Security Directory

N

NOVA Spektrum

novaspektrum.no

59

NOVA Spektrum is a Norwegian event venue and exhibition space established in 2019, offering services such as hosting exhibitions, concerts, and other events. The website targets a general audience including visitors, exhibitors, and organizers, positioning itself as a regional hub for events in Norway. The business model revolves around venue rental and event facilitation, supported by a network of related domains indicating a broader ecosystem of services. Technically, the website is built on WordPress using Elementor, with integrations such as Matomo for analytics and Complianz for GDPR compliance, reflecting a moderate level of digital maturity. The site is mobile optimized and features a cookie consent mechanism, demonstrating awareness of privacy regulations. Security posture is generally good with HTTPS enforced and no obvious vulnerabilities detected, though the absence of security headers and explicit incident response contacts suggests room for improvement. Overall, the website is professional and trustworthy, with clear branding and consistent content quality. Strategic recommendations include enhancing security headers, publishing terms of service, and providing clearer contact information to improve user trust and compliance.

K

Kulturstiftung Dessau-Wörlitz

gartenreich.de

52

The Gartenreich Dessau-Wörlitz website represents a well-established cultural foundation dedicated to preserving and promoting a UNESCO World Heritage site in Germany. It offers comprehensive visitor information, event calendars, exhibitions, and educational programs targeting tourists, families, and cultural enthusiasts. The site is professionally designed with consistent branding and rich content relevant to its mission. Technically, the website is built on Joomla CMS with modern web technologies such as Bootstrap, jQuery, and Leaflet for interactive maps. It demonstrates good mobile optimization and SEO practices, although some accessibility features could be improved. Hosting is provided by a German hosting provider, consistent with the website's geographic focus. From a security perspective, the site enforces HTTPS and includes CSRF tokens and cookie consent mechanisms, indicating a good baseline security posture. However, the absence of explicit security headers and incident response information suggests room for enhancement. No vulnerabilities or suspicious content were detected. Overall, the website is trustworthy, compliant with GDPR, and provides a safe browsing experience. It effectively supports the foundation's cultural and educational objectives while maintaining user privacy and security standards.

I

idormo AG und GM-Möbel AG

traum-werk.ch

39

Traumwerk is a Swiss-based premium retail brand specializing in sleep products, garden furniture, and stylish living furniture. Operated by idormo AG and GM-Möbel AG, the company maintains a strong market position with multiple physical locations and an integrated e-commerce platform. Their offerings include certified sleep consultations and exclusive designer furniture, targeting discerning customers seeking quality and exclusivity. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive product information. Technically, the site leverages WordPress with WooCommerce and Elementor, supported by modern tracking and marketing tools such as Google Tag Manager and Borlabs Cookie for GDPR compliance. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities, though formal security policies and incident response contacts are not published. Overall, Traumwerk demonstrates a trustworthy and professional online presence aligned with its business objectives.

B

Bach & Perreten

bach-perreten.ch

46

Bach & Perreten is a small Swiss company specializing in wood construction and joinery, combining traditional craftsmanship with modern technology. Their services focus on high-quality interior and exterior woodwork using sustainable materials. The website is built on WordPress using the Enfold theme and includes advanced visual elements like LayerSlider. While the site is professionally designed and mobile-optimized, it lacks critical privacy and security policy disclosures and explicit contact information. HTTPS is enabled, but security headers are missing, and no analytics or tracking scripts are detected, indicating a minimal data collection approach. Overall, the site presents a moderate security posture with room for improvement in compliance and transparency.

R

RIEDER BACH ARCHITEKTUR GSTAAD

riederbach.ch

48

Rieder Bach Architektur Gstaad AG is a well-established architecture firm specializing in high-end residential architecture in Switzerland, particularly in the Gstaad region. The company positions itself as a market leader with a history dating back to 1990. Their website reflects a professional and consistent brand image, targeting affluent clients seeking bespoke architectural services. The business model focuses on delivering architectural design and real estate project expertise, supported by a clear digital presence including social media channels and a contact form with GDPR compliance features. Technically, the website is built on WordPress using Elementor and Yoast SEO, incorporating modern web technologies such as Google reCAPTCHA for form security and Google Analytics for visitor tracking. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be enhanced. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect contact forms, but lacks several recommended security headers and does not publish a security policy or incident response contacts. Privacy compliance is partially addressed with a privacy policy and GDPR acceptance on forms, but no cookie consent mechanism is present. Overall, the security posture is solid but could be improved with additional headers and transparency. The domain registration data aligns well with the business claims, showing consistency and legitimacy. No suspicious patterns or privacy protection masking registrant data were found, supporting trustworthiness. The website content is safe for general audiences, with no adult or questionable material detected. Strategic recommendations include enhancing security headers, implementing a cookie consent banner, publishing a security policy, and improving accessibility features to further strengthen the website's security and compliance posture.

UTZ MEDIEN AG is a Swiss digital agency specializing in innovative web design, TYPO3 portal development, AI integration, and SEO services. With over 20 years of experience and a portfolio including notable clients such as SAP and Roche, the company positions itself as a trusted partner for comprehensive digital solutions. The website reflects a professional and modern digital presence, leveraging TYPO3 CMS and integrating analytics tools like Google Analytics and Matomo. Privacy and cookie consent mechanisms are well implemented, indicating a strong commitment to GDPR compliance. However, the absence of WHOIS domain registration data raises questions about domain legitimacy, which should be further investigated. Security posture is generally good with HTTPS enforced and no exposed sensitive data, but the lack of explicit security headers and incident response information suggests room for improvement. Overall, UTZ MEDIEN AG demonstrates a mature digital infrastructure and business model with minor security and compliance gaps.

