Security Directory

W

Webtasy, d.o.o.

teachxr.si

45

teachXR.si is a Slovenian educational project focused on integrating advanced XR (virtual, augmented, and extended reality) technologies into primary and secondary schools. The project aims to transform educational processes by equipping teachers with knowledge and tools to develop XR content, establishing learning laboratories across Slovenia, and creating digital learning materials. The website serves as an informational platform for the project, targeting educators and students within the Slovenian education system. Technically, the site is built on WordPress using the Divi child theme, with performance optimizations via LiteSpeed Cache and tracking implemented through Google Tag Manager. Security posture is moderate with HTTPS enabled but lacks security headers and explicit privacy or cookie policies. No contact information or incident response details are provided, limiting direct communication channels. Overall, the site is professionally designed and content-rich but would benefit from enhanced privacy compliance and security best practices.

A

Analitsko središče

zakakovost.si

51

The website zakakovost.si serves as a centralized, accessible platform dedicated to quality assurance and self-evaluation in Slovenian education institutions, including kindergartens and schools. It provides key resources such as legislative documents, strategic policies, national reports, and international studies to support school leaders, quality teams, and policymakers. The site is positioned as a national educational resource supported by the Slovenian government and the European Union. Technically, the site is built on WordPress with a modern tech stack including Matomo analytics configured for privacy, accessibility plugins, and a cookie consent mechanism, hosted by the Slovenian academic network (ARNES). Security posture is good with HTTPS enforced and privacy-conscious analytics, though some security headers could be improved. The WHOIS data shows a suspicious future domain creation date, likely a data error, but the registrar and hosting align with the site's educational purpose. Overall, the site is professional, trustworthy, and well-optimized for accessibility and mobile use, with no detected security or content safety issues.

B

Beuroner Kunstverlag

klosterkunst.de

43

Beuroner Kunstverlag operates the Klostershop Beuron website, an e-commerce platform specializing in religious and monastic art, cards, books, candles, and gifts. The business targets Christian customers and religious communities interested in high-quality religious-themed products. The website is professionally designed with consistent branding and good navigation, optimized for mobile devices and accessibility. Technically, it leverages modern frameworks such as Bootstrap and jQuery, and is hosted on Hetzner servers, indicating a stable infrastructure. Security posture is solid with HTTPS enforced and cookie consent implemented, though the absence of privacy and terms of service pages indicates compliance gaps. No critical vulnerabilities or suspicious content were detected, and the WHOIS data aligns with a legitimate German business, albeit with limited registrant details.

Н

Национално Движение Русофили

rusofili.bg

51

Национално Движение Русофили is a Bulgarian non-profit organization dedicated to promoting Russian culture, history, and Bulgarian-Russian relations. The website serves as a media platform offering news, cultural event information, historical research, and educational content primarily targeted at Bulgarian-speaking audiences interested in Russian topics. The organization positions itself as a cultural and societal bridge, continuing the traditions of Russophilia in Bulgaria. Technically, the website is built on WordPress with modern plugins such as Elementor and Yoast SEO, ensuring good SEO and mobile responsiveness. Security posture is adequate with HTTPS enforced and some content protection scripts, but lacks advanced security headers and formal privacy or cookie policies, which are compliance gaps. Overall, the site is professional and trustworthy but could improve in privacy compliance and security best practices.

L

Landeswasserverbandstag Thüringen e. V.

lvt-thueringen.de

50

The Landeswasserverbandstag Thüringen e. V. (LVT) is a non-profit umbrella organization representing water management associations in the German state of Thüringen. Established following the 2019 regional law, it serves as a coordinating and representative body for twenty water maintenance associations. The website provides information about the organization, its members, and current news, targeting stakeholders in the water management sector and regional authorities. The site is professionally designed using WordPress and Elementor, with clear navigation and relevant content in German. Technically, the site employs modern web technologies and is hosted on servers associated with rzone.de. Security posture is adequate with HTTPS enabled and cookie consent implemented, though explicit security headers and policies are not publicly disclosed. Overall, the site is trustworthy and compliant with GDPR requirements, reflecting a legitimate regional government-related entity.

D

Deutscher Bund der verbandlichen Wasserwirtschaft e.V.

dbvw.de

46

The Deutscher Bund der verbandlichen Wasserwirtschaft e.V. (DBVW) is a German non-profit umbrella organization representing regional water management associations. It focuses on consolidating competencies and interests in water management, engaging with political, societal, and economic stakeholders to strengthen sustainable water resource management. The website reflects a professional presence with clear communication of its mission, member associations, and events. Technically, the site is built on WordPress with modern plugins and themes, optimized for SEO and mobile devices. Security posture is solid with HTTPS and cookie consent mechanisms, though formal security policies and incident response details are absent. Overall, the site is trustworthy and well-maintained, serving its target audience effectively.

C

CANAL+ Germany

canalplus.de

56

CANAL+ Germany is a prominent B2B provider of satellite and IP-based TV services in the German-speaking DACH region, operating under the CANAL+ Group umbrella. The company offers a comprehensive portfolio of TV licenses, platform technology, and marketing support to over 160 telecommunications partners, enabling them to deliver branded TV products to end customers. The website reflects a mature digital presence built on WordPress with professional design and clear service offerings. Security posture is solid with HTTPS and cookie consent mechanisms in place, though explicit privacy and security policies are absent. Overall, the site is trustworthy and business-focused, targeting network operators and platform providers.

