Security Directory

C

Christliches Zentrum Zollhaus

zollhaus.ch

68

Christliches Zentrum Zollhaus is a small non-profit Christian church based in Luzern, Switzerland, serving the Central Swiss community with physical locations and online livestream services. The website is professionally designed using Squarespace, featuring clear navigation, good mobile optimization, and a consistent brand presence. The organization maintains active social media channels and provides transparent contact information, enhancing trust and community engagement. Technically, the site employs modern web technologies including Google Tag Manager, Microsoft Clarity, and Google reCAPTCHA, hosted on Squarespace with HTTPS and HSTS enabled, ensuring a secure browsing experience. However, the site lacks explicit privacy policy and terms of service pages, which are important for full compliance and user trust. Security posture is strong with no evident vulnerabilities or exposed sensitive data, but incident response and vulnerability disclosure information are absent. Overall, the website is trustworthy and well-maintained, suitable for its non-profit religious purpose.

C

Christliches Zentrum Hofmatt Aarburg

czh.ch

10

Christliches Zentrum Hofmatt Aarburg (CZH) is a small, non-profit Christian church based in Aarburg, Switzerland, focused on providing a welcoming community for families and individuals. The website highlights their core values, church services, youth and children programs, and community groups, positioning them as a local religious organization with an international and family-oriented approach. Their digital presence includes active social media channels and a newsletter subscription, supporting community engagement. Technically, the website is built on WordPress with modern plugins and frameworks such as Vue.js and Swiper.js, ensuring a responsive and user-friendly experience. SEO practices are well implemented with Yoast SEO and structured data markup. Security posture is adequate with HTTPS and reCAPTCHA usage, though there is room for improvement in security headers and incident response transparency. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. Overall, the website is professional, trustworthy, and serves its community effectively.

M

move

move19.ch

10

move is a Swiss-based non-profit organization focused on Christian youth engagement through events, outreaches, and leadership training. Their flagship event is scheduled for December 6, 2025, in Aarau, targeting young people aged 15 to 25 and above. The organization collaborates with several partner entities such as ISTL, AVC, &acts, CfC, and msd, enhancing its community reach and credibility. The website serves as an information and registration portal, featuring detailed event descriptions, team member profiles, and integrated social media feeds.

N

NOVASOL

novasol.dk

67

NOVASOL is a well-established European vacation rental company specializing in summer houses and holiday homes across 18 countries. Founded in 1968, it operates under the parent company Awaze and offers a broad portfolio of unique properties tailored to diverse customer needs. The website demonstrates a mature digital presence with modern technologies such as React and Next.js, integrated performance monitoring via New Relic, and marketing tools like Google Tag Manager. Privacy and cookie policies are present, indicating GDPR compliance. Security posture is strong with HTTPS, security headers, and CAPTCHA integration. However, the absence of WHOIS data and explicit contact information on the main site limits full trust verification. Overall, NOVASOL presents a professional and trustworthy platform for vacation rentals in Europe.

U

Up Romania

uponline.ro

53

Up Romania operates a digital platform (uponline.ro) primarily serving its clients and partners by providing account access, business proposal management, and marketing information. The platform supports both company users and card users, facilitating loyalty and payment services. The website also promotes the Up Mobil+ mobile application available on multiple app stores. Technically, the site is built using Vue.js, integrates Google Analytics for traffic monitoring, and uses Cloudflare DNS services. Security measures include HTTPS, Google reCAPTCHA for form protection, and a cookie consent mechanism compliant with GDPR. However, DNSSEC is not enabled and security headers are not explicitly present, indicating room for improvement. Overall, the website is professional, trustworthy, and well-structured, targeting Romanian business clients and affiliated users.

N

NetZone AG

netzone.ch

78

NetZone AG is a Swiss-based hosting provider specializing in web hosting, email services, domain registration, managed vServers, SMS, and security solutions. The company positions itself as a pioneer in Swiss hosting with a strong emphasis on Swiss server location, high availability, and security features such as spam and malware filtering and application firewalls. The website reflects a professional and consistent brand image targeting businesses and individuals seeking reliable hosting services in Switzerland. Technically, the site uses a modern but somewhat dated tech stack including Bootstrap 3.3.7 and jQuery 2.2.4, with integrations for Google reCAPTCHA and cookie consent mechanisms, indicating a moderate level of digital maturity. Security posture is solid with HTTPS enforced and secure forms, but lacks explicit security headers and a published security policy. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent. Overall, the site is trustworthy and professionally maintained, with room for improvement in security transparency and SEO.

