Security Directory

A

ADAC Stiftung

verkehrshelden.com

65

The ADAC Stiftung website focuses on mobility education and traffic safety, targeting children, families, and educators. It offers various educational programs and materials to promote safe behavior in traffic. The foundation is well-established in Germany, supported by regional ADAC clubs, and maintains a professional online presence with clear branding and comprehensive content. Technically, the site is built on WordPress with modern plugins like WPBakery and Yoast SEO, ensuring good performance, mobile optimization, and SEO compliance. Security posture is solid with HTTPS and consent management, though formal security policies and incident response contacts are absent. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements.

G

Golfclub Gastein

golfclub-gastein.com

48

Golfclub Gastein is a well-established golf club located in Salzburg, Austria, with a history dating back to 2000. The club offers an 18-hole golf course, golf school, partner hotel bookings, tournaments, and related hospitality services. The website reflects a professional and consistent brand image targeting golf enthusiasts and tourists in the region. Technically, the site uses a modern tech stack including Bootstrap, jQuery, and Google Analytics, with good mobile optimization and SEO practices. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and incident response information. The domain registration is consistent and trustworthy, supporting the legitimacy of the business. Overall, the website is functional, secure, and compliant with GDPR, providing a positive user experience.

C

Costa Navarino

costanavarino.com

70

Costa Navarino is a premier luxury hospitality and real estate destination located in Messinia, Greece. The website showcases multiple 5-star resorts, golf courses, spa centers, and real estate offerings, positioning itself as a sustainable and authentic Mediterranean travel experience. The business is part of TEMES S.A., a known entity in the hospitality sector. Technically, the website is built on WordPress with modern plugins and tracking tools, providing a good user experience with mobile optimization and SEO best practices. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though it lacks a publicly available security policy or incident response information. The absence of WHOIS data for the domain is a notable concern, requiring further verification. Overall, the site is professional, trustworthy, and targets affluent travelers and investors seeking luxury and sustainability.

F

FRCI

frci.net

66

FRCI is a Mauritius-based IT consultancy specializing in Microsoft technologies, digital transformation, and training services. The company positions itself as a trusted partner enabling business success through people and technology, serving clients across multiple continents. Their key offerings include Microsoft licensing, project delivery, change management, technical support, business and digital solutions, and comprehensive IT training programs. The website reflects a professional and modern digital presence with clear navigation and relevant content targeting business clients seeking IT expertise. Technically, the website is built on the Umbraco CMS platform and leverages modern JavaScript libraries such as Swiper.js, Fancybox, GSAP, and jQuery. It uses Google Fonts and integrates Google Analytics for visitor tracking. The site is mobile-optimized with good design quality and user experience, though accessibility features are basic. The presence of a privacy policy is noted, but cookie consent mechanisms and detailed security policies are lacking. From a security perspective, the site uses HTTPS and employs email obfuscation to protect contact information. However, no explicit security headers were detected in the HTML content, and there is no published incident response or vulnerability disclosure information. The WHOIS data for the domain is missing or indicates the domain may be unregistered or expired, which raises concerns about domain legitimacy despite the professional website content. Overall, the website demonstrates a solid business and technical foundation but requires improvements in security posture, privacy compliance, and domain registration transparency to enhance trust and reduce risk.

M

Milva Stutz

milvastutz.ch

49

Milva Stutz is a visual artist based in Zurich, Switzerland, showcasing her portfolio of animated videos, drawings, and sculptures through a professionally designed WordPress website. The site targets art enthusiasts and potential collaborators in the niche visual arts market. The technical infrastructure is modern, leveraging WordPress with Yoast SEO and Swiper.js for interactive content, providing a good user experience with mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and formal policies. Privacy compliance is minimal, with no visible privacy or cookie policies, which could be improved to meet GDPR standards. Overall, the website is trustworthy and professional but would benefit from enhanced security and compliance documentation.

D

digicube AG

bienenzeitung.ch

67

The Schweizerische Bienen-Zeitung is a specialized Swiss magazine focused on beekeeping, targeting hobbyist and professional beekeepers, as well as related agricultural and health professionals. It operates on a subscription-based model with a monthly publication cycle and a circulation of approximately 13,500 copies. The website is professionally designed and maintained by digicube AG, a digital agency, and provides a rich content experience including articles, archives, and subscription management. The site is well positioned within its niche market in Switzerland, supported by partnerships with related beekeeping organizations and shops. Technically, the website is built on WordPress 6.8.3 with a modern tech stack including jQuery, Google Maps API, and caching via WP Rocket. It uses a child theme of GeneratePress and integrates social media and analytics tools such as Plausible Analytics. The site is mobile optimized and SEO friendly, though accessibility features are basic. Performance is moderate, with room for improvement in security headers and cookie consent mechanisms. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security policies, incident response contacts, and security.txt files. No security headers were detected, which could improve protection against common web attacks. The privacy policy is comprehensive and GDPR compliant, but no cookie consent banner was found, which is a compliance gap. The WHOIS data confirms a legitimate registration consistent with the business claims, enhancing trust. Overall, the website presents a low risk profile with good business credibility and content quality. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance compliance and security posture, further strengthening user trust and regulatory adherence.

