Security Directory

H

HAAS Media GmbH

haas.media

57

HAAS Media GmbH operates as a regional media and marketing services provider under the HAAS Mediengruppe umbrella, offering a broad portfolio of multichannel advertising solutions including digital and print media. The company targets businesses seeking tailored communication strategies in local markets, leveraging its strong regional presence and multiple media brands. The website is professionally designed, content-rich, and optimized for SEO and mobile use, reflecting a mature digital infrastructure. Technically, the site is built on WordPress with integration of modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Mouseflow, all managed with a robust consent management platform ensuring GDPR compliance. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies could be improved. Overall, the domain appears legitimate despite privacy-protected WHOIS data, supported by consistent branding, references, and compliance measures.

S

Stadionwelt / ESB Marketing Netzwerk / Deutsche Bank Park

arena-summit.de

70

The eps ARENA SUMMIT website serves as a professional platform for a leading event in the German-speaking stadium and arena industry. It is organized by reputable entities including Stadionwelt, ESB Marketing Netzwerk, and Deutsche Bank Park, offering extensive content such as event programs, speaker profiles, partner listings, and multimedia impressions. The site targets industry professionals and companies involved in sports venue management, infrastructure, marketing, and entertainment. Technically, the website employs a mature tech stack with Bootstrap, jQuery, Font Awesome, and integrates Google Analytics with privacy-conscious settings. Hosting is provided by Hetzner, a reputable German hosting provider. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong, with a comprehensive privacy policy and cookie management. Overall, the site is well-designed, content-rich, and trustworthy, supporting its role as a key industry event platform.

S

ScaleEngine Inc.

scaleengine.net

44

ScaleEngine Inc. is a Canadian-based video streaming and hosting service provider specializing in live streaming, video on demand, transcoding, and linear TV channel generation. Established since 2011, it targets government organizations, churches, sports entities, and enterprises requiring reliable and scalable video CDN services. The company offers a developer-friendly API and direct support, positioning itself as a trusted independent provider in the Canadian market. Technically, the website uses Bootstrap and jQuery with Google Analytics and AdWords for tracking, delivering a moderately fast and mobile-optimized user experience. Security posture is solid with HTTPS enforced and secure login forms, though the absence of security headers and use of an outdated jQuery version present moderate risks. The lack of explicit privacy and cookie policies and missing WHOIS registration data reduce compliance and trust scores. Overall, the site is professional and trustworthy but would benefit from enhanced security and compliance transparency.

AnyBrowser.org is a personal and advocacy website managed by Cari D. Burstein, hosting multiple small sites including a campaign promoting accessible web design and various archived gaming and community sites. The website targets general internet users interested in accessible web design and niche gaming communities. The business model is primarily personal and hobbyist with no evident commercial intent. The domain is well-established, having been registered since 1997, which supports the site's long-term presence and credibility. Technically, the website uses basic HTML, CSS, and JavaScript technologies, including Google Analytics for visitor tracking. It is hosted by DreamHost, LLC, a reputable hosting provider. The site shows moderate performance and basic mobile optimization, with good accessibility features. However, it lacks modern security headers and DNSSEC, which could improve its security posture. From a security perspective, the site uses HTTPS (implied by the domain and hosting provider but not explicitly confirmed in the data), but no advanced security headers are present. There is no evidence of privacy or cookie policies, GDPR compliance, or vulnerability disclosure mechanisms. The use of Google Analytics without a cookie consent mechanism indicates limited privacy compliance. No critical vulnerabilities or suspicious patterns were detected. Overall, the website is safe for general audiences, with no adult or questionable content. The risk level is low, but improvements in privacy compliance, security headers, and DNS security are recommended to enhance trust and protection.

S

ScaleEngine Inc.

scaleengine.com

54

ScaleEngine Inc. is a Canadian-based video streaming and hosting service provider specializing in live streaming, video on demand, transcoding, and linear TV channel generation. Established since 2011, the company targets government organizations, churches, sports entities, and enterprises requiring reliable and scalable video CDN services. Their business model revolves around subscription and usage-based pricing with API automation for seamless integration. The website presents a professional and consistent brand image with clear service offerings and direct customer support channels. Technically, the site uses Bootstrap and jQuery frameworks, integrates Google Analytics and AdWords for marketing and tracking, and offers a responsive design suitable for mobile users. However, the site lacks visible advanced security headers and comprehensive privacy or cookie policies, which are areas for improvement. The WHOIS data for the domain is unavailable, which raises some concerns about domain registration transparency but does not directly contradict the business claims on the site.

P

Prestige Awards

prestigeawards.co.uk

50

Prestige Awards is a UK-based awards platform established in 2019 that recognizes small and medium-sized businesses for excellence in their respective markets. The website offers a nomination process for businesses to showcase achievements and gain recognition through regional and international awards. The platform leverages WordPress with popular plugins and frameworks, providing a professional and user-friendly experience. Social media integration and partnerships with organizations like Corporate Livewire enhance its market presence. Technically, the site is well-structured with SSL encryption and moderate performance, though it lacks some advanced security headers and cookie consent mechanisms. Security posture is solid but could be improved with additional policies and disclosures. Overall, the site is trustworthy and serves its niche effectively.

FreshSource is a specialized project focused on tracking source code changes, primarily for the FreeBSD operating system. It offers features such as watch lists and notifications for source tree changes, targeting developers and users interested in FreeBSD ports and source updates. The website is maintained by Dan Langille and includes affiliate marketing through Amazon Associates. The site content is technical and niche, serving a small but dedicated community.