H

Handball-Store: Numer 1 wśród stron internetowych poświęconych piłce ręcznej

handball-store.pl

56

Handball-Store.pl is a specialized e-commerce platform focused on providing comprehensive handball equipment, apparel, and accessories primarily targeting handball players and enthusiasts in Poland and Europe. The website offers a wide range of products including shoes, balls, textiles, protective gear, and club equipment, positioning itself as a leading online store in its niche. The business appears to be recently established in 2023, with a consistent domain registration and a clear market focus. Technically, the website is built on Magento (OpenMage), leveraging modern web technologies and integrated with Google Analytics and Google Ads for marketing and performance tracking. Security measures include HTTPS with DNSSEC enabled and Google reCAPTCHA to mitigate bot traffic. However, explicit privacy and cookie policies are not found, though a consent management platform is implemented, indicating partial GDPR compliance. Contact information is not prominently displayed, which may affect user trust and support accessibility. Overall, the site demonstrates a good balance of content quality, technical implementation, and security posture, but could improve in privacy transparency and contact availability.

A

Amplified Humanity

amplified-humanity.com

64

Amplified Humanity is a niche counseling service focused on providing unconventional counseling and coaching to deep thinkers, creatives, idealists, and non-conformists. The business offers specialized services including psychological and systemic counseling, death doula support, kink and BDSM coaching, somatic trauma therapy, and psychedelic integration counseling. The website is professionally designed and hosted on Squarespace, with modern web technologies and multimedia content enhancing user experience. However, the absence of WHOIS registration data raises concerns about domain legitimacy. Security posture is strong with HTTPS and HSTS enabled, and cookie consent mechanisms are in place, but privacy policies and direct contact information are missing, impacting compliance and trust. Overall, the site is functional and secure but would benefit from improved transparency and business credibility disclosures.

P

Psychedelic Therapies

psychedelictherapies.de

60

Psychedelic Therapies is a small German-based service provider specializing in counseling and integration therapy related to psychedelic treatments. The website targets clients and facilitators interested in psychedelic therapy, positioning itself as a niche mental health service provider. The digital infrastructure is built on the Squarespace platform, leveraging modern web technologies and providing a responsive and professionally designed user experience. Security posture is strong with HTTPS and HSTS enabled, and Google reCAPTCHA is used to protect forms. However, the site lacks explicit privacy policies, terms of service, and direct contact information, which are important for compliance and trust. Overall, the site is safe, well-structured, and suitable for its target audience, but improvements in privacy compliance and business transparency are recommended.

M

Mosaiq

mosaiq.ch

51

Mosaiq is a Swiss-based full-service marketing and communication agency specializing in integrated brand success. The company offers a broad range of services including consulting, content marketing, creative design, online marketing, and web development. Positioned as a trusted partner for small and medium-sized enterprises in the Mittelland region, Mosaiq emphasizes comprehensive brand identity and multi-channel communication strategies. The website reflects a professional and modern digital presence with strong branding consistency and client testimonials that reinforce trust. Technically, the website is built on WordPress with UIkit framework and leverages modern tools such as Google Tag Manager, Microsoft Clarity, and Brevo for marketing automation. The site is mobile-optimized, accessible, and SEO-friendly, indicating a mature digital infrastructure. Security measures include HTTPS enforcement and use of Google reCAPTCHA, although some security headers could be enhanced. The security posture is solid with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a clear privacy policy, cookie consent mechanism, and GDPR adherence. However, there is no explicit security policy or incident response information publicly available. Overall, the website and domain registration data indicate a legitimate and trustworthy business with a strong online presence. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and improving incident response contact visibility to further strengthen security and trust.

