Security Directory

J

Jubla Birsfelden

jubla-birsfelden.ch

52

Jubla Birsfelden is a local non-profit youth organization based in Birsfelden, Switzerland, offering engaging leisure activities and diverse holiday camps primarily targeted at children and adolescents. The website serves as an information hub for their groups, events, and camp registrations, reflecting a community-focused business model with a strong local presence. Their market position is that of a trusted youth organization within their community, supported by active social media channels and clear contact information. Technically, the website is built on the Ongoing CMS platform, utilizing modern web technologies such as HTML5, CSS3, JavaScript, and responsive design elements to ensure good mobile optimization and user experience. The site loads moderately fast and includes SEO-friendly metadata and structured data for enhanced search visibility. Security-wise, the website enforces HTTPS and avoids exposing sensitive data, but lacks some security headers and explicit incident response contacts. Privacy compliance is partially addressed with a privacy policy present, though cookie consent mechanisms are absent. Overall, the site demonstrates a good security posture with room for improvement in privacy and security best practices. The domain registration data aligns well with the website's claims, indicating legitimacy and trustworthiness. Strategic recommendations include implementing security headers, adding cookie consent, and establishing a vulnerability disclosure channel to enhance compliance and security posture.

FUBIC is a German innovation center focused on transforming a former hospital site into a technology quarter emphasizing life sciences, health economy, and ICT. The project is notable for pioneering an all-electric, 100% renewable energy supply system for the campus, supported by a consortium of universities, startups, and energy companies, funded by the German Federal Ministry for Economic Affairs and Climate Action. The website is well-designed, content-rich, and uses modern web technologies, providing comprehensive information about the project, news updates, and multimedia resources. Security posture is adequate with HTTPS usage but lacks visible security headers and cookie consent mechanisms. WHOIS data is unavailable, likely due to privacy protection, but the website's legitimacy is supported by its institutional affiliations and funding. Overall, the site presents a professional and trustworthy digital presence for a medium-sized research and innovation entity in the energy sector.

J

Jungwacht Blauring Schweiz

jubla.ch

56

Jungwacht Blauring Schweiz is a well-established non-profit youth organization focused on providing meaningful leisure activities and camps for children and adolescents in the German-speaking part of Switzerland. The organization operates through a large network of approximately 400 local groups, offering structured programs and volunteer opportunities. The website reflects a professional and consistent brand image, targeting families and youth participants. Technically, the site leverages modern web technologies including Google Tag Manager, Hotjar, and Google Maps API, built on the TYPO3 Neos CMS framework. The site is mobile-optimized with good SEO and accessibility basics. Security posture is solid with HTTPS and some security best practices, though explicit security headers and policies are not fully implemented. Privacy compliance is limited due to the absence of visible privacy and cookie policies. Overall, the domain registration aligns well with the organization's claims, supporting legitimacy and trustworthiness.

A

ARBÖ

arboe.at

47

ARBÖ is a well-established Austrian automobile club providing roadside assistance, vehicle inspections, legal advice, and various automotive-related services. The website targets vehicle owners and drivers in Austria, offering membership benefits and technical services. The digital infrastructure is built on TYPO3 CMS with modern frontend technologies including Bootstrap and jQuery, and integrates Google Tag Manager for analytics and marketing. The site is mobile optimized and presents a professional user experience with clear navigation and relevant content. Security posture is good with HTTPS enforced and a comprehensive cookie consent mechanism, though it lacks explicit security policies and incident response contacts. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the website is trustworthy and professionally maintained, suitable for its audience and business model.

K

Kloster Einsiedeln

kloster-einsiedeln.ch

54

Kloster Einsiedeln is a historic Benedictine abbey and the most significant pilgrimage site in Switzerland, hosting around fifty monks. The website serves as a comprehensive portal for religious services, cultural events, educational activities, and visitor information. It targets pilgrims, religious followers, and cultural visitors, offering live-streamed services, an online shop, and detailed information about the abbey's history and community. Technically, the site is built on TYPO3 CMS with modern web technologies, providing good mobile optimization and accessibility. Security posture is solid with HTTPS enforced, but lacks some security headers and cookie consent mechanisms. The domain registration aligns well with the abbey's identity, indicating high legitimacy. Overall, the website is professional, trustworthy, and well-suited for its audience.

U

United Kiosk AG

united-kiosk.de

56

United Kiosk AG operates a well-established German e-commerce platform specializing in digital and print magazine and newspaper subscriptions. With over 25 years in the market, it offers a vast catalog of more than 5,000 titles, serving a broad audience interested in diverse topics. The company emphasizes sustainability, fair practices, and trusted certifications, positioning itself as a reliable and culturally significant media provider in Germany. The website's design is professional, consistent, and optimized for mobile devices, providing an excellent user experience with clear navigation and relevant content.

Hofheimer Wohnungsbau GmbH (HWB) is a regional real estate company focused on socially responsible housing and city development in Hofheim am Taunus, Germany. The company offers a broad range of services including residential construction, social management, property management, and community engagement. Their market position is that of a trusted local housing provider with a strong emphasis on social responsibility and sustainability, supported by published annual and sustainability reports. Technically, the website employs a moderate technology stack with jQuery and several UI libraries, delivering a well-structured, mobile-optimized, and accessible user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements are recommended in security headers and updating legacy libraries. Privacy compliance is partially met with a privacy policy and cookie policy present, but lacks an active cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with the business's mission and audience.