Depkatalog.no is an official Norwegian government website operated by the Departementenes digitaliseringsorganisasjon (DIO). It serves as a comprehensive contact directory for the Prime Minister's office, various ministries, and related government organizations such as DSS and DIO itself. The site provides search functionality for employees and departments, along with brief descriptions of their roles. It targets government employees and the general public seeking official contact information. The website is well-positioned as the authoritative source for government contact data in Norway. Technically, the site is built on WordPress 6.8.3 with jQuery and uses the Ninja Forms plugin for contact forms. It is hosted on a Norwegian government domain (nettsteder.regjeringen.no), indicating a secure and official hosting environment. The site includes modern web practices such as HTTPS, mobile responsiveness, and accessibility features. Analytics are handled via Plausible Analytics, which respects privacy and limits tracking. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks some security headers and does not provide explicit security policies or incident response contacts. There is no cookie consent mechanism, which is a minor GDPR compliance gap. Overall, the security posture is good but could be improved with additional headers and transparency. The overall risk is low given the official nature and content safety of the site. Strategic recommendations include implementing cookie consent, adding security headers, publishing a security policy, and maintaining regular plugin audits. These steps would enhance compliance and trust without significant operational impact.

R

Regierung des Fürstentums Liechtenstein

impuls-liechtenstein.li

47

Impuls Liechtenstein is a government-backed initiative focused on fostering innovation within the financial center of Liechtenstein. It supports a diverse financial ecosystem including banking, asset management, fiduciary services, funds, insurance, philanthropy, and a growing fintech community. The platform provides frameworks such as the Innovationsclub and Liechtenstein Venture Cooperative (LVC) to facilitate innovation and cooperation. The website serves as an information hub and contact point for innovation-related activities under the Ministry for Presidium and Finance. Technically, the website is built on WordPress 6.8.3 with modern plugins like Kadence Blocks and WPML for multilingual support. It uses HTTPS with good SSL configuration and shows moderate performance and good mobile optimization. However, it lacks some security headers and a cookie consent mechanism, which are recommended for enhanced security and privacy compliance. From a security perspective, the site enforces HTTPS and does not expose sensitive data or use vulnerable libraries. There is no visible incident response or security policy published, and no security.txt file for vulnerability disclosure. Contact information is limited to official government emails, with no phone numbers or physical addresses explicitly listed. Overall, the website is trustworthy and professional, reflecting its governmental nature. It is safe for general audiences with no adult or explicit content. Strategic improvements include implementing cookie consent, security headers, and publishing security policies to enhance compliance and trust.

K

KidsGames

kidsgames.ch

9

KidsGames is a non-profit organization focused on organizing team-based sports and educational events for children aged 7 to 14 in the French-speaking regions of Switzerland. The website serves as an information hub for event details, media content, sponsorship, and partnership opportunities. The organization emphasizes inclusivity, teamwork, and biblical values in its activities. Technically, the website is built on TYPO3 CMS with modern frontend libraries such as jQuery and Bootstrap, providing a good user experience and mobile optimization. Security posture is moderate with HTTPS enabled and Google reCAPTCHA integrated, but lacks explicit security headers and privacy/cookie policies. Contact information is limited but includes official email and social media presence. Overall, the website is professional and trustworthy but could improve in privacy compliance and security transparency.

M

MADSACK MEDIENGRUPPE

madsack-karriere.de

41

MADSACK MEDIENGRUPPE operates a comprehensive career portal focused on the media industry, offering diverse job opportunities across journalism, technology, sales, logistics, and more. The company is a large regional media group in Germany, emphasizing independent and critical journalism with a strong commitment to democratic values and digital innovation. The website reflects a professional and consistent brand image, targeting job seekers interested in media careers. Technically, the site is built on WordPress with modern JavaScript libraries and includes a consent management platform to ensure GDPR compliance. Security posture is solid with HTTPS and consent mechanisms, though some security headers could be improved. Overall, the site is well-structured, accessible, and optimized for SEO and mobile devices, supporting a positive user experience.

M

MADSACK Mediengruppe

madsack.de

52

MADSACK Mediengruppe is a large, established German media company founded in 1893, specializing in regional and national journalism through its 20 regional newspaper brands and the RedaktionsNetzwerk Deutschland (RND). The company offers a broad range of services including editorial, marketing, printing, accounting, and IT services tailored for media houses and publishers. Their business model focuses on leveraging regional roots while expanding digital and national reach. Technically, the website is built on WordPress with modern JavaScript libraries and SEO plugins, demonstrating good digital maturity and mobile optimization. Security posture is solid with HTTPS, consent management, and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR, making it a credible digital presence for the media group.

G

Golf Eichenheim - Kitzbühel

eichenheim.com

48

Golf Eichenheim - Kitzbühel operates a prestigious 18-hole championship golf course located in the scenic Kitzbühel Alps, Austria. Established in 2000, it offers a comprehensive golf and hospitality experience including memberships, a golf school, pro shop, and partnerships with local hotels such as the Grand Tirolia. The website is professionally designed, SEO optimized, and provides detailed information about memberships and services, targeting golf enthusiasts and business clients. Technically, the site runs on WordPress with modern plugins and includes multimedia content, though some performance and accessibility improvements are possible. Security posture is solid with HTTPS and cookie consent, but lacks some security headers and a published privacy policy. The absence of WHOIS data raises concerns about domain registration legitimacy, though the business presence and content suggest a legitimate operation. Strategic recommendations include publishing privacy and terms policies, enhancing security headers, and verifying domain registration details.

