Security Directory

R

Russell Stover

russellstover.com

71

Russell Stover is a well-established chocolate and candy brand operating a professional e-commerce website offering a wide range of products including traditional chocolates, gift baskets, and sugar-free options. The website targets consumers seeking quality confectionery gifts and personalized chocolate boxes. The business operates under the retail and e-commerce sectors and is a subsidiary of Lindt & Sprüngli, a globally recognized chocolate manufacturer. The website demonstrates consistent branding and good content quality, supporting its market position as a trusted chocolate retailer. Technically, the website is built on Magento Commerce with modern JavaScript frameworks and integrates multiple analytics and marketing platforms such as Google Tag Manager, Adobe Experience Cloud, and New Relic for performance monitoring. The site is mobile-optimized and employs standard SEO and accessibility practices, although accessibility could be improved further. Performance is moderate with room for optimization. From a security perspective, the website enforces HTTPS, uses standard security headers, and employs CAPTCHA on forms to mitigate automated abuse. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a publicly available security policy and incident response contact information suggests areas for improvement in transparency and readiness. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms, aligning with GDPR requirements. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. The main risk factor is the lack of WHOIS data, which may be due to privacy protection or query limitations but warrants monitoring. Strategic recommendations include publishing a security policy, enhancing incident response visibility, and improving accessibility compliance to further strengthen trust and security posture.

B

Benchmark Resorts & Hotels

benchmarkresortsandhotels.com

48

Benchmark Resorts & Hotels operates a professional hospitality website showcasing distinct resorts and hotels in iconic destinations. The company positions itself as a premium experiential hospitality provider offering personalized guest services. The website is built on the ProcessWire CMS and leverages modern technologies including Google Tag Manager, Flip.to marketing tools, and Adobe DTM for digital marketing management. The site is hosted on AWS Cloudfront CDN, ensuring good performance and availability. Security posture is solid with HTTPS enforced and a consent management platform (Osano) implemented, though explicit security headers and policies are not evident. The absence of WHOIS data raises concerns about domain registration legitimacy, which impacts overall trust. No privacy or cookie policies were detected in the provided content, and no direct contact information is available, limiting transparency. Overall, the website is well-designed and functional but would benefit from enhanced compliance and transparency measures.

T

TYR

tyr.com

67

TYR is a retail and e-commerce company specializing in athletic shoes, training apparel, and competitive swimwear. The website targets athletes and fitness enthusiasts, offering products such as swimwear, swimming goggles, and triathlon gear. The site is built on the Magento platform and integrates various marketing and analytics tools including Google Tag Manager, Yotpo, and Klaviyo. The technical infrastructure is modern and supports a good user experience with mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and use of Google reCAPTCHA, though explicit security headers and privacy policies are not clearly visible. The site collects extensive user data for marketing purposes but lacks visible compliance documentation. Overall, the website is professional and trustworthy but could improve privacy compliance and security transparency.

Virgin Hotels operates a lifestyle hotel brand with properties across major cities in the United States and the United Kingdom. The website presents a professional, well-branded digital presence offering hotel booking, loyalty programs, and mobile app integration. The business targets travelers seeking unique and comfortable accommodations with modern amenities. Virgin Hotels is part of the Virgin Group, a globally recognized brand, and maintains a strong market position in the hospitality sector.

M

Mohegan Sun

mohegansun.com

61

Mohegan Sun is a well-established casino and resort located in Connecticut, operating since 1998. It offers a comprehensive range of services including casino gaming, hotel accommodations, entertainment events, dining, nightlife, golf, spa, and meeting facilities. The website reflects a mature business with a strong market position as a leading hospitality and gaming destination. The site is professionally designed with good content quality and consistent branding, targeting adults interested in gaming and entertainment. Technically, the site uses Adobe Experience Manager CMS and integrates multiple modern marketing and analytics tools, though some improvements in security headers and cookie consent mechanisms are recommended. The security posture is good with HTTPS and domain protections in place, but DNSSEC is not enabled and CSP headers are missing. Overall, the domain registration data supports the legitimacy and long-term operation of the business. The site is adult-oriented due to gambling and nightlife content, with appropriate disclaimers and responsible gaming links.

B

Backcountry Access

backcountryaccess.com

49

Backcountry Access is a well-established company founded in 2001, specializing in backcountry safety products and consumer education. The website positions itself as a trusted name in the outdoor safety retail sector, targeting backcountry enthusiasts and consumers seeking reliable safety equipment. The business model is primarily e-commerce combined with educational content to support safe outdoor activities. The company maintains a consistent brand presence with professional design and structured data to enhance search visibility. Technically, the website uses modern web technologies including JavaScript, Typekit fonts, and integrates third-party services such as Klarna for payments and Yotpo for reviews. Hosting is managed via NS1 DNS services, and the site is mobile optimized with good SEO practices. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is weak due to absence of visible privacy and cookie policies, and no GDPR compliance indicators. Contact information and incident response details are not explicitly provided, which may impact user trust and compliance. Overall, the site is professional and trustworthy but would benefit from improved privacy and security disclosures.