P

ProFundo

profundo.no

57

ProFundo is a well-established Norwegian company specializing in fundraising and membership management solutions, offering a comprehensive CRM platform and related services tailored for non-profit organizations. The company holds a leading market position in Norway, supported by a mature digital presence and a broad portfolio of services including innovative CRM, payment solutions, communication, and creative consulting. Their website reflects a professional and consistent brand image with clear messaging targeted at voluntary organizations and fundraising entities. Technically, the site is built on WordPress with the Divi theme, leveraging modern JavaScript libraries and cloud hosting for media assets, ensuring a good user experience and moderate performance. Security measures include HTTPS, Google reCAPTCHA v3 on forms, and standard marketing and analytics integrations, although explicit security headers and incident response policies are not publicly detailed. Overall, the site demonstrates a solid security posture and privacy compliance with GDPR, supported by comprehensive privacy and cookie policies. The domain age and WHOIS data confirm the legitimacy and long-standing presence of the business. Strategic recommendations include enhancing security headers, publishing incident response information, and maintaining up-to-date software to mitigate potential vulnerabilities.

H

Hotel Bellavista

hotelbellavista.ch

51

Hotel Bellavista is a small hospitality business located in Vira Gambarogno, Ticino, Switzerland, offering scenic accommodation and leisure services including a restaurant, event hosting, and wellness facilities. The website is professionally designed using WordPress with the Avada theme and integrates modern technologies such as Google Analytics and reCAPTCHA for security and analytics. The site is well-structured, mobile-optimized, and provides clear contact information and business details. Security posture is good with HTTPS enforced and anti-bot measures in place, though it lacks explicit security headers and a cookie consent mechanism, which are areas for improvement. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

D

Dinas Lingkungan Hidup Provinsi Sulawesi Selatan

dlhsulawesiselatan.id

42

The website dlhsulawesiselatan.id represents the official online presence of the Dinas Lingkungan Hidup Provinsi Sulawesi Selatan, a government environmental agency in Indonesia. It serves as a platform to disseminate environmental news, public announcements, documents, and photo galleries relevant to the Sulawesi Selatan province. The site targets residents and stakeholders interested in environmental management and public service information. The business model is focused on government public service and information dissemination, positioning itself as an authoritative source within its regional jurisdiction. Technically, the website employs a standard modern web stack including HTML5, CSS3, JavaScript, Bootstrap, and jQuery, hosted behind Cloudflare DNS services. The site is mobile optimized and provides a good user experience with clear navigation and consistent branding. However, it lacks advanced CMS indicators and does not utilize analytics or tracking services, indicating a minimal digital footprint in terms of user data collection. From a security perspective, the site benefits from HTTPS encryption and domain transfer protection status. However, it lacks DNSSEC, security headers, and formal privacy or cookie policies, which are critical for compliance and enhanced security posture. No vulnerability disclosure or incident response contacts are provided, which could limit responsiveness to security incidents. Overall, the security posture is moderate but could be improved with standard best practices. The overall risk assessment suggests a trustworthy government site with low risk of malicious activity but with compliance gaps in privacy and security policy disclosures. Strategic recommendations include implementing DNSSEC, adding security headers, publishing privacy and cookie policies, and establishing a vulnerability disclosure mechanism to enhance trust and compliance.

D

DLH Provinsi Sulawesi Barat

dlhprovinsisulawesibarat.id

49

DLH Provinsi Sulawesi Barat operates as the official environmental agency for the West Sulawesi Province government in Indonesia, providing public information, news, announcements, and environmental documentation. The website serves residents and stakeholders with environmental management content and contact channels. Technically, the site uses standard web technologies including Bootstrap, jQuery, and Font Awesome, hosted behind Cloudflare DNS but lacks advanced CMS or modern frameworks. Security posture is moderate with HTTPS implied but no visible security headers or DNSSEC, and WHOIS data is inconsistent with suspicious domain registration dates. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the site is accessible and functional but requires improvements in security, privacy, and domain legitimacy to enhance trust and compliance.

D

Dinas Lingkungan Hidup Provinsi Papua Tengah

dlhpapuatengah.id

51

The website represents the Dinas Lingkungan Hidup Provinsi Papua Tengah, a government environmental agency in Papua Tengah, Indonesia. It provides public information on environmental management, waste management SOPs, announcements, and documents relevant to the province. The site targets residents and stakeholders interested in environmental issues within the region. The business model is typical of a government agency focused on service and information dissemination. Technically, the website uses a modern front-end stack including Bootstrap, jQuery, Font Awesome, and Google Fonts, hosted behind Cloudflare DNS. The site is mobile responsive with good navigation and design quality. However, it lacks a CMS indication and advanced SEO or accessibility features. Performance is moderate with no evident blocking or WAF interference. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. No privacy or cookie policies are published, and no incident response or vulnerability disclosure information is available. WHOIS data shows inconsistencies with a future creation date and a non-government registrant, which reduces trustworthiness despite legitimate content. Overall, the site is functional and professional but requires improvements in privacy compliance, security hardening, and WHOIS transparency to enhance trust and compliance.

P

Pertamina (implied by branding and domain)

kelaspertamina.com

57

Kelaspertamina.com is an educational and training platform primarily targeting Pertamina employees and affiliates in Indonesia. The website offers categorized e-learning courses tailored to various roles within Pertamina, such as managers, operators, and administrative staff. The platform includes features like class rankings, event calendars, and testimonial sections, indicating a focus on internal corporate training and knowledge sharing. Technically, the site is built on WordPress using popular plugins and page builders, providing a moderate level of performance and mobile responsiveness. Security posture is basic, with HTTPS enabled but lacking advanced security headers and anti-CSRF protections. Privacy and cookie policies are absent, which may affect compliance with data protection regulations. The WHOIS data is unavailable or indicates the domain may not be registered, raising concerns about domain legitimacy despite the professional appearance and Pertamina branding. Overall, the site serves as a specialized corporate training resource but requires improvements in security, privacy compliance, and domain registration transparency.