S

Sumo Group, Inc.

tidycal.com

64

TidyCal is a SaaS business offering a simple and affordable calendar management and booking solution, targeting individuals and small businesses seeking an alternative to more expensive scheduling tools. The company leverages a lifetime deal pricing model through AppSumo, positioning itself as a cost-effective and user-friendly option. The website is professionally designed with clear navigation, mobile optimization, and strong trust signals including ProductHunt awards and AppSumo partnership. Technically, the site uses modern tracking and marketing technologies such as Google Analytics, Facebook Pixel, and Chatbase chatbot, hosted on Amazon AWS infrastructure, ensuring good performance and reliability. Security posture is solid with HTTPS enforcement and domain registration protections, though improvements like DNSSEC and published security policies are recommended. Privacy compliance is basic, with a privacy policy present but lacking a cookie consent mechanism. Overall, the site is trustworthy and well-positioned in its niche, with room for enhanced compliance and security transparency.

S

South Eastern Health and Social Care Trust

hscni.net

50

The South Eastern Health and Social Care Trust website serves as an official digital presence for a major regional healthcare provider in Northern Ireland. It offers comprehensive information about healthcare services, hospital facilities, community programs, and public health initiatives. The site targets residents and patients in the South Eastern region, providing accessible resources and contact points for various health and social care needs. The business model is that of a government-funded public healthcare entity, with a strong emphasis on community engagement and service transparency. Technically, the website is built on a WordPress CMS platform with modern front-end libraries such as jQuery, Slick Carousel, and Font Awesome. It integrates Google Analytics for user tracking and employs Yoast SEO for search engine optimization. The site demonstrates good mobile responsiveness and accessibility features, though there is room for improvement in security headers and explicit cookie consent mechanisms. From a security perspective, the site uses HTTPS, ensuring encrypted communications. However, the absence of visible security headers and a formal security policy or incident response information suggests areas for enhancement. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data for the subdomain is unavailable, which is typical for subdomains under a parent domain, and does not detract from the site's legitimacy given its official affiliation. Overall, the website presents a trustworthy and professional interface for healthcare services in Northern Ireland, with solid business credibility and a moderate to strong security posture. Strategic improvements in privacy compliance and security best practices would further strengthen its position.

U

Udruženje Roditelji

roditelji.me

58

Roditelji.me is a well-established parental portal based in Montenegro, operated by the non-profit organization Udruženje Roditelji. The website provides news, educational content, community support, and multimedia resources targeted at parents and families. It holds a leading position in the Montenegrin parental media space with a clear focus on family and child welfare. Technically, the site is built on WordPress using the Bricks Builder theme, with integration of Google Analytics and Cloudflare DNS services. The site is mobile-optimized and presents a professional design with good navigation and content relevance. Security posture is adequate with HTTPS enabled and domain protections in place, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of visible privacy and cookie policies or consent mechanisms. No direct contact information or incident response policies are published, which could impact user trust and compliance. Overall, the site is credible and functional but would benefit from enhanced privacy and security transparency.

H

handwerker.ch

architekt.app

55

architekt.app is a Swiss platform dedicated to providing transparency, ratings, and certifications for architects, planners, and construction companies. Powered by handwerker.ch, it serves as a trusted source for real-time data on over 8,000 Swiss SMEs in the construction sector. The platform offers services including company ratings, certifications, access to construction project data, and industry insights, targeting customers, professionals, investors, and businesses within the Swiss construction ecosystem. Technically, the website employs modern web technologies such as Google Analytics, Google reCAPTCHA v3, and slick carousel for UI components, with a responsive design optimized for mobile devices. Security measures include HTTPS enforcement, CSRF tokens, and bot protection, though explicit security policies and incident response contacts are not published. Overall, the site demonstrates a strong security posture and good privacy compliance with GDPR, supported by clear privacy and cookie policies. The business is well-positioned in the Swiss construction market with credible certifications and a broad partner network.

F

FreshPorts -- The Place For Ports - Most recent commits

freshports.org

69

FreshPorts.org is a specialized online portal dedicated to tracking and displaying the most recent commits to the FreeBSD ports tree. It serves the FreeBSD community, including developers and system administrators, by providing detailed commit information, package updates, and links to official FreeBSD repositories. The site also includes affiliate marketing through Amazon Associates and solicits donations to support its operations. Technically, the website uses standard web technologies including HTML, CSS, JavaScript, and integrates Google Analytics for visitor tracking. The site is accessible without any WAF or blocking mechanisms, indicating open availability to users. Security-wise, the site uses HTTPS and links to official FreeBSD resources, but lacks advanced security headers and formal privacy or cookie policies, which are areas for improvement. The WHOIS data for the domain is malformed and incomplete, limiting the ability to fully verify domain legitimacy, though the content and commit links strongly suggest a legitimate community resource. Overall, the site is functional and relevant to its niche audience but would benefit from enhanced privacy compliance and security best practices.

P

Phaistos

phaistosnetworks.gr

50

Phaistos is a well-established digital advertising and R&D company based in Greece, operating since 1997. The company specializes in delivering tailored advertising solutions that connect brands with their target audiences across various digital platforms including websites, OTT & TV apps, and DooH sectors. Their market position is strong within the Greek advertising ecosystem, supported by partnerships with numerous agencies and media suppliers. The website reflects a professional and consistent brand image with clear messaging and comprehensive contact information. Technically, the website is built on WordPress with modern integrations such as Google Analytics and reCAPTCHA for security and tracking. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some improvements in accessibility and security headers could be made. Performance is moderate, with a clean and structured design. From a security perspective, the site uses HTTPS and implements basic security measures like CAPTCHA and cookie consent. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or suspicious elements were detected. Privacy compliance is addressed with a privacy policy and cookie banner, indicating GDPR awareness. Overall, the website presents a low-risk profile with strong business credibility and a good security posture. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility to further strengthen trust and compliance.