A

abeilles.ch · le portail de l'apiculture en Suisse

abeilles.ch

51

abeilles.ch is a well-established non-profit portal dedicated to apiculture and bee conservation in the Suisse romande region. It serves both beekeepers and the general public by providing scientifically grounded, high-quality information, training courses, news updates, and community engagement opportunities. The platform is supported by the Société romande d’apiculture (SAR), which has a long history dating back to 1876, reinforcing the site's credibility and authority in the field. Technically, the website is built on a modern WordPress infrastructure with a robust tech stack including popular plugins and themes that enhance performance, SEO, and user experience. The site is mobile-optimized, fast-loading, and accessible, reflecting a mature digital presence. Analytics are handled via privacy-respecting Plausible Analytics, indicating a commitment to user privacy. From a security perspective, the site enforces HTTPS and follows good practices, though it lacks explicit security headers and a vulnerability disclosure policy. Privacy compliance is generally good, with a comprehensive privacy policy and terms of service, but the absence of a cookie consent mechanism is a minor gap. Contact information is clearly provided, enhancing trust. Overall, abeilles.ch presents a low-risk profile with strong business credibility and technical maturity. Strategic improvements in security policy transparency and privacy consent mechanisms would further enhance its posture.

T

Tennisverband Mecklenburg-Vorpommern e.V.

tennismv.de

57

The Tennisverband Mecklenburg-Vorpommern e.V. is a regional tennis association dedicated to promoting tennis activities, organizing tournaments, and supporting youth development within Mecklenburg-Vorpommern, Germany. The website serves as an information hub for players, clubs, and tennis enthusiasts, providing news, event details, and organizational resources. It positions itself as the official governing body for tennis in the region, operating as a non-profit entity focused on community engagement and sport development. Technically, the website is built on WordPress 6.8.3 using the GeneratePress theme and Visual Composer Website Builder, supplemented by plugins such as Contact Form 7 and Owl Carousel for enhanced user experience. The site is mobile-optimized with a moderate performance profile and good SEO practices, though accessibility features are basic. The infrastructure reflects a standard modern CMS setup suitable for small to medium-sized organizations. From a security perspective, the site enforces HTTPS with a good SSL configuration but lacks visible HTTP security headers such as CSP or HSTS in the HTML content. No exposed sensitive data or vulnerable libraries were detected. Privacy compliance is supported by a comprehensive GDPR-aligned privacy policy, though no cookie consent mechanism is present. Contact information is primarily via forms, with no explicit emails or phone numbers found in the content. Overall, the website is trustworthy and professional, with a strong focus on tennis-related content and community engagement. Security posture is adequate but could be improved with additional headers and consent mechanisms. The domain registration data is consistent and legitimate, supporting the site's credibility. Strategic improvements in security and privacy compliance would enhance the site's resilience and user trust.

Welterbezentrum Gartenreich Dessau-Wörlitz gGmbH operates an official tourism information website dedicated to the UNESCO World Heritage site Gartenreich Dessau-Wörlitz in Germany. The site provides comprehensive visitor information including event details, accommodation, dining options, and interactive maps, targeting tourists interested in cultural heritage and natural beauty. The business model focuses on tourism promotion and visitor engagement within a small-sized regional context. Technically, the website is built on WordPress with a modern plugin ecosystem supporting multilingual content, event management, and e-commerce capabilities. The site is hosted on servers associated with Kasserver and uses HTTPS with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and uses some legacy JavaScript libraries. Privacy compliance is partial, with cookie consent present but no visible privacy policy or terms of service pages. Contact information is clearly provided, including official emails and phone numbers, enhancing business credibility. Overall, the website is professional, trustworthy, and well-positioned for its niche, though improvements in security and privacy documentation are recommended.

F

FS-Medizintechnik GmbH

fs-medizintechnik.at

52

FS-Medizintechnik GmbH operates a specialized e-commerce platform focused on medical technology, emergency medicine, and care products primarily serving the Austrian healthcare and emergency services market. The company offers a broad portfolio targeting rescue services, hospitals, fire departments, doctors, and paramedics, positioning itself as a trusted supplier with a strong local presence since 2015. Their website reflects a professional and consistent brand image with comprehensive product listings and clear business information. Technically, the website is built on a modern WordPress CMS with WooCommerce for e-commerce functionality, enhanced by popular plugins such as WPBakery Page Builder and Slider Revolution. The site demonstrates good SEO practices, mobile optimization, and basic accessibility features. Performance is moderate, with room for improvement in loading speed and security header implementation. From a security perspective, the site enforces HTTPS and employs GDPR-compliant cookie consent mechanisms, reflecting a solid privacy posture. However, there is an opportunity to strengthen security by adding missing HTTP security headers and formalizing incident response policies. No critical vulnerabilities or exposed sensitive data were detected. Overall, FS-Medizintechnik GmbH presents a low-risk profile with a well-maintained digital presence aligned with its business objectives. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and considering a dedicated security policy page to further build trust and compliance.