S

Sharp Consumer PL

sharpconsumer.pl

50

Sharp Consumer PL is a regional consumer electronics brand website focused on the Polish market, offering product information, promotions, and award-winning product highlights primarily in TVs, audio, mobility, and smart home categories. The website is built on WordPress with modern web technologies and includes a cookie consent mechanism and Google Tag Manager for analytics. While the site uses HTTPS and shows good design and navigation, it lacks visible privacy policy and terms of service pages, and no direct contact information is found, which may impact user trust. WHOIS data is unavailable, likely due to privacy protection, which limits domain legitimacy verification but is common for commercial brand sites. Overall, the site presents a professional and trustworthy front for Sharp's consumer electronics in Poland.

S

Sharp Consumer IT

sharpconsumer.it

55

Sharp Consumer IT operates as a consumer electronics brand website focused on promoting and selling Sharp-branded TVs, audio equipment, mobility products, and smart home devices in Italy. The site highlights award-winning products such as the EISA 2025/2026 Soundbar System, indicating a strong market position in consumer electronics. The website is well-structured with multiple language and country-specific domains, targeting a broad European audience. Technically, the site is built on WordPress with modern performance optimizations including WP Rocket and Cloudinary for image delivery, and uses Google Tag Manager for analytics. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, but lacks some security headers and explicit security policies. Privacy compliance is weak due to absence of visible privacy and cookie policies or consent mechanisms. Overall, the site presents a professional and trustworthy front for Sharp's consumer electronics offerings in Italy.

S

Sharp Consumer FR

sharpconsumer.fr

52

Sharp Consumer FR is a consumer electronics brand website focused on audio equipment, televisions, mobility products such as e-bikes and electric scooters, and smart home devices. The site targets consumers in France and offers detailed product information and navigation for various product categories. The website is built on WordPress with modern technologies including jQuery, Alpine.js, and WP Rocket for performance optimization. It uses Google Tag Manager for analytics and tracking. The site is mobile-optimized and demonstrates good SEO practices with structured data and meta tags. Security posture is strong with HTTPS enabled and no obvious vulnerabilities, though some security headers could be improved. Privacy compliance is moderate with a cookie consent mechanism but no clearly linked privacy policy or terms of service pages. WHOIS data is unavailable, which limits domain trust verification. Overall, the site is professional and trustworthy but could improve transparency and contact availability.

S

SHARP

sharphome.eu

72

SHARP's website is a professionally designed e-commerce platform focused on retailing home appliances such as cooling, freezing, cooking, dishwasher, and laundry products. The site leverages Shopify's robust infrastructure and modern web technologies to deliver a fast, mobile-optimized shopping experience. The presence of structured data and comprehensive privacy and cookie policies indicates a mature approach to digital compliance and SEO. However, the absence of explicit terms of service and security policy pages suggests areas for improvement in transparency and user trust. Security measures such as HTTPS, security headers, and CAPTCHA integration demonstrate a solid security posture, though incident response details are lacking. Overall, the site is trustworthy and well-positioned in its retail niche, with room to enhance compliance and contact transparency.

S

Sharp Consumer

sharpconsumer.com

54

Sharp Consumer operates a professional and well-structured website focused on consumer electronics including TVs, audio equipment, mobility products, smart home devices, and home appliances. The brand is recognized with awards such as the EISA Soundbar System 2025-2026, indicating a strong market position in the European consumer electronics sector. The website targets consumers interested in high-quality electronics and home entertainment solutions. Technically, the site is built on WordPress with modern technologies like jQuery, Alpine.js, and performance optimizations via WP Rocket. It is mobile-optimized, fast, and SEO-friendly with proper meta tags and structured data. Security posture is strong with HTTPS enforced and multiple security headers present, though explicit privacy and terms of service pages are missing, which impacts compliance and user trust. No contact emails or phone numbers are directly available, limiting direct communication channels. Overall, the site is trustworthy and professional but could improve transparency and compliance documentation.

E

Ekō

eko.org

56

Ekō is a global non-profit organization dedicated to holding corporations accountable for their environmental, social, and democratic responsibilities. The website serves as a platform for community engagement, campaigns, petitions, and donations, targeting a worldwide audience of activists, consumers, workers, and investors. The organization positions itself as a watchdog against corporate misconduct with a strong emphasis on sustainability and social justice. Technically, the website employs a modern JavaScript stack including analytics and tracking tools such as Google Analytics, Facebook Pixel, LinkedIn Insight Tag, and Mouseflow. The site is mobile-optimized, accessible, and uses HTTPS for secure communications. However, there is room for improvement in security headers and explicit cookie consent mechanisms to enhance privacy compliance. From a security perspective, the site demonstrates good practices with secure forms and no visible vulnerabilities. The absence of WHOIS data due to privacy protection is common for non-profits but slightly reduces trust signals. No security policy or incident response information is publicly available, which could be improved to bolster transparency and readiness. Overall, Ekō's website is professional, trustworthy, and well-designed, effectively supporting its mission. Strategic recommendations include implementing security headers, publishing a security policy, enhancing cookie consent, and improving WHOIS transparency where possible to strengthen trust and compliance.