Zeal Optics operates a professional e-commerce website specializing in premium polarized sunglasses, ski goggles, and related accessories targeting outdoor enthusiasts and sports consumers. The brand emphasizes sustainability and quality, positioning itself as a niche player in the outdoor retail market. The website infrastructure leverages modern technologies including jQuery, Google Tag Manager, OneTrust for cookie consent, and Yottaa for performance optimization, hosted likely on Akamai CDN with SAP Commerce as the backend platform. Security posture is strong with HTTPS enforcement, security headers, and privacy compliance including GDPR adherence. However, the absence of WHOIS registration details and lack of explicit security policy or incident response information slightly reduce trust. Overall, the site is well-designed, accessible, and trustworthy for its target audience.

W

Winter Wildlands Alliance

winterwildlands.org

42

Winter Wildlands Alliance is a well-established national non-profit organization dedicated to protecting America's wild snowscapes through education, advocacy, and community engagement. Their website reflects a professional and consistent brand presence, offering programs such as SnowSchool, Backcountry Film Festival, and policy advocacy. The organization targets outdoor enthusiasts, educators, and conservationists, leveraging memberships, donations, events, and merchandise sales as key revenue streams. Technically, the site is built on WordPress with a modern theme and plugins, hosted by SiteGround, and optimized for mobile with good SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements like DNSSEC and security headers are recommended. The domain is long-standing and privacy-protected, consistent with the organization's profile, enhancing legitimacy. Overall, the website is trustworthy, content-rich, and serves its mission effectively.

S

Skratch Labs

skratchlabs.com

70

Skratch Labs is a specialized e-commerce company focused on providing real food-based sports nutrition products such as hydration mixes, energy bars, and recovery drinks. The company targets athletes and sports enthusiasts seeking science-backed nutrition solutions to enhance performance and endurance. Their market position is that of a niche but established brand emphasizing natural ingredients and digestive health. Technically, the website is built on the Shopify platform, leveraging a modern tech stack with integrations for analytics, marketing, and customer engagement tools. The site demonstrates good mobile optimization, SEO, and user experience, supporting a medium-sized business operation. Security-wise, the site enforces HTTPS, uses standard security headers, and employs CAPTCHA on forms, but lacks publicly available security policies or incident response information, which could be improved to enhance trust. Overall, the website is professional and trustworthy, though the absence of WHOIS data for the domain registration introduces some uncertainty regarding domain legitimacy.

D

DPS Skis

dpsskis.com

67

DPS Skis is a premium e-commerce business specializing in advanced skis made with aerospace carbon fiber technology. The company targets skiing enthusiasts seeking high-performance powder skis. Their market position is that of an innovative leader in ski manufacturing and retail. The website is built on Shopify, leveraging modern web technologies and marketing tools such as Klaviyo and Facebook Pixel. The site demonstrates good technical maturity with fast performance, mobile optimization, and accessibility features. Security posture is solid with HTTPS, frame busting, and cookie consent, though it lacks explicit security policies and incident response information. The absence of WHOIS data is a concern but the professional site and Shopify hosting mitigate risk. Overall, the site is trustworthy and well-constructed, supporting a medium-sized business in the outdoor sports retail sector.

F

FM Director

fmdirector.com

59

FM Director is a UK-based, high-end printed magazine and digital media platform focused on the facilities management sector. It serves FM professionals and influencers by providing industry-leading content, including monthly magazine issues and features. The business operates under the Business Daily Group umbrella, leveraging a network of related FM services such as FM Recruiter and FM Directory. The website demonstrates a professional and consistent brand presence with clear contact information and active social media engagement. Technically, the site is built on WordPress with Elementor, employing modern web technologies and Google Analytics for tracking. While the site is well-structured and mobile-optimized, it lacks some advanced security headers and cookie consent mechanisms, which are recommended for compliance and enhanced security. The domain registration is consistent with the business age and shows no suspicious patterns, supporting the legitimacy of the website.

FM Recruiter is a UK-based specialist job board focused on the facilities management sector, operated by Business Daily Group. The platform offers job listings, CV upload, job alerts, and career advice tailored to facilities management professionals and recruiters. The website is professionally designed with clear navigation and mobile optimization, supporting a positive user experience for its target audience. Technically, it is built on ASP.NET WebForms with common web technologies and integrates Google Analytics and Bing UET for tracking. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is addressed with clear privacy and cookie policies and consent mechanisms. Contact information is transparent and includes phone numbers, email, and a physical address, enhancing business credibility. Overall, FM Recruiter presents as a trustworthy and functional niche recruitment platform with room for security enhancements.

B

Business Daily Group Limited

businessdailygroup.co.uk

52

Business Daily Group Limited is a UK-based business support company specializing in helping ambitious organizations grow across multiple sectors including rail, facilities management, and hydrogen industries. The company offers a comprehensive suite of services such as business advice, marketing, media publishing, recruitment, and community building. Their market position is that of a trusted partner to hundreds of clients, with a strong focus on profile enhancement and sector-specific expertise. The website reflects a professional and consistent brand image, targeting businesses seeking growth and market expansion. Technically, the website is built on WordPress using Elementor and Yoast SEO plugins, indicating a modern and maintainable infrastructure. The site is mobile-optimized with good SEO practices, though accessibility features are basic. Performance is moderate with no critical technical issues detected. The absence of advanced analytics or tracking scripts suggests a minimal user tracking approach. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers and cookie consent mechanisms, which are recommended for GDPR compliance and enhanced security posture. No vulnerabilities or exposed sensitive data were detected. The WHOIS lookup for the 'www' subdomain failed due to domain naming rules, but the main domain appears legitimate with clear company registration details. Overall, the website presents a low-risk profile with good business credibility and technical implementation. Strategic improvements in security headers, privacy compliance, and incident response documentation would further strengthen the security posture and trustworthiness.