P

Publicontext AG

investrends.ch

56

Investrends.ch is a Swiss-based professional news platform operated by Publicontext AG, targeting professional investors with up-to-date news and trends in asset management and finance. The website offers a variety of services including news articles, newsletters, event listings, advertorials, and a job board focused on the investment sector. It maintains a strong market position within the niche of Swiss financial news for professionals, supported by partnerships with reputable financial institutions and asset managers. Technically, the site is built on the ProcessWire CMS and utilizes a range of JavaScript libraries and analytics tools such as Matomo and Google Analytics, with privacy-conscious configurations like IP anonymization and cookie consent mechanisms. The site is mobile-optimized and features good SEO practices, though some technical debt is noted with the use of an outdated jQuery version and missing security headers. From a security perspective, the site enforces HTTPS and implements cookie consent and email obfuscation to protect user data. However, it lacks explicit security headers and uses an outdated JavaScript library, which could pose risks. No incident response or security policy information is publicly available. The WHOIS data confirms the legitimacy of the domain ownership by Publicontext AG in Switzerland, consistent with the website's business claims. Overall, investrends.ch presents a professional and trustworthy platform for its target audience, with good privacy compliance and business credibility. Security improvements are recommended to enhance protection and trust further.

V

Vapaa-ajan tarviketalo AK & Co Ltd

vapaa-aika.com

56

Vapaa-aika.com is a Finnish retail business specializing in camping, caravan, and leisure vehicle accessories, operating both online and via a physical store located in Villähde, Finland. Established since 1986, the company offers a broad range of products for outdoor and leisure activities, targeting consumers interested in caravanning and camping. The website is professionally designed with clear navigation and multilingual support, reflecting a mature digital presence. Technically, the site uses modern JavaScript libraries, Google Tag Manager, and Google Analytics for tracking, with a custom or proprietary CMS platform. Security posture is adequate with HTTPS enforced and cookie consent implemented, though security headers and explicit security policies are absent. The domain is well aged and registered through reputable providers, supporting business legitimacy. Overall, the site presents a trustworthy and professional e-commerce platform with room for security and compliance enhancements.

H

HUOJ.hr

tocno.hr

51

Tocno.hr is a Croatian fact-checking and media literacy platform operated by HUOJ.hr, focusing on verifying statements during election cycles and providing educational content to improve public understanding of media and information. The website is built on WordPress, leveraging common plugins for GDPR compliance and user interaction, hosted by a Croatian hosting provider. The platform demonstrates a good level of digital maturity with a professional design, mobile optimization, and clear navigation. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though security headers could be improved. Privacy compliance is well addressed with accessible policies and consent management. Overall, the site is trustworthy and serves a niche audience interested in media literacy and fact-checking.

S

Sovrn, Inc.

sovrn.com

72

Sovrn, Inc. operates a comprehensive technology platform focused on empowering publishers, creators, and advertisers to maximize revenue through advertising, affiliate commerce, and data monetization solutions. The company positions itself as a leading player in the open web ecosystem, trusted by major brands and publishers. The website reflects a mature digital presence with professional design, clear navigation, and extensive content tailored to its target audiences. Technically, Sovrn leverages WordPress CMS with modern plugins and analytics tools, ensuring good SEO and mobile optimization. Security posture is solid with HTTPS, cookie consent, and bot management, though explicit security headers and incident response disclosures could be improved. WHOIS data is unavailable, likely due to privacy protection, which slightly impacts transparency but does not detract from the overall credibility. Privacy compliance is well addressed with GDPR-aligned policies and consent mechanisms. Overall, Sovrn demonstrates a strong market position and digital maturity with room for enhanced security transparency.

D

DebugBear Ltd

debugbear.com

60

DebugBear Ltd operates a specialized SaaS platform focused on web performance and Core Web Vitals monitoring. Their service suite includes synthetic website monitoring, real user monitoring, and Google CrUX data integration, targeting SEO specialists, developers, agencies, ecommerce stores, and enterprises. The website is professionally designed with excellent content quality and clear navigation, reflecting a mature digital presence. Technically, the site uses modern frameworks like Bootstrap and React, integrates advanced analytics and error tracking tools such as Google Analytics, Plausible, and Rollbar, and delivers fast performance with mobile optimization. Security posture is good with HTTPS enforced and error monitoring in place, though explicit security headers and cookie consent mechanisms are absent. The WHOIS data is unavailable, which reduces domain trustworthiness despite the professional site appearance. Overall, DebugBear presents a credible and technically sound business with room for security and compliance improvements.

E

Eko

eko.com

68

Eko is a technology company specializing in AI-powered interactive video solutions for ecommerce businesses. Their platform offers a visual commerce suite that enables brands to create engaging, conversion-driven video content using AI Studio technology. The website positions Eko as an innovative player in the ecommerce technology space, targeting businesses seeking to enhance product engagement and brand elevation through interactive video experiences. Technically, the website is built using Framer CMS, hosted on AWS infrastructure, and integrates advanced analytics tools such as Google Analytics, Snowplow, and HubSpot for marketing and user behavior tracking. The site demonstrates good design quality, mobile optimization, and SEO practices, although accessibility features are basic. Security posture is solid with HTTPS enabled and domain-level protections in place, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of visible privacy and cookie policies or consent mechanisms. Overall, the domain is well-established since 2000, indicating business legitimacy. Strategic improvements in privacy disclosures and security configurations would enhance trust and compliance.