M

Media India Group

mediaindia.eu

42

Media India Group is a well-established global media platform founded in 2004, operating primarily in Europe and India. The company focuses on publishing, communication, consultation services, and event management, targeting a broad audience interested in culture, business, tourism, and education. The website demonstrates a solid market position with consistent branding and a professional content presentation. Technically, the site is built on WordPress with modern web technologies including jQuery, Bootstrap, and Owl Carousel, and integrates Google services for analytics and advertising. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks advanced security headers and explicit security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration is consistent and trustworthy, registered via GoDaddy.com, LLC, aligning with the business's legitimacy. Strategic improvements in privacy compliance and security hardening are recommended to enhance trust and regulatory adherence.

A

ActionAid International Kenya

actionaid-kenya.org

52

ActionAid International Kenya is a medium-sized non-profit organization established in 2022, focused on social justice and community empowerment in Kenya. The website serves as a platform for advocacy, fundraising, and information dissemination, leveraging WordPress with plugins such as GiveWP and WooCommerce for donation management. The technical infrastructure is modern and includes integrations with JamboPay for payment processing and Google Analytics for visitor tracking. Security posture is adequate with HTTPS enforced and domain registration protections in place, though improvements such as enabling DNSSEC and publishing security policies are recommended. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy or terms of service policies found. Overall, the website is professional and trustworthy but would benefit from enhanced transparency and security documentation.

A

ActionAid India

actionaidindia.org

51

ActionAid India is a well-established non-profit organization operating since 1972, focusing on children’s education, women’s rights, ecological justice, and humanitarian aid across India. The website reflects a mature NGO with a broad presence, multiple partnerships, and a strong social media footprint. Their business model relies on donations, sponsorships, and corporate partnerships. Technically, the website is built on WordPress with WooCommerce and uses modern web technologies including Bootstrap, jQuery, and various analytics and marketing tools. The site is mobile-optimized and provides a good user experience with clear navigation and rich content. Security posture is generally good with HTTPS enabled and secure forms, but lacks some recommended security headers and cookie consent mechanisms. WHOIS data is unavailable, which slightly impacts domain trustworthiness, but the overall legitimacy is supported by content quality and trust indicators. Strategic recommendations include improving security headers, implementing cookie consent for GDPR compliance, and enhancing accessibility.

A

ActionAid Bangladesh

actionaidbd.org

51

ActionAid Bangladesh is a well-established non-profit organization focused on advancing human rights and combating poverty within Bangladesh. The website reflects a mature NGO with a broad range of social programs including women’s rights, climate justice, humanitarian aid, youth engagement, and Rohingya refugee response. Their digital presence is supported by a professional website with clear navigation and comprehensive content targeting donors, activists, and partners. The organization benefits from a consistent brand identity and transparent governance information, reinforcing its credibility in the non-profit sector. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Font Awesome, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site is mobile responsive and optimized for SEO, though performance is moderate. Hosting and domain registration are consistent with a legitimate NGO, though DNSSEC is not enabled, and some security headers are missing. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Security posture is adequate with HTTPS enforced and domain transfer protection, but improvements are recommended in DNS security and HTTP headers. No incident response or vulnerability disclosure policies are visible, which could be enhanced to improve trust and compliance. Overall, the website is professional and trustworthy but could benefit from stronger privacy and security practices to align with international standards.

S

Sharp Consumer DE

sharpconsumer.de

54

Sharp Consumer DE is a professional consumer electronics website focused on selling and promoting Sharp brand products such as TVs, audio equipment, mobility devices, and smart home solutions. The site targets German-speaking consumers interested in high-quality electronics and features award-winning products like the EISA Soundbar-System 2025–2026 winners. The website demonstrates a mature digital presence with a modern WordPress CMS, optimized mobile experience, and structured data for SEO. It uses Google Tag Manager for analytics and marketing, indicating a data-driven approach to user engagement. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security headers and policies are absent. Privacy compliance is basic, with a cookie consent mechanism but no visible privacy or terms of service pages in the provided content. Overall, the site is trustworthy and professionally maintained but could improve transparency around privacy and security policies.

Association «Nature & Loisirs» is a Swiss non-profit organization dedicated to promoting respect for nature and leisure activities, particularly focusing on snow sports and water-based recreation. The website serves as an informational platform providing educational content, awareness campaigns, and partner collaborations to encourage environmentally responsible behavior. The association targets a general audience interested in nature and outdoor activities in Switzerland. Technically, the website is built on the Contao Open Source CMS and utilizes common web technologies such as jQuery and Google Analytics for tracking. The site is mobile optimized with basic accessibility and SEO features. Performance is moderate, and the site includes a cookie consent mechanism to comply with privacy regulations. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible security headers and explicit security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy policy and cookie banner present but no terms of service or detailed security disclosures. Overall, the website presents a moderate risk profile with no major security issues but opportunities exist to enhance security headers, incident response transparency, and privacy compliance. The site is trustworthy and safe for general audiences, with no adult or questionable content detected.