N

Naturpark Zittauer Gebirge e. V.

naturpark-verein.de

43

Naturpark Zittauer Gebirge e. V. operates a regional nature park website focused on promoting the unique cultural and natural landscape of the Zittauer Gebirge region in Saxony, Germany. The site provides information on nature experiences, educational programs, events, and regional development initiatives, targeting tourists, local residents, and educational institutions. The organization appears to be a small non-profit entity dedicated to environmental and cultural preservation. Technically, the website is built on the BLUEPAGE-CMS platform with modern JavaScript libraries such as jQuery and bxSlider, and employs lazy loading for images to optimize performance. The site is mobile responsive and uses HTTPS with a valid SSL configuration. Cookie consent mechanisms are implemented to comply with GDPR requirements, and privacy is respected by using YouTube's nocookie domain for embedded videos. From a security perspective, the website enforces HTTPS and includes a cookie consent banner with granular controls, but lacks explicit security headers and incident response contact information. No vulnerabilities or exposed sensitive data were detected. The WHOIS data indicates consistent domain registration and hosting with no suspicious patterns. Overall, the site demonstrates a good security posture for its size and purpose. The overall risk is low given the nature of the business and the absence of critical security issues. Strategic recommendations include enhancing security headers, publishing a security policy or incident response contact, and maintaining regular audits of third-party scripts to further strengthen security and trust.

D

Domov Sue Ryder, z. ú.

darekprosueryder.cz

52

Dárek pro Sue Ryder is a Czech non-profit organization dedicated to supporting seniors and their families by providing dignified elderly care, including advice, personal assistance, and palliative care. The organization has been active since 1998 and maintains a strong market position as a trusted partner in the Czech Republic, including partnerships with notable events such as the Karlovy Vary International Film Festival. The website serves as a campaign and donation platform, featuring clear calls to action and testimonials to build trust. Technically, the website employs modern web technologies including JavaScript, CSS, lazy loading for images, and Google Tag Manager for analytics and marketing. It uses a consent management platform to comply with cookie regulations. The site is mobile optimized and presents a professional design, though some accessibility and SEO optimizations could be improved. No major CMS is detected, suggesting a custom or proprietary solution. From a security perspective, the site enforces HTTPS and provides a cookie consent mechanism, but lacks explicit security headers and detailed security or privacy policies. No incident response or vulnerability disclosure information is available, which could be improved to enhance trust and compliance. The WHOIS data aligns well with the website's claims, supporting legitimacy. Overall, the site is professional, trustworthy, and serves its non-profit mission effectively. Strategic improvements in privacy policy publication, security headers, and incident response transparency would enhance its security posture and compliance.

A

Asociace společenské odpovědnosti (A-CSR)

spolecenskaodpovednost.cz

50

Asociace společenské odpovědnosti (A-CSR) is the largest sustainability and ESG initiative in the Czech Republic, operating as a non-profit association. It focuses on promoting the UN Sustainable Development Goals (SDGs), organizing events such as the Global Goals Summit and Giving Tuesday, and providing networking opportunities for its members. The association also publishes newsletters and an online magazine to inform and engage its audience. The target audience includes organizations and individuals interested in sustainability and social responsibility within the Czech market. Technically, the website is built on WordPress and leverages modern web technologies including jQuery, Google Tag Manager, Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The site is well-optimized for mobile devices, accessible, and SEO-friendly, with comprehensive metadata and structured data enhancing search engine visibility. Cookie consent and privacy policies are implemented in compliance with GDPR. From a security perspective, the website uses HTTPS with a strong SSL configuration and employs best practices such as cookie consent and nonce usage in scripts. However, security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected and could be improved. No vulnerabilities or exposed sensitive data were found. The absence of WHOIS data is a concern for domain legitimacy, but the professional content and consistent branding support trustworthiness. Overall, the website presents a low risk profile with strong content quality and technical implementation. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and improving incident response contact visibility to further strengthen security posture and trust.

B

BH Securities a.s.

bhs.cz

43

BH Securities a.s. is a well-established Czech financial services company specializing in investment services including stocks, qualified investor funds, asset management, and gold investments. With over 30 years of market presence and as a founding member of the Prague Stock Exchange, it serves individual, municipal, and institutional investors. The website reflects a mature digital presence with comprehensive product information, professional team bios, and clear contact channels. Technically, the site uses modern JavaScript libraries and includes cookie consent management, indicating compliance with privacy regulations. Security posture is solid with HTTPS and secure forms, though explicit security headers and published security policies are absent. WHOIS data is missing, which slightly impacts domain trustworthiness but does not detract from the overall legitimacy suggested by regulatory references and business details.