Information Security Society Switzerland (ISSS) is a leading Swiss professional association dedicated to ICT security, serving over 1100 members from business, government, and academia. The organization offers events, awards, and publications to promote cybersecurity awareness and best practices in Switzerland. The website reflects a mature digital presence with a focus on community engagement and knowledge sharing. Technically, the site is built on WordPress with modern plugins for SEO, cookie compliance, and interactive content such as sliders. Security posture is solid with HTTPS enforced and cookie consent implemented, though formal security policies and incident response contacts are not publicly detailed. Overall, ISSS demonstrates a credible and professional online presence aligned with its mission as a non-profit security society.

D

Dalmatinski portal

dalmatinskiportal.hr

54

Dalmatinski portal is a Croatian regional news media website focused on delivering the latest news from Split and the Dalmatia region. It offers a variety of content including news articles, sports updates, videos, and photo galleries. The site targets a general audience interested in regional news and culture. Its business model primarily relies on advertising revenue, with multiple banner ads and partnerships visible throughout the site. The website maintains a consistent brand presence and provides GDPR-compliant privacy and cookie policies, reflecting awareness of data protection regulations. Technically, the site uses a combination of jQuery, Marfeel SDK for advertising, Typekit fonts for typography, and Google Analytics for user tracking. The website is mobile-optimized with good navigation and SEO practices. HTTPS is enforced, ensuring secure communication. However, there is a lack of advanced security headers and explicit security or incident response policies, which could be improved to enhance security posture. The WHOIS data for the domain is not publicly available due to GDPR privacy restrictions and rate limiting, which is common for media websites but limits transparency. No suspicious patterns were detected, and the domain appears legitimate based on content and technical indicators. Overall, the website presents a professional and trustworthy regional news portal with moderate security and privacy compliance. Strategic recommendations include implementing additional security headers, publishing explicit security and incident response policies, and considering a vulnerability disclosure program to improve trust and security maturity.

B

Bolden

bolden.nl

43

Bolden is an independent creative agency based in Amsterdam, specializing in brand strategy, brand identity, digital experiences, and e-commerce design since 2010. The company has established a strong market position with multiple industry awards such as the FONK150 Best Small Design Agency. Their target audience includes brands and businesses seeking professional digital and branding services. The website reflects a high level of professionalism, excellent design quality, and clear navigation, supporting their market reputation. Technically, the website employs modern web technologies including JavaScript ES modules, lazy loading with Lozad.js, and Google Analytics with IP anonymization, indicating a mature digital infrastructure. The site is mobile-optimized and performs well, with good SEO and accessibility features. However, the CMS and hosting provider are not explicitly identified. From a security perspective, the site uses HTTPS with strong SSL configuration and includes standard security headers. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial; while a privacy policy and terms of service exist (in Dutch), there is no cookie consent mechanism or explicit GDPR compliance details. Incident response and security policy pages are absent. Overall, the website presents a low risk profile with strong business credibility and technical implementation. Strategic improvements in privacy compliance and security transparency would enhance trust and regulatory adherence.

The Manifest is a well-established B2B marketplace and business news platform founded in 1999, headquartered in Washington, D.C. It connects buyers with verified business service providers across multiple sectors including development, marketing, design, IT, and business services. The platform offers comprehensive service listings, guides, and industry data to support business decision-making. Technically, the website employs modern JavaScript technologies, uses Cloudflare for DNS and likely CDN services, and integrates Google Analytics and Cookiebot for analytics and consent management. The site is mobile-optimized with good SEO and accessibility features. Security posture is solid with HTTPS enforced and domain protections in place, though DNSSEC is not enabled and no explicit security policy or incident response information is published. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a reliable resource for B2B buyers and service providers.

V

Verband der Heilklimatischen Kurorte Deutschlands e.V.

heilklima.de

63

The website heilklima.de represents the Verband der Heilklimatischen Kurorte Deutschlands e.V., a non-profit association promoting health resorts with therapeutic climate benefits across Germany. It provides detailed information about member resorts, premium health resorts, and related tourism services. The site targets tourists and visitors seeking wellness and health-focused vacations in Germany. Technically, the website is built using the sitely.app CMS platform, employs modern HTML5 and CSS3 standards, and integrates Google Analytics with consent-based activation. The site is mobile-optimized and offers good user experience and navigation clarity. Security-wise, the site uses HTTPS but lacks explicit security headers and detailed privacy or cookie policies, which are areas for improvement. No vulnerabilities or suspicious content were detected, and the domain registration aligns well with the business purpose, indicating legitimacy. Overall, the website is professional and trustworthy but could enhance privacy compliance and security posture.

K

Kinderärzte Schweiz

jahrestagung.ch

63

Kinderärzte Schweiz is a well-established Swiss pediatric association organizing annual conferences and educational events for pediatricians and medical practice assistants. The website focuses on the 2025 anniversary conference, highlighting workshops, lectures, and sponsorship by reputable pharmaceutical companies. The organization targets healthcare professionals in pediatrics within Switzerland, operating as a medium-sized non-profit entity with a 30-year history. Technically, the website uses a modern JavaScript stack including jQuery, Bootstrap 3.3.7, and Google Analytics for tracking. It is built on the Tocco Business Framework CMS and is mobile-optimized with good SEO practices. However, some accessibility features are basic, and performance is moderate. From a security perspective, the site uses HTTPS with good SSL configuration but lacks important security headers and published privacy or cookie policies, which are compliance gaps. No vulnerability disclosure or incident response information is provided. The WHOIS data is consistent and transparent, supporting the legitimacy of the domain and organization. Overall, the website is professional and trustworthy but would benefit from improved privacy compliance and enhanced security practices to strengthen its posture and user trust.