S

SPONSER SPORT FOOD AG

sponser.ch

73

SPONSER SPORT FOOD AG operates a professional e-commerce platform specializing in sports nutrition products, emphasizing Swiss quality. The website targets athletes and health-conscious consumers, leveraging the Shopify platform with a modern Flex theme and multiple marketing and analytics integrations. The technical infrastructure is robust, with HTTPS enforced, security headers present, and a moderate to fast performance profile. However, the site lacks explicit privacy and cookie policies, which impacts privacy compliance scores. Security posture is strong with no visible vulnerabilities, but incident response details are absent. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

T

Tennis-Verband Berlin-Brandenburg e.V.

tvbb.de

58

The Tennis-Verband Berlin-Brandenburg e.V. website serves as the official online presence of the regional tennis association for Berlin and Brandenburg, Germany. It provides information and services related to tennis events, membership, and regional tennis activities. The site is built on Joomla CMS and incorporates modern web technologies such as Bootstrap and jQuery, with analytics powered by Matomo and GDPR-compliant cookie consent managed by Usercentrics. The website is accessible without any WAF or security blocking mechanisms, indicating good availability and user access. However, the absence of explicit privacy policy and terms of service pages suggests room for improvement in compliance documentation. Security posture is moderate with HTTPS enforced and CSRF tokens present, but lacks explicit security headers and incident response information. Overall, the site is professional and functional, targeting tennis players and clubs in the region.

H

hoster.by

hoster.by

65

hoster.by is a Belarus-based technology company specializing in domain registration, web hosting, and cloud infrastructure services. Established in 2004, it offers a comprehensive platform for businesses to start and grow online, including free SSL certificates and promotional offers for domain purchases. The company targets businesses and individuals seeking reliable hosting and IT infrastructure solutions. The website demonstrates a solid technical foundation using Bitrix CMS and integrates multiple communication channels such as live chat and social media. Security posture is generally good with HTTPS and Let’s Encrypt SSL usage; however, the absence of explicit privacy and cookie policies indicates compliance gaps. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

I

International Association of Insurance Supervisors

iaisweb.org

72

The International Association of Insurance Supervisors (IAIS) is a globally recognized voluntary membership organization comprising insurance supervisors and regulators from over 200 jurisdictions. Established in 1994, it serves as the global standard-setting body for insurance supervision, aiming to promote effective, consistent supervision to ensure fair, safe, and stable insurance markets worldwide. The IAIS provides key services including standard setting, capacity building, implementation assessments, and financial stability monitoring, positioning itself as a leader in the insurance regulatory space. Technically, the IAIS website is built on a modern WordPress CMS platform utilizing Elementor and Revolution Slider for content presentation. It employs Google reCAPTCHA for form security and Matomo for privacy-conscious analytics. The site is well-optimized for mobile devices, features good SEO practices, and maintains a professional design and user experience. From a security perspective, the website enforces HTTPS with a strong SSL configuration and uses reCAPTCHA to protect forms. While explicit security headers are not fully evident, no vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are comprehensive and GDPR compliant, though the site lacks a published security policy or incident response contact details. Overall, the IAIS website demonstrates a high level of professionalism, security, and compliance appropriate for an international regulatory organization. The lack of WHOIS data is mitigated by the site's strong trust indicators and consistent branding. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility compliance to further strengthen the site's security posture and user trust.

T

Tischlerei Kurz

tischlereikurz.at

47

Tischlerei Kurz is a well-established family-owned carpentry and furniture business located in Elsbethen near Salzburg, Austria, with a history dating back to 1934. The company specializes in traditional and modern woodworking services including windows, doors, furniture, kitchens, floors, and repairs. Their market position is that of a trusted regional master craftsman with a strong reputation for quality and customer satisfaction. The website reflects a professional digital presence built on WordPress with Elementor, integrating modern analytics and marketing tools. Security posture is good with HTTPS and security headers in place, though privacy compliance could be improved by adding cookie consent mechanisms. Overall, the site is accessible, well-structured, and trustworthy, supporting the business's credibility and customer engagement.

D

DDr. med. univ. Jurij Kocmut

augenarzt-salzburg.at

47

The website represents a specialized ophthalmology practice located in Salzburg, Austria, led by DDr. Jurij Kocmut. It offers a range of eye care services including modern eye examinations, laser eye surgery, contact lens fittings, and other ophthalmic treatments. The practice emphasizes personalized care, high-quality standards, and accessibility including online appointment booking and wheelchair access. The target audience is local patients seeking professional eye care services. The website is well-structured, professionally designed, and provides clear contact information and patient testimonials, enhancing trust and credibility. Technically, the site is built on WordPress with common plugins such as WPBakery Page Builder and Contact Form 7, using Bootstrap for responsive design. It employs modern JavaScript libraries like jQuery and Owl Carousel for UI elements. The site is mobile-optimized and performs moderately well, with good SEO practices and basic accessibility features. Security-wise, HTTPS is enforced, and a cookie consent mechanism is implemented, but some security headers are missing and no explicit security or incident response policies are published. Overall, the security posture is solid but could be improved by adding security headers, a security.txt file, and more explicit privacy and security policies. No critical vulnerabilities or WAF blocking were detected. The domain registration data aligns well with the business claims, supporting legitimacy. The site does not use advertising or tracking services, indicating a privacy-conscious approach. Strategically, the practice should focus on enhancing security policies and transparency to further build patient trust and comply with evolving regulations. Technical modernization and regular updates will maintain performance and security. The website effectively supports the business model of a local specialized healthcare provider with a strong digital presence.