A

Awelty

awelty.fr

50

Awelty is a well-established French web agency based in Amiens, specializing in digital solutions including website creation, e-commerce, custom software development, and AI integration. With over 20 years of experience, the company positions itself as a regional leader in Hauts de France, offering comprehensive digital transformation services to businesses. Their portfolio includes diverse projects such as AI-powered virtual assistants, mobile applications, and SaaS platforms, demonstrating technical maturity and innovation. Technically, the website employs a modern technology stack including PHP Symfony, Flutter, Firebase, and cloud services from Google Cloud and AWS. The site is mobile-optimized, uses Bootstrap 4 for responsive design, and integrates multiple analytics and marketing tools such as Google Analytics, Matomo, and Facebook Pixel. The CMS appears proprietary or custom-built by Awelty, supporting their specialized service offerings. From a security perspective, the site enforces HTTPS and uses secure external scripts. However, some security headers like Content-Security-Policy and X-Frame-Options are missing, which could be improved. No WHOIS registrant data is available, indicating privacy protection, which is common and justified for this type of business. The site lacks explicit privacy and security policies, which is a compliance gap. Overall, Awelty presents a professional, trustworthy digital presence with strong business credibility and technical implementation. The main risks relate to privacy policy transparency and security header enhancements. Strategic improvements in these areas would strengthen compliance and security posture.

E

Einwohnerverein Gottlieben

einwohnerverein-gottlieben.ch

53

Einwohnerverein Gottlieben is a local non-profit community association based in Gottlieben, Switzerland. The website serves as an information hub for residents, providing news, event calendars, gardening group details, and general information about the community. The site targets local residents and community members, focusing on engagement and information dissemination. The business model is typical for a community association, relying on volunteer or membership support rather than commercial revenue streams. The website is well-branded and consistent with the organization's identity.

R

Regionalplanungsgruppe Kreuzlingen

regiokreuzlingen.ch

51

Regio Kreuzlingen is a regional government planning group serving the Kreuzlingen district in Switzerland, coordinating development and infrastructure across 14 municipalities with approximately 52,000 residents. The website provides information about regional initiatives including agglomeration programs and a bike rental system called Regivelo. The organization positions itself as a key regional planning authority with a focus on sustainable development and inter-municipal cooperation. Technically, the website is built on WordPress using the Divi theme, enhanced with SEO and newsletter plugins, and implements standard privacy and cookie consent mechanisms. Security posture is solid with HTTPS and security headers, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and well-structured, serving its public sector audience effectively.

G

GARANT Türen und Zargen GmbH

garant.de

57

GARANT Türen und Zargen GmbH is a German manufacturer specializing in interior and functional doors, offering a wide range of products including premium door edges and digital configurator tools. The company targets architects, planners, carpenters, dealers, and end customers, positioning itself as an established player within the manufacturing sector under the Arbonia Group umbrella. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and integrates analytics and social media effectively. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking explicit security policies or incident response information. Overall, the site is compliant with GDPR and provides comprehensive contact details, supporting business credibility and trust.

C

Convergence Media

convergencemedia.fr

57

Convergence Media is a French digital communication and marketing agency specializing in serving SMEs, artisans, independents, and liberal professions. With over 15 years of experience, the agency offers a comprehensive suite of services including digital strategy, SEO, social media management, editorial content, video production, and print media. Their market position is that of a trusted, client-focused agency with a multi-lever approach to enhancing client visibility and brand reputation. The website reflects a professional and consistent brand image with clear service offerings and client testimonials, indicating a solid reputation in their sector. Technically, the website is built on CMS Made Simple and leverages modern web technologies such as Bootstrap, jQuery, Vimeo API, and Matomo analytics. The site is mobile-optimized with good SEO practices and moderate performance. Security posture is strong with HTTPS enforced and secure form handling, though some security headers are missing and no explicit security policy or incident response information is published. Overall, the security posture is good with no visible vulnerabilities or exposed sensitive data. Privacy compliance is mostly addressed with a clear privacy policy and GDPR references, but lacks a cookie consent mechanism. The WHOIS data is unavailable, which slightly reduces trust but the professional presentation and contact transparency mitigate concerns. Strategically, the agency should enhance security headers, implement cookie consent, and publish security and incident response policies to improve compliance and trust. Regular audits of third-party scripts and continued focus on privacy will further strengthen their security and compliance stance.

R

Région capitale suisse

regioncapitalesuisse.ch

50

Région capitale suisse is a regional government association representing five Swiss cantons and multiple municipalities, focused on strengthening the region as a political, economic, and innovative living space. The website presents a clear and professional digital presence built on TYPO3 CMS, with bilingual support and a focus on regional development themes such as transport, health, and smart infrastructure. The technical infrastructure is moderate with common libraries and Google Analytics implemented with privacy considerations. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacking explicit security policies or incident response information. Overall, the site is trustworthy and well-aligned with its governmental mission.