A

ACTS

andacts.ch

51

ACTS is a Swiss-based educational organization specializing in leadership and vocation training with a Christian focus. Their website offers detailed information about their training modules, intensive programs, cultural training, and community living options. The organization targets individuals seeking to deepen their calling and leadership skills through biblical study and practical training. The website is professionally designed, mobile-optimized, and integrates modern WordPress technologies and plugins, including WPBakery, Slider Revolution, and Everest Forms. Social media presence on Facebook, Instagram, and YouTube supports their outreach efforts. Technically, the site uses HTTPS with good SSL configuration and integrates Google Analytics and Tag Manager with consent mode configured to deny personalization and ad storage in the EU/CH region, reflecting some privacy awareness. However, the absence of explicit privacy and cookie policies is a compliance gap. Security headers are not detected, and no published security or incident response policies exist, indicating room for improvement in security posture. Overall, the website is trustworthy and credible, with consistent WHOIS data supporting legitimacy. The site is safe for general audiences, with no adult or explicit content. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, and establishing incident response documentation to enhance compliance and security maturity.

T

TOP-Ausflugsziele Niederösterreich in Zusammenarbeit mit Niederösterreich-Card GmbH

top-ausflug.at

48

The website www.top-ausflug.at serves as a comprehensive regional tourism platform promoting 54 certified top excursion destinations in Niederösterreich, Austria. It targets families and tourists seeking quality leisure experiences, offering detailed information on attractions, events, and mobility options. The site is professionally designed with consistent branding and clear navigation, supporting a positive user experience. Technically, it is built on WordPress with modern plugins and frameworks, including Bootstrap and Borlabs Cookie for privacy compliance. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The site integrates Google Analytics and social media channels for marketing and user engagement. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, the site is trustworthy, compliant with GDPR, and well-positioned in its niche.

G

Gebärdenwelt.TV

gebaerdenwelt.tv

48

Gebärdenwelt.TV is an Austrian online news portal specializing in content presented in Austrian Sign Language (ÖGS), serving primarily the deaf and hard-of-hearing community in Austria. The website offers news, community stories, educational content, and event coverage, positioning itself as a niche media outlet with a focus on accessibility and inclusion. Founded around 2019, it maintains a professional and consistent brand presence with a clear mission to provide accessible news content. Technically, the site is built on WordPress with Elementor and uses modern plugins and caching mechanisms to deliver a moderate performance experience optimized for mobile and accessibility. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers are missing and no vulnerability disclosure or security policy pages are present. The absence of WHOIS data reduces domain registration transparency, which impacts trustworthiness, but the website content and structure support legitimacy. Contact information is limited to a contact form without direct emails or phone numbers. Overall, the site is a valuable resource for its target audience but could improve transparency and security practices.

Ö

ÖGS.barrierefrei

oegsbarrierefrei.at

50

ÖGS.barrierefrei is a well-established Austrian non-profit organization founded in 2005, dedicated to providing barrier-free services and sustainable equal opportunities for deaf and hearing-impaired people. The organization acts as a vital interface between deaf, hearing-impaired, and hearing individuals in Austria, offering key services such as video production for accessible web content, sign language education, relay telephone interpreting services, and an online sign language news portal. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its target audience.

R

Revolution Payment System

revolution-systems.com

61

Revolution Payment System (R:PS) is a specialized technology provider offering NFC-based cashless payment solutions tailored for live events. Their platform aims to enhance event efficiency, increase revenue, and improve service quality by replacing cash transactions with NFC cards and bracelets. The company has established a credible market presence with notable clients such as EXIT festival and Sea Dance festival, positioning itself as a trusted partner in the event technology sector. The website reflects a professional and consistent brand image, targeting event organizers, salespersons, visitors, and banking partners.

C

Chronisten Tirol

chronisten.tirol

44

Chronisten Tirol is a culturally focused organization dedicated to supporting local chroniclers and preserving historical records in the Tirol region. The website serves as an information hub offering resources, events, and publications such as the quarterly 'Tiroler Chronist' magazine. The organization maintains partnerships with regional educational institutions, notably the Tiroler Bildungsforum, enhancing its credibility and outreach. Technically, the website is built on WordPress with modern plugins and frameworks, providing a good user experience and SEO optimization. Security posture is adequate with HTTPS enforced, but lacks some security headers and cookie consent mechanisms. The absence of WHOIS data is a minor concern but does not significantly detract from the site's legitimacy. Overall, the site is professional, trustworthy, and serves its niche audience effectively.

C

carsonal

carsonal.de

44

carsonal.de is a professionally designed website offering specialized applicant management and recruiting software tailored for automotive dealerships in Germany. The company positions itself as a niche SaaS provider with over 1,400 automotive dealership clients, emphasizing ease of use, GDPR compliance, and industry-specific features. Technically, the site is built on WordPress with the Avada theme and Yoast SEO plugin, indicating a mature digital infrastructure. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers and explicit privacy and cookie policies are missing. Overall, the site demonstrates a strong business credibility and professional presentation but lacks some compliance documentation and contact transparency.

V

VHE Industrial automation

vhe.nl

61

VHE Industrial automation is a specialized B2B partner focused on co-development and production of high-tech machine control, connectivity, and motion control systems. The company targets Original Equipment Manufacturers in advanced technology sectors, providing integrated hardware and software solutions to accelerate innovation and time-to-market. The website reflects a mature digital presence with professional design, comprehensive content, and strong branding consistency. Technically, the site is built on WordPress with modern tools like Yoast SEO, Google Tag Manager, and Google Consent Mode, ensuring good SEO and privacy compliance. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent, though explicit security policies and headers could be improved. Overall, the domain registration and website content align well, indicating a legitimate and trustworthy business entity.