Z

Zahntechnik Kainhofer

zahntechnik-kainhofer.com

49

Zahntechnik Kainhofer is a small dental technology laboratory based in Oberwang, Austria, specializing in the production of high-quality dental prosthetics in close collaboration with regional dentists. The company emphasizes careful material selection and precise craftsmanship to ensure aesthetic, durable, and functional dental replacements. The website is professionally designed using WordPress with modern plugins and provides clear contact information and GDPR-compliant cookie consent mechanisms. However, the absence of WHOIS registration data limits the ability to fully verify domain legitimacy. Security posture is generally good with HTTPS enforced, but lacks advanced security headers and incident response information. Overall, the website presents a trustworthy and professional image suitable for its regional healthcare audience.

E

EDZS | Enddarmzentrum Salzburg | FA Darie Schneider

edzs.at

44

EDZS | Enddarmzentrum Salzburg is a specialized medical practice led by Facharzt Darie Schneider, focusing on proctological diseases and colorectal surgery. The practice operates primarily from the Privatklinik Wehrle-Diakonissen in Salzburg, Austria, serving patients with a range of anorectal conditions. The website presents a professional image with clear service offerings and contact information, targeting patients seeking expert proctological care in the region. Technically, the site is built on WordPress using popular plugins such as WPBakery Page Builder and Slider Revolution, indicating a moderate level of digital maturity. The site is mobile-optimized and includes a cookie consent mechanism, reflecting some GDPR compliance awareness. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and formal vulnerability disclosure mechanisms. Overall, the website is trustworthy and functional but could improve privacy and security transparency.

L

Lausanne Movement

lausanne.org

60

The Lausanne Movement is a well-established non-profit organization focused on accelerating global Christian mission through collaboration, leadership development, and resource sharing. With a domain age of over 26 years and a consistent brand presence, it holds a strong position in the global mission community. The website offers rich content including articles, podcasts, videos, and event information targeting Christian leaders and influencers worldwide. Technically, the site is built on WordPress with modern SEO and analytics tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS, reCAPTCHA, and domain transfer protections, though DNSSEC and some security headers could be improved. Privacy compliance is adequate with a clear privacy policy but lacks a cookie consent mechanism. Overall, the site is professional, trustworthy, and serves its audience effectively.

K

Kustom Schweiz AG

kustom.ch

60

Kustom Schweiz AG is a Swiss-based company specializing in corporate clothing, custom-made products, club equipment, event dressing, and promotional materials. Positioned as a regional leader in the Ostschweiz area, the company offers a broad range of services including textile printing, embroidery, and digital shop solutions. Their business model focuses on B2B clients such as companies, clubs, and event organizers, supported by partnerships with international brands and a parent company, Swiss Kustom Group AG. The website is professionally designed, multilingual, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, the site is built on WordPress with Elementor and integrates modern plugins for chat, multilingual support, and event management. Security posture is strong with HTTPS, security headers, and captcha protections, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact channels. Strategic recommendations include adding a dedicated security policy, incident response information, and enhancing accessibility features to further strengthen compliance and user experience.

D

DENALI

denali-marketing.at

43

DENALI is a small, established marketing and web agency based in Austria, specializing in full-service digital marketing, web design, and e-commerce solutions primarily for small and medium-sized enterprises in the Salzburg, Tirol, and Oberösterreich regions. The company emphasizes comprehensive client support including marketing strategy, web development, and funding assistance. Their website reflects a professional and consistent brand image with clear service offerings and client testimonials, positioning them as a trusted regional partner. Technically, the site is built on WordPress using modern plugins and frameworks, offering good performance and mobile optimization. Security posture is solid with HTTPS and security headers in place, though some improvements in privacy compliance such as cookie consent and explicit security policies are recommended. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

E

EcoWerf

ecowerf.be

35

EcoWerf is a well-established Belgian public waste management organization operating since 2003. The website provides comprehensive information about their waste collection, recycling, composting, and sustainability services targeted at residents and municipalities. The site is built on Drupal CMS with a modern, responsive design and good accessibility and SEO practices. Social media integration and a cookie consent mechanism demonstrate digital maturity and GDPR compliance. Security posture is solid with HTTPS and secure forms, though explicit security headers and vulnerability disclosure policies are absent. Overall, the website reflects a trustworthy and professional public service entity with a strong focus on environmental sustainability.

I

Interargem GmbH

interargem.de

50

Interargem GmbH operates as a regional energy company specializing in environmentally responsible waste-to-energy solutions through its modern waste incineration plants in Bielefeld and Hameln, Germany. The company focuses on converting regional waste into electricity and district heating, contributing significantly to environmental and climate protection efforts. Their market position is that of a trusted regional leader providing essential waste management and energy services to local businesses, households, and public institutions. Technically, the website is built on a WordPress CMS platform enhanced with Yoast SEO for search optimization and Consentmanager for GDPR-compliant cookie management. The site demonstrates good mobile optimization and a professional design, although some accessibility features could be improved. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and employs a cookie consent mechanism, but lacks advanced security headers and published security policies or incident response contacts. No vulnerabilities or suspicious content were found, indicating a generally sound security posture, though improvements are recommended to enhance protection and transparency. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its target audience effectively. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility to further strengthen the company's digital presence and security posture.