G

Gotthilf Benz Turngerätefabrik GmbH + Co. KG

benz-sport.at

50

Firma Benz Turn- und Sportgeräte Gesellschaft m.b.H operates a professional e-commerce platform specializing in sports equipment, targeting a broad audience primarily in Austria and German-speaking regions. The company offers a wide range of products including balls, gymnastics equipment, fitness and strength training gear, team sports accessories, martial arts supplies, and swimming products. The website is well-structured, leveraging the PrestaShop CMS platform, and provides clear contact information and localized content. The presence of multiple country-specific domains indicates a regional market focus with multilingual support. Technically, the website employs modern web technologies such as jQuery, Nivo Slider for image slideshows, and Google reCAPTCHA for form security. The site is served over HTTPS with a good SSL configuration, ensuring secure data transmission. Cookie consent mechanisms are implemented to comply with GDPR requirements, although an explicit privacy policy page was not found in the provided content. The site demonstrates good mobile optimization and SEO practices, contributing to a positive user experience. From a security perspective, the website benefits from HTTPS and CAPTCHA protections but lacks visible security headers and formal security policies such as incident response or vulnerability disclosure statements. The absence of WHOIS registrant data reduces transparency but does not necessarily indicate malicious intent. Overall, the site maintains a solid security posture with room for improvement in policy disclosures and header implementations. The overall risk assessment is moderate with no critical vulnerabilities detected. Strategic recommendations include publishing comprehensive privacy and security policies, implementing security headers, and enhancing WHOIS transparency to build greater trust. These steps will strengthen compliance, security posture, and user confidence in the platform.

S

Schweizer Agrarmedien AG

agrarmedien.ch

67

Schweizer Agrarmedien AG is the largest agricultural specialized publishing company in Switzerland, offering a portfolio of print and digital media products including newspapers, magazines, and online marketplaces focused on agriculture, nature, and environment. Their target audience includes farming families, animal and nature enthusiasts, and professionals in the Swiss agricultural sector. The company maintains a strong market position with multiple well-known media brands and digital platforms. Technically, the website is built on TYPO3 CMS and leverages modern JavaScript libraries and analytics tools such as Matomo, Microsoft Clarity, and Google Tag Manager, indicating a mature digital infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and use of reCAPTCHA, but lacks some security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is trustworthy and professionally managed, with room for improvement in security and privacy transparency.

I

Input interior

inputinterior.com

56

Input interiör is a leading independent Nordic interior design group specializing in tailored interior solutions for offices, hospitality, education, and healthcare sectors. The company emphasizes sustainability and offers a broad product range supported by certifications such as Svanen and EcoLabel. Their website demonstrates a mature digital presence with multilingual support, comprehensive content, and active social media engagement. Technically, the site is built on WordPress with modern plugins and performance optimizations, ensuring fast and accessible user experience. Security posture is strong with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be enhanced. WHOIS data for the exact www subdomain is unavailable, but this is typical and does not detract significantly from trust given the professional site content. Overall, Input interiör presents a credible and well-managed online presence aligned with their business stature.

C

C.A. SEYDEL SÖHNE

seydel1847.de

60

C.A. SEYDEL SÖHNE is a historic German manufacturer specializing in handmade harmonicas since 1847. The company operates a professional e-commerce platform showcasing a wide range of harmonicas, accessories, and related services including workshops and virtual tours. Their market position is that of a niche leader with a strong heritage brand in the musical instrument manufacturing sector. The website is well-structured, mobile-optimized, and compliant with GDPR regulations, featuring a cookie consent mechanism and privacy policy. Technically, the site uses the ePages platform with Dojo Toolkit and jQuery, supported by Cloudflare for DNS and CDN services. Security posture is strong with HTTPS enforced and reCAPTCHA implemented on forms, though some security headers could be improved. Overall, the site demonstrates a mature digital presence with good user experience and trust indicators.

Z

ZUK

zuk.es

47

ZUK is a Barcelona-based digital agency specializing in web design, online stores, and digital marketing services including SEO and SEM. With over 20 years of experience, they position themselves as a trusted partner for businesses seeking digital transformation and enhanced online presence. Their website reflects a professional and modern approach, leveraging WordPress and Elementor for content management and design. The agency demonstrates compliance with GDPR and cookie consent regulations, integrating tools such as Complianz and Google reCAPTCHA to enhance privacy and security. While WHOIS data is unavailable due to registry restrictions, the website's content and contact information support its legitimacy. Security posture is good with HTTPS and anti-bot measures, though improvements in security headers could be made.

R

Ri-Velo

ri-velo.it

53

Ri-Velo is a regional innovative network based in Veneto, Italy, focused on logistics, supply chain, and sustainability projects. The organization integrates companies, institutions, and universities to foster innovation in logistics 4.0 and eco-sustainability. The website positions Ri-Velo as a key player in the regional logistics innovation ecosystem, supported by recognized certifications such as the ECEI Bronze Label. The target audience includes businesses and organizations involved in logistics and supply chain within the Veneto region. Technically, the website is built on WordPress with modern plugins and frameworks, including Yoast SEO, WPML for multilingual support, and Google Tag Manager for analytics. Security measures include HTTPS, Google reCAPTCHA on contact forms, and GDPR-compliant cookie consent mechanisms. However, some security headers are missing, and no explicit security or incident response policies are published. Overall, the website is professional, well-structured, and trustworthy, with good content quality and compliance with privacy regulations.

