Security Directory

A

Academy of Sports GmbH

academyofsports.de

54

Academy of Sports GmbH is a reputable German educational institution specializing in flexible, state-certified distance learning programs primarily in fitness, nutrition, coaching, sport management, and e-sports. Established in 2005, it offers over 50 accredited courses targeting professionals and individuals seeking career advancement or personal development in health and sports sectors. The company holds multiple certifications and awards, reinforcing its market position as a trusted provider in the education sector. Technically, the website employs modern web technologies including jQuery, Google Tag Manager, and Salesforce integrations, hosted on a reliable infrastructure with domain control by GoDaddy. The site is well-optimized for mobile and accessibility, with good SEO practices and a professional design that supports user engagement and navigation. From a security perspective, the site enforces HTTPS, uses security best practices, and avoids exposing sensitive data. However, it lacks explicit security policies and a vulnerability disclosure mechanism, which could be improved. Privacy compliance is strong with clear GDPR-aligned policies and cookie consent mechanisms. Overall, the website presents a low-risk profile with strong business credibility, good technical implementation, and solid privacy compliance. Strategic recommendations include enhancing security transparency and adding formal incident response documentation to further strengthen trust and resilience.

Kontakt Stiftung is a German non-profit foundation focused on promoting science, research, education, volunteerism, and sports-related community projects. The foundation collaborates with partners such as the Deutscher Schwimm-Verband and trainersuchportal.de to foster social cohesion through sports and education. The website is professionally designed using modern front-end technologies and is mobile-optimized, providing a good user experience and clear navigation. Contact information is prominently displayed, enhancing business credibility. Technically, the site is built with the Hugo static site generator and uses popular libraries like Bootstrap and jQuery, indicating a modern and maintainable infrastructure. Security posture is adequate with HTTPS usage, but lacks explicit security headers and a cookie consent mechanism, which are recommended for improved compliance and protection. Overall, the site is trustworthy, safe, and well-aligned with its non-profit mission.

A

ats Elektronik GmbH

atsonline.de

48

ats Elektronik GmbH is a German technology company specializing in secure communication and safety technology solutions. Their website presents a professional image with detailed service offerings in areas such as 5G, TETRA, MOTOTRBO/DMR radio technology, security systems, system solutions for energy, transport, public safety, and military sectors, as well as research projects and training. The company targets security professionals and enterprises requiring advanced communication and safety solutions. The website is well-structured, multilingual (German and English), and includes comprehensive contact information and policies, reflecting a mature digital presence. Technically, the website uses a proprietary CMS (sethora.de Synapsis CMS), integrates modern JavaScript libraries including jQuery and MediaElement.js, and leverages Google Maps API for location services. Hosting is provided by Hetzner Online GmbH, a reputable German hosting provider. Performance is moderate with good mobile optimization and basic accessibility features. SEO practices are adequate with proper meta tags and structured navigation. Security posture is decent with HTTPS enforced and cookie consent implemented. However, no explicit security policy or incident response information is published, and security headers are absent. The WHOIS data shows an anomalous future domain creation date, which is likely an error but reduces trustworthiness. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is professional and trustworthy with minor security and compliance gaps. Strategic improvements in security transparency and WHOIS data accuracy are recommended to enhance credibility and risk posture.

E

Evangelische Hochschule Ludwigsburg

eh-ludwigsburg.de

53

Evangelische Hochschule Ludwigsburg is a state-recognized university of applied sciences affiliated with the Evangelical Church in Württemberg, Germany. The institution offers a broad range of bachelor and master programs primarily in social work, pedagogy, and theology, with a strong emphasis on practical application and international orientation. The website reflects a well-established academic institution with a clear focus on education, research, and community engagement. The target audience includes prospective and current students, academic staff, and partners in social and church-related sectors. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as Bootstrap and jQuery, and integrates third-party services like Google Analytics 4 and YouTube for enhanced user engagement. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. Privacy and cookie compliance are robust, featuring a detailed cookie consent mechanism and clear privacy policies aligned with GDPR requirements. From a security perspective, the site enforces HTTPS and employs cookie management best practices. While explicit security headers like Content-Security-Policy are not visibly declared, the overall security posture is strong with no evident vulnerabilities or exposed sensitive data. The WHOIS data is minimal but consistent with the domain's educational purpose, and no suspicious patterns were detected. Overall, the website demonstrates a mature digital presence with high content quality, good technical implementation, and strong privacy compliance. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining regular audits of third-party scripts to sustain security and trust.

Wasserverbandstag e.V. is a well-established German non-profit association focused on water management and operational planning through its member associations primarily in Bremen, Niedersachsen, and Sachsen-Anhalt. The website serves as an information hub offering services, publications, and event information to its members and stakeholders. The organization has a strong regional presence with a history spanning over 75 years, reflecting stability and trust within its sector. Technically, the website is built on TYPO3 CMS, leveraging common web technologies such as jQuery and Bootstrap, providing a responsive and user-friendly experience. Security measures include RSA encryption for login forms, but the absence of explicit security headers and cookie consent mechanisms indicates room for improvement in compliance and security hardening. Overall, the site is professional, trustworthy, and serves its target audience effectively.

