern web technologies including JavaScript, Adobe Experience Platform Launch for tag management, and Cookiebot for cookie consent management. The hosting appears to be managed or supported by GVB's CDN infrastructure. The site is moderately performant, mobile-optimized, and includes basic accessibility features. SEO practices are well implemented with proper meta tags and structured data. From a security perspective, the website enforces HTTPS with strong SSL configuration and includes standard security headers such as Content-Security-Policy and Strict-Transport-Security. Cookie consent mechanisms are in place, supporting GDPR compliance. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not published, representing areas for improvement. No vulnerabilities or suspicious activities were detected in the content or scripts. Overall, hausinfo.ch presents a trustworthy and professional online presence with good privacy compliance and security posture. Strategic recommendations include publishing detailed security and incident response policies, adding a terms of service page, enhancing accessibility, and maintaining vigilance on third-party scripts. These steps will further strengthen the site's security and compliance maturity.

D

Dinas Lingkungan Hidup Kota Jakarta

dlhdkijakarta.org

54

Dinas Lingkungan Hidup Kota Jakarta operates as the official government environmental agency for Jakarta city, focusing on environmental preservation, waste management, public complaint handling, and community education. The website serves as an authoritative portal for residents and stakeholders to access environmental information and services. Technically, the site uses modern web technologies including Laravel Livewire, Swiper.js, and Cloudflare DNS, providing a responsive and user-friendly experience. Security posture is moderate with HTTPS enforced but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in security and compliance aspects.

I

I am Sanderson

iamsanderson.com

42

I am Sanderson is a professional design portfolio website showcasing the work of Sander Vermeulen, a designer specializing in branding, typeface design, graphic design, and visual identity for cultural institutions, art galleries, and brands. The website presents a rich collection of projects with high-quality images and videos, demonstrating a strong creative portfolio. The technical infrastructure includes modern web technologies such as JavaScript, CSS, and lazy loading of images, with media assets hosted on Amazon S3. The site is responsive and optimized for mobile devices, though SEO and accessibility features are basic. Security posture is limited, with no detected security headers or privacy policies, and no WHOIS data available for the domain, which reduces trustworthiness from a domain registration perspective. Overall, the website is professional and content-rich but lacks formal privacy and security compliance documentation.

W

Wienerberger

wienerberger.be

71

Wienerberger is a well-established manufacturer and distributor of ceramic building materials including bricks, roof tiles, and clay pavers, serving primarily the Belgian market. The company emphasizes quality, sustainability, and offers a range of tools and training for construction professionals. The website is professionally designed using Adobe Experience Manager and integrates modern marketing and analytics tools such as Google Tag Manager and Adobe DTM. Cookie consent is managed via Cookiebot, indicating compliance efforts with GDPR. However, explicit privacy and terms of service pages were not detected in the provided content. The WHOIS data for the domain is restricted, which is common for corporate domains to protect registrant privacy. Overall, the website presents a credible and professional business presence with good content quality and user experience.

R

Reynaers Aluminium

reynaers.be

64

Reynaers Aluminium is a leading manufacturer and marketer of innovative and sustainable aluminium solutions for windows, doors, facades, verandas, and related building products. The company operates globally with multiple country-specific domains and offers a comprehensive product portfolio targeting both professionals and consumers in the construction and manufacturing sectors. The website is built on Drupal 11 and employs modern web technologies, including cookie consent management and analytics tools. Security posture is generally good with HTTPS and consent mechanisms, though explicit security headers and published security policies are absent. WHOIS data is restricted due to registry policies, but the website's professional presentation and consistent branding indicate legitimacy. Privacy compliance is partial, with cookie consent but no visible privacy policy on the main page. Overall, the site is well-designed, user-friendly, and trustworthy for its business domain.

The website a-plus.be currently serves a security CAPTCHA challenge page designed to verify visitor legitimacy before granting access to the actual content. This indicates the presence of a Web Application Firewall (WAF) or anti-bot mechanism, which blocks direct content access. The domain is registered since 2002 with ClearMedia NV, a Belgian registrar, suggesting an established presence. However, no business or contact information, privacy policies, or terms of service are exposed on this page, limiting the ability to assess the company's operations or compliance posture. The technical implementation uses advanced JavaScript with Web Workers to perform a proof-of-work CAPTCHA, reflecting a modern approach to bot mitigation. Despite this, the lack of visible security headers and privacy compliance documentation is a concern. Overall, the site is inaccessible for full analysis due to the security challenge, resulting in a low AI score and limited insights.