B

Biedriba "Rezeknes novada partneriba"

rezeknespartneriba.lv

50

Biedriba "Rezeknes novada partneriba" is a Latvian non-profit organization focused on regional partnership and development within the Rezekne municipality. The website serves as an informational platform for local stakeholders and community members. The business model is typical for a small non-profit entity, targeting local audiences with partnership and community engagement activities. The website uses WordPress with the Divi theme, indicating a moderate level of digital maturity with standard web technologies and common libraries such as jQuery and FontAwesome. The site is accessible and mobile-optimized but lacks advanced SEO and accessibility features. Security posture is basic, with no detected security headers or privacy policies, which presents compliance and risk gaps. The WHOIS data is partially consistent with the business identity but lacks registrar and creation date details, limiting full trust assessment. Overall, the site is functional but would benefit from enhanced security, privacy compliance, and richer content to improve trust and professionalism.

R

Rēzeknes novads

rezeknesnovads.lv

60

Rēzeknes novads is the official municipal government website serving the Rēzeknes novads region in Latvia. The site provides comprehensive information about local governance, public services, business support, tourism, and community participation. It targets residents, businesses, and visitors, offering multilingual support in Latvian, English, and Russian. The website is built on WordPress CMS, utilizing common plugins such as Yoast SEO and jQuery, and integrates Google Analytics for visitor tracking. The design is professional and mobile-optimized, with clear navigation and consistent branding. From a technical perspective, the site employs modern web technologies and maintains a moderate performance level. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure; however, it lacks explicit security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism present but no clear privacy policy or terms of service found. The WHOIS data confirms domain legitimacy and consistency with the website's geographic and organizational claims. Overall, the website demonstrates a solid foundation for public service delivery with good user experience and trust indicators. Key areas for improvement include publishing comprehensive privacy and security policies, enhancing security headers, and providing incident response contact information to strengthen compliance and security posture.

B

Beretta Defense Technologies

berettadefensetechnologies.com

65

Beretta Defense Technologies is a specialized defense technology company manufacturing advanced equipment for military and law enforcement sectors. The company operates under the Beretta holding umbrella, leveraging established brand recognition and partnerships with related defense brands. Their website presents a professional image with clear focus on defense technology products and solutions. Technically, the site is built on WordPress with modern SEO and analytics tools, providing a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks some security headers and explicit privacy policies. The absence of WHOIS data introduces some uncertainty regarding domain registration transparency. Overall, the company appears credible and professionally positioned in the defense sector, but could improve compliance and security transparency.

A

AIJ Magazine

aijmagazine.co.uk

60

AIJ Magazine is a specialized media publication serving the Guild of Architectural Ironmongers and related professionals in the UK construction and manufacturing sectors. The website provides industry news, features, opinions, and digital editions, positioning itself as a niche authoritative source within its market. The business operates under the parent company Atom and has been active since 2020, with consistent branding and good content quality tailored to its professional audience. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, WP Rocket, and various JavaScript libraries for enhanced user experience and performance. Hosting is provided by 123-Reg Limited, a reputable registrar and hosting provider. The site demonstrates good mobile optimization, SEO practices, and fast loading times, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and uses some security plugins but lacks explicit security headers and published security policies. No cookie consent mechanism is present, which may impact privacy compliance. No incident response or vulnerability disclosure information is available, indicating room for improvement in security transparency and readiness. Overall, the website is professional, trustworthy, and well-maintained, with moderate security posture and privacy compliance. Strategic enhancements in security headers, privacy mechanisms, and incident response documentation would strengthen its risk profile and compliance standing.

B

Beretta Defense

berettadefense.com

62

Beretta Defense is a defense sector company specializing in manufacturing and supplying a range of firearms and defense equipment including pistols, assault rifles, submachine guns, shotguns, and grenade launchers. They also provide armorer training courses and maintain product documentation to support law enforcement and military clients. The website presents a professional and consistent brand image targeting defense professionals and agencies. Technically, the site is built on WordPress with modern SEO and tracking tools, including Google Analytics and Cookiebot for cookie consent. Security posture is adequate with HTTPS and consent mechanisms but lacks visible security headers and published privacy or terms policies. WHOIS data is unavailable, which reduces transparency and trustworthiness. Overall, the site is functional and professional but would benefit from enhanced privacy disclosures and security practices.

L

LEN - European Aquatics

europeanaquatics.org

51

European Aquatics (LEN) is the official governing body for aquatic sports in Europe, managing disciplines such as swimming, diving, water polo, artistic swimming, open water swimming, and masters. The organization provides comprehensive event calendars, news updates, rules, and development programs to support aquatic sports across Europe. The website serves as a central hub for athletes, federations, and fans, offering structured information and media content. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and optimized for mobile devices. It integrates Google Analytics for user tracking and complies with GDPR through clear privacy and cookie policies. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and additional security headers could be added. Overall, the site is professional, trustworthy, and well-maintained, reflecting the organization's authoritative position in European aquatic sports.