L

Landessportbund Nordrhein-Westfalen e. V.

vibss.de

30

The website www.vibss.de serves as an information and advisory portal for sports clubs primarily in the German state of Nordrhein-Westfalen. Operated by the Landessportbund Nordrhein-Westfalen e. V., a non-profit organization, it offers comprehensive resources on club management, sports practice, legal matters, and digital transformation including AI assistance. The site is well-positioned as a regional leader in supporting sports associations with a clear focus on practical and legal guidance. Technically, the site is built on the TYPO3 CMS platform, integrates Google Analytics and Tag Manager for tracking and search functionalities, and is hosted likely via Deutsche Telekom infrastructure. The website demonstrates good mobile optimization, structured navigation, and professional branding consistency. Security-wise, the site enforces HTTPS, implements GDPR-compliant cookie consent mechanisms, and avoids exposing sensitive data, though it lacks explicit security policies or incident response contacts. Overall, the site is trustworthy, compliant, and serves its target audience effectively.

Vereinshelden is a well-established non-profit organization focused on supporting volunteer engagement in sports within Niedersachsen, Germany. The website serves as a comprehensive platform offering funding, consulting, training, and recognition services to sports clubs and volunteers. It holds a strong regional market position supported by partnerships with key sports organizations and government entities. The digital infrastructure is based on WordPress with modern plugins and themes, ensuring good SEO, accessibility, and mobile responsiveness. Security posture is solid with HTTPS and cookie consent mechanisms, though some improvements in security headers and incident response policies are recommended. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with GDPR requirements.

The Niedersächsisches Institut für Sportgeschichte e.V. (NISH) is a specialized non-profit institute dedicated to documenting and researching the sports history of Lower Saxony and surrounding regions. Founded in 1981 and supported by the LandesSportBund Niedersachsen, it offers extensive archival resources, a specialized library, and collections related to various sports disciplines. The website serves as an information hub for sports clubs, educational institutions, researchers, and enthusiasts. Technically, the site is built on WordPress with standard plugins for contact forms, newsletters, and cookie management, providing a moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers and incident response information are lacking. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, with clear contact details and transparent policies.

R

RSG - Rollstuhl-Sportgemeinschaft Hannover '94 e.V.

rsghannover.de

9

RSG - Rollstuhl-Sportgemeinschaft Hannover '94 e.V. is a non-profit sports community organization based in Hannover, Germany, specializing in wheelchair and integrative sports. The website serves as an informational platform targeting local community members interested in inclusive sports activities. The organization has a long-standing presence since 1994, reflecting stability and community engagement. Technically, the website is built on WordPress using the Divi theme, leveraging common web technologies such as jQuery and standard CSS frameworks. The site is moderately optimized for mobile devices and offers a reasonable user experience, though content depth and SEO could be improved. Security-wise, the site employs HTTPS with good SSL configuration and standard security headers, but lacks explicit security policies or incident response information. Privacy compliance is partially addressed with a cookie consent mechanism, but the absence of a privacy policy and terms of service pages indicates compliance gaps. Overall, the website is functional and trustworthy for its niche audience but would benefit from enhanced privacy and security transparency.

G

GSV Oldenburg

gsv-ol.de

47

GSV Oldenburg operates as a local community sports organization based in Germany, providing various sports activities, events, and social engagement opportunities. The website serves as an information hub for members and interested parties, featuring event announcements, calendars, and news updates. The organization appears to be a small-sized non-profit entity focused on serving the Oldenburg community. Technically, the website is built on WordPress with a modern plugin ecosystem including Elementor, calendar, and polling tools. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and cookie consent mechanisms, which are recommended for GDPR compliance. No direct contact emails or phone numbers are visible on the homepage, which could be improved for better user engagement and trust. Overall, the website is professional and trustworthy for its intended audience but could enhance privacy and security features to align with best practices.

S

Sozialverband Deutschland e.V. Landesverband Niedersachsen

sovd-nds.de

53

The Sozialverband Deutschland e.V. Landesverband Niedersachsen is a regional non-profit social association dedicated to providing social law advice, member services, and advocacy in the German state of Niedersachsen. The website serves as an information hub for members and interested parties, offering digital tools, campaigns, and contact options. It holds a solid market position as a regional branch of a national organization, focusing on social welfare, legal advice, and community support. The target audience includes members, social law clients, and the general public interested in social policy. Technically, the website is built on TYPO3 CMS with modern web technologies including Bootstrap, jQuery, and various JavaScript libraries for enhanced user experience. It is hosted on generic servers with multiple nameservers, uses HTTPS with good SSL configuration, and implements GDPR-compliant cookie consent mechanisms. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses cookie consent with opt-in for marketing and chatbot scripts, and avoids exposing sensitive data. However, it lacks publicly available security policies, incident response contacts, and security headers, which are areas for improvement. No critical vulnerabilities or suspicious patterns were detected. Overall, the website is professional, trustworthy, and compliant with privacy regulations. It effectively supports the organization's mission and member engagement. Strategic recommendations include enhancing security transparency, publishing incident response information, and adding security headers to further strengthen the security posture.

The Deutscher Behindertensportverband e.V. (DBS) is the largest disabled sports association globally, serving as the National Paralympic Committee for Germany. The website provides comprehensive information about disabled sports, athlete support, events, and educational resources, targeting individuals interested in Paralympic and disabled sports. The organization operates as a non-profit entity with a strong market position in Germany. Technically, the website is built on the Contao CMS platform, utilizing modern JavaScript libraries such as jQuery and Colorbox, and is hosted by agenturserver. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security-wise, the site enforces HTTPS, uses CSRF protection cookies, and implements a cookie consent mechanism with GDPR compliance. However, it lacks explicit security policy pages and incident response contacts. Overall, the website is professional, trustworthy, and well-maintained, with active social media engagement and clear branding.