D

Dr.Dünner – Naturpräparate & Arzneimittel aus der Schweiz

drduenner.com

49

Dr.Dünner is a Swiss-based company specializing in natural supplements and pharmaceutical products, combining traditional herbal knowledge with modern scientific research. The company positions itself as a trusted expert in natural health products, targeting consumers seeking high-quality, scientifically founded wellness solutions. The website reflects a medium-sized business with consistent branding and a professional online presence, including social media engagement. Technically, the site is built on WordPress using popular themes and plugins, optimized for SEO and mobile devices, with moderate performance. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks some security headers and explicit privacy policies. WHOIS data is missing or unavailable, which slightly impacts trust but does not negate the professional appearance and content quality. Overall, the site is safe, well-designed, and credible for its industry.

T

The Ogoh Ogoh Museum Indonesia

theogohogohmuseum.id

56

The Ogoh Ogoh Museum Indonesia is a cultural institution dedicated to preserving and educating about the Balinese Nyepi tradition through its collection of Ogoh-Ogoh statues. The website serves as an informational platform targeting a general audience interested in Balinese culture and heritage. The museum operates as a small entity within the government or non-profit sector, with a recent founding date consistent with the domain registration in 2025. Technically, the website is built on WordPress with common plugins like Yoast SEO and uses Cloudflare for DNS services. The site demonstrates moderate performance and good mobile optimization but lacks advanced accessibility features. Security posture is basic with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for improvement. Privacy compliance is weak due to the absence of privacy and cookie policies, and no contact information or incident response channels are provided. Overall, the website is functional and professional but would benefit from enhanced security and compliance measures to improve trust and user confidence.

V

Villa Bukit Hambalang Lokasi Outbound Camping Favorit di Sentul

villabukithambalang.id

55

Villa Bukit Hambalang is a hospitality business specializing in outdoor activities such as outbound events, camping, and gatherings located in Sentul, Bogor, Indonesia. The website positions itself as a favored location for companies, schools, communities, and families seeking nature-based event experiences. The business offers comprehensive facilities including camping areas, swimming pools, multipurpose halls, and large outdoor fields. The site is built on WordPress with SEO optimization via Yoast plugin and uses common web technologies like jQuery and FontAwesome. Hosting and DNS services are managed through Cloudflare, enhancing performance and security. However, the domain WHOIS data shows an unusual future creation date, which may indicate a newly launched or test site. No privacy, cookie, or terms of service policies are present, and no direct contact information is provided on the homepage, which may affect user trust and compliance.

A

Awaluddin Muuri Indonesia

awaluddinmuuri.id

51

The website awaluddinmuuri.id serves as an official informational platform dedicated to Awaluddin Muuri, an Indonesian bureaucrat. It provides detailed biographical data, educational background from the Institut Pemerintahan Dalam Negeri (IPDN), and career highlights including strategic positions such as Penjabat Bupati Cilacap. The site targets a general audience interested in government and public service information within Indonesia. Technically, the site is built on WordPress with common plugins like Yoast SEO, jQuery, and Bootstrap, hosted behind Cloudflare DNS. The site demonstrates good SEO practices and mobile optimization but lacks advanced security headers and DNSSEC. Security posture is moderate with HTTPS enabled but missing some best practices. Privacy compliance is weak due to the absence of privacy and cookie policies. No contact or incident response information is provided, limiting user trust and compliance. Overall, the site is functional, informative, and professionally presented but requires improvements in privacy and security policies to enhance trust and compliance.

D

Dokter Spesialis Anak

pasienanak.id

49

The website pasienanak.id represents a healthcare service specializing in pediatric care, offering professional and attentive medical services focused on child growth and development. The business targets parents and families in Indonesia seeking specialized pediatric healthcare. The website is built on WordPress with a modern tech stack including Bootstrap and jQuery, hosted behind Cloudflare DNS but without DNSSEC enabled. The site is well-structured, mobile-optimized, and SEO-friendly but lacks critical privacy and cookie policies, as well as explicit contact information. Security posture is moderate with HTTPS enabled but missing security headers and DNSSEC. The domain is newly registered in mid-2025, which is somewhat inconsistent with the volume of content and apparent business maturity.

H

Holzforschung Austria

infoholz.at

53

infoholz.at is a specialized, free online question and information service targeted at professional wood users such as architects, planners, and contractors, primarily in Austria. The service is operated by Holzforschung Austria, a recognized expert organization in the wood research sector. The website provides an extensive database of answered questions and offers personalized expert responses within approximately 2-3 weeks. The business model focuses on providing professional, authoritative information without charge, positioning itself as a niche knowledge resource within the Austrian wood industry. Technically, the website is built on the TYPO3 content management system, leveraging extensions such as Powermail for form handling and Google Custom Search Engine for internal search functionality. The site uses jQuery and standard web technologies, with moderate performance and basic mobile optimization. SEO practices are adequately implemented with proper meta tags and structured navigation. However, some modern security headers are missing, and no explicit cookie consent mechanism is present. From a security perspective, the site enforces HTTPS and employs client-side form validation to protect data integrity. There is no evidence of advanced security policies or incident response contacts published. The absence of security.txt and vulnerability disclosure pages suggests limited formal security communication. Overall, the security posture is moderate but could be improved by adding security headers and formal policies. The website is trustworthy and professional, with clear business information and consistent branding. Privacy and terms of service pages are present, indicating compliance with basic GDPR requirements. No adult or questionable content is present, making it safe for general audiences. The domain WHOIS data aligns well with the website's claims, supporting legitimacy. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing formal security and incident response policies to strengthen compliance and trust.