A

AMP Amsterdam

amp.amsterdam

51

AMP Amsterdam is a specialized sonic branding company based in the Netherlands, founded in 2015. They provide a range of audio-related services including sonic branding, music supervision, licensing, production, and audio post-production. Their website demonstrates a strong market position targeting brands and agencies seeking to define and implement sonic brand identities. The company maintains a professional digital presence with a well-structured, SEO-optimized WordPress website, leveraging modern technologies and tracking tools while respecting user privacy through consent mechanisms. Security posture is adequate with HTTPS and domain transfer protections, though improvements can be made by enabling DNSSEC and adding security headers. Overall, the website is trustworthy, professional, and compliant with GDPR requirements.

M

Minute.ly

minute.ly

63

Minute.ly is a technology company specializing in AI-powered video content optimization solutions aimed at increasing user engagement and revenue for businesses. Their platform leverages deep learning to analyze video content and automatically generate dynamic teasers and real-time recommendations, enhancing video consumption across digital assets. The company positions itself as an innovative player in the video AI space with patented technology and a focus on mobile-first storytelling. The website is professionally designed using WordPress and Elementor, with good SEO and mobile optimization. The technical infrastructure includes modern CMS plugins and integrations with marketing and analytics tools such as HubSpot and LinkedIn. Security posture is adequate with HTTPS enabled and Cloudflare DNS, but lacks some advanced security headers and formal security policies. Privacy compliance is partial, with cookie consent implemented but no explicit privacy policy or terms of service found. Overall, the domain registration is consistent with a legitimate business, though the registrar is less common. The site is safe for general audiences and does not contain adult or explicit content.

F

Fitshop

sport-tiedje.de

66

Fitshop is a leading European retailer specializing in home fitness equipment, operating both online and through 69 physical stores across Europe. The company offers a wide range of fitness products, supported by expert customer service and multiple industry awards, positioning itself as Europe's number one in home fitness. The website is professionally designed, mobile-optimized, and provides comprehensive content relevant to its target audience of fitness consumers. Technically, the site employs modern frameworks such as Bootstrap and jQuery, integrates Google Tag Manager and Analytics, and uses Cloudflare for hosting and security. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Overall, the site demonstrates a mature digital presence with good privacy compliance and business credibility.

H

House of Energy

der-beste-arbeitgeber.de

55

Der beste Arbeitgeber is a German medium-sized company operating under the brand House of Energy, specializing in building services engineering sectors such as sanitary, heating, ventilation, and electrical technology. The company employs approximately 200 staff across five locations and manages over 1,000 construction projects annually with a turnover of around 16 million euros. The website serves as a recruitment and informational platform, targeting professionals seeking employment in technical and administrative roles within the construction and energy sectors. Technically, the website is built on WordPress with modern plugins including Revolution Slider, OneSignal for push notifications, and GDPR-compliant cookie consent mechanisms. The site is hosted on webgo.de, uses HTTPS with good SSL configuration, and integrates Google Analytics and Tag Manager for analytics and marketing purposes. Security posture is solid with no visible vulnerabilities or exposed sensitive data, though security headers could be improved. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the website presents a professional and trustworthy digital presence aligned with its business objectives.

H

Holzmann Medien GmbH & Co. KG

holzmann-medien.de

52

Holzmann Medien GmbH & Co. KG is a well-established German family-owned media publishing company founded in 1936. It specializes in economic and specialist media across sectors such as construction, cleaning, meat industry, craftsmanship, and hospitality. The company offers a broad portfolio including print publications, digital products, audio, video, events, and corporate publishing. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to industry professionals and entrepreneurs. Technically, the site is built on WordPress with modern plugins and frameworks, hosted likely by Deutsche Telekom, and includes a consent management platform for GDPR compliance. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is strong with clear policies and cookie consent mechanisms. Overall, the site is trustworthy and professionally maintained, supporting Holzmann Medien's market position as a leading specialist publisher in Germany.

T

Team Schaffner

teamschaffner.eu

10

Team Schaffner is a specialized service provider focusing on person counting, vehicle counting, and data processing primarily for sectors such as city marketing, facility management, retail, education, and cultural institutions within the DACH region. The company has been operational since at least 2011 and maintains a professional online presence with comprehensive service descriptions and client references. Technically, the website is built on WordPress with modern plugins for SEO and GDPR compliance, including cookie consent management and Google Analytics integration. Security posture is strong with HTTPS enforced and security headers present, although no explicit security policy or incident response information is published. WHOIS data is unavailable due to EURid privacy policies, but the website's professionalism and partner references support its legitimacy. Overall, the website demonstrates a mature digital infrastructure and good compliance with privacy regulations.

S

Stiftung ZQP

pflege-cirs.de

59

Pflege-CIRS is a specialized non-profit platform operated by Stiftung ZQP, focused on providing an anonymous reporting and learning system for critical incidents in professional long-term elderly care. The website serves healthcare professionals and educators by offering anonymized incident reports, expert recommendations, and educational materials to improve care quality and safety. The platform holds a niche position in the German healthcare quality assurance sector, emphasizing constructive learning and risk awareness. Technically, the website is built on WordPress with modern plugins such as Yoast SEO Premium and Borlabs Cookie for consent management. It demonstrates good digital maturity with structured data, responsive design, and SEO optimization. Performance is moderate, with good accessibility and mobile optimization. The site uses HTTPS exclusively, ensuring secure communication. Security posture is solid with HTTPS and cookie consent mechanisms, but lacks explicit security policies and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent. Business credibility is supported by clear contact information, professional content, and trust signals such as social media presence and affiliation with a recognized foundation. Overall, Pflege-CIRS presents a trustworthy, professional, and secure online presence suitable for its healthcare audience, with room for improvement in publishing dedicated security and incident response policies.