N

Netcad Yazılım A.Ş.

netcad.com

60

Netcad Yazılım A.Ş. is a well-established Turkish software company specializing in Geographic Information Systems (GIS) and smart city solutions, with over 35 years of experience. The company offers a broad portfolio of engineering, planning, and digital mapping products and services, serving a large user base including public institutions, municipalities, private firms, and universities. Their market position is strong domestically, supported by certifications such as CMMI and Turquality. Technically, the website is modern, fast, and mobile-optimized, leveraging Webflow CMS, Google Analytics, and reCAPTCHA for security and analytics. Security posture is good with HTTPS and form protections, though some HTTP security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. However, WHOIS data for the domain is missing, which slightly reduces trust but does not negate the evident legitimacy of the business. Overall, the company demonstrates a mature digital presence and a strong business model focused on GIS and smart city technology.

F

FMH Consulting Services AG

fmhservices.ch

69

FMH Consulting Services AG is a well-established Swiss service cooperative dedicated to supporting medical professionals with consulting, insurance, seminars, and practice management services. The company holds a strong market position as a trusted partner for physicians in Switzerland, offering a broad portfolio of services tailored to the healthcare sector. Their digital presence is powered by a Dynasite CMS platform, integrating modern web technologies such as Google Analytics and Intercom for user engagement and analytics, alongside a comprehensive cookie consent mechanism ensuring GDPR compliance. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information across multiple Swiss regions. Security posture is generally good with HTTPS enforced and privacy policies in place, though some outdated JavaScript libraries present potential vulnerabilities that should be addressed. Overall, FMH Consulting Services AG demonstrates a mature digital infrastructure aligned with its business goals and compliance requirements.

S

Stiftung Science et Cité

science-et-cite.ch

49

Stiftung Science et Cité is a Swiss non-profit foundation dedicated to fostering dialogue between science and society through various projects including citizen science, educational initiatives, and public events. The organization targets a broad audience including the general public, children, and youth, positioning itself as a key player in science communication within Switzerland. The website reflects a professional and consistent brand image with comprehensive content and multilingual support. Technically, the website is built on TYPO3 CMS and leverages modern JavaScript libraries such as jQuery, Tobii lightbox, and Plyr for media handling. Google Analytics is used with IP anonymization to track user engagement. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. No hosting provider details were identified. From a security perspective, the site uses HTTPS with good SSL configuration and secure form handling via Mailchimp. However, it lacks explicit security headers and formal security or incident response policies. Privacy compliance is addressed with a comprehensive privacy and cookie policy, though no explicit cookie consent mechanism is present. Contact information is clearly provided, enhancing business credibility. Overall, the website is trustworthy, professionally maintained, and aligned with the foundation's mission. Security posture is adequate but could be improved with additional headers and policies. Privacy compliance is good but could benefit from explicit consent mechanisms. No critical vulnerabilities or suspicious elements were detected.

C

Contato Seguro

contatoseguro.com.br

61

Contato Seguro operates a professional whistleblowing platform in Brazil, providing secure and anonymous channels for reporting workplace irregularities. The company offers multiple access points including a website, mobile app, and WhatsApp integration, emphasizing confidentiality and user privacy. Their market position is that of a trusted partner in compliance and ethical reporting solutions. Technically, the website is hosted on AWS infrastructure, uses modern web technologies such as Bootstrap and jQuery, and integrates Google reCAPTCHA for security. The site is mobile-optimized and accessible, with a cookie consent mechanism and privacy policy demonstrating GDPR compliance. Security posture is strong with HTTPS enforced, secure forms, and no visible vulnerabilities. WHOIS data confirms domain legitimacy and consistent registration details. Overall, the site is professional, trustworthy, and well-structured for its business purpose.

O

outline4

outline4.ch

41

outline4 is a small, specialized web design agency based in Bern, Switzerland, founded in 2003. The company focuses on creating beautiful, user-friendly, and responsive websites with a strong emphasis on CMS solutions such as Craft CMS and Expressionengine, as well as SEO optimization. They maintain a local market presence with partnerships with other Bern-based agencies and offer a portfolio of diverse web design projects. The website is well-structured, professionally designed, and optimized for mobile devices, reflecting a mature digital presence. Technically, the website uses a modern albeit slightly outdated technology stack including jQuery 1.11.1, Modernizr for SVG detection, and Google Analytics for tracking. The site is served over HTTPS with no visible security issues in the HTML content. However, there is a lack of security headers and the use of an outdated jQuery version poses a potential security risk. The site does not implement privacy or cookie policies, which is a compliance gap especially under GDPR regulations. From a security perspective, the site demonstrates good baseline practices such as HTTPS and no exposed sensitive data, but lacks advanced security headers and incident response information. No forms are present, reducing attack surface. The WHOIS data is consistent with the business claims, showing a domain age appropriate for the company's founding date and no privacy protection, which is suitable for this type of business. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements in privacy compliance, security headers, and updating JavaScript libraries would enhance the security posture and regulatory compliance. The business is credible and well-positioned locally with a clear service offering and partner ecosystem.