V

VNR Verlag für die Deutsche Wirtschaft AG

vnrgroup.com

47

VNR Group is a family-run German publishing and media company offering publishing, consulting, SaaS, and full-service platform solutions aimed at helping individuals and professionals succeed. The website is well-structured, professionally designed, and multilingual, targeting German and English-speaking audiences. Technically, it is built on WordPress with the Divi theme and uses modern plugins and services such as Google Tag Manager and Friendly Captcha. Security posture is adequate with HTTPS and captcha protections, but lacks some security headers and explicit incident response information. Privacy compliance is strong with comprehensive cookie consent and GDPR-aligned privacy policies. However, WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency. Overall, the site is trustworthy and professional but could improve security and transparency aspects.

The website www.1001saboresrm.es serves as an official regional tourism and gastronomy portal for the Region of Murcia, Spain. It promotes local culinary experiences, gastronomic events, and restaurants bearing the 1001 Sabores seal. The platform targets tourists, food enthusiasts, and local residents interested in regional gastronomy, positioning itself as a key government-backed resource for culinary tourism. The business model is primarily promotional, supported by regional government entities, aiming to boost tourism and local gastronomy awareness. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, Slider Revolution, and Google Analytics for user tracking. The site is mobile-optimized with good navigation and content structure, though accessibility features are basic. Performance is moderate, with no major technical issues detected. Privacy policies and cookie policies are present, but the cookie consent mechanism is lacking, which could be improved for GDPR compliance. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries visibly. However, security headers are not explicitly detected, and there is no visible vulnerability disclosure or incident response contact information. The WHOIS data for the domain is unavailable due to query restrictions, limiting the ability to fully verify domain legitimacy. Overall, the site appears trustworthy and professional, with a low risk profile but room for security and privacy enhancements. Strategically, the site should focus on enhancing security headers, implementing explicit cookie consent, and providing clear contact channels for security incidents. These improvements will strengthen compliance and user trust, supporting the site's role as a regional tourism authority.

T

TV-opas - Finland - lauantai - TVListings.eu

tvlistings.eu

54

TVListings.eu is a specialized media website providing TV program listings primarily for Finland and other European countries. The site offers multi-language support and detailed channel guides, targeting general audiences interested in TV schedules. The business model appears to be advertising-supported, leveraging Google Adsense and other ad networks. The website is hosted by GoDaddy.com, LLC and uses modern frontend technologies such as Bootstrap 5, jQuery, and integrates Google Analytics and Facebook SDK for tracking and analytics. The site is mobile optimized and provides a good user experience with clear navigation and structured content. Security posture is adequate with HTTPS enforced, but lacks important security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies and no consent mechanisms. Contact information is limited to a contact form without direct emails or phone numbers. Overall, the site is trustworthy and safe for general audiences but would benefit from enhanced privacy and security practices.

Z

Zuckerbusch Bakery

zuckerbusch.ch

52

Zuckerbusch Bakery is a small Swiss bakery specializing in cupcakes and other sweet treats, offering direct ordering and popup bakery events. The website is professionally designed using WordPress and Elementor, providing a good user experience with clear navigation and mobile optimization. The business targets general consumers interested in bakery products within Switzerland. Technically, the site uses modern web technologies and includes Google Analytics for tracking. Security posture is adequate with HTTPS enforced and cookie consent implemented, though additional security headers and policies could enhance protection. The domain registration is consistent with the business location and nature, indicating legitimacy. Overall, the website is trustworthy and well-maintained, suitable for a small local retail bakery.

H

Hotel Château Gütsch

chateau-guetsch.ch

64

Hotel Château Gütsch is a boutique hotel located in Luzern, Switzerland, offering scenic views over the city and Lake Lucerne. The website presents a professional and well-structured digital presence built on WordPress, integrating booking functionalities and analytics tools. The business targets travelers seeking a unique and tranquil hotel experience. Technically, the site uses modern web technologies and plugins to enhance user experience and SEO. Security measures include HTTPS and cookie consent mechanisms, though explicit privacy and terms policies are not found in the provided content. Overall, the site demonstrates a solid security posture with room for improvement in privacy transparency and contact information availability.

I

International Association of Insurance Supervisors

iais.org

72

The International Association of Insurance Supervisors (IAIS) is a globally recognized voluntary membership organization comprising insurance supervisors and regulators from over 200 jurisdictions, representing 97% of the world's insurance premiums. Established in 1994, IAIS serves as the global standard-setting body for insurance supervision, developing principles, standards, and guidance to promote fair, safe, and stable insurance markets worldwide. The organization supports its members through capacity building, implementation assessments, and financial stability monitoring, positioning itself as a key player in global financial stability. Technically, the IAIS website is built on a modern WordPress CMS platform utilizing Elementor for page building, Revolution Slider for dynamic content display, and integrates Google reCAPTCHA for form security. The site employs Matomo analytics for user tracking and demonstrates good mobile optimization, accessibility, and SEO practices. Performance is moderate, with a professional design and clear navigation enhancing user experience. From a security perspective, the website enforces HTTPS and uses reCAPTCHA to protect forms, but lacks explicit security headers and dedicated security or incident response pages. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a strong commitment to user privacy. Overall, the IAIS website presents a professional, trustworthy, and content-rich platform suitable for its global supervisory audience. The main limitation is the absence of WHOIS data, which restricts domain registration trust analysis. However, the organization's global reputation and website quality mitigate this concern. Strategic recommendations include enhancing security headers, publishing explicit security policies, and verifying WHOIS data for improved trust.