H

Healthline Media LLC

healthline.com

56

Healthline Media LLC operates www.healthline.com, a leading health and wellness information website providing expert medical guidance, wellness advice, and product reviews. The company holds a strong market position as a trusted source for health content, supported by a large content library, sponsored programs, and community engagement platforms. The website targets a broad audience seeking reliable health information and wellness resources. Technically, the site is built on modern web technologies including Next.js and React, with integrations for analytics, advertising, and consent management, delivering a fast and mobile-optimized user experience. Security posture is strong with HTTPS enforcement, security headers, and GDPR-compliant consent mechanisms, though explicit security policies and incident response details are not publicly disclosed. WHOIS data is privacy-protected, which is common for media companies, slightly impacting transparency but justified by the business type. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

B

BD4Jobs

bd4jobs.com

10

BD4Jobs is a UK-based specialized job board focusing on architecture and related professions. The platform offers job search, job alerts, CV uploads, and recruiter services, positioning itself as a niche player in the real estate recruitment market. The website is built on the Madgex Job Board Platform and integrates multiple Google services for analytics and advertising. The technical infrastructure is modern and supports good mobile optimization and accessibility. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but lacks some security headers and published policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. The absence of WHOIS data for the domain raises concerns about domain legitimacy, though the website content and branding appear professional and trustworthy. Strategic improvements in security transparency and privacy compliance are recommended to enhance trust and compliance.

S

Social Intents, LLC

socialintents.com

10

Social Intents, LLC operates a professional SaaS platform specializing in live chat and AI chatbot solutions integrated with popular collaboration tools such as Microsoft Teams, Slack, Google Chat, Zoom, and Webex. Their platform enables businesses to engage customers across multiple channels including websites, WhatsApp, Messenger, and SMS, leveraging AI to automate routine inquiries and improve customer support efficiency. The company targets small businesses, entrepreneurs, and marketing teams seeking to enhance customer engagement and sales through streamlined communication tools. Their market position is strong within the niche of AI-powered chat solutions integrated with collaboration platforms, supported by clear pricing tiers and agency reseller options. Technically, the website employs a modern technology stack including JavaScript frameworks like Alpine.js and jQuery, along with integrations for analytics and marketing tools such as Google Tag Manager, Facebook Pixel, Bing Ads, and Weglot for multilingual support. The site is well-optimized for mobile and accessibility, with good SEO practices and fast loading performance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be more visible. No critical vulnerabilities or exposed sensitive data were detected. The security posture is mature with good privacy compliance evidenced by comprehensive privacy and cookie policies and GDPR adherence. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy and ownership transparency. No direct contact emails or phone numbers were found, and no public security or incident response contacts are provided, which could impact trustworthiness from a security perspective. Overall, the website presents a professional, trustworthy, and technically sound platform for AI-driven live chat services. Strategic recommendations include verifying domain registration details, enhancing visible security headers, publishing incident response contacts, and providing clearer direct contact information to improve business credibility and security transparency.

S

Statsforvalteren

statsforvalteren.no

66

Statsforvalteren.no is the official website of the Norwegian government agency representing the state in various counties. The agency is responsible for implementing parliamentary and governmental decisions, acting as a liaison between municipalities and central authorities. The website provides comprehensive information about the agency's services, news updates, job postings, and access to various public forms and complaint mechanisms. It targets Norwegian citizens, public officials, and municipalities, offering content primarily in Norwegian with options for English and other Norwegian dialects. Technically, the website employs a modern technology stack including Bootstrap for responsive design, Azure Application Insights, Hotjar, and Maze Analytics for user behavior tracking and performance monitoring. The site is well-structured with good SEO and mobile optimization, though it lacks a visible cookie consent mechanism. The site uses HTTPS with no detected security vulnerabilities in the content or scripts. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and no exposed sensitive data. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure information. The WHOIS data is unavailable due to Norid's privacy policies for .no domains, which is typical and not suspicious for Norwegian government domains. Overall, the site is trustworthy, professional, and safe for general audiences. Strategically, the site would benefit from implementing a cookie consent banner to comply fully with privacy regulations, publishing clear security and incident response policies, and enhancing accessibility features to improve inclusivity and compliance.