T

Talleux & Zöllner GbR

talleux-zoellner.de

47

Talleux & Zöllner GbR is a small German internet agency specializing in the conception and programming of websites and web applications, primarily using TYPO3 CMS. They serve medium-sized companies, organizations, and agencies, offering services from project conception to ongoing maintenance and support. Their market position is that of a niche provider with certified TYPO3 developers and a focus on tailored web solutions. Technically, the website is built on TYPO3 CMS with PHP, Python, and JavaScript technologies, featuring a moderate performance and good mobile optimization. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers and incident response policies are lacking. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional, trustworthy, and business-focused.

K

K2 Consultancy Ltd

k2cm.co.uk

61

K2 Consultancy Ltd operates the website www.k2cm.co.uk, providing specialized construction management services in the UK. Their business model focuses on delivering end-to-end construction management solutions that enhance financial control, risk mitigation, and collaboration among clients, design teams, and construction teams. The company positions itself as a flexible and innovative partner in complex building projects, supported by ISO certifications and a portfolio of high-profile projects. Technically, the website is built on WordPress with modern frameworks like Bootstrap and includes SEO optimizations and multimedia content, reflecting a mature digital presence. Security posture is good with HTTPS enforced and secure forms, though some security headers and consent mechanisms could be improved. Overall, the website is professional, trustworthy, and well-structured, supporting the company's credibility in the construction sector.

O

Otak

otak.com

55

Otak, Inc. is a professional integrated design and project delivery firm specializing in architecture, engineering, environmental consulting, planning, and project management services. The company emphasizes sustainability, integrity, and community engagement as core values, serving government agencies, developers, and communities primarily in the United States. Their market position is that of a medium-sized, reputable firm with a strong focus on delivering community-centric projects and sustainable solutions. Technically, the website is built on WordPress with a modern technology stack including Google Analytics, Google Tag Manager, and various performance and SEO optimization plugins. The site is well-optimized for mobile devices, features good accessibility, and demonstrates excellent SEO practices. The infrastructure appears robust with fast loading times and a professional design. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms compliant with GDPR. However, it lacks visible security headers, a published security policy, and incident response contact information. The absence of WHOIS domain registration data raises some concerns about domain transparency, although the website content and social media presence support its legitimacy. Overall, Otak presents a professional and trustworthy online presence with minor gaps in security transparency and domain registration information. Strategic improvements in security policy publication and domain WHOIS transparency would enhance trust and compliance.

Architecture for Communities Los Angeles (ACLA) is a small non-profit organization dedicated to inspiring and empowering communities in Los Angeles through architecture education, events, and engagement. Their website serves as a hub for promoting community events, student exhibitions, scholarships, and sustainability initiatives. The organization targets students, architects, and community members interested in architecture and social impact within the Los Angeles region. The site reflects a consistent brand and professional presentation aligned with their mission. Technically, the website is built on WordPress with WooCommerce for donations and event registrations, leveraging common libraries such as jQuery, RoyalSlider, and Slick Carousel. Hosting is provided by InMotion Hosting, and the site uses HTTPS with a good SSL configuration. SEO and mobile optimization are well addressed, though accessibility features are basic. Analytics are implemented via Google Analytics and Jetpack Stats, but the Google Analytics plugin is not fully configured. From a security perspective, the site enforces HTTPS and uses domain transfer protections. However, it lacks DNSSEC and important security headers like Content-Security-Policy. No cookie consent mechanism is present, which may impact GDPR compliance. Payment processing is handled securely via Authorize.Net CIM. No incident response or security policy is published, and no vulnerability disclosure or security.txt file is found. Overall, the website is safe, professional, and trustworthy with a moderate security posture. Recommendations include enabling DNSSEC, adding security headers, implementing cookie consent, completing analytics configuration, and publishing security policies to enhance compliance and trust.

S

South London Gallery

southlondongallery.org

71

South London Gallery is a well-established non-profit cultural institution in London, providing free access to contemporary art exhibitions, film, performance events, and educational programs for diverse audiences including children and adults. The gallery has a strong community focus and a history spanning over 125 years, positioning it as a key player in the local and broader art scene. The website reflects this with rich content, clear navigation, and consistent branding. Technically, the site is built on WordPress with modern JavaScript libraries and integrates Google Analytics, Tag Manager, and Klaviyo for marketing and analytics. Security measures include HTTPS and Google reCAPTCHA, though some security headers are not explicitly detected. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms. The absence of WHOIS data limits domain trust verification but does not detract significantly from the overall legitimacy given the institution's public presence and external references.

I

Input interior

inputinterior.no

59

Input interior is a leading independent interior furnishing group in the Nordic region, specializing in tailored solutions for offices, hospitality, education, and healthcare sectors. The company operates multiple showrooms and maintains a strong digital presence with comprehensive content and social media engagement. Their website is professionally designed, mobile-optimized, and SEO-friendly, reflecting a mature digital infrastructure. Security posture is solid with HTTPS, cookie consent management, and reCAPTCHA integration, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, Input interior presents a trustworthy and credible business front with strong market positioning in the Nordic interior furnishing industry.