C

Contractors Commitment

contractorscommitment.org

61

Contractors Commitment is a small non-profit initiative focused on promoting sustainable building practices within the construction industry. The platform serves as a benchmark for contractors to commit to and measure their sustainability efforts, offering public recognition for green building work. The website is professionally designed using the Squarespace platform, with a clear mission and partnership indication with USGBC-CA. Technically, the site uses modern web technologies and enforces HTTPS with HSTS, ensuring secure connections. However, it lacks explicit privacy, cookie, and terms of service policies, which are important for compliance and user trust. No contact information or incident response details are provided, limiting direct communication channels. Overall, the site is safe, professional, and moderately credible but could improve privacy compliance and transparency.

E

Employer-Branding-Suite

employer-branding-suite.com

40

Employer-Branding-Suite.com is a German-based small business specializing in comprehensive employer branding solutions targeted at companies seeking to attract and engage talent, particularly SMEs. Their offerings include career websites, recruiting videos, photo impressions, video interviews, and social media packages. The website is professionally designed, well-structured, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, it is built on WordPress with modern plugins and frameworks, ensuring a stable and maintainable infrastructure. Security posture is good with HTTPS, cookie consent, and spam protection via Google reCAPTCHA, though some security headers could be improved. Privacy compliance is strong with clear GDPR-aligned policies and cookie management. Overall, the site demonstrates high professionalism and trustworthiness with transparent business information and active customer engagement channels.

W

W3Schools

w3schools.com

76

W3Schools is a globally recognized online educational platform specializing in web development and programming tutorials. It offers a comprehensive range of free tutorials, references, exercises, and quizzes covering popular technologies such as HTML, CSS, JavaScript, Python, SQL, and more. The platform also provides paid certification programs and premium plans to enhance learning experiences. W3Schools targets a broad audience including students, educators, and professional developers, maintaining a strong market position as a leading resource for web development education. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with integration of Google Tag Manager and reCAPTCHA for analytics and security. The site is mobile-optimized, fast-loading, and accessible, with a consistent and professional design. Security best practices are observed, including HTTPS enforcement and security headers, though explicit security policies and incident response information are not publicly detailed. The security posture is strong with no detected vulnerabilities or exposed sensitive data. Privacy compliance is robust, featuring comprehensive privacy and cookie policies with GDPR adherence and user consent mechanisms. However, direct contact information for security incidents or general inquiries is not readily available, which could be improved to enhance trust and incident handling. Overall, W3Schools presents a low-risk profile with high trustworthiness, excellent content quality, and solid technical implementation. Strategic recommendations include publishing explicit security and incident response policies, adding vulnerability disclosure mechanisms, and providing clearer contact channels for security and support inquiries to further strengthen the platform's security culture and user trust.

J

JuBla Gurmels

jubla-gurmels.ch

51

JuBla Gurmels is a small non-profit youth organization based in Switzerland, focused on community building, youth engagement, and outdoor activities. The website serves as an informational and engagement platform for members and interested parties, providing event details, contact information, and organizational values. The site is built on WordPress using Elementor and Yoast SEO, indicating a moderate level of digital maturity with good SEO practices and mobile optimization. Security measures include HTTPS and Google reCAPTCHA on forms, but lack advanced security headers and explicit security policies. Overall, the site is trustworthy and professional but could improve privacy compliance and security posture.

J

Jubla Dreif

jubla.be

40

Jubla Dreif is a small, non-profit youth organization based in Bern, Switzerland, providing free recreational activities and summer camps for children aged 5 to 16. The organization is affiliated with the Dreifaltigkeitskirche but operates independently of any religious denomination. The website serves as an informational and engagement platform for participants and their families, featuring activity schedules, photo galleries, and contact options. Technically, the site is built on WordPress with common plugins for photo galleries and GDPR compliance, and it employs Google reCAPTCHA for form security. While the site uses HTTPS and has basic cookie consent mechanisms, it lacks explicit privacy and terms of service pages, and security headers are not detected, indicating room for improvement in security posture. Overall, the website is functional, trustworthy, and appropriate for its target audience, but could benefit from enhanced privacy and security documentation.