H

Holzforschung Austria - Österreichische Gesellschaft für Holzforschung

holzforschung.at

51

Holzforschung Austria is a well-established Austrian research and testing institute specializing in the wood industry. Founded in 1948, it offers comprehensive services including research and development, product testing, certification, inspection, expert reports, and knowledge transfer through seminars and publications. The organization holds multiple accreditations and certifications, positioning itself as a trusted authority in the wood sector nationally and internationally. The website is professionally designed, content-rich, and provides clear navigation and contact options, targeting industry professionals and businesses. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and uses Matomo for privacy-conscious analytics. Security practices include session management and cookie consent, though explicit security headers and incident response policies are not evident. Overall, the site demonstrates a strong business presence with good privacy compliance and moderate security posture.

A

axapharm ag

axapharm.ch

54

axapharm ag is a Swiss pharmaceutical company specializing in the distribution and manufacturing of generics, prescription, and over-the-counter medicines. With a unique shareholder structure involving over 700 Swiss pharmacists and druggists, the company positions itself as a reliable partner in the Swiss pharmaceutical market, emphasizing Swiss quality and affordable healthcare products. The website targets healthcare professionals and consumers within Switzerland, offering product information, services, and educational resources. Technically, the website is built on WordPress with modern plugins such as Elementor and LayerSlider, integrating Google Analytics and Maps for enhanced user experience. Security measures include HTTPS enforcement and standard security headers, though there is room for improvement in privacy compliance, particularly regarding cookie consent mechanisms. Overall, the website reflects a professional and trustworthy digital presence aligned with the company's business model and market position.

B

default

berufkraut.ch

47

The website berufkraut.ch appears to be a small-scale or early-stage site with minimal content and no visible privacy, cookie, or terms of service policies. The site uses Joomla CMS with the Helix Ultimate template and SP Page Builder, indicating a modern but basic technical infrastructure. HTTPS is enabled, and a CSRF token is present, but no security headers or incident response information are found. The lack of contact information and business details limits trust and credibility. Overall, the site is accessible without WAF or blocking mechanisms but lacks substantive content and security best practices.

S

Smaragd-Gebiet Oberaargau

gartenagglomeration.ch

36

The Smaragd-Gebiet Oberaargau website represents a regional non-profit environmental initiative focused on promoting biodiversity and sustainable landscape development in the Oberaargau region of Switzerland. The project is supported by local municipalities and the Swiss federal government, emphasizing ecological infrastructure, recreational opportunities, and protection of endangered species. The website content is primarily in German and targets local residents, environmental stakeholders, and partner organizations. Technically, the site is built on the Joomla CMS platform, utilizing modern frontend technologies such as Bootstrap 5, jQuery, and Font Awesome. The site demonstrates good mobile responsiveness and a clean, professional design. However, there is room for improvement in accessibility and SEO optimization. No advanced analytics or tracking tools are detected, indicating a privacy-conscious approach. From a security perspective, the website enforces HTTPS and uses CSRF tokens in forms, but lacks several important security headers such as Content-Security-Policy and X-Frame-Options. There is no visible cookie consent mechanism or detailed security policy published. The WHOIS data aligns well with the website's organizational claims, supporting legitimacy and trustworthiness. Overall, the website is a well-maintained informational platform for a regional environmental project with a solid technical foundation and good business credibility. Enhancements in privacy compliance and security hardening would further strengthen its posture.

Gemeindebetriebe Roggwil (GBR) is a publicly owned municipal utility provider serving the Roggwil community in Switzerland. The organization offers essential services including electricity, water, and telecommunications infrastructure such as a fiber optic network. The website is designed to serve local residents and businesses with information, online services like address changes, and contact details. The business operates under a public law institution model since 2017, reflecting a stable local government affiliation. Technically, the website employs modern frontend technologies including Bootstrap for responsive design, jQuery, and Google reCAPTCHA for form security. The site is mobile optimized and provides a cookie consent mechanism compliant with GDPR requirements. While the site lacks explicit security policy documentation, it enforces HTTPS and uses standard security practices such as session management and CAPTCHA to protect user interactions. From a security perspective, the site demonstrates a good baseline posture with HTTPS and cookie consent but could improve by implementing security headers and publishing incident response or vulnerability disclosure information. No critical vulnerabilities or suspicious content were detected. The domain registration data aligns well with the business identity, enhancing trustworthiness. Overall, the website is professional, trustworthy, and well-suited for its municipal utility purpose. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility compliance to further strengthen the security and user experience posture.

G

Gemeinde Fischbach

800jahrefischbach.ch

46

The website 800jahrefischbach.ch serves as an official municipal platform for the community of Fischbach, Switzerland, celebrating its 800-year anniversary. It provides detailed information about various events and activities planned throughout the jubilee year, targeting local residents and visitors interested in community engagement. The site emphasizes community spirit and historical celebration without commercial intent. Technically, the website is built on WordPress using the Oxygen Builder framework and includes jQuery for interactive elements. It is hosted on an unidentified provider but uses HTTPS with a valid SSL certificate, ensuring secure connections. The site is moderately optimized for performance and mobile responsiveness, though accessibility and SEO optimizations are basic. From a security perspective, the site enforces HTTPS but lacks important security headers and does not provide privacy or cookie policies, indicating gaps in compliance with modern data protection standards such as GDPR. No forms or extensive data collection mechanisms are present, minimizing exposure to data risks. Social media integration is present with official community channels. Overall, the website is trustworthy and professionally presented for its purpose but would benefit from enhanced privacy compliance and security hardening to improve user trust and regulatory adherence.