Duravit.no is the Norwegian localized website of Duravit, a well-established international brand specializing in bathroom furniture and porcelain products. The company has a long history dating back to 1817 and collaborates with renowned designers to offer high-quality, stylish, and functional bathroom solutions. The website provides rich content including product categories, design inspiration, and tools for customers to plan their bathrooms. Technically, the site uses modern JavaScript libraries, consent management tools, and performance monitoring, hosted likely on a CDN with good SSL configuration. Security posture is solid but could be improved with additional headers and explicit security policies. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a clearly accessible privacy policy page in the provided content. No WHOIS data is publicly available due to Norwegian domain registry privacy policies, but the domain appears legitimate and consistent with the brand. Overall, the website is professional, trustworthy, and well-positioned in the retail bathroom products sector.

AB Hyllteknik is a well-established Swedish manufacturer specializing in strong and flexible shelving and sken systems since 1957. The company serves B2B customers primarily in the Nordic region, including offices, schools, libraries, and furniture resellers. Their product portfolio includes office furniture, library shelving, school cloakroom furniture, and related interior systems. The website reflects a mature business with a consistent brand presence and a clear market position as a leader in their niche. Technically, the site uses a modern tech stack with popular JavaScript libraries, CDN hosting, and standard analytics tools, providing a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS and CSRF protections, though improvements are recommended in DNSSEC deployment and security headers. Privacy compliance is basic with cookie usage disclosed but lacking a formal privacy policy and consent mechanism. Overall, the domain registration data supports the legitimacy and trustworthiness of the business, with a domain age consistent with the company's long history.

G

GKV-Spitzenverband

gkv-gamsi.de

62

The website www.gkv-gamsi.de serves as the official portal for the GKV-Spitzenverband's pharmaceutical quick information service, providing detailed reports and data visualizations on pharmaceutical expenditures within the German statutory health insurance system. It targets healthcare professionals, policymakers, and stakeholders involved in the German healthcare sector. The site offers quarterly reports, procedural information, and regional target agreements, positioning itself as a trusted governmental information source in the healthcare domain. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, jQuery, and integrates Tableau Public for interactive data visualizations. It uses Matomo analytics hosted on its own servers, enhancing privacy compliance. The site is moderately optimized for mobile devices and accessibility, with a clear navigation structure and cookie consent mechanisms aligned with GDPR requirements. From a security perspective, the site enforces HTTPS, uses cookie consent with opt-in for statistics, and applies SameSite cookie attributes. However, it lacks explicit security headers and does not publish a security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's governmental nature, indicating high legitimacy and trustworthiness. Overall, the website demonstrates a strong business credibility and technical foundation with good privacy compliance. Strategic improvements could include publishing a security policy, incident response information, and implementing additional security headers to enhance the security posture further.

S

ShareDesk Global Inc.

optixapp.com

65

Optix, operated by ShareDesk Global Inc., is a specialized SaaS provider offering automation-first coworking and flexible workspace management software. The platform emphasizes end-to-end automation, including booking, invoicing, CRM, and branded mobile apps, targeting coworking operators and community managers seeking to streamline workflows and accelerate growth. The website presents a professional, well-branded, and content-rich experience with strong trust signals such as customer testimonials and industry awards. Technically, the site is built on WordPress with modern marketing and analytics tools integrated, including HubSpot, Google Analytics, and Facebook Pixel. Security posture is solid with HTTPS and some security plugins, though explicit security headers and policies are not evident. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a visible cookie consent mechanism. WHOIS data for the domain is missing, which raises concerns about domain registration transparency, though the website content and branding suggest a legitimate business. Overall, the site is mature, professional, and well-optimized but would benefit from enhanced transparency and security disclosures.

A

Autopromotec

autopromotec.com

58

Autopromotec is an established international biennial exhibition focused on automotive equipment and aftermarket products, primarily targeting industry professionals and exhibitors. The event is held in Bologna, Italy, and serves as a key networking and showcase platform within the automotive aftermarket sector. The website presents professional branding and relevant event information, indicating a mature business presence in the transportation industry. Technically, the site employs a modern tech stack including jQuery, Cookiebot for consent management, Google Analytics, and Facebook Pixel for tracking and marketing purposes. The site is mobile-optimized with good SEO practices but lacks some advanced accessibility features and security headers. Security posture is generally good with HTTPS enforced and cookie consent implemented, though the absence of security headers and explicit privacy policies are areas for improvement. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional appearance of the website. Overall, the site is safe, trustworthy, and well-suited for its business purpose but would benefit from enhanced transparency and security hardening.

S

Stadtwerke Rheinfelden (Baden)

stadtwerke-rheinfelden.de

52

Stadtwerke Rheinfelden (Baden) is a regional municipal utility company providing essential water and heat supply services to the Rheinfelden community in Germany. The website clearly communicates their role as a reliable local service provider focused on citizen welfare. Their business model is that of a municipal utility, serving residential and commercial customers with sustainable and efficient energy and water solutions. The site features clear navigation, relevant content, and partner affiliations that reinforce their local market position. Technically, the website is built on the cEasy CMS platform and incorporates modern JavaScript libraries such as jQuery and Slick Carousel for UI elements. It uses Matomo for privacy-conscious analytics and includes accessibility features and mobile optimization. Hosting is managed via domaincontrol.com DNS, typical for small to medium enterprises. Performance is moderate with good SEO and metadata implementation. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR. However, it lacks a publicly available security policy and incident response contacts, which are recommended for enhanced transparency and trust. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is minimal but consistent with the business identity, supporting legitimacy. Overall, the website presents a professional and trustworthy digital presence for a small municipal utility. Strategic improvements include publishing a dedicated security policy, incident response information, and enhancing security headers to strengthen the security posture further.