2

20 Minuten

20minuten.ch

77

20 Minuten is the largest Swiss news portal offering 24/7 news coverage, videos, and community features primarily targeting the German-speaking Swiss audience. The website demonstrates a mature digital infrastructure using modern frameworks such as Next.js and React, supported by various third-party analytics and advertising technologies. Security posture is solid with HTTPS enforcement and standard security headers, although explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is well addressed through cookie consent mechanisms and a comprehensive privacy policy. Overall, the website presents a professional, trustworthy, and user-friendly platform with extensive content and good technical implementation.

L

Licht im Osten Schweiz

lio.ch

65

Licht im Osten Schweiz is a well-established non-profit organization founded in 1920, dedicated to providing humanitarian aid and missionary support in Eastern Europe and Central Asia. The organization focuses on alleviating material, medical, and spiritual needs through various projects including child sponsorship, aid distribution, and community development. Their market position is strong within the charitable sector, supported by a consistent brand and clear communication of their mission and services. Technically, the website is built on the Webflow platform, utilizing modern web technologies such as jQuery, Google Tag Manager, and Adobe Typekit fonts. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure suitable for their audience. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect forms, but lacks some advanced security headers and explicit security policies. Privacy compliance is partially addressed with a comprehensive GDPR privacy policy, though cookie consent mechanisms are absent despite the use of tracking scripts. No incident response or vulnerability disclosure policies are evident. Overall, the website presents a low-risk profile with high trustworthiness and professionalism. Strategic improvements in security headers, cookie consent, and transparency policies would enhance their security posture and compliance standing.

S

Sportzentrum Niederösterreich

sportzentrum-noe.at

55

Sportzentrum Niederösterreich operates as a regional sports center in Austria, providing sports facilities and services primarily to athletes and sports enthusiasts within Niederösterreich. The website is built on WordPress and employs standard plugins such as Contact Form 7 and Complianz GDPR for cookie consent management. The site demonstrates a moderate level of digital maturity with good design quality, mobile optimization, and basic SEO practices. Security measures include HTTPS enforcement and Google reCAPTCHA integration, but lack explicit security policies and comprehensive contact details for incident response. Overall, the domain registration data aligns well with the website's regional focus, indicating legitimacy and trustworthiness.

Indiegogo is a well-established crowdfunding platform that enables creators to launch and manage fundraising campaigns globally. The platform offers comprehensive services including campaign hosting, pledge management, and performance marketing. It targets creators and backers interested in innovative projects and has a strong market position as one of the leading crowdfunding platforms worldwide. The website is professionally designed with excellent content quality and clear navigation, optimized for mobile and desktop users alike. Technically, Indiegogo employs a modern technology stack including secure payment gateways (Adyen, Stripe, Apple Pay, Google Pay), advanced analytics (Google Analytics 4, Facebook Pixel, Microsoft Clarity), and robust error tracking (Rollbar). Security best practices are observed with HTTPS enforcement, security headers, and bot protection via reCaptcha. Privacy policies and cookie consent mechanisms are comprehensive and GDPR compliant. Contact information is clearly provided, enhancing business credibility. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, Indiegogo demonstrates a mature digital infrastructure and a strong security posture, suitable for its large enterprise scale and global audience.

T

Tracxn

tracxn.com

55

Tracxn is a technology and data platform serving over 850 venture capitalists, private equity firms, investment banks, and corporates. Founded in 2012, it provides comprehensive tracking and analysis of innovative companies and emerging sectors, positioning itself as a key player in the financial technology data space. The website reflects a professional B2B SaaS business model targeting financial and corporate development professionals. Technically, the site uses modern frameworks such as Next.js and is hosted on AWS infrastructure, with Google Analytics and reCAPTCHA integrated for analytics and security. While the site is well-designed and mobile-optimized, it lacks visible privacy and cookie policies, which are critical for compliance and user trust. Security posture is adequate with HTTPS and bot protection but could be enhanced by implementing DNSSEC and security headers. Overall, the domain registration and technical setup indicate a legitimate and established business with a solid market presence.