S

STUCO Fullservice GmbH

fullservice-stuco.de

55

STUCO Fullservice GmbH operates as a specialist fullservice provider for promotional products in Germany, offering comprehensive services from product conception to logistics and e-shop solutions. The company targets businesses seeking scalable and sustainable promotional merchandise solutions. The website reflects a professional digital presence with a modern WordPress and Elementor infrastructure, enhanced by SEO plugins and consent management tools. While the technical setup is solid, there is room for improvement in privacy compliance and security best practices. The absence of a published privacy policy and terms of service represents a compliance gap, and security headers are not detected, which could be enhanced to improve security posture. Overall, the site is trustworthy and well-positioned in its niche, with active social media engagement and recognized certifications such as EcoVadis.

M

maxcluster

maxcluster.net

53

maxcluster is a German technology company specializing in managed hosting services, particularly for e-commerce platforms. Founded in 2009, it has established itself as a medium-sized player in the managed hosting market. The website content provided is a 404 error page, indicating the requested resource is not found, which limits the ability to fully assess the company's online presence. Contact information such as phone number and support email are available in the page's JavaScript variables and footer links, suggesting accessible customer support channels. Technically, the website uses jQuery and Bootstrap frameworks, with Bugsnag integrated for error monitoring configured to avoid IP tracking, reflecting some privacy consideration. However, the absence of DNSSEC, security headers, and privacy or cookie policies indicates gaps in security and compliance maturity. The website lacks structured data and SEO optimization, and the 404 page design and content quality are poor, impacting user experience and trust. From a security perspective, the domain is registered with RegistryGate GmbH since 2009, with no privacy protection, and the registrant information aligns with the website's German origin, supporting legitimacy. The security posture is moderate but could be improved by enabling DNSSEC, adding security headers, and implementing privacy policies. No WAF or blocking mechanisms were detected, and no adult or questionable content is present. Overall, the website's current state reflects a functional but minimal online presence with room for improvement in content quality, security best practices, and privacy compliance. Strategic enhancements in these areas would strengthen trust, user experience, and regulatory adherence.

V

Verbund Offener Werkstätten

offene-werkstaetten.org

54

Verbund Offener Werkstätten operates as a non-profit network of open workshops in Germany, providing shared access to craft and digital fabrication resources. The website serves as a community hub offering workshop search, membership information, and educational content. The organization targets individuals interested in maker culture and collaborative craftsmanship. Technically, the website employs modern JavaScript libraries such as Swiper.js and SweetAlert2, with accessibility features via Eye-Able scripts, hosted by a reputable German provider. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though improvements are recommended in DNSSEC and security headers. No critical vulnerabilities or blocking mechanisms were detected, indicating a trustworthy and accessible platform.

A

anstiftung

anstiftung.de

46

anstiftung.de is the website of a German non-profit organization dedicated to promoting, networking, and researching community-driven initiatives such as intercultural and urban community gardens, open workshops, repair initiatives, and neighborhood revitalization projects. The organization targets a general audience interested in community development, sustainability, and DIY culture. The website is built on Joomla CMS with modern technologies like Bootstrap and FontAwesome, providing a good user experience with clear navigation and mobile optimization. The site includes active blog content, social media integration, and newsletter subscription options, reflecting a mature digital presence. Security posture is adequate with HTTPS and CSRF protections but lacks advanced security headers and published security policies. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the site is professional, trustworthy, and aligned with its non-profit mission.

M

Musikosmos

musikosmos.de

44

Musikosmos is a German-based online blog and informational platform focused on music retail, education, and cultural events. It provides detailed articles about music learning methods, product news, and music festivals, targeting musicians, educators, and music enthusiasts. The site also promotes partner online shops and physical retail stores specializing in musical instruments and accessories. Technically, the website is built on WordPress using the Twenty Twelve theme, enhanced with jQuery and Matomo analytics for user tracking. The site is moderately optimized for mobile and SEO, with a good content structure and consistent branding. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and cookie consent mechanisms. Privacy policy is present and GDPR compliant, though cookie consent is missing. No direct contact emails or phone numbers are published, which may impact user trust and support accessibility. Overall, the domain registration data aligns well with the website content and business focus, indicating legitimacy and consistency.

A

Allegra Academy

allegra.academy

65

Allegra Academy is an educational platform specializing in bike tourism and slow traffic mobility, primarily serving the Graubünden region in Switzerland. The website offers online courses with multimedia content and certificates, targeting professionals involved in bike tourism such as product managers, municipal employees, hotel staff, and guides. The platform is positioned as a niche educational resource with a focus on enhancing knowledge and service quality in the bike tourism sector. Technically, the site is built on WordPress using popular plugins like LearnDash for LMS functionality, WooCommerce for e-commerce, and Elementor for design. It employs modern web technologies and is mobile-optimized with good SEO practices. Security-wise, the site uses HTTPS and Google Tag Manager but lacks some security headers and explicit security policies. Privacy compliance is partial, with a cookie consent mechanism but no clear privacy or terms of service pages. No direct contact or incident response information is provided, which could be improved to enhance trust. Overall, the site is professional, secure, and credible but could benefit from enhanced privacy and security disclosures.