B

Bundesministerium für Bildung und Forschung

bne-portal.de

61

The BNE-Portal is an official German government platform managed by the Bundesministerium für Bildung und Forschung (BMBF) dedicated to promoting education for sustainable development (Bildung für nachhaltige Entwicklung - BNE). It serves as a comprehensive resource hub offering educational materials, news, event calendars, and information on funding opportunities. The portal targets educators, learners, policymakers, and the general public interested in sustainability education. Technically, the site is built on the Government Site Builder CMS, employs modern web standards, and is optimized for accessibility and mobile devices. Security-wise, the site uses HTTPS and provides a cookie consent mechanism with anonymized analytics via Matomo, but lacks explicit security policies or incident response contacts. Overall, the site demonstrates a strong professional and trustworthy presence consistent with a government educational service.

Fahrschule Scheelen is a well-established driving school based in Emmendingen and Teningen, Germany, with over 40 years of experience and a strong local presence. The company offers comprehensive driving education services for various license classes, including cars and motorcycles, supported by modern vehicles and online learning tools. Their target audience includes both young and older individuals seeking driving licenses in the region. The website is professionally designed, mobile-optimized, and provides clear navigation and contact options, including multiple contact forms and direct phone and email contacts. Technically, the site is built on WordPress with Elementor and uses modern libraries and frameworks, hosted likely on Your-Server.de. Security posture is good with HTTPS and email obfuscation, though some security headers and cookie consent mechanisms are missing. Overall, the site reflects a credible and trustworthy business with a solid digital presence.

V

Ville de Saint-Louis

saint-louis.fr

66

The website www.saint-louis.fr is the official digital presence of the city of Saint-Louis in Alsace, France. It serves as a comprehensive portal for residents and visitors, offering municipal information, public services, event announcements, and cultural activities. The site targets local citizens and tourists, positioning itself as a key communication channel for the municipal government. The business model is that of a government entity providing essential public services and information without commercial intent. Technically, the site is built on the CMS I3C platform and leverages modern web technologies including jQuery, Bootstrap, CKEditor, and Matomo analytics configured with privacy in mind. The site is mobile-optimized and features a clear navigation structure with multiple service categories. Performance is moderate, with room for optimization. The presence of cookie consent mechanisms and disabled tracking cookies reflects a commitment to user privacy. From a security perspective, the site enforces HTTPS and uses privacy-focused analytics. However, it lacks several security headers and does not publicly provide a privacy policy or incident response contacts, which are areas for improvement. The absence of WHOIS data limits domain trust verification, though the site content and branding strongly indicate legitimacy. Overall, the website is a well-maintained municipal portal with good content quality and user experience. Strategic recommendations include publishing a comprehensive privacy policy, enhancing security headers, and providing clear contact information for security and privacy matters to strengthen trust and compliance.

T

Team PAPREC ARKÉA

teampaprecarkea.com

39

Team PAPREC ARKÉA is a French offshore sailing team prominently preparing for the Vendée Globe 2024-2025 race, sponsored by Paprec and Arkéa. The website serves as an official platform to share news, media, and team information, targeting sailing enthusiasts and sports fans. The business model revolves around sponsorship and promotion within competitive sailing circuits. Technically, the site employs modern web standards, including responsive design, accessibility features, and structured data, ensuring a good user experience across devices. Security posture is solid with HTTPS and consent management, though improvements in security headers and explicit incident response information are recommended. The absence of WHOIS data introduces some uncertainty regarding domain legitimacy, but the professional presentation and active social media presence support the site's credibility. Overall, the site is well-maintained, compliant with privacy regulations, and effectively supports the team's branding and communication objectives.

C

Cooperfidi Italia Soc. Coop

cooperfidiitalia.it

54

Cooperfidi Italia Soc. Coop is a well-established cooperative society founded in 2009, specializing in providing credit guarantee services primarily to cooperative, non-profit, and primary sector businesses in Italy. The organization positions itself as a key partner facilitating accessible and sustainable credit to promote business growth within its target sectors. The website reflects a professional and consistent brand image, with clear navigation and relevant content tailored to its audience. Technically, the site is built on WordPress with modern plugins and technologies, including Yoast SEO and GDPR-compliant cookie management, indicating a mature digital infrastructure. Security posture is strong with HTTPS and DNSSEC enabled, though some improvements in security headers and explicit policies could enhance trust further. Overall, the site demonstrates good privacy compliance and business credibility, supported by clear contact information and social media presence.

C

Carers UK

carersuk.org

65

Carers UK is a well-established UK-based non-profit charity dedicated to supporting unpaid carers through expert information, advice, support services, and advocacy campaigns. The organization has a strong market position with over 60 years of history and a clear focus on improving carers' lives across the UK. Their website reflects a professional and user-friendly platform that effectively serves their target audience of unpaid carers. Technically, the site uses a modern technology stack including Umbraco CMS, jQuery, Bootstrap, and integrates Google Analytics and Tag Manager for analytics. Hosting and DNS are managed via Cloudflare, providing good performance and security. Security posture is solid with HTTPS enforced and standard security headers likely in place, though DNSSEC is not enabled and no explicit security policy or vulnerability disclosure is published. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy, well-branded, and provides comprehensive content relevant to its audience.