G

Gruber Baumaterialien AG

gruber-baumat.ch

65

Gruber Baumaterialien AG operates as a regional supplier and service provider for construction and renovation projects in the Wallis region of Switzerland. The company offers a broad range of building materials, logistics, consulting, and custom cutting services, targeting construction professionals and retail customers. Their market position is strong regionally, supported by partnerships with other material suppliers and a presence on social media platforms. Technically, the website is built on Umbraco CMS with common JavaScript libraries and integrates Google Analytics for visitor tracking. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is moderate; while HTTPS is presumably enabled, no explicit security headers were detected, and privacy compliance is basic but includes a cookie consent mechanism. The WHOIS data shows privacy protection, which is common and justified for this business type. Overall, the website is trustworthy and professional but could improve in security best practices and contact transparency.

P

Proz Frères

proz.ch

63

Proz Frères is a Swiss manufacturing company specializing in prefabricated concrete products primarily serving the construction market in the French-speaking region of Switzerland. The website reflects a medium-sized regional business with a focus on quality, production, and delivery services. The company presents itself professionally with clear service offerings and a consistent brand image. Technically, the website is built on the Umbraco CMS platform, utilizing common JavaScript libraries and Google Analytics for tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and detailed security policies. No critical vulnerabilities or exposed sensitive data were detected. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

D

David l’instant chocolat SA

davidchocolatier.ch

64

David l’instant chocolat SA is a Swiss artisanal chocolatier operating multiple retail shops and an online store, specializing in handcrafted chocolates and seasonal products. The company targets chocolate enthusiasts and gift buyers primarily within Switzerland. The website is professionally designed, mobile-optimized, and provides clear product and shop information, supporting a positive user experience and strong brand presence. Technically, the site uses Umbraco CMS with jQuery and Owl Carousel, integrates Google Analytics for tracking, and includes third-party widgets for enhanced marketing. Security posture is generally good with HTTPS enabled and no exposed sensitive data, but lacks some security headers and a cookie consent mechanism, which impacts privacy compliance. WHOIS data confirms the legitimacy and consistency of the business registration in Switzerland. Overall, the website is trustworthy and well-positioned in its niche, though improvements in privacy compliance and security headers are recommended.

O

Observatoire valaisan de la santé

ovs.ch

66

The Observatoire valaisan de la santé (OVS) is a regional public health observatory based in Valais, Switzerland. It specializes in collecting, controlling, analyzing, and disseminating health data to support decision-makers, health professionals, and the general public. The website reflects a well-structured platform focused on health indicators and publications relevant to the region. Technically, the site uses Umbraco CMS with jQuery and Google Analytics, showing a moderate level of digital maturity with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks advanced security headers and explicit incident response information. Overall, the site is trustworthy, professional, and compliant with GDPR requirements.

R

Rostal

rostal.ch

58

Rostal is a small Swiss retail business specializing in aromatic herbs from the Grand Saint Bernard region, offering products such as spices, herbal teas, Genepi, and gift sets. The website serves as an informational and branding platform with links to partner e-commerce shops. The technical infrastructure is based on Umbraco CMS with standard web technologies including jQuery and Google Analytics. The site implements basic cookie consent and data protection notices but lacks comprehensive security policies or incident response information. Social media presence is established via Facebook and YouTube. Overall, the website is functional but could benefit from enhanced SEO, accessibility, and security practices.

M

Matériaux Plus SA

materiauxplus.ch

64

Matériaux Plus SA is a Swiss-based company specializing in the supply of construction and renovation materials along with related services such as logistics, technical advice, and product cutting. The company targets both professional builders and private individuals primarily in the Valais region. Their website is built on the Umbraco CMS platform and employs common web technologies including jQuery and Google Analytics for tracking. The site is well-structured, mobile-optimized, and provides clear navigation and relevant content. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and incident response transparency. Overall, the domain registration and website content align well, indicating a legitimate and trustworthy business presence.

B

Bourgeoisie de Sion

bourgeoisie-de-sion.ch

63

Bourgeoisie de Sion is a Swiss public law corporation with a long historical background dating back to 1179. It manages communal heritage, properties, and cultural assets distinct from the municipal government of Sion. The website serves as an informational portal for residents and stakeholders, providing access to institutional information, cultural heritage, nature domains, economic assets, and contact points. The digital infrastructure is based on Umbraco CMS with jQuery and Google Analytics integration, reflecting a moderate level of digital maturity. The site includes cookie consent mechanisms and a privacy policy, indicating awareness of data protection requirements. However, explicit terms of service, security policies, and incident response information are not publicly available, which could be improved to enhance transparency and compliance. Security posture is moderate with no visible advanced security headers or configurations, and Google Analytics is used without IP anonymization, which may raise privacy concerns. Overall, the website is professional, trustworthy, and serves its governmental and cultural mission effectively.

F

Fromagerie Moléson SA

moleson-sa.ch

64

Fromagerie Moléson SA is a Swiss cheese and dairy product manufacturer and retailer specializing in traditional and innovative cheese varieties made from cow, goat, and sheep milk. The company targets both general consumers and professional buyers, offering products through retail outlets, resellers, and a professional e-shop. The website is professionally designed, multilingual (French and German), and showcases certifications and quality labels that reinforce its market position as a trusted regional specialty producer. Technically, the site is built on Umbraco CMS, uses jQuery and Google Analytics, and is moderately optimized for mobile and performance. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security headers and incident response information. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact information and social media presence.