P

Ponktgenaues Marketing für dein KMU

agenturponkt.ch

49

Agentur Ponkt is a Swiss marketing agency specializing in personal and effective marketing solutions tailored for small and medium-sized enterprises (KMUs). The company offers a comprehensive suite of services including design, digital marketing, social media, content creation, and photography. Their market positioning emphasizes clarity, creativity, and straightforward communication without unnecessary complexity, targeting KMUs seeking impactful marketing strategies. The website reflects a professional and consistent brand image with clear contact information and client references, indicating a trustworthy and established presence in the Swiss market. Technically, the website is built on WordPress using the Avada theme, leveraging modern web technologies such as jQuery, Google Tag Manager, Facebook Pixel, and Adobe Typekit fonts. The site is mobile-optimized and demonstrates good SEO practices through the use of Yoast SEO plugin and structured data. Performance is moderate with asynchronous loading of key scripts, ensuring a responsive user experience. From a security perspective, the site employs HTTPS with a good SSL configuration but lacks explicit security headers and visible security policies. There is no cookie consent mechanism detected, which may impact privacy compliance. Tracking technologies like Google Analytics and Facebook Pixel are used, indicating moderate user tracking. No critical vulnerabilities or exposed sensitive data were found in the HTML content. Overall, Agentur Ponkt presents a professional, secure, and user-friendly website suitable for its business model. Strategic improvements include implementing cookie consent, enhancing security headers, and publishing security and incident response policies to strengthen compliance and trust.

S

Stade Rochelais

staderochelais.com

64

Stade Rochelais is a professional rugby club based in France, providing comprehensive information about its teams, matches, and club activities through a well-structured and content-rich website. The site targets rugby fans and the local community, offering services such as ticketing, merchandising, and fan engagement. Technically, the website leverages Drupal CMS with AngularJS and Bootstrap frameworks, integrating modern analytics and tracking tools while maintaining good mobile optimization and SEO practices. Security-wise, the site enforces HTTPS and employs standard security headers, though it lacks a publicly available security policy and incident response details. The absence of WHOIS data raises concerns about domain registration legitimacy, but the professional presentation and ecosystem of related domains support the site's credibility. Overall, the website demonstrates a mature digital presence with room for improvement in transparency and security documentation.

K

kelcible.fr

kelcible.fr

47

Kelcible.fr is a French digital marketing agency specializing in business-oriented digital strategies including SEO, paid media, CRM marketing, and web development. The company has a well-structured website built on WordPress with Elementor, showcasing a professional design and clear service offerings. The domain is registered since 2009 with OVH, indicating a stable and legitimate business presence. Technically, the site uses modern web technologies and is hosted by OVH, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled but lacks explicit security headers and published security policies. Privacy compliance is weak due to the absence of visible privacy and cookie policies. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

G

Groupe Jolival

groupe-jolival.com

54

Groupe Jolival is a French transport and logistics group comprising three specialized subsidiaries: Jolival, ALS, and Ripoche. Established since 1948, the group offers a wide range of transport services including pallet transport, dedicated vehicle rental, and specialized avian logistics. The company operates primarily in France with some European reach, targeting businesses requiring transport and logistics solutions. The website is professionally designed using WordPress and Elementor, featuring clear navigation, structured data, and multilingual metadata in French. The digital infrastructure includes modern tracking and consent tools such as Google Tag Manager and Axeptio for cookie management. Security posture is solid with HTTPS enabled and no obvious vulnerabilities, though security headers could be improved. Privacy compliance is well addressed with visible policies and consent mechanisms. Overall, the site reflects a credible and established business with a medium-sized market presence.

E

Exodream

exodream.com

53

Exodream is a small French digital agency specializing in web development, e-commerce solutions, SEO, and digital marketing services primarily serving the Alsace region including Colmar, Mulhouse, and Strasbourg. Founded in 2011, the company positions itself as a trusted regional partner with over a decade of experience and a focus on delivering modern, performant websites and digital strategies to boost client visibility and engagement. The website is professionally designed using Joomla CMS and integrates multiple analytics tools such as Google Analytics, Matomo, and Microsoft Clarity, reflecting a mature digital infrastructure. Security posture is adequate with HTTPS enabled and domain registration stable, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is well addressed with clear cookie consent and privacy policies. Overall, the site demonstrates a high level of business credibility and technical competence with room for enhanced security policies and incident response transparency.

Rouillé Bâtiment Environnement (RBE) is a specialized provider of industrial vehicle rental services with qualified pilot drivers, operating primarily in the Occitanie region of France. The company targets professionals in construction, public works, and materials trading sectors, offering flexible rental durations and outsourced transport solutions. The website reflects a professional and regionally focused business with a clear service offering and strong ties to its sister company, Transports Rouillé & Coulon. Technically, the website is built on CMS Made Simple and leverages modern web technologies including Bootstrap, jQuery, Google Fonts, and multimedia integrations such as YouTube and Vimeo. It uses HTTPS with valid SSL certificates and includes Matomo analytics for user tracking. However, some security best practices like HTTP security headers and cookie consent mechanisms are missing or not detected. From a security perspective, the site demonstrates good practices such as secure forms with reCAPTCHA and no visible sensitive data exposure. The absence of WHOIS domain registration data is a concern, reducing trust in domain legitimacy. No WAF or blocking mechanisms are detected, and the site is fully accessible. Overall, the website is professional and trustworthy in content and design but would benefit from improved transparency in domain registration and enhanced privacy compliance features.

C

Convergence Media

cvgmedia.fr

57

Convergence Media is a French digital communication agency specializing in integrated marketing services including SEO, social media, editorial content, video production, and print media. With approximately 15 years of experience, the agency targets SMEs, artisans, independents, and liberal professionals, positioning itself as a trusted partner for multi-channel digital visibility and brand development. The website reflects a professional and consistent brand image with comprehensive service offerings and client testimonials, indicating a solid market presence in the media sector. Technically, the website is built on CMS Made Simple and leverages modern web technologies such as Bootstrap, jQuery, and Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized with good SEO practices and a moderate performance profile. Security posture is generally good with HTTPS enforced and secure form handling, though the absence of security headers and explicit cookie consent mechanisms suggests room for improvement. The WHOIS data is unavailable, which slightly impacts trustworthiness but does not detract significantly from the overall legitimacy given the professional content and contact transparency. No WAF or blocking mechanisms were detected, and the site is fully accessible. Overall, Convergence Media presents a credible and professional digital presence with strong business and technical foundations, though enhancements in security headers and privacy compliance would further strengthen its posture.