S

StiftungSchweiz

spendenschweiz.ch

58

SpendenSchweiz is a Swiss non-profit online donation platform operated by StiftungSchweiz, offering donors access to over 900 charitable organizations and projects. The platform facilitates easy, secure donations and enables users to start their own fundraising campaigns. The website is professionally designed, SEO optimized, and uses modern WordPress technologies including jQuery, Slick Carousel, and Intercom for user engagement. Google Analytics and Google Tag Manager are employed for traffic analysis. Security posture is strong with HTTPS and secure forms, though explicit privacy and cookie policies are missing, which impacts compliance. No incident response or vulnerability disclosure information is provided. Overall, the platform is trustworthy and well-positioned in the Swiss charitable sector, but could improve transparency and privacy compliance.

I

iart ag

fluxdock.io

47

Fluxdock is a Swiss-based business offering modular and flexible workspace rentals located in the urban Dreispitz area near Basel. The company targets SMEs and organizations seeking agile, collaborative project spaces with options for short-term and long-term rentals. The website presents a professional and consistent brand image with clear service descriptions and partner affiliations. Technically, the site uses modern frontend technologies such as Bootstrap, jQuery, and Swiper.js, and is mobile-optimized with moderate performance. Security posture is adequate with HTTPS enabled and use of Google reCAPTCHA, but lacks DNSSEC and security headers, and does not have an active cookie consent mechanism. The WHOIS data aligns well with the business identity, supporting legitimacy. Overall, the site is trustworthy and business credible but could improve privacy compliance and security best practices.

A

Auridis Stiftung

auridis-stiftung.de

40

Auridis Stiftung is a German non-profit foundation dedicated to fostering a society where children grow up well. The website serves as an informational platform about the foundation's mission and social projects. Technically, the site is built on WordPress using the Divi theme and employs jQuery for scripting. The hosting and DNS are managed via CSC DNS services, indicating professional infrastructure management. However, the website lacks critical compliance and security features such as privacy and cookie policies, security headers, and explicit contact information. This limits its trustworthiness and compliance posture. The site is accessible without WAF or security challenges, but the absence of security best practices and compliance documentation suggests room for improvement in governance and risk management.

D

Deutsche Kinder- und Jugendstiftung

dkjs.de

49

Deutsche Kinder- und Jugendstiftung (DKJS) is a German non-profit foundation dedicated to supporting the healthy development and future prospects of young people in Germany through education and participation initiatives. The organization operates with a clear focus on structural impact in education and youth involvement, offering projects, publications, and community engagement. Their market position is that of an established and reputable non-profit in the German education sector, targeting youth, educational institutions, and municipalities. Technically, the DKJS website is built on WordPress, utilizing modern web technologies such as jQuery, Alpine.js, and Swiper.js for interactive UI components. The site is mobile-optimized, accessible, and employs cookie consent mechanisms compliant with GDPR, including the Borlabs Cookie plugin and push notifications via WonderPush. Performance is moderate with good SEO and accessibility practices. From a security perspective, the site enforces HTTPS and uses cookie consent for privacy compliance. However, it lacks explicit security headers and a public security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is consistent and indicates a legitimate domain registration. Overall, the website presents a professional, trustworthy, and privacy-conscious digital presence suitable for its non-profit educational mission. Strategic improvements could include publishing a formal security policy, adding security headers, and establishing a vulnerability disclosure process to enhance security posture and stakeholder trust.

C

ClubDesk

clubdesk.com

61

ClubDesk is a Swiss-based online club management software provider offering a comprehensive SaaS platform for associations and clubs to manage members, accounting, events, and websites. The company targets a broad range of clubs including sports, cultural, and hobby groups, with a strong presence in Switzerland and Germany. The website is professionally designed, mobile-optimized, and integrates modern technologies such as Contao CMS, jQuery, and Google Tag Manager. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers and explicit privacy policies are missing. The business demonstrates legitimacy through transparent WHOIS data and partnerships with reputable financial and sports organizations. Overall, ClubDesk presents a mature digital infrastructure with a strong market position in the club management software niche.

S

SMEC

smec.com

66

SMEC is a global engineering and consultancy firm specializing in infrastructure, energy, transport, and international development sectors. The company operates in over 40 countries and emphasizes sustainable and practical solutions. Their website is built on WordPress and integrates common analytics and tracking tools such as Google Analytics and MonsterInsights. The site is professionally designed with good content quality and clear navigation, targeting government and private sector clients. Security posture is adequate with HTTPS and reCAPTCHA usage, but could be improved by adding more security headers and explicit incident response policies. The absence of WHOIS data reduces transparency but the website content and branding suggest a legitimate and established business.

W

Werkstatt für Gestaltung WfG AG

wfg.ch

55

Werkstatt für Gestaltung WfG AG is a Swiss-based company specializing in the design and retail of furniture and accessories, including sofas, felt bags, and leather bags. The company operates an e-commerce platform built on Magento, targeting primarily German-speaking Swiss customers. The website presents a professional design with good navigation and mobile optimization, supporting a positive user experience. The business model focuses on direct online sales and retail of design products, positioning itself as a niche regional player in the furniture retail sector. From a technical perspective, the website leverages a modern Magento stack with RequireJS, jQuery, and Magento PageBuilder components. The platform is well-structured, though performance is moderate and some SEO and accessibility features could be improved. Security-wise, the site enforces HTTPS with valid SSL certificates and uses form key protections. However, it lacks several important security headers such as Content-Security-Policy and HSTS, and does not provide explicit incident response or vulnerability disclosure information. Overall, the security posture is adequate but could benefit from enhancements to headers and incident response transparency. Privacy compliance is basic, with a privacy and cookie policy present but no GDPR-specific indicators or data protection officer contact. The absence of direct contact emails or phone numbers reduces immediate trust signals, though a contact form is available. There are no signs of malicious content or adult material, and the domain registration data aligns well with the business claims, supporting legitimacy. The website scores a 75 overall on AI evaluation, reflecting good content quality and business credibility, moderate technical implementation, and room for improvement in security and privacy compliance. Strategic recommendations include implementing stronger security headers, adding vulnerability disclosure and incident response contacts, enhancing privacy compliance transparency, and improving SEO and accessibility features.