F

Forschungsnetzwerke Energie

forschungsnetzwerke-energie.de

63

Forschungsnetzwerke Energie is a German government-supported platform facilitating exchange among energy experts, researchers, and policymakers. It provides comprehensive information on energy research networks, events, publications, and webinars, positioning itself as a key knowledge hub in the German energy research sector. The platform is professionally designed, well-branded, and offers clear navigation primarily in German with English options. Technically, the website employs modern JavaScript libraries such as jQuery and Bootstrap, integrates Matomo analytics with privacy-conscious settings, and uses HTTPS with good security practices. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the site is trustworthy, compliant with GDPR, and serves its target audience effectively.

I

IBA Basel

iba-basel.net

47

IBA Basel is a regional urban development organization focused on coordinating and disseminating information about projects and initiatives in the Basel area, involving multiple municipalities and partners. The website serves as an information hub offering project details, news, events, media, and publications. The organization targets government entities, urban planners, and the general public interested in regional development. Technically, the website uses a range of JavaScript libraries including jQuery, Slick Carousel, and Google Analytics with IP anonymization, indicating a moderate level of digital maturity. The site is mobile optimized and provides cookie consent mechanisms, reflecting basic privacy compliance. Security posture is moderate with room for improvement, particularly in updating libraries and implementing security headers. The WHOIS data is missing or unavailable, which raises some concerns about domain legitimacy, but the professional content and official partner links support the site's credibility. Overall, the website is functional, informative, and trustworthy but would benefit from enhanced security and transparency measures.

J

Jubla Region Basel

jublabasel.ch

10

Jubla Region Basel is a non-profit youth organization dedicated to providing children and adolescents in the Basel region with meaningful leisure activities such as group meetings, camps, and events. The organization emphasizes community, nature exploration, responsibility, and friendship, serving approximately 20 groups locally. The website is built on modern web technologies and the Neos CMS platform, offering a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforced and no exposed sensitive data, though it lacks some security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the domain registration aligns well with the organization's identity, indicating legitimacy and trustworthiness.

St. Franziskus Riehen-Bettingen is a local Roman Catholic parish serving the Basel-Stadt community in Switzerland. The website provides comprehensive information about church services, events, spiritual impulses, and community involvement, targeting parishioners and local residents. The business operates as a non-profit religious organization affiliated with the Römisch-Katholische Kirche Basel-Stadt. Technically, the site uses a modern webIQ CMS framework with common JavaScript libraries such as jQuery and Bootstrap, offering a responsive and user-friendly experience. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though additional security headers and privacy mechanisms could improve compliance. The domain registration data aligns well with the website's claims, supporting legitimacy and trust. Overall, the site is professional, trustworthy, and well-maintained, serving its community effectively.

N

nextron internet team GmbH

nextron.ch

11

nextron internet team GmbH is a Swiss web agency based in Basel, established in 1996. The company specializes in web development, web design, and hosting services, targeting primarily medium-sized businesses and organizations in Basel and across Switzerland. Their offerings include custom web applications, WordPress and WooCommerce solutions, and various hosting options including ColdFusion and vServer hosting. The website reflects a mature market position with a professional and consistent brand presence supported by client references and social media engagement. Technically, the website is built on WordPress CMS with modern technologies such as jQuery, FontAwesome, and animation libraries. It integrates analytics tools like Google Analytics and Matomo for user tracking and performance insights. The site is mobile-optimized, fast-loading, and SEO-friendly, indicating a high level of digital maturity. From a security perspective, the site uses HTTPS with good SSL configuration and employs some security best practices such as honeypot anti-spam measures. However, it lacks explicit security headers like Content-Security-Policy and does not provide a security policy or incident response contact information. No vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy, professional, and safe for general audiences. The main areas for improvement include implementing a cookie consent mechanism to enhance privacy compliance and publishing a security policy and incident response contacts to strengthen security posture and transparency.

The website holz-rettet-klima.de represents a German initiative by Deutsche Holzwirtschaft focused on promoting sustainable wood usage as a key element of climate protection. It targets environmentally conscious individuals and stakeholders interested in forestry and climate action. The site provides information, events, and tools such as a CO2 footprint calculator to engage its audience. Technically, the site is built on WordPress with common plugins for event management and content protection, hosted likely by a German provider (rzone.de). The site is moderately performant, mobile-optimized, and SEO-friendly. Security posture is adequate with HTTPS enforced and no exposed sensitive data, but lacks advanced security headers and explicit incident response contacts. Privacy compliance is partial with a privacy policy present but no visible cookie consent mechanism. Overall, the site is professional, trustworthy, and safe for general audiences.

M

Meier + Cie AG

meier-cie.ch

47

Meier + Cie AG is a well-established regional media company based in Schaffhausen, Switzerland, with a history dating back to 1861. It operates multiple media channels including print newspapers, online news portals, radio (Radio Munot), and television (SHf). The company is majority-owned by the Carl Oechslin Stiftung, which supports its independence and liberal stance. The website reflects a professional and comprehensive digital presence, targeting residents of Schaffhausen and the broader Swiss audience interested in regional and national news. The business model focuses on multi-channel media delivery and crossmedia advertising services.