M

Mein Teenager | eine Website für Eltern

meinteenager.ch

55

MeinTeenager.ch is an educational and advisory website targeted at parents of teenagers, providing guidance on understanding adolescents, communication, setting rules, crisis management, and addressing social topics such as alcohol, tobacco, and cannabis use. The site is professionally designed using WordPress with the Divi theme and supports multilingual content with German as the primary language and an Italian partner site. The technical infrastructure includes modern web technologies, cookie consent management via Usercentrics, and Google Analytics for visitor tracking. Security posture is adequate with HTTPS enforced but lacks visible security headers and explicit privacy and terms of service documentation. Contact information is not readily available, which may impact user trust and compliance. Overall, the website is functional, well-structured, and serves a niche audience effectively.

Certo! One Mastercard is a cashback credit card product offered by Cembra Money Bank AG, a reputable Swiss financial institution. The website promotes the card's benefits including no annual fees, cashback rewards at favorite merchants, and additional insurance coverage. The target audience is consumers in Switzerland looking for a convenient and rewarding credit card solution. The company leverages modern digital marketing and analytics tools such as Google Tag Manager, Google Analytics, and OneTrust for cookie consent management, indicating a mature digital infrastructure. The website is well-designed, mobile-optimized, and accessible, providing a professional user experience. Security measures include HTTPS enforcement and Mastercard Identity Check integration, though explicit security headers and policies are not prominently published. Overall, the site demonstrates a strong security posture with room for improvement in transparency around privacy and security policies.

A

Avada

avada.com

64

Avada is a leading WordPress website builder platform, established in 2002, offering a comprehensive suite of tools including live visual builder, header/footer builders, WooCommerce integration, and a large library of prebuilt websites and content elements. It targets a broad audience from beginners to professionals and marketers, positioning itself as the #1 selling website builder for WordPress and WooCommerce. The platform emphasizes usability, performance, and flexibility, supported by a strong community and extensive documentation. Technically, the website is built on WordPress with WooCommerce and uses modern JavaScript libraries and marketing tools such as HubSpot and Google Analytics. The site is hosted with Cloudflare DNS and uses HTTPS, ensuring secure connections. Security posture is good but could be improved by enabling DNSSEC and publishing explicit security policies. Privacy compliance is limited due to the absence of visible privacy and cookie policies. Overall, the website is professional, trustworthy, and well-optimized for SEO and mobile use.

G

G3Lifeorg LLC

conversiontracking.com

64

ConversionTracking.com is a SaaS platform specializing in marketing attribution and conversion tracking, helping businesses understand the sources of their sales, leads, and revenue. The company, identified as G3Lifeorg LLC, offers a dashboard with over 25 built-in reports and integrates with more than 150 platforms, targeting marketers and businesses seeking to optimize their marketing efforts. The website is professionally designed, mobile-optimized, and uses modern web technologies including Google Analytics, Microsoft Clarity, and Cloudflare Insights for analytics and performance monitoring. Security measures such as HTTPS and CSRF tokens are implemented, but some security headers and cookie consent mechanisms are missing, indicating room for improvement in privacy compliance. The WHOIS data for the domain is unavailable or missing, which raises concerns about domain registration transparency but does not negate the professional appearance and functionality of the site. Overall, the platform presents a solid technical infrastructure and a clear business focus, though enhancing transparency and compliance would strengthen trust.

N

Netlify

netlify.app

70

Netlify is a leading technology platform that enables developers and businesses to build, deploy, and manage modern web applications with ease. Their platform integrates AI tools and code deployment capabilities, offering instant deployment and a comprehensive suite of services including deploy previews, agent runners, serverless functions, storage, and an edge network. Positioned strongly in the Jamstack ecosystem, Netlify targets developers and enterprises seeking scalable and efficient web hosting solutions. Technically, Netlify employs a modern tech stack featuring Astro and Preact frameworks, alongside robust analytics and marketing integrations such as Google Analytics, Segment, Amplitude, and HubSpot. The website demonstrates excellent performance, mobile optimization, and accessibility, reflecting a mature digital infrastructure. Hosting is provided by Netlify itself, ensuring tight integration and optimized delivery. From a security perspective, the site enforces HTTPS with strong SSL configurations and implements security headers and reCAPTCHA Enterprise for bot mitigation. Privacy compliance is well addressed with clear privacy and cookie policies and consent management via OneTrust. However, explicit security policies and incident response information are not publicly available, representing an area for improvement. Overall, the website and platform present a high level of professionalism, security, and compliance, with minor gaps in transparency around security incident handling and vulnerability disclosure. The absence of public WHOIS data is consistent with privacy protection practices common in the tech industry and does not detract from the site's legitimacy.

C

CyberPeace Institute

cyberpeacetracer.ngo

64

CyberPeace Tracer is a professional non-profit platform operated by the CyberPeace Institute, focusing on exposing and analyzing cyber threats and disinformation impacting civil society organizations globally. The platform leverages AI and partnerships with data providers to deliver actionable cybersecurity insights and support to NGOs and nonprofits. The website is well-designed, mobile-optimized, and provides rich content including threat statistics, sector-specific case studies, and calls to action for donors and volunteers. Technically, the site uses modern frameworks like Astro and is hosted on Cloudflare, ensuring good performance and security. However, the absence of privacy and cookie policies, lack of security headers, and inconsistencies in WHOIS domain registration data present areas of concern. Overall, the platform demonstrates a strong commitment to digital resilience for civil society but should address compliance and security policy transparency to enhance trust and regulatory alignment.