C

Conferenza dei vescovi svizzeri

ivescovi.ch

43

The website www.ivescovi.ch serves as the official online presence of the Swiss Bishops' Conference, a key religious and governmental entity representing the Catholic Church in Switzerland. It provides comprehensive information about the bishops, church history, committees, official documents, and news updates relevant to the Catholic community and the general public interested in religious affairs. The site targets primarily Italian-speaking users but offers links to German and French versions, reflecting Switzerland's multilingual context. The business model is non-profit, focusing on communication and information dissemination within the religious sector. Technically, the website is built on WordPress 6.6.2 with a Bootstrap-based theme, leveraging modern JavaScript libraries such as jQuery and Slick Carousel. It integrates Google Analytics via Google Site Kit for visitor tracking. The site demonstrates good mobile optimization and a professional design, though some accessibility features are basic. Performance is moderate, with no critical errors or broken elements detected. From a security perspective, the site enforces HTTPS with an excellent SSL configuration but lacks explicit HTTP security headers such as CSP or HSTS. No vulnerability disclosure or incident response policies are published, and cookie consent mechanisms are absent, which may affect GDPR compliance. Contact information is clearly provided, enhancing trust and credibility. Overall, the security posture is adequate but could be improved with additional headers and privacy compliance measures. The overall risk assessment indicates a well-maintained and trustworthy website with minor gaps in privacy compliance and security best practices. Strategic recommendations include implementing cookie consent, enhancing security headers, publishing security policies, and improving accessibility to strengthen the site's security and compliance posture.

Time Service is a specialized company providing innovative software and hardware solutions for race tracks and motorsport timekeeping worldwide. Established since 2005, it offers the RSTime software suite for automating and optimizing race timing and circuit management, alongside licensed sports timing services and a webshop for timing hardware. The company targets race circuits, timekeepers, and motorsport event organizers, positioning itself as a trusted provider with over two decades of experience and global reach. Technically, the website is built on a modern WordPress platform with WooCommerce and Elementor, delivering a professional and responsive user experience. Security measures include HTTPS and DNSSEC, though additional security headers and privacy policies are recommended to enhance compliance and trust. Overall, the website reflects a moderate to good security posture with room for improvement in privacy compliance and contact transparency.

Q&F - Comércio de Automóveis e Acessórios Lda is a Portuguese company founded in 1992 specializing in the commercialization and technical assistance of automotive competition, karting, and performance products. The company represents prestigious brands such as Sparco, Alpinestars, BBS, K&N, and Eibach, serving both individual customers and professional competitors. Their market position is strong within Portugal as a dynamic and innovative player in the automotive racing sector. The website is built on a modern WordPress and WooCommerce infrastructure, utilizing popular plugins like Elementor and Yoast SEO to provide a professional e-commerce experience. The technical infrastructure is solid with good mobile optimization and SEO practices, although performance is moderate. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, but lacks published security policies and incident response information. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security transparency.

A

AFDRIPE

creches-ensemble.ch

53

The website 'Ensemble pour l'avenir' is a French-language platform dedicated to promoting an event on November 18, 2025, aimed at showcasing the daily operations and socio-economic importance of childcare centers in the canton of Fribourg, Switzerland. It targets childcare providers, political authorities, employers, and other stakeholders in early childhood education. The site provides detailed information about the event, including program schedules, registration forms, and contact details, positioning itself as a regional advocacy and informational resource. Technically, the website is built on WordPress 6.8.3, utilizing modern libraries such as Leaflet.js for interactive maps and Ultimate Addons for Gutenberg for form handling. The site is mobile-optimized with good navigation and content quality. Security practices include HTTPS enforcement and anti-spam measures, though it lacks advanced security headers and explicit incident response or vulnerability disclosure policies. From a security perspective, the site maintains a moderate security posture with no critical vulnerabilities detected. Privacy compliance is addressed through a privacy policy and cookie consent banner, aligning with GDPR requirements. Contact information is clearly presented, enhancing business credibility. No advertising or tracking beyond form submissions is present, indicating a privacy-conscious approach. Overall, the website is a trustworthy, well-structured informational platform with a clear business purpose in the non-profit and government sectors. Strategic recommendations include enhancing security headers, formalizing incident response policies, and improving accessibility features to further strengthen the site's security and compliance posture.

L

lexunited GmbH

lexunited.com

61

lexunited GmbH operates as an official billing office of the Republic of Austria, providing authorized access to key public legal databases such as land registry, company register, and central population register. Founded in 2004 and based in Vienna, the company targets legal professionals and government officials, offering access to over 15 million documents across Austria, Germany, Switzerland, and the EU. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its audience. Technically, the site is built on WordPress with modern plugins and integrates Google services for analytics and security, including reCAPTCHA. Security posture is solid with HTTPS and consent mechanisms, though explicit security headers and policies are absent. WHOIS data is missing, which impacts transparency and trust, but the business claims and website content appear legitimate and authoritative.