황

황동산업(주)

themetal.kr

66

THE METAL (황동몰) is a South Korean e-commerce business specializing in metal products and DIY hardware, including handles, locks, decorative items, and custom manufacturing services. The company operates a well-established online retail platform using the Cafe24 e-commerce system, targeting DIY enthusiasts and professional customers in the metal hardware sector. The website is professionally designed with consistent branding and a clear focus on its niche market. The domain registration data aligns well with the business identity, showing a legitimate and stable presence since 2013. Technically, the website leverages modern JavaScript libraries and integrates Google Analytics and Tag Manager for marketing and analytics purposes. Hosting and platform services are provided by Cafe24, a reputable Korean e-commerce provider. While the site is functional and moderately optimized for performance, mobile optimization and accessibility features are basic and could be improved. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and DNSSEC implementation. From a security and compliance perspective, the site does not prominently display privacy, cookie, or terms of service policies, which may impact GDPR and other regulatory compliance. No incident response or vulnerability disclosure information is found. The site content is safe for general audiences with no adult or explicit material. Overall, the business appears credible and trustworthy, but could enhance its security and privacy practices to improve compliance and user trust.

M

Missionswerk MSD

msd-online.ch

52

Missionswerk MSD is a Swiss-based non-profit organization dedicated to mission work and charitable activities. The website serves as an informational platform to present their mission, projects, and ways to support their cause. The organization targets individuals interested in religious outreach and charitable giving. The business model is donation-based, focusing on small to medium scale operations within the non-profit sector. Technically, the website is built on WordPress using the Divi theme, leveraging common web technologies such as jQuery and PHP. The site is multilingual, supporting German, French, and English, enhancing accessibility for a broader audience. Performance and mobile optimization are moderate to good, though accessibility features are basic. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks advanced security headers and formal security policies. No vulnerability disclosure or incident response information is provided, indicating room for improvement in security maturity. Privacy compliance is weak, with no visible privacy or cookie policies and no consent mechanisms. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security policies, and explicit contact information to improve trust and regulatory adherence.

I

ISTL

istl.ch

58

ISTL is an educational institution specializing in dual theological studies offering Bachelor and Master degree programs as well as Bible school education. The website targets individuals interested in theological education primarily in Switzerland and Germany. The institution maintains a professional online presence with comprehensive privacy and cookie policies, and active social media engagement. Technically, the website is built on WordPress using the Astra theme and integrates modern analytics and marketing tools such as Google Analytics 4, Google Ads, and Meta Pixel, all managed with user consent via a cookie banner. Security posture is good with HTTPS enforced and no obvious vulnerabilities detected, though some security headers could be improved. The lack of WHOIS data for the domain introduces uncertainty about domain registration legitimacy, which should be further investigated. Overall, the website is professional, user-friendly, and compliant with GDPR requirements.

B

Bienen Meier AG

bienen-meier.ch

55

Bienen Meier AG is a specialized Swiss retailer focused on beekeeping supplies, offering a comprehensive online shop with a wide range of products including protective clothing, honey containers, and beekeeping tools. The company targets beekeepers and honey producers, positioning itself as a trusted provider with Swiss-made products and customer engagement initiatives such as surveys and consultation for new beekeepers. Technically, the website is built on the PepperShop e-commerce platform, leveraging modern libraries like jQuery and Bootstrap, and integrates Google Analytics for user tracking. The site is mobile-optimized with good navigation and content relevance. Security-wise, the site enforces HTTPS and uses client-side validation but lacks some advanced security headers and a formal vulnerability disclosure policy. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional and trustworthy but could improve in security and privacy transparency.

A

APINATURA

apinatura.ch

53

APINATURA is a Swiss-based small business specializing in the production and sale of bee products and cosmetics derived from bee products, with a strong emphasis on apitherapy. The company leverages a long family tradition in beekeeping and combines traditional knowledge with modern scientific methods. Their market position is niche and regional, targeting health-conscious consumers interested in natural and bee-based products. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive product and company information. Technically, the site uses the indual CMS platform with common libraries such as jQuery and Fancybox, and integrates Google Analytics for user tracking. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit security policy or incident response contacts are provided. Overall, the site is trustworthy, compliant with GDPR, and presents a safe user experience.

1

11teamsports

11teamsports.cy

55

11teamsports.cy is a specialized e-commerce retailer focused on football equipment, apparel, and accessories, serving primarily the Cyprus market with Greek language content. The company offers a wide range of products from leading sports brands such as Nike, adidas, and Puma, targeting football players, teams, and fans. The website demonstrates a mature digital presence with a structured product catalog, clear navigation, and localized content. Technically, the site uses modern web technologies including jQuery, Bootstrap, and the Nette framework, supported by analytics and marketing tools like Google Analytics, Google Tag Manager, and Exponea. Security posture is strong with HTTPS enforcement and standard security headers, though there is room for improvement in publishing explicit security policies and incident response information. Privacy compliance is well addressed with visible cookie consent mechanisms and comprehensive privacy policies in Greek. Overall, the site is professional, trustworthy, and well-positioned in the sports retail e-commerce sector in Cyprus.