A

Avisa Oslo

ao.no

65

Avisa Oslo is a Norwegian local news media outlet focused on delivering news, politics, culture, business, real estate, and sports content primarily for the Oslo region. It operates a digital-first platform with subscription offerings and advertising revenue streams, supported by a professional and modern web presence. The site is part of the Amedia group, a major media company in Norway, which enhances its market position and credibility. Technically, the website employs modern JavaScript frameworks, service workers, and ad technologies to deliver a responsive and engaging user experience. Security-wise, the site enforces HTTPS, uses standard security headers, and avoids exposing sensitive data, reflecting a mature security posture. Privacy compliance is evident with comprehensive privacy and cookie policies and GDPR adherence. Overall, the site presents a low-risk profile with strong business credibility and technical implementation.

S

Store norske leksikon

snl.no

61

Store norske leksikon is a well-established Norwegian online encyclopedia owned by major Norwegian universities and non-profit organizations. It offers a comprehensive collection of over 300,000 expert-written articles and serves as Norway's largest research dissemination platform with millions of monthly users. The website is professionally designed, mobile-optimized, and provides rich, relevant content for a general audience. Technically, the site uses modern web technologies including asynchronous JavaScript, web fonts, and analytics tools such as Matomo and Google Tag Manager, ensuring good performance and SEO optimization. Security posture is strong with HTTPS enforcement and CSRF protections, though formal security policies and incident response contacts are not publicly disclosed. Privacy and cookie policies are present and GDPR compliant. Overall, the site is trustworthy, safe, and authoritative in its domain.

N

NAML

naml.no

66

The website www.naml.no represents a Norwegian entity with a professional web presence focused on providing organizational or business-related services. The site uses modern web technologies including HTTPS, Google reCAPTCHA Enterprise for bot protection, Microsoft Application Insights for analytics, and Cookiebot for cookie consent management. The content is primarily in Norwegian and the site demonstrates good design quality and user experience with clear navigation and mobile optimization. However, explicit privacy policy and terms of service pages are not clearly found, and no direct contact information such as emails or phone numbers are visible, which slightly impacts transparency and user trust. Technically, the site employs a modern tech stack with standard web technologies and integrates third-party services for analytics and marketing. Security posture is solid with HTTPS enforced and bot protection in place, but the absence of explicit security headers and detailed privacy documentation suggests room for improvement. The WHOIS data is not publicly available, indicating privacy protection, which is common but reduces the ability to verify domain ownership and age. Overall, the website is secure and professional but could enhance trust and compliance by publishing clear privacy and terms policies and providing contact details. The domain's privacy-protected WHOIS is not unusual but should be monitored for legitimacy. No critical vulnerabilities or suspicious content were detected, and the site is safe for general audiences.

T

Takentreprenørenes forening

taktekker.no

66

Takentreprenørenes forening (TEF) is a Norwegian professional association representing qualified and reputable roofing contractors. The organization focuses on safeguarding members' common interests and promoting collaboration and expertise in roofing and membrane roofing trades. The website serves as an informational and organizational platform for its members and stakeholders within the roofing industry in Norway. Technically, the website employs modern web technologies including HTTPS, JavaScript frameworks, Microsoft Application Insights, Siteimprove analytics, Google reCAPTCHA Enterprise, and Cookiebot for cookie consent management, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and bot protection mechanisms in place, though explicit security headers and privacy policies are lacking. The absence of WHOIS data due to privacy protection slightly reduces trust but is common for professional associations. Overall, the site is professional, secure, and compliant with basic privacy standards, serving its target audience effectively.