S

Sprintty for Sports - Enhance Your Sports Streaming

sprintty.com

65

Sprintty.com is a technology platform specializing in sports streaming services, offering high-quality live sports event streaming with advanced monetization and customization features. The website targets sports content providers and distributors seeking a robust platform to deliver and monetize sports video content. The platform appears to be relatively new, founded in 2022, and uses the Tilda CMS platform with integrations for analytics and marketing tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The technical infrastructure includes Akamai DNS and CDN services, indicating a focus on performance and reliability. Security posture is moderate; while HTTPS is implied and domain registration is secured with EPP status locks, there is no DNSSEC enabled and no security headers detected in the HTML content. The website lacks explicit privacy, cookie, and terms of service policies, which impacts privacy compliance scores. No contact emails or phone numbers are explicitly provided on the site, limiting direct communication channels. Overall, the site is professionally designed with good user experience and content relevance but would benefit from enhanced security and privacy compliance measures.

L

Livesport s.r.o.

flashfutbal.sk

56

FlashFutbal.sk is a Slovak-language sports media website operated by Livesport s.r.o., specializing in live football scores, detailed match statistics, betting tips, and odds comparison. It serves football fans and sports bettors primarily in Slovakia, offering comprehensive real-time sports data and related content. The platform is well-positioned in the Slovak market as a leading source for football results and sports statistics, leveraging partnerships with major bookmakers and live score providers. Technically, the website employs modern web technologies including asynchronous JavaScript, CSS, and cookie consent management via OneTrust, ensuring a fast, mobile-optimized, and SEO-friendly user experience. Security posture is strong with HTTPS enforced and standard security best practices observed, though explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is robust with clear privacy and cookie policies and GDPR consent mechanisms in place. Overall, the site demonstrates high professionalism, trustworthiness, and technical maturity, making it a reliable resource for its target audience.

T

Tribal Football

tribalfootball.com

60

Tribal Football operates as a specialized media platform delivering comprehensive football news, transfer rumors, and updates on teams and players worldwide. The website targets football fans and sports enthusiasts, providing timely and relevant content primarily focused on European football leagues and major competitions. The business model appears to be content publishing supported by advertising and possibly affiliate marketing, positioning Tribal Football as a recognized player in the football news media sector. Technically, the website is built using modern web technologies including React, Google Tag Manager, and performance monitoring tools like Lux. It demonstrates good mobile optimization, SEO practices, and moderate performance. The site uses HTTPS exclusively, ensuring secure data transmission, and integrates standard analytics tools for user behavior tracking. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks explicit security headers and publicly available security policies or incident response information, which are areas for improvement. The absence of WHOIS data raises questions about domain registration legitimacy, though the website content and structure suggest a professional and trustworthy operation. Overall, Tribal Football presents a solid digital presence with good content quality and technical implementation. The main risks relate to domain registration transparency and the lack of detailed security and incident response disclosures. Addressing these gaps would enhance trust and compliance posture.

The website lsid.eu presents a minimal landing page titled 'Lsid' with a brief mention of 'Lsid - API' and branding referencing 'Flashscore'. The content is extremely limited, lacking detailed business descriptions, contact information, or user engagement features. The site appears to serve as a placeholder or a minimal API endpoint reference rather than a full business website. The external links to livesport.cz suggest a possible affiliation or branding relationship with the Livesport group, known for sports data services. Technically, the site lacks modern web features such as security headers, privacy policies, and visible analytics or marketing tools, indicating a low level of digital maturity and limited user-facing functionality. Security posture is weak due to the absence of HTTPS and security best practices, and no compliance documentation is present. Overall, the site carries a low trustworthiness score and minimal business credibility.

T

The Boeing Company

boeing.de

62

The Boeing Company’s German website serves as a regional portal highlighting its significant presence and contributions to the German aerospace industry. The site emphasizes Boeing’s role in supporting over 1,000 direct employees and more than 23,000 jobs in the German supply chain, focusing on sustainable growth and advanced technology partnerships. The website is professionally designed with consistent branding and offers multi-regional language navigation, reflecting Boeing’s global footprint. Technically, the site leverages Adobe Experience Manager as its CMS, integrates Brightcove for video content, and uses Google Tag Manager for analytics, indicating a mature digital infrastructure. Security-wise, the site uses HTTPS and implements cookie consent mechanisms but lacks visible security headers and explicit security policies, suggesting room for improvement in transparency and security posture. Overall, the site is trustworthy and professional but would benefit from enhanced privacy disclosures and security documentation.

T

The Boeing Company

boeing.fr

62

The Boeing France website represents the French presence of The Boeing Company, a leading aerospace and defense manufacturer with a long history dating back to 1916. The site highlights Boeing's partnerships with French airlines and military forces, showcasing its role in both commercial and defense aviation sectors. The website is built on Adobe Experience Manager and integrates multimedia content via Brightcove, reflecting a modern digital infrastructure. Analytics are managed through Google Tag Manager, indicating moderate user tracking. Security posture is moderate with no explicit security headers detected and missing WHOIS data limiting domain trust verification. Privacy compliance is partial with a cookie consent mechanism present but no clear privacy policy found. Overall, the site is professional, well-branded, and safe for general audiences, but could improve transparency and security practices.