Kloster Ingenbohl – Provinz Schweiz is a Swiss-based non-profit religious organization hosting the Barmherzigen Schwestern vom heiligen Kreuz. The website serves as a portal for spiritual services, pilgrim support, community events, and care facilities including an elderly care center and accommodation for visitors. The organization holds a significant historical presence, with notable anniversaries and a strong community focus. Technically, the website is built on WordPress with modern plugins for event management, contact forms, and GDPR compliance, reflecting a moderate to good digital maturity. Security measures include HTTPS, reCAPTCHA, and cookie consent management, though there is room for improvement in security headers and explicit security policies. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations, serving its target audience effectively.

L

Lichtblick Römisch-katholisches Pfarrblatt Nordwestschweiz

lichtblick-nw.ch

52

Lichtblick Römisch-katholisches Pfarrblatt Nordwestschweiz is a regional non-profit publication serving the Catholic parishes in the Swiss cantons of Aargau, Basel, and Solothurn. The website provides parish news, event agendas, job listings, and multimedia content such as videos and podcasts. It targets the Catholic community and interested readers in the region, positioning itself as a trusted source of religious and community information. The business model focuses on information dissemination and community engagement rather than commercial profit. Technically, the website is built on WordPress 6.8.3 with modern web technologies including jQuery, Google Tag Manager, and reCAPTCHA for form security. The site is mobile-optimized with good SEO practices and uses structured data (JSON-LD) for enhanced search engine understanding. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. Email addresses are obfuscated to reduce spam. However, some security headers are not explicitly detected and could be implemented to strengthen security posture. No critical vulnerabilities or exposed sensitive data were found. Overall, the website is professional, trustworthy, and compliant with GDPR and cookie regulations. It provides clear contact information and maintains a consistent brand presence. The risk level is low, with recommendations focusing on enhancing security headers and ongoing maintenance to ensure continued compliance and security.

X

XWiki SAS

xwiki.com

73

XWiki SAS is a well-established technology company specializing in open source knowledge management and collaboration software. With over 20 years of experience, it offers a range of standard and custom solutions including cloud hosting, support, and consulting services. The company serves a broad business audience, including large enterprises such as Amazon and Lenovo, positioning itself as a trusted provider in the enterprise wiki and collaboration market. The website reflects a professional and consistent brand image with comprehensive content and clear navigation. Technically, the site is built on the XWiki platform with modern JavaScript libraries and frameworks, ensuring good performance and mobile optimization. Security posture is solid with HTTPS, domain protection, and use of CAPTCHA, though explicit security policies and vulnerability disclosures are absent. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Overall, the site demonstrates high business credibility and technical maturity with moderate user tracking for analytics and marketing purposes.

Ö

Österreichischer Turnerbund

oetb.at

55

The Österreichischer Turnerbund (ÖTB) is a well-established Austrian sports federation focused on promoting gymnastics and physical activity, especially among youth and community members. The website serves as an information hub for events, training courses, and publications, positioning the organization as a key player in Austria's non-profit sports sector. The digital infrastructure is built on WordPress with Elementor, leveraging modern web technologies and analytics tools like Matomo to monitor user engagement while maintaining GDPR compliance through a comprehensive privacy and cookie policy. Security posture is solid with HTTPS and reCAPTCHA protections, though there is room for improvement in security headers and incident response transparency. Overall, the site is professional, trustworthy, and well-optimized for its audience.

Schröter Technologie GmbH & Co. KG is an internationally recognized manufacturer specializing in thermal equipment for the food industry, including solutions for smoking, cooking, steaming, and drying. The company positions itself as a leader in precision, quality, and innovation within its sector. The website is built on TYPO3 CMS, indicating a mature digital infrastructure with modern technologies such as Google reCAPTCHA and Google Tag Manager integrated for security and analytics purposes. However, the absence of explicit privacy policies and contact information on the visible HTML content suggests areas for improvement in transparency and compliance. Security posture is moderate, with HTTPS usage and bot protection in place, but lacking visible security headers and formal incident response details. Overall, the website is professional and trustworthy, serving a general audience in the manufacturing sector without any adult or questionable content.