T

TPF

tpf-info.org

57

TPF is a small local business based in Majorstuen, Norway, with an online presence hosted on the Wix platform. The website serves as an informational portal with basic contact details including a phone number and physical address. The business appears to target a general audience with no explicit or adult content. The site uses standard Wix technologies and includes minimal external analytics via Siteimprove Analytics. However, the website lacks critical compliance documents such as privacy and cookie policies, and does not provide contact forms or email addresses for direct communication. The WHOIS data for the domain is unavailable or malformed, which limits the ability to fully verify domain legitimacy and ownership.

T

T&R Oberland AG

troag.ch

58

T&R Oberland AG is a Swiss fiduciary services company specializing in tax, accounting, auditing, HR administration, succession planning, pension provision, start-ups, and restructuring services primarily targeting SMEs and private individuals. The company positions itself as a modern, innovative partner that alleviates administrative burdens to allow clients to focus on their core business and personal priorities. The website is professionally designed using the Cloudrexx CMS and UIkit framework, offering good mobile optimization and clear navigation. However, some technical aspects such as security headers and cookie consent mechanisms are missing, which could be improved to enhance security and privacy compliance. The security posture is solid with HTTPS enabled and no visible vulnerabilities, but lacks explicit security policies and incident response information. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

Zingreen is a small Swiss garden construction company based in Gstaad, specializing in landscaping and garden building services. The website is built on WordPress using the Divi theme, indicating a moderate level of digital maturity with a focus on visual presentation. The site is accessible and mobile-optimized but lacks advanced SEO and accessibility features. Security posture is basic with HTTPS enabled but no detected security headers or explicit security policies. Privacy compliance is minimal with no visible privacy or cookie policies. Overall, the website presents a legitimate local business but would benefit from enhanced security and compliance measures.

A

Armin Werren AG

werrenag.ch

60

Armin Werren AG is a specialized painting, plastering, staining, varnishing, wallpapering, and sandblasting service provider based in Gstaad, Switzerland. The company focuses on creating sophisticated and personalized living environments for private, hospitality, and business clients. Their website reflects a professional and consistent brand image with clear service offerings and company information. Technically, the site uses modern web technologies including Google Analytics and Cookiebot for tracking and consent management, with a responsive design and good SEO practices. Security posture is solid with HTTPS enforced and email obfuscation implemented, though explicit security headers and incident response information are absent. Overall, the website is trustworthy, compliant with GDPR, and well-suited for its target audience.

Hotel Kernen AG operates a family and sport hotel located in Gstaad-Schönried, Switzerland, with a long tradition dating back to 1904. The business focuses on hospitality services including accommodation, gastronomy, and outdoor activity packages targeting families and active vacationers. The website reflects a well-established market position, recognized for quality and value. Technically, the site employs modern web technologies including Cookiebot for consent management and Google Tag Manager for analytics, ensuring compliance and performance. Security posture is strong with HTTPS enforcement and standard security headers, though no explicit security policy or incident response information is published. Overall, the site is professional, user-friendly, and trustworthy, with good privacy compliance and clear business information.

V

Volvo Car Switzerland

volvocars-partner.ch

59

Volvo Car Switzerland operates a comprehensive partner portal serving as the official network for Volvo dealerships across Switzerland. The website provides detailed information on Volvo's vehicle models, offers, and services, targeting current and prospective Volvo customers in the Swiss market. The business model focuses on automotive sales, leasing, servicing, and customer support, positioning itself as a key player in the transportation sector within Switzerland. The site reflects consistent Volvo branding and offers extensive dealer contact information, enhancing customer accessibility and trust. Technically, the website is built on the TYPO3 CMS platform, integrating modern technologies such as Google Tag Manager and Google Maps API for enhanced user experience and analytics. The site demonstrates good mobile optimization and SEO practices, although accessibility features could be improved. Performance is moderate, with asynchronous loading of scripts to optimize speed. From a security perspective, the site employs HTTPS with excellent SSL configuration, ensuring secure data transmission. However, it lacks explicit security headers and does not provide visible security policies or incident response contacts. Privacy compliance is weak due to the absence of privacy and cookie policies, which is a notable gap given GDPR requirements. The site uses Google Tag Manager for tracking, indicating moderate user tracking levels. Overall, the website is professional, trustworthy, and well-aligned with the Volvo brand, but it would benefit from enhanced privacy compliance and security transparency. Strategic improvements in these areas would strengthen its security posture and regulatory adherence.