O

Official FISU TORINO 2025 Product's Store

wugtorino2025.it

45

The website www.wugtorino2025.it/en is the official e-commerce store for the FISU Torino 2025 World University Games, offering official merchandise such as apparel, accessories, and memorabilia. It targets fans, participants, and the general public interested in event-related products. The site is built on the PrestaShop CMS platform and incorporates modern web technologies including Google reCAPTCHA for form security and structured data for SEO enhancement. The design is professional and mobile-optimized, providing a good user experience with clear navigation and consistent branding. From a security perspective, the site enforces HTTPS and includes several security headers, demonstrating a good security posture. The use of Google reCAPTCHA helps mitigate automated abuse on forms. However, the absence of explicit privacy and terms of service pages indicates gaps in compliance and transparency. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's purpose and geographic focus, supporting legitimacy. Overall, the site is a trustworthy and functional e-commerce platform for official event merchandise, but it would benefit from enhanced privacy compliance and clearer legal documentation to improve user trust and regulatory adherence.

M

Microplus Informatica

microplustimingservices.com

53

Microplus Informatica is an established Italian company specializing in sports event timing and results management, with a strong presence in aquatic and multisport events internationally and nationally. The website serves as a portal for event results and related information, targeting sports organizations, athletes, and fans. The company leverages WordPress with Elementor and several specialized plugins to deliver a content-rich and user-friendly experience. The technical infrastructure is modern and well-maintained, hosted likely on SiteGround, with good mobile optimization and SEO practices. Security posture is solid with HTTPS, DNSSEC, and GDPR compliance, though some advanced security headers and policies could be improved. No critical vulnerabilities or suspicious activities were detected. Overall, the website reflects a professional and trustworthy business with a clear market position in sports timing services.

E

ewz - Elektrizitätswerk der Stadt Zürich

ewz.ch

66

ewz - Elektrizitätswerk der Stadt Zürich is a leading energy and telecommunications service provider based in Switzerland, focusing on renewable energy production and intelligent supply systems. The company offers a broad range of services including electricity supply, solar panels, electromobility solutions, district heating, and fibre optic network connectivity, targeting both private and business customers. The website reflects a strong market position with comprehensive service offerings and sustainability commitments. Technically, the website is built on Adobe Experience Manager with modern web components and integrates Adobe Launch for analytics and Usercentrics for consent management, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced, multiple security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-optimized for user experience and mobile devices.

V

Volg Konsumwaren AG

volg.ch

51

Volg Konsumwaren AG operates a well-established Swiss retail grocery chain focused on local convenience stores, offering a broad range of products, online shopping, and community engagement through recipes and magazines. The website reflects a mature digital presence with multilingual support and integration of modern web technologies such as TYPO3 CMS, Google Maps API, and Google Tag Manager. The security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting Volg's strong market position in Switzerland.

T

Triulzi AG

triulzi.ch

59

Triulzi AG is a well-established electrical engineering company operating primarily in the Oberengadin and Albula regions of Switzerland. As a member of the Burkhalter Gruppe, it benefits from access to advanced technologies and a broad service portfolio including installations, automation, telematics, and maintenance. The company positions itself as a leading regional provider with a strong focus on building technology and electrical services. The website reflects a professional and consistent brand image, targeting regional customers and potential apprentices interested in electrical trades. Technically, the site is built on TYPO3 CMS, integrates Google services for analytics and maps, and implements GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS, reCAPTCHA, and controlled script loading, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the website is trustworthy, well-structured, and provides comprehensive contact information across multiple locations.

F

Florinett AG

florinett-holz.ch

43

Florinett AG is a small Swiss company specializing in forestry services and mountain wood products in the Graubünden region. Their website presents a professional image with clear descriptions of their forestry work, timber trade, specialized woodworking, and instrument wood offerings. The company positions itself as a regional expert with a focus on quality and efficiency through skilled staff and mechanization. Technically, the website uses a moderate technology stack including jQuery, Google Analytics, and Fancybox, with basic mobile optimization and SEO practices. Security posture is moderate; HTTPS is assumed but no security headers or explicit security policies are published. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Contact information is not explicitly provided on the homepage, which may impact user trust and compliance. Overall, the website is safe, professional, and trustworthy but could improve in security and privacy transparency.

Biobergün is a small organic farm business located in Bergün, Switzerland, offering bio farm products, holiday apartment rentals, event and catering services, and a small cheese dairy. The website reflects a local, family-run business with a strong emphasis on organic and sustainable farming practices. The business holds a notable local certification, the BioGrischunpreis 2024, enhancing its credibility in the organic sector. Technically, the website uses a mix of legacy and modern web technologies, including jQuery 1.12.4 and CreateJS, and is built on the Contao CMS platform. While the site is functional and moderately optimized for performance and mobile use, there is room for improvement in accessibility and SEO. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and incident response information. Overall, the site is trustworthy, professional, and compliant with GDPR requirements, though it could benefit from modernizing some technical components and enhancing security practices.