The Underserved Project is an EU-funded initiative aimed at empowering law enforcement agencies to support humanitarian actors and NGOs in cyberspace. The project focuses on informing vulnerable sectors about cybercrime impacts, preventing cybercrime through capacity building, and connecting NGOs with law enforcement and CERTs to create a comprehensive cybercrime reporting network. The website serves as a platform for project information, deliverables, news, and open-source code repositories, targeting a niche audience within the non-profit and humanitarian sectors. Technically, the website is built using modern technologies including Astro framework, hosted on Vercel, and integrates Google Analytics and Vercel Analytics for tracking. It features responsive design and good SEO practices, with fast performance and basic accessibility. The site uses HTTPS with excellent SSL configuration but lacks some security headers that could enhance protection. From a security perspective, the site demonstrates good practices such as no exposed sensitive data and secure hosting. However, it lacks a cookie consent mechanism, published security or incident response policies, and a vulnerability disclosure program. The WHOIS data is consistent with the website's EU project nature, registered via a reputable registrar, indicating high legitimacy. Overall, the website is professional, trustworthy, and well-aligned with its mission, though improvements in privacy compliance and security policies would strengthen its posture and user trust.

A

Advenio

advenio.mx

52

Advenio is a well-established childcare and early education provider in Mexico, operating since 2010 and part of the Talisis educational group. The company offers a range of services including daycare, preschool, home care, parenting courses, and extracurricular activities, targeting families with young children. Their market position is solid within the regional childcare sector, supported by multiple centers in key cities and a consistent brand presence. Technically, the website is built on modern Webflow infrastructure, utilizing popular analytics and tracking tools such as Google Analytics, Facebook Pixel, Hotjar, and Sentry for error monitoring. The site is mobile-optimized, fast-loading, and well-structured with good SEO and accessibility features. However, some security headers are missing, and there is no explicit cookie consent mechanism, which could be improved for better privacy compliance. From a security perspective, the site uses HTTPS and implements reCAPTCHA for form protection, indicating a good baseline security posture. No vulnerabilities or exposed sensitive data were detected. The WHOIS data for the subdomain is unavailable, which is typical for subdomains, and the site content aligns well with the parent Talisis group, supporting legitimacy. Overall, the website demonstrates a high level of professionalism, trustworthiness, and technical maturity, with minor recommendations to enhance privacy compliance and security headers. The risk level is low, making it a reliable digital presence for the business.

L

Laboratoria

laboratoria.la

57

Laboratoria is a well-established non-profit organization founded in 2014, focused on empowering women in Latin America through education and career development programs in the digital economy. The website presents a professional and consistent brand image, offering free and paid programs such as 'Activa tu carrera' and a growth and development membership. The target audience is women over 18 in Latin America seeking better employment opportunities. Technically, the site uses modern technologies including Webflow CMS, Google Tag Manager, and YouTube embeds, hosted on Webflow with DNS managed by DigitalOcean. The site is fast, mobile-optimized, and accessible with good SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements are recommended in DNSSEC and security headers. Privacy compliance is strong with clear policies and GDPR-aligned consent. No direct contact emails or phone numbers are published, but social media channels are active. Overall, the site is trustworthy and professional, with a high legitimacy score based on WHOIS data and domain age.

L

Léman Bleu Télévision

lemanbleu.ch

59

Léman Bleu Télévision operates as a regional Swiss television channel based in Geneva, providing news, cultural programming, debates, and sports content. The website serves as a digital platform to broadcast and promote their programming, targeting a general audience primarily in the Geneva region. The business model centers on media broadcasting and online content delivery, positioning itself as a trusted local news source with regular updates and multimedia content.

M

Media One Group

urbnradio.ch

48

URBN is a Swiss-based urban culture radio station operated by Media One Group, focusing on Rap, Hip-Hop, and R’n’B music targeted at francophone and Romande audiences. The website presents a professional and modern digital presence using Nuxt.js and Vue.js frameworks, with integrated streaming and music curation services. The technical infrastructure is modern and performant, with good mobile optimization and use of analytics tools such as Google Analytics and Tag Manager. Security posture is adequate with HTTPS enforced, but lacks visible security headers and formal security policies. Privacy compliance is weak due to absence of explicit privacy and cookie policies. Overall, the site is safe, trustworthy, and well-branded but would benefit from enhanced privacy and security disclosures.

2

2L.COMM SA

kendros.com

40

Kendros.com operates as a specialized travel industry information portal primarily targeting travel agencies and tourism professionals. The platform aggregates and distributes daily information from various service providers, including travel offers, directories, visa information, and news updates. The business is linked to 2L.COMM SA, a Swiss company, and serves a niche market within the transportation and hospitality sectors. The website content is mostly in French and provides basic but relevant information for its target audience. Technically, the website is built on legacy ASP.NET WebForms technology with JavaScript enhancements and uses Google Analytics for visitor tracking. The site is moderately optimized with basic mobile and accessibility features but lacks modern security headers and advanced privacy compliance mechanisms. The absence of a clear cookie policy and GDPR compliance indicators suggests room for improvement in privacy practices. From a security perspective, the site uses HTTPS but lacks critical security headers such as Content-Security-Policy and anti-CSRF protections. No vulnerabilities were directly observed, but the missing WHOIS data for the domain raises concerns about domain registration legitimacy. Overall, the security posture is moderate but could benefit from enhancements to protect user data and improve trust. The overall risk assessment indicates a moderately trustworthy site with some compliance and security gaps. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers and form protections, and resolving domain registration transparency issues to strengthen legitimacy and user trust.