UTZ MEDIEN AG is a Swiss digital agency specializing in innovative web design, TYPO3 portal development, AI integration, and SEO services. With over 20 years of experience and a portfolio including notable clients such as SAP and Roche, the company positions itself as a trusted partner for comprehensive digital solutions. The website reflects a professional and modern digital presence, leveraging TYPO3 CMS and integrating analytics tools like Google Analytics and Matomo. Privacy and cookie consent mechanisms are well implemented, indicating a strong commitment to GDPR compliance. However, the absence of WHOIS domain registration data raises questions about domain legitimacy, which should be further investigated. Security posture is generally good with HTTPS enforced and no exposed sensitive data, but the lack of explicit security headers and incident response information suggests room for improvement. Overall, UTZ MEDIEN AG demonstrates a mature digital infrastructure and business model with minor security and compliance gaps.

T

TwentyThree

twentythree.net

71

TwentyThree is a leading European video software company specializing in a comprehensive video marketing platform designed for businesses to leverage video content across customer journeys. The company positions itself as a pioneer with a full suite of video tools including webinars, video libraries, and personal video capabilities, targeting medium-sized to large enterprises primarily in the technology sector. The website reflects a mature digital presence with modern infrastructure, leveraging HubSpot CMS, Amazon Cloudfront hosting, and advanced analytics tools such as Google Analytics and Google Tag Manager. The site is well-optimized for mobile and SEO, providing an excellent user experience with clear navigation and professional branding. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is robust, featuring a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. Overall, the domain registration data corroborates the business legitimacy and history, supporting a high trust level.

D

Dinas Lingkungan Hidup Provinsi Sulawesi Selatan

dlhsulawesiselatan.id

42

The website dlhsulawesiselatan.id represents the official online presence of the Dinas Lingkungan Hidup Provinsi Sulawesi Selatan, a government environmental agency in Indonesia. It serves as a platform to disseminate environmental news, public announcements, documents, and photo galleries relevant to the Sulawesi Selatan province. The site targets residents and stakeholders interested in environmental management and public service information. The business model is focused on government public service and information dissemination, positioning itself as an authoritative source within its regional jurisdiction. Technically, the website employs a standard modern web stack including HTML5, CSS3, JavaScript, Bootstrap, and jQuery, hosted behind Cloudflare DNS services. The site is mobile optimized and provides a good user experience with clear navigation and consistent branding. However, it lacks advanced CMS indicators and does not utilize analytics or tracking services, indicating a minimal digital footprint in terms of user data collection. From a security perspective, the site benefits from HTTPS encryption and domain transfer protection status. However, it lacks DNSSEC, security headers, and formal privacy or cookie policies, which are critical for compliance and enhanced security posture. No vulnerability disclosure or incident response contacts are provided, which could limit responsiveness to security incidents. Overall, the security posture is moderate but could be improved with standard best practices. The overall risk assessment suggests a trustworthy government site with low risk of malicious activity but with compliance gaps in privacy and security policy disclosures. Strategic recommendations include implementing DNSSEC, adding security headers, publishing privacy and cookie policies, and establishing a vulnerability disclosure mechanism to enhance trust and compliance.

D

DLH Provinsi Sulawesi Barat

dlhprovinsisulawesibarat.id

49

DLH Provinsi Sulawesi Barat operates as the official environmental agency for the West Sulawesi Province government in Indonesia, providing public information, news, announcements, and environmental documentation. The website serves residents and stakeholders with environmental management content and contact channels. Technically, the site uses standard web technologies including Bootstrap, jQuery, and Font Awesome, hosted behind Cloudflare DNS but lacks advanced CMS or modern frameworks. Security posture is moderate with HTTPS implied but no visible security headers or DNSSEC, and WHOIS data is inconsistent with suspicious domain registration dates. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the site is accessible and functional but requires improvements in security, privacy, and domain legitimacy to enhance trust and compliance.