The website dafuer-sein-ist-alles.de is operated by the Deutscher Olympischer Sportbund e.V. (DOSB), the German Olympic Sports Confederation, serving as a platform to promote and inform about Germany's bid for the Olympic and Paralympic Games. It targets the German public and stakeholders interested in the Olympic movement, providing detailed information on bidding concepts from major German cities and regions, interactive tools, and news updates. The site enjoys strong government backing, evident from the partnership with the German Federal Ministry of the Interior and official logos displayed. Technically, the website employs modern web technologies including ES modules, Alpine.js for interactivity, and Vite for bundling. It integrates consent management via Consentmanager.net, analytics through Matomo, and uses Google reCAPTCHA for form security. The site is well-optimized for mobile devices, fast loading, and accessible, with good SEO practices and structured data enhancing search visibility. From a security perspective, the site enforces HTTPS, uses reCAPTCHA to protect forms, and manages cookie consent properly. While explicit security headers like X-Content-Type-Options and X-Frame-Options are not visible in the HTML, the overall security posture is strong with no exposed sensitive data or vulnerable libraries detected. Privacy compliance is robust, with a comprehensive privacy policy and cookie consent mechanism in place. Overall, the website presents a professional, trustworthy, and secure platform aligned with its governmental and non-profit nature. It effectively balances user engagement, privacy, and security, making it a reliable source for information on Germany's Olympic bid.

I

ISTAF INDOOR

istaf-indoor.de

51

ISTAF INDOOR is a professional athletics event organization operating primarily in Berlin and Düsseldorf, Germany. The website serves as a digital platform to promote world-class indoor track and field events, targeting sports enthusiasts and attendees. The business model revolves around event promotion, ticket sales, and providing information about athletics competitions. The site positions itself as a reputable event organizer with a consistent brand presence and active social media engagement. Technically, the website is built on WordPress using the Divi theme and several well-known plugins such as LayerSlider, Contact Form 7, and Real Cookie Banner for GDPR compliance. The infrastructure is hosted on rzone.de, with modern web technologies including Google Fonts, Font Awesome, and Google reCAPTCHA integrated for enhanced user experience and security. Performance is moderate with good mobile optimization and SEO practices. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. While explicit security headers are not fully confirmed, the use of reCAPTCHA and absence of exposed sensitive data indicate a reasonable security posture. However, the site lacks a public security policy or incident response contact, which could be improved to enhance trust and readiness. Overall, ISTAF INDOOR presents a professional and trustworthy online presence with good compliance to privacy regulations and a solid technical foundation. Strategic improvements in security transparency and incident response readiness are recommended to further strengthen its security posture and business credibility.

S

Sächsischer Tennis Verband e.V.

stv-tennis.de

40

The Sächsischer Tennis Verband e.V. website serves as the official online presence of the largest tennis association in the new federal states of Germany. It primarily targets players, trainers, referees, and teams involved in tennis competitions across various age groups and leagues. The site provides news, event calendars, and organizational information, supporting the association's mission to coordinate tennis activities regionally. Technically, the site is built on WordPress with a modern plugin ecosystem including GDPR compliance tools, calendar management, and newsletter capabilities. The infrastructure is hosted on servers associated with kasserver.com, and the site employs HTTPS with Google reCAPTCHA to secure forms. Security posture is solid but could be improved by adding explicit security headers and publishing formal security policies. Privacy compliance is well addressed through the Complianz GDPR plugin and cookie consent mechanisms. Overall, the website is professional, accessible, and trustworthy, with no signs of malicious or adult content.

R

Ripoche

ripochetransports.com

55

Ripoche Transport is a well-established French transport and logistics company founded in 1967, specializing in road freight transport across regional and national territories. The company offers a comprehensive range of services including national and regional transport, palletized messaging, vehicle rental with drivers, and transport commission/chartering. Since June 2024, Ripoche has been integrated into the Groupe Jolival, enhancing its market position and operational capabilities. The website reflects a professional and consistent brand image, targeting business clients requiring reliable and environmentally conscious transport solutions in France. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and performance optimizations, though there is room for improvement in accessibility and cookie consent compliance. Security posture is solid with HTTPS, reCAPTCHA, and domain transfer protections, but lacks DNSSEC and some advanced security headers. The WHOIS data shows a suspicious future domain creation date, which should be investigated to confirm legitimacy. Overall, Ripoche Transport presents a trustworthy and professional online presence with strong business credibility and good digital maturity.