M

Mozzatti Schlumpf Architekten AG

mozzattischlumpf.ch

53

Mozzatti Schlumpf Architekten AG is a medium-sized Swiss architecture and real estate company established in 1967, specializing in contemporary building planning, renovations, and property management. The company targets private clients, general contractors, public entities, and foundations, offering comprehensive architectural services with a focus on quality, sustainability, and client satisfaction. Their website reflects a professional and consistent brand image with detailed project portfolios and team information. Technically, the website uses modern web technologies including Foundation framework, jQuery, and Google Analytics with IP anonymization, indicating a moderate level of digital maturity. Security posture is moderate with some best practices observed but lacks explicit security headers and incident response information. Privacy compliance is basic, missing cookie consent mechanisms. Overall, the website is trustworthy and well-positioned in its market niche.

J

Jamf Holdings Corp.

wandera.com

74

Jamf Holdings Corp. operates a professional website focused on Apple device management solutions for enterprises. The company positions itself as a leading provider of Apple device management, user resource connectivity, and cybersecurity protection services. The website is well-branded, professionally designed, and targets organizations that rely on Apple hardware. The digital infrastructure leverages modern marketing and analytics technologies including Marketo, Google Tag Manager, Segment Analytics, and Visual Website Optimizer, indicating a mature digital marketing and user experience optimization strategy. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response information are not publicly disclosed. Overall, the website reflects a trustworthy and professional enterprise software provider with a solid market presence.

W

WT Wien Ticket GmbH

wien-ticket.at

67

WT Wien Ticket GmbH operates a comprehensive online ticketing platform focused on cultural and entertainment events in Vienna, including concerts, musicals, theater, sports, and exhibitions. The company holds a strong market position as a leading ticket provider in the region, supported by a professional and user-friendly website. The platform targets a broad audience interested in Vienna's vibrant event scene, offering a seamless ticket purchasing experience. Technically, the website employs modern JavaScript libraries such as jQuery and Swiper.js, integrates multiple analytics and advertising tools, and demonstrates good mobile optimization and accessibility features. Security-wise, the site enforces HTTPS, uses session and authentication cookies securely, and implements a robust cookie consent mechanism, although some security headers could be improved. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR requirements, with clear business information consistent with WHOIS data.

M

Magyar Vasúttörténeti Park

vasuttortenetipark.hu

43

Magyar Vasúttörténeti Park operates Europe's largest open-air railway experience park, providing railway history exhibitions and visitor experiences primarily targeting general audiences interested in transportation heritage. The website is built on WordPress using the Divi theme and WooCommerce for e-commerce capabilities, indicating a moderate level of digital maturity. The technical infrastructure includes common web technologies and tracking tools such as Facebook Pixel and Google Tag Manager, supporting marketing and analytics efforts. Security posture shows room for improvement, with no detected security headers and missing explicit privacy and security policies. The domain age and WHOIS data confirm a legitimate and established business presence since 2004. Overall, the website is functional and professional but would benefit from enhanced security and privacy compliance measures.

M

MÁV-csoport

10vallalas.hu

55

The website www.10vallalas.hu represents the '10 vállalás' initiative by MÁV-csoport, Hungary's national railway group, focusing on enhancing passenger experience through commitments such as delay insurance, fleet modernization, and improved cleanliness. The site targets Hungarian public transport users, providing detailed information about services and improvements. Technically, the site is built on Drupal 11 with Bootstrap and jQuery, integrating Google Analytics and Tag Manager for tracking. It is mobile-optimized and accessible with a clear navigation structure. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security headers and incident response information. Privacy compliance is strong, with a comprehensive cookie and privacy policy in Hungarian. Overall, the site is professional, trustworthy, and well-maintained, serving as an informative portal for MÁV-csoport's passenger commitments.

M

MÁV-csoport

mav.hu

54

MÁV-csoport is the Hungarian state-owned railway group providing comprehensive passenger and freight rail services, infrastructure management, and related support functions. The website serves as a central portal for travel information, ticketing, service updates, and corporate information, targeting general public users and business partners. The company holds a leading market position in Hungary's transportation sector with multiple subsidiaries under its umbrella. Technically, the website is built on Drupal CMS with modern web technologies including jQuery and responsive design elements. It integrates Google Analytics and Facebook Pixel for analytics and marketing purposes, with a clear cookie consent mechanism ensuring GDPR compliance. The site demonstrates good mobile optimization, accessibility, and SEO practices. From a security perspective, the site enforces HTTPS and uses anonymized IP tracking in analytics. However, it lacks some advanced security headers and does not publicly disclose a security policy or incident response contacts. No vulnerabilities or suspicious activities were detected in the content or scripts. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting the business's credibility. Strategic improvements in security headers and transparency around security policies could further enhance its posture.

M

MÁV-csoport

mav-start.hu

54

MÁV-csoport is a major Hungarian transportation group specializing in rail passenger transport and related services. The website provides comprehensive travel information, ticketing options, and customer support, targeting both domestic and international travelers. The site is well-structured, professionally designed, and mobile-optimized, reflecting a mature digital presence. Technically, it is built on Drupal CMS with modern JavaScript libraries and integrates Google Analytics and Facebook Pixel for marketing and analytics purposes, with a clear cookie consent mechanism in place. Security posture is solid with HTTPS enforced and anonymized analytics tracking, though additional security headers and explicit incident response policies could enhance protection. Overall, the domain registration and website content align well, indicating a legitimate and trustworthy entity. The site is free from blocking mechanisms or suspicious content, making it safe for general audiences.