D

Dinas Lingkungan Hidup Provinsi Jambi

dlhprovinsijambi.id

54

Dinas Lingkungan Hidup Provinsi Jambi operates as the official environmental management agency for Jambi Province, Indonesia. The website serves as a comprehensive portal for public information, environmental news, services such as permits and complaints, and educational resources. The agency positions itself as a government entity focused on environmental preservation, law enforcement, and community engagement. Technically, the website uses modern web technologies including Laravel Livewire, Swiper.js for sliders, and Cloudflare for DNS and CDN services, providing a responsive and user-friendly experience. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks advanced security headers and formal vulnerability disclosure mechanisms. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and professional but would benefit from improved privacy and security practices.

D

Dinas Lingkungan Hidup Provinsi Daerah Istimewa Yogyakarta

dlhdiy.id

54

Dinas Lingkungan Hidup Provinsi Daerah Istimewa Yogyakarta operates as the official government environmental agency for the Yogyakarta Special Region in Indonesia. The agency focuses on environmental management including waste disposal, pollution control, and public environmental education. The website serves as a portal for public information, service requests, and news updates related to environmental activities in the region. The site targets local residents, government stakeholders, and environmental partners. Technically, the website employs modern web technologies such as Laravel Livewire, Swiper.js, and Cloudflare DNS services, providing a responsive and user-friendly experience. However, the domain WHOIS data shows an anomalous future creation date, which raises questions about data accuracy but does not necessarily undermine the site's legitimacy given the government affiliation and consistent content. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the site is functional and trustworthy for its intended audience but would benefit from enhanced security and privacy compliance measures.

D

Dinas Lingkungan Hidup Indonesia

dinaslingkunganhidup.id

54

Dinas Lingkungan Hidup Indonesia operates as an official government environmental agency focused on managing environmental quality, waste, pollution control, and public services related to environmental permits and complaints. The website serves as a comprehensive portal for public information, services, and news related to environmental management in Indonesia. Technically, the site uses modern web technologies including Laravel Livewire, Swiper.js, and Cloudflare DNS services, providing a responsive and user-friendly experience. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and professional but could improve in security and compliance documentation.

B

Bad Egelsee

bad-egelsee.ch

60

Bad Egelsee is a public family and sports swimming facility located in Kreuzlingen, Switzerland. It offers a variety of aquatic and wellness services including a 25-meter sport pool, family pools, sauna, and steam baths, targeting families, sports enthusiasts, and health-conscious visitors. The website is professionally designed with clear navigation and content relevant to its audience. Technically, the site uses modern JavaScript frameworks such as Alpine.js and integrates Matomo for privacy-focused analytics. The site is mobile optimized and includes a cookie consent mechanism, reflecting good privacy practices. Security posture is solid with HTTPS enforced, though it lacks some advanced security headers and formal security policies. Overall, the domain registration uses privacy protection, which is justified for this type of public leisure business. The site is trustworthy and well-maintained, with no indications of malicious activity or content blocking.

R

RWD Schlatter AG

rwdschlatter.ch

59

RWD Schlatter AG is a well-established Swiss manufacturer specializing in custom design and function doors, producing approximately 80,000 wooden doors annually. With over 140 years of experience and a strong market position as a leading Swiss provider, the company offers a broad range of products including door blanks, door elements, and accessories, emphasizing security features such as fire, sound, and burglary protection. The website reflects a mature digital presence built on TYPO3 CMS, featuring modern technologies and compliance with privacy regulations through a comprehensive cookie consent mechanism. Social media integration and a dedicated service portal enhance customer engagement and support. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers could be improved. Overall, the domain registration and WHOIS data align well with the company's claims, supporting legitimacy and trustworthiness.

Verbandsgemeinde Prüm operates as a local government administrative body in Germany, providing a comprehensive range of public services and information to residents and visitors within its jurisdiction. The website serves as an official portal offering news, event updates, citizen services, and tourism information, positioning itself as a trusted regional authority. The target audience primarily includes local citizens, businesses, and tourists seeking official information and services. The business model is centered on governmental public service and community engagement.