D

DomainProfi GmbH

domainprofi.com

63

DomainProfi GmbH operates as a specialized domain registrar and management service provider, focusing on commercial clients such as brand owners, domain traders, investors, and SEO specialists. The company is ICANN accredited, which underscores its legitimacy and commitment to industry standards. Their website is professionally designed, primarily in German, and offers detailed information about their domain-related services and solutions. The business targets medium-sized commercial customers managing large domain portfolios, positioning itself as a reliable partner in the domain registration and management market in Germany. Technically, the website is built on WordPress with Elementor, incorporating modern web technologies and security features like HTTPS and captcha for forms. However, some security headers are missing, and no cookie consent mechanism is evident, which could be improved to enhance compliance and security posture. The WHOIS data for the domain is unavailable, which slightly reduces trust but does not negate the overall professional presentation and trust signals on the site. Overall, the website demonstrates a solid technical and business foundation with room for security and compliance enhancements.

T

Top Klassik Zürcher Oberland

topklassik.ch

55

Top Klassik Zürcher Oberland is a well-established Swiss non-profit organization dedicated to promoting classical music concerts in the Zürcher Oberland region. With over 50 years of history, it offers a rich annual program of classical concerts, targeting classical music enthusiasts locally. The website serves as a platform for event information, ticket sales, and membership engagement, supported by reputable local sponsors and municipalities. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring a good user experience and SEO optimization. However, there is room for improvement in security headers and privacy compliance. The security posture is solid with HTTPS and anonymized Google Tag Manager usage but lacks advanced security headers. Overall, the site is professional, trustworthy, and safe for general audiences, though it should address privacy and cookie policy gaps to enhance compliance and user trust.

M

Müller & Schade

mueller-schade.com

58

Müller & Schade operates a professional e-commerce website specializing in music sheets, books, and musical instruments, primarily serving customers in Switzerland. The company has a long-standing history dating back to 1850 and maintains physical stores in Bern and Zurich. The website is well-structured with multiple product categories and features, including user login, registration, and a contact form with captcha protection. Technical infrastructure leverages jQuery and slick carousel for UI components, and the CMS is identified as NImQ Enterprise Shop Edition. While the website demonstrates good content quality and user experience, the absence of WHOIS data raises concerns about domain registration legitimacy. Security practices include HTTPS usage and form validation, but lack of security headers and cookie consent mechanisms indicate room for improvement. Overall, the site is functional and trustworthy from a user perspective but requires attention to domain registration transparency and enhanced privacy compliance.

L

Literary Review

literaryreview.co.uk

52

Literary Review is a reputable UK-based literary magazine established in 1979, focusing on book reviews and literary commentary. The website serves as a digital platform for its content, subscription services, and advertising. It targets readers interested in literature and culture, maintaining a consistent brand and high-quality content. Technically, the site is built on WordPress with common plugins and tracking tools, hosted by Easyspace Ltd. The site is moderately optimized for performance and mobile use, with good SEO and basic accessibility features. Security posture is solid with HTTPS and some security best practices, though improvements in HTTP security headers and cookie consent mechanisms are recommended. Privacy policies are present and GDPR compliant, but cookie consent is lacking. Contact information is limited to email and a contact form, with no phone or physical address listed. Social media presence is active, enhancing engagement. Overall, the site is professional, trustworthy, and safe for general audiences.

D

Dezeen

dezeen.com

65

Dezeen is a globally recognized online architecture, interiors, and design magazine offering a wide range of content including news, features, awards, jobs, events, and educational courses. The website demonstrates a mature digital presence with strong branding, comprehensive content, and active social media engagement. The technical infrastructure leverages WordPress CMS, modern JavaScript libraries, and integrates multiple advertising and analytics platforms such as Google Analytics, Algolia, and Amazon Ads, indicating a well-developed digital marketing strategy. Security posture is solid with HTTPS enforced and Content Security Policy in place, though additional security headers and a public security policy could enhance trust. Privacy and cookie policies are comprehensive and GDPR compliant, supporting user privacy and consent management. The absence of WHOIS data reduces domain trust slightly but does not detract from the overall legitimacy and professionalism of the site.

W

Wellnesshotel Golfpanorama

golfpanorama.ch

67

Wellnesshotel Golfpanorama is a premium hospitality business located in Lipperswil, Switzerland, specializing in wellness, golf, and luxury accommodation services. The website presents a comprehensive range of offerings including hotel rooms, spa and wellness treatments, golf packages, restaurant services, and business seminar facilities. The business targets leisure travelers, wellness enthusiasts, and corporate clients, positioning itself as a 4-star superior hotel in the Bodensee region. The site is professionally designed with multilingual support and strong branding consistency. Technically, the website employs modern JavaScript libraries, Google Tag Manager, Cookiebot for consent management, and integrates third-party booking and chat services. The CMS appears to be Kirby, supporting a well-structured and responsive design optimized for mobile devices. SEO and accessibility features are well implemented, contributing to a positive user experience. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent mechanisms. However, some security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected and could be improved. No vulnerabilities or exposed sensitive data were found. Privacy compliance is strong with clear privacy and cookie policies and GDPR consent mechanisms. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance, with a solid security posture and effective business presentation. Strategic improvements in security headers and incident response disclosures could further enhance the security maturity and trustworthiness of the site.