H

Holzbau-Offensive Baden-Württemberg

holzbauoffensivebw.de

56

The Holzbau-Offensive Baden-Württemberg website is a well-established government initiative promoting sustainable and climate-friendly construction using wood. It serves as an information hub offering details on funding, practical support, education, research, and events related to wood construction in the Baden-Württemberg region. The site targets architects, engineers, planners, and public sector stakeholders, positioning Baden-Württemberg as a leader in sustainable building practices. Technically, the site employs modern web technologies including Yii Framework, Bootstrap, jQuery, and Slick Carousel, ensuring a responsive and accessible user experience. Security measures such as HTTPS and CSRF tokens are implemented, though some HTTP security headers could be improved. Privacy compliance is strong with a clear cookie consent mechanism and a comprehensive privacy policy. No critical vulnerabilities or suspicious elements were detected, and the domain registration data aligns well with the website's governmental purpose, supporting high legitimacy and trustworthiness.

K

Kirchgemeinde Zürich

kirche-zh.ch

50

The kirche-zh.ch website functions as a portal for the Kirchgemeinde Zürich, serving as a gateway to various church communities in Zurich. It provides basic information and links to affiliated church websites, targeting local residents and church members. The site is modest in content and design, reflecting its non-profit and community-oriented nature. Technically, the site uses a variety of JavaScript libraries including jQuery, Bootstrap, and Piwik/Matomo for analytics, but lacks modern CMS identification and advanced SEO or accessibility features. Security posture is basic with no visible security headers or privacy policies, and no forms or user input mechanisms are present. The domain uses privacy protection in WHOIS, which is justified for this type of organization. Overall, the site is functional but could benefit from improved privacy compliance, security hardening, and richer content to enhance user trust and engagement.

S

Schulthess Maschinen AG

schulthess.ch

59

Schulthess Maschinen AG is a well-established Swiss manufacturer and retailer specializing in washing machines, dryers, and dishwashers. The company emphasizes innovation rooted in tradition, targeting both homecare and professional customers primarily in Switzerland and German-speaking regions. Their business model combines product sales, service contracts, and an online shop for wash cards, positioning them as a trusted brand in the household appliance sector. The website reflects a mature digital presence with multilingual support and comprehensive customer engagement tools. Technically, the site is built on WordPress with Elementor and integrates modern analytics and marketing tools such as Google Analytics, Google Tag Manager, and Facebook Pixel. Security posture is strong with HTTPS enforced and GDPR-compliant cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the website is professional, secure, and compliant, supporting the company's market position effectively.

S

Swiss Olympic Association

swissolympicteam.ch

62

Swiss Olympic Association is the official national Olympic organization representing Swiss athletes and promoting Olympic values such as Excellence, Respect, and Friendship. The website highlights their involvement in Olympic missions, including the upcoming Milano Cortina 2026 Winter Games, and showcases athlete stories and official partners. The organization operates as a non-profit entity focused on supporting athletes and the Olympic movement within Switzerland. Technically, the website employs a modern tech stack including jQuery, Google Tag Manager, JWPlayer, and Slick Carousel. The site appears to be built on a CMS platform with structured content and good mobile optimization. SEO and accessibility are adequately addressed, though some improvements in accessibility could be made. Performance is moderate with no critical technical issues detected. From a security perspective, the site uses HTTPS with no visible vulnerabilities or exposed sensitive data. Cookie consent mechanisms and privacy policies are implemented in compliance with GDPR. However, security headers are not explicitly detected and incident response contact details are absent, which could be improved. The domain WHOIS data aligns well with the organization's identity, reinforcing legitimacy. Overall, the website is professional, trustworthy, and well-aligned with the organization's mission. It provides clear contact information, partner listings, and social media integration, supporting a positive user experience and business credibility.

E

Europäischer Verband der Veranstaltungs-Centren e.V.

evvc.org

54

The Europäischer Verband der Veranstaltungs-Centren e.V. (EVVC) is a well-established association representing approximately 600 event venues across German-speaking Europe. Their website serves as a comprehensive platform offering membership information, a job portal, educational opportunities via the EVVC Akademie, and a partner network. The site is professionally designed using Drupal 8 and modern frontend technologies, providing good user experience and mobile optimization. Privacy compliance is addressed with a cookie consent banner and a detailed privacy policy in German. However, no explicit terms of service or security policies are publicly visible. The WHOIS data is unavailable due to privacy protection or malformed queries, which is common for such organizations. Overall, the website demonstrates a solid business presence with moderate technical sophistication and a good security posture, though improvements in security headers and transparency could be made.

P

PS Werbung

psw.ch

64

PS Werbung (PSW) is a Swiss-based media and design agency specializing in web design, branding, graphic design, and signage solutions primarily targeting small and medium-sized enterprises (KMU) and municipalities in the Zurich area. The company offers comprehensive services from concept to realization, including logo creation, corporate identity development, and web presence design. Their portfolio demonstrates long-term client relationships and a strong local market presence. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies such as jQuery, Font Awesome, and Google Fonts. The site is well-optimized for mobile devices, has good SEO practices, and provides a professional user experience. However, some performance optimizations could be improved. From a security perspective, the site uses HTTPS with a good SSL configuration and avoids exposing sensitive data. Nonetheless, it lacks important security headers and does not provide a security.txt or incident response contact information. Privacy compliance is weak due to the absence of privacy and cookie policies and no consent mechanisms. Overall, PSW's website is professional and trustworthy, but it should enhance its privacy and security posture to align with best practices and regulatory requirements. Strategic improvements in these areas will strengthen user trust and compliance.