A

Alda Europe

alda-europe.eu

40

Alda Europe is a well-established non-profit organization focused on fostering local democracy and civil society development across Europe and beyond. With 25 years of experience, it operates as a global alliance of local and regional authorities and civil society actors, delivering projects, advocacy, and capacity building services. The website reflects a professional and consistent brand image, targeting stakeholders in governance, civil society, and regional development. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the site is trustworthy and compliant with privacy regulations, though WHOIS data is unavailable due to privacy protection, which is typical for such organizations.

M

MTÜ Arengukoostöö Ümarlaud (AKÜ)

terveilm.ee

42

MTÜ Arengukoostöö Ümarlaud (AKÜ) is a small Estonian non-profit coalition representing NGOs engaged in development cooperation, global citizenship education, and sustainable development. The organization acts as a strategic partner and consultant to the Estonian Ministry of Foreign Affairs and provides workshops and consultancy services to private sector companies and the public. The website reflects a professional and consistent brand presence with good content quality and clear navigation, targeting Estonian NGOs and interested stakeholders. Technically, the site is built on WordPress with modern plugins and integrations, including multilingual support and social media connectivity. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks security headers and formal security or privacy policies. Overall, the site is trustworthy and well-positioned within its sector but would benefit from enhanced privacy compliance and security best practices.

K

Kleider Bauer

kleiderbauer.at

60

Kleider Bauer is a well-established Austrian retail fashion chain offering clothing collections for women, men, and children, with a strong regional presence across 25 locations. The website reflects a mature digital presence built on WordPress with Elementor, featuring rich content, marketing campaigns, and social media integration. While the site is professionally designed and optimized for SEO and mobile, it lacks explicit privacy and terms of service pages, which are critical for compliance and user trust. Security posture is good with HTTPS and GDPR cookie compliance, but could be improved by adding security headers and incident response contacts. Overall, the site is trustworthy and serves its retail audience effectively.

G

GEDLICH Racing

prototype-winter-series.com

44

GEDLICH Racing operates the Prototype Winter Series, a specialized motorsport championship focused on LMP3 prototype race cars competing on premier Southern European tracks during the winter months. The series is officially approved by the ACO, positioning it as a reputable and recognized event in the motorsport community. The website reflects a professional and well-branded presence, targeting racing teams, drivers, and enthusiasts with detailed event calendars, registration options, and media coverage. Technically, the site is built on WordPress with modern JavaScript libraries and SEO optimizations, delivering a good user experience across devices. Security posture is adequate with HTTPS and domain transfer protections, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is partially addressed with a privacy policy but lacks cookie consent mechanisms. Overall, the site demonstrates a strong business credibility and digital maturity suitable for its niche audience.

F

Fédération Adventiste de la Suisse romande et du Tessin

adventiste.ch

57

Adventiste.ch serves as the official digital presence of the Fédération Adventiste de la Suisse romande et du Tessin, providing religious, community, and ministry information to the French-speaking Adventist population in Switzerland and Ticino. The website offers comprehensive content including church locations, pastoral contacts, event announcements, and newsletters, positioning itself as a trusted regional hub for the Adventist community. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Calendarize It, ensuring good SEO and event management capabilities. Security measures include HTTPS enforcement and Google reCAPTCHA integration, though there is room for improvement in security headers and cookie consent mechanisms. Overall, the site demonstrates a solid security posture and compliance with privacy standards through links to comprehensive privacy policies. The domain registration details align well with the organization's identity, supporting high legitimacy and trustworthiness.

H

Heilsarmee Schweiz

armeedusalut.ch

48

The website armeedusalut.ch represents Heilsarmee Schweiz, a Swiss non-profit humanitarian organization focused on social aid, housing assistance, and community support. The site targets the general public, especially vulnerable populations and donors, providing information, resources, and calls to action for donations and volunteering. The organization holds recognized certifications such as ZEWO, enhancing its trustworthiness. Technically, the site is built on WordPress with modern plugins for multilingual support, consent management, and analytics integration. The site is mobile-optimized and accessible with good SEO practices. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent, though additional HTTP security headers and published security policies would improve it further. WHOIS data confirms the domain's legitimacy and consistency with the organization's identity. Overall, the site is professional, trustworthy, and well-maintained, serving its humanitarian mission effectively.

The Action Commune d’Evangélisation d’Yverdon-les-Bains (ACEY) is a small non-profit association established in 1988 to foster collaboration among evangelical churches and Christian groups in the Yverdon-les-Bains region of Switzerland. The organization facilitates joint worship services, prayer weeks, evangelization projects, and regional interfaith relations. The website serves as an informational hub for member churches, providing contact details, event information, and links to affiliated churches. Technically, the site is built on WordPress using the Elementor page builder and Astra theme, employing modern web technologies and offering good mobile responsiveness. Security posture is basic with HTTPS enabled but lacking advanced security headers and incident response information. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and serves its community well but would benefit from enhanced security and privacy practices.

A

auto-rennsport.de

auto-rennsport.de

45

auto-rennsport.de is a specialized German online media publication focused on national motorsport news, event coverage, and related content. The website targets motorsport enthusiasts primarily in Germany and German-speaking regions, offering news articles, photo galleries, and an online shop. The business operates as a small media outlet with a niche focus, founded around 2020. Technically, the site is built on WordPress with popular plugins such as Yoast SEO and WPBakery Page Builder, hosted on German servers (kasserver.com). The site demonstrates good SEO practices, mobile optimization, and basic accessibility. Security posture is moderate, with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and a formal security policy or vulnerability disclosure. No WAF or blocking mechanisms were detected, and the site content is safe for general audiences with no adult or questionable material. WHOIS data is minimal but consistent with the business profile, showing no suspicious patterns. Overall, the website is professional, trustworthy, and compliant with GDPR, though improvements in security headers and transparency could enhance its posture.