G

Goldgelb Zeit und Raum GmbH

goldgelb.ch

51

Goldgelb Zeit und Raum GmbH is a Swiss-based marketing and media production agency specializing in advertising photography, videoproduction, virtual reality, drone aerial photography, web design, SEO, and AI-generated artwork. The company targets businesses and professionals seeking high-quality visual communication services to enhance their brand presence across web and print media. Their market position is that of a niche regional agency with a strong focus on creative and technological solutions for visual marketing. Technically, the website is built on WordPress using modern plugins such as WPBakery Page Builder, Yoast SEO, and Slider Revolution. It integrates Google Analytics and Google Tag Manager for tracking and marketing purposes. The site is mobile-optimized with good SEO practices and moderate performance. Some minor issues with lazy loading images were noted but do not significantly impact user experience. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, indicating good privacy compliance. However, security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected and should be added to enhance security posture. No critical vulnerabilities or exposed sensitive data were found. The WHOIS data confirms the legitimacy of the domain with consistent registrant information matching the business identity. Overall, the website presents a professional and trustworthy digital presence with good content quality and compliance. Strategic recommendations include enhancing security headers, fixing minor technical issues, and publishing explicit security and incident response policies to further strengthen trust and security culture.

T

Tarifverbund OSTWIND

steigensieum.ch

51

The website steigensieum.ch serves as a promotional and informational portal for OSTWIND, a major public transport tariff association in Eastern Switzerland and Liechtenstein. It provides detailed information about monthly and yearly subscriptions, corporate offers, ticket comparisons, and alternatives to car commuting such as P+Rail. The site integrates with official OSTWIND and Swiss public transport services, offering users direct links to purchase tickets and subscriptions. The target audience includes commuters, seasonal travelers, and corporate employees seeking efficient public transport options. The website is professionally designed, content-rich, and well-branded, reflecting a strong market position in the regional transportation sector. Technically, the site is built on TYPO3 CMS and leverages modern JavaScript libraries such as jQuery and Swiper.js for interactive elements. It uses Google Maps API for mapping features and employs Matomo and Google Analytics for user tracking. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, but lacks some security headers and a cookie consent mechanism, which are recommended for GDPR compliance. Overall, the security posture is solid with no critical vulnerabilities detected. However, improvements in privacy compliance and explicit security policies would enhance trust. The domain uses privacy-protected WHOIS, which is justified for this business type. The website demonstrates high professionalism and trustworthiness, supported by official partner links and social media presence. Strategic recommendations include implementing a cookie consent banner, publishing a security policy and incident response contacts, enhancing security headers, and maintaining regular audits of third-party scripts to ensure ongoing security and compliance.

I

IN4OUT AG

in4out.ch

58

IN4OUT AG is a Swiss-based IT services company specializing in digital transformation, IT outsourcing, managed services, and security solutions. Positioned as a regional expert and Microsoft Gold Partner, the company targets businesses seeking comprehensive IT support and cloud services. Their website reflects a professional and consistent brand image with clear service offerings and customer engagement channels. Technically, the site is built on Orchard CMS and leverages common analytics tools such as Google Analytics and Piwik/Matomo, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website uses HTTPS and avoids exposing sensitive data but lacks explicit security headers and a cookie consent mechanism, which are areas for improvement. WHOIS data confirms the legitimacy and transparency of the business, matching the website's claims and location. Overall, the website presents a trustworthy and professional front for IN4OUT AG, with moderate tracking and good business credibility.

B

Bundesinstitut für Öffentliche Gesundheit (BIÖG)

bioeg.de

66

The Bundesinstitut für Öffentliche Gesundheit (BIÖG) is a German federal government health institute dedicated to public health education, research, and prevention. The website serves as a comprehensive platform providing health information, research studies, and resources aimed at the general population and health professionals. It maintains a strong market position as an official government entity with a clear mission to promote health and well-being in Germany. The site is well-branded, consistent, and trusted by its audience. Technically, the website is built on the TYPO3 CMS platform, utilizing modern web technologies such as jQuery and Slick Slider for interactive content. It is optimized for mobile devices and accessibility, with good SEO practices. Hosting appears to be local to Germany, supporting data privacy and compliance requirements. Analytics are handled via Matomo with strong privacy protections including IP anonymization and no cookies without consent. From a security perspective, the site enforces HTTPS and employs privacy-conscious analytics. However, it lacks explicit security policy documentation and incident response contact details, which are recommended for transparency and preparedness. No vulnerabilities or suspicious activities were detected. The site complies well with GDPR and provides clear cookie consent mechanisms. Overall, the BIÖG website is a professional, secure, and privacy-compliant platform that effectively supports its public health mission. Strategic improvements include publishing a formal security policy and enhancing incident response transparency to further strengthen trust and security posture.