A

ARO Treuhand GmbH

aro-treuhand.ch

50

ARO Treuhand GmbH is a Swiss fiduciary services company providing comprehensive accounting, tax, payroll, and business consulting services primarily to small and medium-sized enterprises across Switzerland. The company emphasizes a constructive and transparent partnership with clients, leveraging modern technologies and automated processes to deliver efficient and reliable solutions. Their market position is that of a trusted regional player with a focus on personalized service and professional expertise. Technically, the website is built on WordPress using the Themify Ultra theme and several professional plugins including Builder Slider Pro, Contact Form 7, and Complianz GDPR for cookie management. The site is well-optimized for mobile devices and includes modern security features such as HTTPS and Google reCAPTCHA v3 on forms. Performance is moderate with good SEO and accessibility basics in place. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, it lacks some advanced security headers and a dedicated security policy or vulnerability disclosure page. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business claims, enhancing trustworthiness. Overall, the website presents a professional and trustworthy digital presence with good compliance and security posture. Strategic improvements could include adding security headers, publishing a security policy, and implementing a security.txt file to further enhance transparency and security readiness.

A

Allegra Passugger Mineralquellen AG

passugger.ch

63

Allegra Passugger Mineralquellen AG is a well-established Swiss mineral water producer, operating since 1896. The company positions itself as an independent and traditional mineral water brand from Graubünden, emphasizing natural purity, sustainability, and strong partner relationships. Their product portfolio includes private label offerings and special editions such as the Crystal Edition. The website reflects a mature digital presence built on WordPress with modern technologies like Bootstrap and jQuery, enhanced by SEO tools such as Yoast. It features a cookie consent mechanism compliant with GDPR, and clear contact information, supporting transparency and user trust. Security posture is solid with HTTPS and cookie consent, though lacking explicit security policies or incident response contacts. Overall, the site is professional, user-friendly, and trustworthy, with moderate tracking via Google Analytics and no suspicious content or blocking mechanisms detected.

V

Verein Auswärtige Liegenschaftsbesitzer Bergün Filisur (ALB)

alb-berguen.ch

52

The website represents the Verein Auswärtige Liegenschaftsbesitzer Bergün Filisur (ALB), a small non-profit association founded in 2015 in Switzerland. It advocates for the interests of second-home owners and long-term tenants in the Bergün-Filisur region, fostering collaboration between local residents and external property owners. The site provides organizational information, event announcements, and contact details, targeting property owners and local stakeholders. Technically, the site is built on Drupal 10 with modern web technologies and includes Google Analytics for visitor tracking. The design is professional, mobile-optimized, and accessible, offering a good user experience. Security posture is adequate with HTTPS enforced but lacks security headers and formal privacy or cookie policies, indicating room for compliance improvement. Overall, the site is legitimate, trustworthy, and safe for general audiences.

G

Graubündner Kantonalbank

gkb.ch

69

Graubündner Kantonalbank is a well-established regional cantonal bank in Switzerland, offering a broad range of financial services including retail banking, private banking, mortgages, and digital banking solutions. The bank holds a strong market position in the Graubünden region, supported by a state guarantee and a history dating back to 1870. The website reflects a mature digital presence with comprehensive service information and customer engagement channels.

B

Beyond Foundation

beyond-foundation.org

39

Beyond Foundation is a German non-profit organization established in 2013, focusing on cultural and therapeutic projects that connect people through music and promote intercultural understanding, awareness, dialogue, and respect. The website presents a professional and consistent brand image with good content quality and user experience, targeting a general audience interested in cultural and therapeutic arts. Technically, the site uses modern JavaScript libraries such as Flickity for carousels and integrates Cookiebot for GDPR-compliant cookie consent management, indicating a moderate level of digital maturity. Security posture is adequate with domain registration protections and cookie consent mechanisms, but lacks visible advanced security headers and explicit security policies. Overall, the site is safe, trustworthy, and compliant with privacy regulations, though it would benefit from publishing privacy and terms of service documents and enhancing security headers.

H

403 - Forbidden: Access is denied.

hohenberg.ch

55

The website hohenberg.ch is currently inaccessible, returning a 403 Forbidden error page that blocks all content. Due to this, no business information, contact details, or policies are available for review. The domain uses privacy protection in its WHOIS data, which limits transparency about the registrant. The lack of accessible content and metadata prevents a thorough assessment of the company's market position, services, or technical infrastructure. From a security perspective, the absence of visible security headers, SSL information, or compliance policies indicates a low security posture. Overall, the site appears to be either restricted intentionally or misconfigured, resulting in a poor digital presence and low trustworthiness.

A

Anny Casty-Sprecher Stiftung

acs-stiftung.ch

54

The Anny Casty-Sprecher Stiftung is a Swiss non-profit cultural foundation established in 1992, dedicated to promoting cultural and artistic activities in the Prättigau region. The website reflects a focused mission on cultural support and awards, targeting local artists and cultural enthusiasts. The site is professionally designed with responsive features and clear navigation, though it lacks some modern compliance elements such as cookie consent and detailed security policies. Technically, the site uses standard web technologies including HTML5, CSS3, and JavaScript with some third-party libraries like Flickity for UI components. Security posture is adequate with HTTPS enforced but could be improved by adding security headers and incident response information. Overall, the website is legitimate, consistent with its WHOIS registration, and presents a trustworthy image for a small regional foundation.