S

Schweizer Bischofskonferenz

bischoefe.ch

48

The Schweizer Bischofskonferenz website serves as the official digital presence of the Swiss Bishops' Conference, providing comprehensive information about the Catholic Church's activities, leadership, and ethical services in Switzerland. The site targets church members, religious communities, and the general public interested in ecclesiastical matters. It offers news, documents, and partner links, positioning itself as a trusted non-profit religious institution with a medium organizational size. Technically, the website is built on WordPress 6.6.2, leveraging common plugins such as Contact Form 7 and Bootstrap for responsive design. The infrastructure supports moderate performance and good mobile optimization, with Google Tag Manager integrated for analytics. However, some accessibility features are basic, and SEO practices are adequately implemented. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. Nonetheless, it lacks explicit security headers and a cookie consent mechanism, which are important for GDPR compliance and enhanced security posture. No vulnerability disclosures or incident response contacts are provided, indicating room for improvement in transparency and security readiness. Overall, the website is professional, trustworthy, and content-rich, but it would benefit from enhanced privacy compliance measures and security best practices to strengthen user trust and regulatory adherence.

Z

Zwet GmbH

zwetdesign.com

62

Zwet GmbH operates as a specialized 3D agency based in Germany, offering advanced 3D animations, CGI visualizations, motion graphics, and interactive applications including VR, AR, and XR solutions. The company targets industrial and B2B clients seeking innovative digital content to enhance marketing, sales, and product presentations. Their website demonstrates a professional portfolio with rich multimedia content and clear navigation, reflecting a mature digital presence. Technically, the website is built on WordPress with modern technologies such as jQuery and Google Tag Manager for analytics. Embedded Vimeo videos and interactive WebGL applications showcase their technical capabilities. The site is mobile-optimized and SEO-friendly, though performance is moderate. Security posture is good with HTTPS enforced, but lacks some advanced security headers and explicit incident response policies. Security-wise, the site shows no critical vulnerabilities or exposed sensitive data. Privacy compliance is supported by a cookie consent mechanism and a privacy policy page in German, indicating GDPR awareness. However, no terms of service or security policy documents were found. WHOIS data is missing, which raises some questions about domain registration transparency but does not detract significantly from the site's legitimacy given the professional content and contact information. Overall, Zwet GmbH presents a credible and professional business with a strong digital footprint in the 3D visualization technology sector. Strategic improvements in security headers, incident response documentation, and WHOIS transparency would enhance trust and compliance.

S

Swiss Society of Hematology

sgh-ssh.ch

10

The Swiss Society of Hematology (SGH SSH) is a professional organization dedicated to representing hematologists in Switzerland. It provides postgraduate and continuous education, supports clinical and laboratory hematology professionals, and organizes key events such as the Swiss Oncology and Hematology Congress. The society targets medical professionals and researchers in hematology, offering membership services and educational resources. The website is built on a modern WordPress platform with a professional design and clear navigation, reflecting a mature digital presence. Security measures include HTTPS enforcement, Google reCAPTCHA integration, and a comprehensive cookie consent mechanism, although explicit security policies and incident response information are not publicly detailed. Overall, the site demonstrates a strong security posture with room for improvement in security headers and public policy disclosures. The domain registration data aligns well with the organization's identity, supporting its legitimacy. The website is safe for general audiences and does not contain any adult or questionable content.

P

Privat-Brauerei Hohenfelde GmbH

hohenfelder.de

54

Privat-Brauerei Hohenfelde GmbH operates a regional brewery in Germany, offering a diverse range of beer products and related services such as brewery tours and equipment rentals. The company emphasizes tradition, local roots, and environmental responsibility, targeting mature consumers interested in quality regional beverages. The website is built on WordPress with modern front-end technologies, providing a good user experience and mobile optimization. Security measures include HTTPS and Google reCAPTCHA, though there is room for improvement in security headers and cookie consent mechanisms. Overall, the domain registration and website content align well, indicating a legitimate and trustworthy business presence.

G

Graphisoft

graphisoft.com

68

Graphisoft is a leading technology company specializing in BIM software solutions for architecture, engineering, and construction professionals. Their website showcases a comprehensive portfolio of products such as Archicad, BIMcloud, BIMx, and AI Assistant, targeting AEC experts globally. The company emphasizes collaboration, innovation, and education through training and certification programs. The site is well-branded, professionally designed, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, the website is built on WordPress with modern JavaScript libraries including jQuery and Swiper.js, integrated with Google Tag Manager and Cookiebot for analytics and privacy compliance. The site employs HTTPS with strong security headers and uses reCAPTCHA to protect forms, indicating a solid security posture. However, explicit security policies and incident response information are not published, which could be improved. The WHOIS data is unavailable or privacy protected, which reduces transparency but the website content and branding strongly support legitimacy. No blocking or WAF challenges were detected, allowing full content access and analysis. Overall, the site demonstrates a high level of professionalism, security, and compliance with privacy regulations. Strategic recommendations include publishing detailed security and incident response policies, adding vulnerability disclosure mechanisms, and providing direct security contact information to enhance trust and compliance.