B

Bundesinstitut für Öffentliche Gesundheit (BIÖG)

bzga.de

66

The Bundesinstitut für Öffentliche Gesundheit (BIÖG) is a German federal public health institute operating under the Federal Ministry of Health. It focuses on promoting healthy lifestyles, disease prevention, and public health education through research, information dissemination, and advisory services. The website serves as a comprehensive platform for health-related information targeting the general population, healthcare professionals, and risk groups in Germany. It offers extensive resources including studies, audiovisual media, and practical guidance on various health topics. Technically, the website is built on the TYPO3 CMS platform, employs Matomo analytics with strong privacy protections, and demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS enforcement and privacy-conscious analytics, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site reflects a professional, trustworthy government entity with high content quality and compliance with GDPR and cookie consent regulations.

R

RZ-magoo

rzmagoo.com

50

RZ-magoo is a small manufacturing business specializing in handcrafted new generation woodwind instruments, specifically hybrid clarinets, produced in the Czech Republic and Switzerland. The company targets professional and amateur musicians seeking high-quality clarinet instruments and accessories. The website is professionally designed using WordPress and the Divi theme, featuring clear navigation and relevant content about their products and artists. Contact information is well provided, supporting business credibility. Technically, the site uses modern web technologies and is hosted on Websupport.cz, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy and cookie policies are missing, indicating compliance gaps. No analytics or advertising scripts were detected, suggesting minimal user tracking. Overall, the website presents a trustworthy and professional front for a niche musical instrument manufacturer.

The website www.koelliker-saibene.ch is a small personal or hobbyist site operated by Annemarie Koelliker and Roberto Saibene, showcasing travel photography and accompanying Tonbildshows (audio-visual presentations) from various countries. The site targets travel enthusiasts and photography lovers, offering galleries and photo books. Technically, the site is built on the Jimdo Creator platform, leveraging Jimdo's hosting and CDN infrastructure. It uses HTTPS and includes a cookie consent mechanism, but lacks advanced security headers and formal security or privacy policies. No contact emails or phone numbers are provided, limiting direct communication. The site is accessible without WAF or blocking mechanisms and contains no adult or questionable content. Overall, the site is functional and professionally presented for its niche but could improve in security and compliance documentation.

H

Hotel Bären Suhr

baeren-suhr.ch

60

Hotel Bären Suhr is a small-sized hospitality business located in Switzerland, offering comfortable business hotel accommodations, restaurant dining, and event hosting services. It operates as part of the regional hotel group AARGAUHOTELS.CH and holds a Swiss Quality Hotels certification, indicating a commitment to quality and service excellence. The website is professionally designed with clear navigation, comprehensive content, and strong branding consistency, targeting business travelers and event organizers in the region. Technically, the website is built on WordPress 6.8.2, utilizing modern web technologies such as jQuery, Swiper.js, and Google Fonts. It integrates analytics tools like Matomo and Google Analytics 4, and employs Google reCAPTCHA for form security. The site demonstrates good mobile optimization and SEO practices, although accessibility features could be enhanced. From a security perspective, the website enforces HTTPS and uses cookie consent mechanisms compliant with GDPR. While basic security best practices are observed, including secure forms and no exposed sensitive data, the site could improve by implementing additional security headers such as Content-Security-Policy and X-Frame-Options. No vulnerabilities or suspicious activities were detected. Overall, the website presents a low-risk profile with a high legitimacy score based on consistent WHOIS data and transparent business information. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and considering a vulnerability disclosure policy to further strengthen security posture.

A

AARGAUHOTELS

aargauhotels.ch

59

AARGAUHOTELS is a regional hospitality group in Switzerland operating multiple hotels and gastronomy establishments primarily in the Aargau region and Tessin. The website presents a professional and well-structured digital presence with comprehensive information about their hotels, restaurants, offers, and career opportunities. The business targets guests seeking quality accommodation and dining experiences with a focus on regional products and sustainable practices. Technically, the site is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Matomo, and Google Analytics 4, ensuring good digital maturity. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the site is trustworthy, privacy compliant, and provides clear contact information and business transparency.

A

Aargauische Industrie- und Handelskammer (AIHK)

aihk.ch

47

The Aargauische Industrie- und Handelskammer (AIHK) is a regional chamber of commerce based in Switzerland, focused on connecting businesses with political stakeholders and supporting economic policy representation. Their key services include networking, advocacy, and business support within the Aargau region. The website is built on TYPO3 CMS and uses standard web technologies such as jQuery, Bootstrap, and FontAwesome, indicating a moderate level of digital maturity. The site is mobile optimized and presents content relevant to its target audience of companies and political entities. Security posture is limited based on the provided data, with no detected security headers or explicit incident response policies. Privacy and cookie policies are absent, which may impact compliance with GDPR. Overall, the website is professional and trustworthy, but improvements in security and privacy compliance are recommended.

T

Ticketcorner Live Club

live-club.ch

61

Ticketcorner Live Club is a membership-based event ticketing platform operated by Ticketcorner AG, Switzerland. It offers members early access to tickets, discounts, and exclusive offers primarily targeting Swiss and European customers. The website is multilingual and professionally designed, providing clear navigation and relevant content about membership benefits and event offers. The technical infrastructure is based on Squarespace CMS with integrations such as Google Tag Manager and Consentmanager.net for cookie compliance. Security posture is strong with HTTPS and HSTS enabled, though explicit security policies and incident response contacts are not published. Overall, the site demonstrates good digital maturity and compliance with GDPR requirements.