C

Canton of Graubünden

gr.ch

58

The website www.gr.ch is the official online portal for the Canton of Graubünden, Switzerland, serving as a multilingual government platform providing information on politics, public services, and administration. It targets residents and visitors of the canton, offering diverse content in German, Romansh, and Italian. The site reflects a medium-sized government entity with a consistent and professional brand presence. Technically, the site employs modern web technologies including Font Awesome 6 Pro icons and JavaScript analytics, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of visible privacy and cookie policies. Overall, the site is trustworthy and safe, with no adult or questionable content detected.

W

Walservereinigung Graubünden

walserverein-gr.ch

58

Walservereinigung Graubünden is a well-established non-profit cultural association founded in 1960, dedicated to preserving and promoting the Walser language and alpine culture in the Graubünden region of Switzerland. The organization serves a membership base of approximately 2000 individuals and several municipalities, offering cultural events, publications, and a dedicated online shop. The website reflects a consistent brand identity and provides clear contact information and social media presence, supporting community engagement and cultural education. Technically, the site is built on the Contao CMS platform, utilizing modern JavaScript libraries for interactive features and responsive design, ensuring a good user experience across devices. Security posture is adequate with HTTPS enforced and secure login forms, but lacks explicit cookie consent and security headers, which are recommended for compliance and enhanced protection. Overall, the domain registration and WHOIS data align well with the organization's claims, indicating legitimacy and trustworthiness.

L

Lia Rumantscha

liarumantscha.ch

52

Lia Rumantscha is a well-established Swiss public institution dedicated to the promotion and preservation of the Rumantsch language and culture. Founded in 1919, it offers a variety of services including language courses, cultural projects, financial support for initiatives, and translation services. The website reflects a strong cultural mission with clear communication and engagement with its target audience, including families, youth, and the Rumantsch-speaking community. Technically, the site is built on Drupal CMS with modern libraries such as Bootstrap and Swiper.js, and it employs Matomo for privacy-conscious analytics. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers could enhance protection. Overall, the website is professional, trustworthy, and compliant with privacy regulations.

I

Institut für Kulturforschung Graubünden

kulturforschung.ch

62

The Institut für Kulturforschung Graubünden (ikg) is an independent research institution based in Chur, Switzerland, focusing on humanities, social sciences, and cultural studies related to the Alpine region, especially Graubünden. The website serves as a platform for disseminating research projects, publications, events, and membership information, targeting academics, researchers, and culturally interested audiences. The business model revolves around research, publication, and community engagement through events and memberships. Technically, the website employs modern web technologies including Google Analytics with IP anonymization, Google Tag Manager, Typekit fonts, and Swiper.js for interactive content sliders. The site is mobile-optimized, accessible, and SEO-friendly, though it lacks some advanced security headers. Performance is moderate, with a professional and consistent design. From a security perspective, the site uses HTTPS with good SSL configuration and respects user privacy with cookie consent mechanisms. However, it lacks explicit security headers and does not provide a public incident response or vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR principles. It effectively supports the institute's mission and audience engagement. Strategic improvements in security headers and transparency around incident response could further enhance its security posture and user trust.

H

Hutschn GbR

creativealps.org

59

creativeALPS is a small, specialized consultancy and research organization focused on sustainable economic and societal development in the Alpine region. They serve private, public, and social sector clients by providing research, advisory, and project implementation support. The website is professionally designed using modern web technologies such as Webflow and integrates security features like Google reCAPTCHA and GDPR-compliant cookie consent mechanisms. While the website demonstrates good security practices including HTTPS and form protection, it lacks explicit security headers and publicly available WHOIS domain registration data, which slightly reduces trustworthiness. Overall, the site is accessible, well-structured, and provides clear contact information, supporting a positive business credibility profile.

The Bibliotheksverbund Graubünden website serves as a centralized catalog portal for 37 school and community libraries within the canton of Graubünden, Switzerland. It provides users with the ability to search media collections, make reservations, and renew loans. The site supports multiple regional languages (German, Italian, Romansh) reflecting its target audience. The business model is a public service facilitating shared library resources, positioning it as a key regional educational infrastructure.

BergBuchBrig is a Swiss-based multimedia festival focused on nature, culture, leisure, and mountain adventures. Established in 2006, it has grown into a recognized cultural event with a diverse program including book presentations, exhibitions, film screenings, concerts, and excursions. The website serves as an information portal for the festival, providing event dates, program details, and organizational information. The target audience includes culture and nature enthusiasts primarily in Switzerland and neighboring regions. Technically, the website is built on WordPress using a professional theme and plugins such as Essential Grid and All in One SEO Pro, indicating a moderate level of digital maturity. The site is mobile-optimized and includes structured data for SEO benefits. However, there is room for improvement in performance optimization and accessibility. From a security perspective, the site uses HTTPS and employs some email cloaking to protect contact information. However, it lacks visible security headers and formal security policies such as a security.txt or incident response contacts. Privacy compliance is weak due to the absence of privacy and cookie policies, which could pose regulatory risks. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices to reduce risk and improve user trust.