K

KIWI.KI GmbH

kiwi.ki

51

KIWI.KI GmbH is a German-based company specializing in digital access solutions tailored for the real estate and property management sectors. Their offerings include cloud-based portals, mobile applications, and hardware products that enable keyless entry and seamless access management. The company targets property owners, managers, and commercial clients seeking modern, secure, and flexible access control systems. Established in 2013, KIWI.KI GmbH has positioned itself as a niche provider with a consistent brand presence and a professional online platform. Technically, the website is built on WordPress with modern plugins and frameworks, optimized for performance and mobile responsiveness. Security posture is solid with HTTPS and domain transfer protections, though some security headers could be enhanced. Privacy compliance is partially addressed with a cookie consent mechanism but lacks explicit privacy and terms of service documentation. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

N

Nachhaltig Reiden

nachhaltigreiden.ch

48

Nachhaltig Reiden is a small local community association based in Switzerland focused on promoting sustainability initiatives in the Reiden area. The website serves as an informational and engagement platform featuring educational materials, crowdfunding campaigns, and local hiking trail promotion. The organization targets local residents and environmentally conscious individuals. Technically, the website is built on WordPress using the Divi theme and several premium plugins, including Instagram Feed integration and Yoast SEO for optimization. The site is mobile-friendly and moderately performant, with good SEO practices and structured data implemented. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanisms. Business credibility is moderate with consistent branding and active social media presence but lacks explicit contact details. Overall, the website is professional and trustworthy for its community purpose but would benefit from enhanced privacy and security practices.

I

IG Rottaler Ernte / Rottaler Auslese GmbH / Verein Lebendiges Rottal

genussfenster.ch

51

The website 'Rottaler Genussfenster' serves as a regional cultural and culinary platform focused on the Rottal region in Switzerland, highlighting local specialties, traditions, and events. It targets residents and visitors interested in regional food and cultural heritage, operating primarily as a non-profit or community-driven initiative. The site is built on Joomla CMS using modern templates and page builders, offering a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms, indicating room for improvement in privacy compliance. The WHOIS data aligns well with the website's regional focus, supporting legitimacy and trustworthiness.

I

Internationales Zentrum der Traditionellen Bewässerung in Europa (IZTB)

iztb.org

48

The Internationales Zentrum der Traditionellen Bewässerung in Europa (IZTB) is a small non-profit organization dedicated to the preservation, research, and promotion of traditional irrigation systems as intangible cultural heritage in Europe. Founded in 2021 and based in Switzerland, the organization serves as an umbrella entity for local stakeholders across Europe, focusing on education, networking, and cultural heritage advocacy, including successful UNESCO intangible heritage listing efforts. The website reflects a professional and consistent brand presence with good content quality and multilingual support.

G

Gemeinde Melchnau

melchnau.ch

52

Gemeinde Melchnau operates as the official municipal government website for the Melchnau community in Switzerland, providing residents and visitors with comprehensive local information, administrative contacts, event agendas, and community news. The website serves as a key communication channel for local governance, public services, and community engagement. Its market position is that of a small local government entity focused on serving its constituency effectively. Technically, the website is built on WordPress 6.8.3 with a modern plugin ecosystem including Yoast SEO for search optimization, SuperPWA for progressive web app capabilities, and Contact Form 7 for user interactions. The site demonstrates good mobile optimization and moderate performance, leveraging common web technologies such as Bootstrap, jQuery, and various JavaScript libraries for enhanced user experience. From a security perspective, the site enforces HTTPS and employs standard security practices, though explicit security headers like Content-Security-Policy and X-Frame-Options are not detected and could be improved. No vulnerabilities or exposed sensitive data were found in the HTML content. Privacy compliance is well addressed with clear privacy and cookie policies, including a consent mechanism, aligning with GDPR requirements. Overall, the website presents a low-risk profile with high trustworthiness, clear business legitimacy, and good content quality. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and publishing explicit security and incident response policies to further strengthen the security posture and compliance maturity.

G

Gemeinde Grossdietwil

grossdietwil.ch

58

Gemeinde Grossdietwil operates as the official municipal government website for the Grossdietwil community in Switzerland. It provides residents and visitors with comprehensive local information, including administrative services, news updates, community events, education resources, and tourism guidance. The website positions itself as a central hub for municipal engagement and public service delivery, emphasizing local culture and lifestyle. Technically, the site is built on WordPress using the Avada theme and Fusion Builder, integrating modern web technologies such as Google reCAPTCHA and Google Analytics for security and analytics purposes. The site demonstrates good digital maturity with responsive design, SEO optimization, and structured data implementation. Security posture is solid with HTTPS enforcement and anti-bot measures, though it could benefit from enhanced HTTP security headers and published security policies. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations, making it a reliable resource for its target audience.