T

Trimarca AG

trimarca.ch

64

Trimarca AG is a well-established Swiss advertising and design agency founded in 1978, specializing in strategic marketing, brand concepts, and campaign development. The company targets businesses seeking creative and effective advertising solutions, primarily in the Graubünden region. Their website reflects a mature market position with a consistent brand image and a professional digital presence. Technically, the site is built on Webflow, leveraging modern web technologies and integrating analytics and consent management tools, ensuring good performance and compliance with privacy regulations. Security posture is solid with HTTPS, security headers, and no visible vulnerabilities, though the absence of a formal security policy or vulnerability disclosure page suggests room for improvement. Overall, the website and business information align well with the WHOIS data, indicating a trustworthy and credible entity.

G

Golfclub Gstaad-Saanenland

golfclubgstaad.ch

47

Golfclub Gstaad-Saanenland is a small, regionally focused golf club located in Switzerland, offering an 18-hole golf course and associated services such as a pro shop, restaurant, and training facilities. The club positions itself as a premium natural golf experience with scenic views and a tranquil environment. The website is built on WordPress with modern technologies and multilingual support, providing a good user experience and SEO optimization. Security posture is solid with HTTPS and cookie consent implemented, though some security headers and policies are missing. Contact information and business partner details are clearly presented, enhancing credibility. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

G

Gemini.no

gemini.no

62

Gemini.no is a well-established Norwegian research news portal jointly operated by NTNU and SINTEF, providing comprehensive and accessible scientific news across multiple disciplines including technology, health, environment, and society. The website demonstrates a mature digital infrastructure built on WordPress with modern analytics and tracking tools, ensuring good user experience and SEO optimization. Security posture is strong with HTTPS enforcement and privacy-conscious analytics configurations. Privacy and cookie policies are comprehensive and GDPR compliant, enhancing user trust. Contact information is available, though phone numbers are not explicitly listed. Overall, Gemini.no presents a professional, trustworthy, and content-rich platform serving a broad audience interested in research and science news.

N

Norid AS

norid.no

76

Norid AS operates as the official registry for Norwegian domain names, managing the .no top-level domain. The company provides domain registration services, lookup tools, and conflict resolution guidance primarily targeting individuals and organizations in Norway. The website is professionally designed, well-structured, and provides comprehensive information and services related to domain names. Technically, the site is built on WordPress with modern plugins and scripts, delivering good performance and mobile optimization. Security posture is strong with HTTPS enforced and ISO 27001 certification displayed, though some security headers and incident response information could be improved. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the domain is legitimate and trustworthy, consistent with its role as the official Norwegian domain registry.

U

Universitetet i Oslo

uio.no

70

Universitetet i Oslo (UiO) is Norway's oldest and highest-ranked university, serving over 26,000 students and 7,000 employees. The website reflects a strong academic institution with comprehensive educational offerings, research activities, and public engagement. The site is well-branded, professionally designed, and targets students, researchers, and the general public interested in higher education and research in Norway. Technically, the site uses a modern CMS (Vortex), JavaScript libraries like jQuery, and Google Analytics for tracking. It is mobile-optimized and accessible with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and published security policies are absent. WHOIS data is unavailable due to Norid restrictions, but domain legitimacy is high given the official .no domain and consistent branding. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

Wesp is a Norwegian company specializing in the representation and distribution of outdoor and indoor furniture from six distinct producers. Their market position is niche-focused, targeting both large and small projects in public and private sectors. The website reflects a professional business model with clear service offerings including benches, planters, tables, and bicycle parking solutions. The company is a part of Wallax AS and has been operating since 2015, supported by a domain age consistent with this timeline. Technically, the website is built on WordPress using the Enfold theme and Avia framework, incorporating modern web technologies such as Google Analytics, Facebook Pixel, and Hotjar for analytics and marketing. The site is mobile-optimized with good SEO practices including structured data and meta tags. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA on forms, but lacks explicit security headers like Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic but present, with a GDPR-compliant privacy policy and cookie consent mechanism. Overall, Wesp's website demonstrates a solid digital presence with good business credibility and moderate security posture. Strategic improvements in security headers, incident response policies, and enhanced privacy transparency would further strengthen their risk profile and trustworthiness.

T

Treets Venner

treetsvenner.no

43

Treets Venner is a Norwegian non-profit organization dedicated to the use, preservation, and maintenance of trees and vegetation. The website serves as an educational and advocacy platform targeting environmentally conscious individuals and communities interested in tree conservation. The organization operates primarily through membership engagement, events, and informational content. The website is built on WordPress using the Twenty Fourteen theme and integrates Google Analytics and Jetpack for analytics and site management. While the site is well-structured, mobile-optimized, and secure with HTTPS, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. No direct contact information or security incident response details are provided, which could impact user trust and compliance. Overall, the site presents a professional and trustworthy image consistent with a small non-profit entity with a long-standing domain registration dating back to 2009.

S

Søve

sove.no

55

Søve is a Norwegian company specializing in manufacturing high-quality, environmentally certified (Svanemerkede) play and activity apparatus designed for Norwegian conditions. Established since 1975, the company has a long-standing market presence and emphasizes rapid delivery and good customer service. The website reflects a professional digital presence built on WordPress with WooCommerce, integrating modern SEO and analytics tools such as Rank Math and HubSpot. The technical infrastructure is mature and supports good performance and mobile optimization. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, though some security headers and explicit policies are missing. Privacy compliance is partial, with cookie consent implemented but no visible privacy policy or terms of service. Overall, the website is trustworthy and well-positioned in its niche, though improvements in transparency and security documentation are recommended.