L

Link Arkitektur A/S

linkkompass.ai

66

Link Arkitektur A/S operates the website linkkompass.ai, offering a digital sustainability dialogue tool called LINK Kompass® aimed at guiding projects and businesses through environmental and social sustainability requirements. The company is positioned as a leading Scandinavian architectural business with a focus on strategic sustainability consulting. The website is built on Drupal 10, uses Cookiebot for GDPR-compliant cookie consent, and supports multiple languages including Norwegian Bokmål. The technical infrastructure is modern and well-implemented, with good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the website reflects a professional and trustworthy business presence in the sustainability consulting sector.

The website www.ottos.ch is currently inaccessible due to a Cloudflare security challenge page that blocks access to the actual content. As a result, no business information, contact details, or policy documents are available for review. The technical infrastructure indicates the use of Cloudflare's Turnstile captcha for bot mitigation, but no further technology stack or CMS details can be determined. Security posture cannot be assessed due to lack of accessible content and headers. Overall, the site is effectively blocked from analysis, limiting any meaningful security or compliance evaluation.

H

Holzforschung Austria

fenstereinbau.info

54

fenstereinbau.info is an informational website operated as a service by Holzforschung Austria, providing planning aids and tested materials for window installation according to Austrian standards (ÖNORM B 5320). The site targets professionals in the construction and window installation sectors in Austria and Germany, offering access to standards, guidelines, and a free planning tool. Technically, the website is built on the TYPO3 CMS platform, with compressed CSS and JavaScript assets, and is accessible via HTTPS. The site demonstrates good content quality, clear navigation, and mobile optimization, though accessibility features could be improved. Security posture is moderate, with HTTPS usage but lacking explicit security headers and cookie consent mechanisms. No forms or contact details are directly available on the main page, limiting direct user engagement. Overall, the domain registration is privacy protected but consistent with the business purpose, and the website maintains strong trust indicators through affiliations and certifications.

O

Oberaargau Classics

oberaargau-classics.ch

60

Oberaargau Classics is a small regional cultural initiative based in Switzerland, focusing on music ensembles Camerata 49 and Grenzklang. The website serves as an informational platform to promote their musical activities and events. The business model appears to be non-profit or community-oriented, targeting general audiences interested in classical and cultural music. The site is built on the Squarespace platform, leveraging modern web technologies and fonts, with a moderate performance and good mobile optimization. Security posture is strong with HTTPS and HSTS enabled, but lacks explicit privacy and terms of service documentation. Contact information is not clearly provided, which may impact user trust and compliance. Overall, the site is professional and consistent in branding but could improve privacy compliance and user engagement features.

G

Gemeinde Madiswil

madiswil.ch

61

The website www.madiswil.ch serves as the official online presence of the municipality of Madiswil in Switzerland. It provides residents and visitors with comprehensive information about local government services, political and administrative matters, community events, and public resources. The site targets local citizens and stakeholders, offering key services such as online administrative forms, event calendars, and contact directories. The business model is that of a government service portal, focusing on transparency and accessibility. Technically, the website is built on the i-web.ch CMS platform, utilizing modern web technologies including JavaScript, CSS, and HTML5. It integrates Swiss government mapping services via Leaflet and employs Matomo for privacy-conscious analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and does not publish a formal security policy or incident response contacts. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism aligned with GDPR requirements. No vulnerabilities or suspicious activities were detected. Overall, the website is a trustworthy and professional municipal portal with a strong focus on user accessibility and privacy. Strategic improvements could include enhancing security headers, publishing a security framework, and adding incident response contact information to further strengthen its security posture.

L

Landfrauenverein Huttwil

landfrauen-huttwil.com

48

The Landfrauenverein Huttwil website represents a local non-profit community association focused on women in the Huttwil region. The site provides information about the association's activities, events, and general information for members and interested visitors. The business model is community-oriented with no commercial transactions evident. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard web technologies such as HTML5, CSS3, and JavaScript. The technical infrastructure is basic but functional, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and policies. Privacy compliance is weak due to the absence of privacy and cookie policies. The domain WHOIS data is missing or unavailable, which raises concerns about domain legitimacy and registration transparency. Overall, the website is safe, professional, and suitable for its target audience but would benefit from improved privacy and security practices.