maxcluster GmbH is a German-based managed hosting provider specializing in scalable, high-performance cluster hosting solutions tailored for e-commerce platforms such as Shopware, Magento, WordPress, and others. Established in 2011, the company positions itself as Germany's leading e-commerce host, offering a comprehensive suite of hosting and managed services with a strong emphasis on security, performance, and customer support. Their target audience includes online shops, agencies, and e-commerce businesses seeking reliable and scalable hosting infrastructure. The website reflects a mature digital presence with professional design, clear navigation, and extensive content tailored to their market segment. Technically, the website is built on TYPO3 CMS and leverages modern web technologies including JavaScript frameworks, HubSpot forms for lead generation, and Iubenda for cookie compliance. The hosting infrastructure is TÜV-certified, with proprietary data centers and advanced security measures such as DDoS protection, malware scanning, and 24/7 monitoring. The site is mobile-optimized, SEO-friendly, and integrates marketing and analytics tools responsibly. From a security perspective, maxcluster demonstrates a strong posture with HTTPS enforcement, security headers, and proactive incident response capabilities. However, there is room for improvement in publishing a formal vulnerability disclosure policy and providing explicit data protection officer contact details. Overall, the domain registration data aligns well with the website content, reinforcing the legitimacy and trustworthiness of the business. The overall risk assessment is low, with no critical vulnerabilities or suspicious content detected. Strategic recommendations include enhancing transparency around vulnerability disclosures and incident response, which would further strengthen trust and compliance. The website scores highly across content quality, technical implementation, security, privacy compliance, and business credibility, making it a robust and professional digital asset for maxcluster GmbH.

L

Lauf- und Ausdauersport Club Eichsfeld e.V.

guidenetzwerkdeutschland.de

41

Guidenetzwerk Deutschland is a specialized network aimed at connecting visually impaired athletes with guides to facilitate participation in sports such as running and para skiing. Operated by Lauf- und Ausdauersport Club Eichsfeld e.V., the platform serves a niche community within Germany, providing registration, matchmaking, and guide training services. The website is built on TYPO3 CMS and leverages modern frontend technologies to deliver a responsive and accessible user experience. It maintains a clear focus on its target audience, with content and navigation tailored to visually impaired sports enthusiasts and their guides. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though explicit security policies and incident response contacts are absent. Overall, the site demonstrates a good balance of content quality, technical implementation, and business credibility, positioning it as a trustworthy resource within its domain.

The Nationale Plattform zur Bekämpfung der Manipulation von Sportwettbewerben is an official German government initiative under the Bundesministerium des Innern und für Heimat, dedicated to combating manipulation in sports competitions. The platform provides comprehensive information, monitoring, prevention strategies, and a reporting mechanism to stakeholders including public authorities, sports organizations, and the general public. It holds a strong market position as a trusted governmental resource in Germany for sports integrity. Technically, the website is built on the Government Site Builder CMS, employing modern web technologies such as HTML5, CSS3, JavaScript, and accessibility tools like ReadSpeaker. The site is mobile-optimized, accessible, and includes SEO best practices. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism with options for anonymous statistical tracking. However, it lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were found in the content. The WHOIS data is consistent and transparent, reinforcing the site's legitimacy. Overall, the platform demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable source for its intended audience. Strategic improvements in security policy transparency and header implementation could further enhance its security posture.

S

Spheriq

spheriq.ch

53

Spheriq is a Swiss-based digital platform dedicated to supporting the nonprofit and philanthropic sector by providing tools and insights for fundraising, networking, and grant management. The platform targets nonprofits, funders, experts, and corporates, offering a comprehensive suite of services including intelligent search, donation tools, AI assistance, and collaborative workspaces. The website is professionally designed, multilingual, and optimized for SEO, reflecting a mature digital presence. Technically, it is built on WordPress with modern frameworks and plugins, ensuring good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response information are not published. Overall, the platform demonstrates high business credibility and trustworthiness, supported by consistent WHOIS data and transparent domain registration.

D

Dinas Lingkungan Hidup Provinsi Jawa Barat

dlhjabar.org

51

The website represents the official online presence of the Environmental Agency of West Java Province, Indonesia, providing environmental information, public services, news, and program details to residents and stakeholders. It serves as a government portal focused on environmental management and public engagement. The site uses modern frontend technologies such as Bootstrap, jQuery, and carousel libraries to deliver a responsive and user-friendly experience. However, the technical infrastructure lacks some advanced security features such as DNSSEC and security headers, and no privacy or cookie policies are present, which may affect compliance and user trust. The WHOIS data shows an anomalous domain creation date in the future, which raises questions about domain legitimacy or data accuracy. Overall, the site is functional and professional but requires improvements in security and compliance documentation.

D

Dinas Lingkungan Hidup Kabupaten Sumedang

dlhsumedang.org

42

Dinas Lingkungan Hidup Kabupaten Sumedang operates as the official environmental agency for the Sumedang Regency government in Indonesia. The website serves as a comprehensive portal for public information, environmental programs, news updates, and public service standards. It targets local residents and stakeholders interested in environmental governance and community engagement. The business model is government public service with a focus on transparency and citizen engagement. The site maintains consistent branding and provides relevant content, positioning itself as a trusted regional government resource. Technically, the website employs a modern front-end stack including jQuery, Bootstrap, Flickity, and Slick Carousel for interactive UI elements. Hosting and DNS are managed via Cloudflare, providing CDN and security benefits. The site is mobile-optimized and offers a moderate performance profile. However, no explicit CMS was detected, suggesting a custom or proprietary platform. From a security perspective, the site uses HTTPS and has domain transfer protections enabled. However, DNSSEC is not enabled, and no security headers were detected in the provided data, indicating room for improvement. The WHOIS data shows inconsistencies such as a future domain creation date and lack of registrant details, which slightly undermines trustworthiness. No privacy or cookie policies were found, which is a compliance gap. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the website is a functional and professional government portal with good content quality and user experience. Security and privacy compliance can be enhanced by implementing DNSSEC, security headers, and publishing privacy and cookie policies. The WHOIS inconsistencies should be investigated to ensure domain legitimacy and trust.