G

Gemeinde Altbüron

altbueron.ch

50

The website altbueron.ch serves as the official digital presence of the municipality of Altbüron in Switzerland. It provides comprehensive information about local governance, community events, societal services, education, building and environmental matters, as well as leisure and mobility options. The site targets residents and visitors seeking municipal services and community engagement. Technically, the website is built on the TYPO3 CMS platform, leveraging modern JavaScript libraries such as jQuery, Modernizr, and Owl Carousel, and integrates Google Maps API for location services. The design is professional, mobile-optimized, and accessible, with clear navigation and structured content. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks some security headers and formal policies such as privacy and cookie policies. No incident response or data protection officer contact information is provided, which are areas for improvement. Overall, the website is trustworthy and legitimate, consistent with its governmental role, but could enhance privacy compliance and security posture to better protect users and meet regulatory standards.

A

Apotheke Meyer Roggwil AG

apotheke-meyer.ch

49

Apotheke Meyer Roggwil AG is a local Swiss pharmacy and health center based in Roggwil, Switzerland. The company offers a broad range of pharmacy retail products, medical services including vaccinations, health analyses, and holistic complementary medicine. It positions itself as a community-focused, independent pharmacy with a strong emphasis on customer service and health education through events and a health blog. The website is professionally designed with clear navigation and good mobile optimization, supporting a positive user experience for its target audience. Technically, the site uses the SIQUANDO Pro CMS platform with jQuery and includes cookie consent mechanisms and privacy policies aligned with GDPR requirements. Security posture is adequate with HTTPS usage and no visible vulnerabilities, though security headers and incident response contacts could be improved. WHOIS data confirms the legitimacy and consistency of the business registration. Overall, the website reflects a trustworthy, professional small healthcare business with a solid digital presence.

T

tchncs

tchncs.de

59

tchncs.de is a small, individual-operated platform based in Germany that provides a curated collection of open-source software services. The website hosts and links to various federated social media instances, collaboration tools, chat platforms, blogging, development, and gaming services. It operates on a donation-funded, ad-free model, targeting users interested in privacy-respecting and decentralized technology solutions. The platform emphasizes community and open-source values, positioning itself as a niche provider in the federated software ecosystem. Technically, the website uses standard web technologies including jQuery and SVG graphics, with hosting inferred to be through INWX based on nameservers. The site is moderately optimized for performance and mobile devices, with a clear and consistent branding approach. SEO and accessibility are basic but functional. Analytics are implemented via a privacy-friendly service (Plausible Analytics), indicating a focus on minimal user tracking. From a security perspective, the site uses HTTPS (assumed from URL scheme and modern practices), but lacks explicit security headers and published security policies. No incident response or vulnerability disclosure information is available, which could be improved to enhance trust and compliance. The WHOIS data is consistent with the website's claims, showing legitimate registration without privacy protection, appropriate for an individual operator. Overall, tchncs.de presents a trustworthy and well-maintained platform for open-source and federated services, with room for improvement in security policies and privacy compliance mechanisms. Strategic recommendations include implementing security headers, publishing incident response contacts, and adding cookie consent to align with GDPR best practices.

D

Katalog bauphysikalisch und ökologisch geprüfter Holzbauteile - dataholz.eu

dataholz.eu

50

The website dataholz.eu serves as a specialized catalog and resource platform for wood construction materials, components, and planning aids, primarily targeting professionals in the wood construction industry such as architects, engineers, and building authorities. It offers a curated collection of ecologically and physically tested wood products and building components, supported by accredited testing institutions. The site is well-structured, bilingual (German and English), and regularly updated with technical content and online seminars, reflecting a mature and professional business presence in Austria. Technically, the site is built on TYPO3 CMS with Bootstrap 5 and integrates Google Tag Manager for analytics, demonstrating a modern and maintainable infrastructure. The website is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. Security-wise, the site uses HTTPS and implements a comprehensive cookie consent mechanism with opt-in and revocation features, aligning with GDPR requirements. However, it lacks explicit security headers and a published security policy or incident response contacts, which are recommended for enhanced security posture. WHOIS data is not publicly available due to EURid privacy policies, but the domain and website content appear consistent and legitimate for the business sector. Overall, the site scores well on content quality, technical implementation, security, privacy compliance, and business credibility, making it a trustworthy and professional resource in its niche.

한

한국여성건축가협회 (Korean Institute of Female Architects)

kifaonline.com

9

The Korean Institute of Female Architects (한국여성건축가협회) is a professional non-profit organization dedicated to supporting and promoting female architects in Korea. The website serves as a hub for membership services, event announcements, publications such as newsletters and eBooks, and advocacy for women in architecture. It targets female architecture professionals, students, and related stakeholders within Korea. The organization appears established with a consistent brand presence and active social media engagement.

M

Mextropoli

mextropoli.mx

9

Mextropoli is a prominent architecture and urbanism festival held in Mexico City, attracting over 100,000 attendees. The website serves as an informational platform for the event, providing details about venues, exhibitors, and programming. The site is built on WordPress and leverages common web technologies such as jQuery and Slick Carousel, with analytics implemented via Google Tag Manager and Facebook Pixel. While the site is visually appealing and mobile-optimized, it lacks critical privacy and security disclosures such as privacy and cookie policies, and does not provide direct contact information. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and formal policies. Overall, the site is professional and trustworthy but would benefit from enhanced compliance and transparency measures.

T

TC Cuadernos

tccuadernos.com

49

TC Cuadernos operates a professional e-commerce website specializing in architecture books and magazines, targeting architects, students, and enthusiasts primarily in Spain. The website is built on PrestaShop CMS with modern web technologies and includes features such as product carousels, search, user accounts, and secure checkout. Security posture is strong with HTTPS, security headers, and CAPTCHA protections, though explicit privacy and cookie policies are not clearly linked. WHOIS data is unavailable, which raises some concerns about domain legitimacy, but the website content and functionality suggest a legitimate business. Overall, the site demonstrates good digital maturity with room for improvement in privacy transparency and incident response readiness.