D

Dinas Lingkungan Hidup Kecamatan Lembang

dlhlembang.org

51

Dinas Lingkungan Hidup Kecamatan Lembang operates as a local government environmental agency in Indonesia, providing public information, environmental programs, and public services through its official website. The site targets residents and stakeholders of Kecamatan Lembang, offering news updates, program details, and contact channels to facilitate community engagement and transparency. The business model is focused on government service delivery and public communication. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Flickity, and Slick Carousel, hosted behind Cloudflare DNS services. The site is mobile-optimized with good navigation and design quality, although accessibility and SEO optimizations are basic. Performance is moderate, with no blocking WAF detected, allowing full content access. From a security perspective, HTTPS is enabled, and domain status is protected against transfer, but DNSSEC is not enabled and no advanced security headers are detected. The WHOIS data shows inconsistencies with a future domain creation date, which may indicate data errors or registration timing issues. No privacy or cookie policies are published, representing compliance gaps. Contact information is clearly provided, enhancing business credibility. Overall, the website is a trustworthy government resource with good content and technical implementation but requires improvements in privacy compliance and security hardening to meet modern standards.

D

Dinas Lingkungan Hidup Kabupaten Ciwidey

dlhciwidey.org

51

Dinas Lingkungan Hidup Kabupaten Ciwidey operates as a local government agency focused on environmental management and public service in the Ciwidey region of Indonesia. The website serves as an official portal providing news, program information, public services, and contact details to residents and stakeholders. It targets local citizens, government officials, and environmental interest groups. The business model is centered on government service delivery and public information dissemination, positioning itself as a trusted regional authority in environmental matters. Technically, the website employs a modern frontend stack including jQuery, Bootstrap, Flickity, and Slick Carousel, hosted behind Cloudflare DNS services. The site is mobile-optimized with good navigation and content structure, though it lacks a known CMS and advanced accessibility features. Performance is moderate with room for improvement in SEO and accessibility. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and security headers, which are recommended for enhanced protection. No privacy or cookie policies are present, indicating compliance gaps. The WHOIS data shows an anomalous domain creation date in the future relative to website content, which may be a data error but slightly impacts trust. Overall, the website is functional and professional but would benefit from improved security practices, privacy compliance, and clearer domain registration data to enhance trust and resilience.

D

Dinas Lingkungan Hidup Kabupaten Bekasi

dlhkabbekasi.org

43

Dinas Lingkungan Hidup Kabupaten Bekasi operates as the official environmental agency for Bekasi Regency, Indonesia, providing public information, news, and services related to environmental management and public welfare. The website serves residents and stakeholders with updates on programs, announcements, and contact channels. Technically, the site employs modern front-end technologies such as Bootstrap, jQuery, Flickity, and Slick carousel, hosted behind Cloudflare DNS, ensuring moderate performance and mobile responsiveness. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and no privacy or cookie policies are present, indicating compliance gaps. The WHOIS data shows a domain creation date in the future relative to some content dates, which may require further verification. Overall, the site is professional and trustworthy as a government resource but would benefit from enhanced security and privacy compliance measures.

D

Dinas Lingkungan Hidup Kabupaten Subang

dlhsubang.org

51

Dinas Lingkungan Hidup Kabupaten Subang operates as the official environmental agency for the Subang Regency government in Indonesia. The website serves as a public information portal providing news, programs, public services, and contact information related to environmental management and community engagement. It targets local residents, government officials, and environmental stakeholders. The business model is focused on government public service and transparency. Technically, the website uses a modern front-end stack including Bootstrap, jQuery, Flickity, and Slick carousels, hosted behind Cloudflare DNS. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. However, SEO and accessibility features are basic, and performance is moderate. From a security perspective, HTTPS is enabled, and domain transfer is restricted, but DNSSEC is not enabled and no explicit security headers were detected. The WHOIS data shows inconsistencies with a future domain creation date, which raises some concerns about registration legitimacy. No privacy or cookie policies are present, and no incident response or vulnerability disclosure information is provided. Overall, the website is functional and trustworthy as a government information portal but would benefit from improved security practices, clearer privacy compliance, and WHOIS data verification to enhance trust and compliance.

D

Dinas Lingkungan Hidup Kota Cimahi

dlhcimahi.org

51

Dinas Lingkungan Hidup Kota Cimahi operates as the official environmental agency for Cimahi City, Indonesia, providing public information, environmental programs, and public services through its website. The site targets local residents, government officials, and environmental stakeholders, offering news updates, agendas, and contact channels. Technically, the website employs modern JavaScript libraries such as jQuery, Bootstrap, Flickity, and Slick Carousel, ensuring a responsive and user-friendly experience. However, SEO and accessibility features are basic, and performance is moderate. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and formal policies such as privacy or cookie consent. WHOIS data is unavailable, limiting domain legitimacy verification, though the official branding and content suggest a legitimate government entity. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.