A

ALS

transports-als.com

60

ALS (Aviculture Logistique Services) is a French company specializing in poultry logistics and transport services, including the transport of eggs to hatch, day-old chicks, adult poultry, and feed. Established in 2007 and based in the West and South-West of France, ALS operates a fleet of over 80 vehicles and serves more than 25 countries. The company recently partnered with Jolival to enhance its service offerings and ensure sustainable growth. The website reflects a professional and consistent brand image, targeting poultry industry professionals with clear service descriptions and contact options. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and caching for performance. It includes Google reCAPTCHA for form security and uses Google Tag Manager for analytics. The site is mobile-optimized and SEO-friendly but could improve accessibility and security headers. DNSSEC is not enabled, which is a recommended enhancement. Security posture is good with HTTPS enforced and no exposed sensitive data, but lacks some security headers and explicit incident response or security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism detected. Contact information is clear, including phone and physical address, but no direct company emails were found in the HTML content. Overall, ALS presents a trustworthy and professional online presence with room for security and privacy improvements. The domain registration is transparent and consistent with the business claims, supporting legitimacy. Strategic recommendations include enhancing security headers, enabling DNSSEC, implementing cookie consent, and publishing security and incident response policies.

P

Pinterest

pinterest.dk

74

Pinterest is a globally recognized visual discovery and social media platform that enables users to find and share ideas such as recipes, home decor, and style inspiration. The Danish localized site (dk.pinterest.com) reflects the company's commitment to regional markets with tailored content and language support. Pinterest operates primarily on an advertising-based business model, leveraging user engagement to deliver targeted ads. The website demonstrates a mature technical infrastructure using modern JavaScript frameworks like React, advanced security measures including HTTPS and Content Security Policy, and integrations with reputable third-party services for advertising and fraud prevention. The security posture is strong, with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with comprehensive policies and consent mechanisms aligned with GDPR requirements. Overall, the site presents a professional, trustworthy, and user-friendly experience suitable for a broad audience.

V

Vitsœ

vitsoe.com

72

Vitsœ is a specialized furniture company focused on modular, timeless designs created by Dieter Rams since 1959. The company operates a direct-to-consumer business model selling high-quality furniture designed for longevity and adaptability. Their market position is niche premium retail with a strong emphasis on sustainability and design heritage. Technically, the website is well-constructed using modern JavaScript libraries, Google Tag Manager, and OneTrust for privacy compliance, hosted on a performant CDN. Security posture is solid with HTTPS and bot protection via reCAPTCHA, though it lacks explicit security policies and incident response information. The absence of WHOIS data reduces transparency but the website content and branding are professional and trustworthy. Overall, the site demonstrates a mature digital presence with good privacy compliance and user experience.

F

Fredrikstad Webdesign AS

fredrikstadwebdesign.no

48

Fredrikstad Webdesign AS is a Norwegian web design and digital marketing company specializing in creating websites, e-commerce platforms, and multimedia content that rank well in Google search results. The company emphasizes quality, long-term client relationships, and local Norwegian language support. Their website demonstrates a mature digital presence with modern technologies such as WordPress, Yoast SEO, Google Tag Manager, and reCAPTCHA, indicating a strong technical infrastructure. Security practices include HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. Overall, the site is professional, well-structured, and compliant with GDPR requirements. The business shows strong trust signals including partner badges, awards, and client testimonials, supporting a high legitimacy score.

M

MasterCraft Boat Company

mastercraft.com

77

MasterCraft Boat Company is a leading manufacturer and marketer of premium performance inboard wakesurfing, wakeboarding, and ski boats. The company holds a strong market position as an innovator with numerous patents and awards, targeting watersports enthusiasts and boat buyers. Their business model includes direct sales supported by a dealer network and a comprehensive digital presence. The website reflects a mature digital infrastructure with modern technologies such as Google Analytics, Facebook Pixel, Microsoft Application Insights, and reCAPTCHA for security. The site is well-optimized for mobile and accessibility, featuring a professional design and clear navigation. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security headers and incident response contacts could be improved. Overall, the domain appears legitimate despite missing WHOIS data, supported by trust signals including NASDAQ listing and ISO certifications. Strategic recommendations include enhancing security header transparency, publishing vulnerability disclosure information, and improving incident response visibility.

R

Respectzone

respectzone.org

52

Respectzone is a French non-profit organization dedicated to promoting respect and combating online violence, harassment, and hate. The organization provides educational interventions, legal aid, digital tools such as an app and MOOC, and awareness campaigns targeting schools, universities, social centers, local authorities, and companies. The website is professionally designed, multilingual, and actively maintained with clear navigation and calls to action including donation options. Technically, the site is built on WordPress with modern plugins and frameworks, uses HTTPS with good security headers, and implements privacy and cookie consent mechanisms. No critical security vulnerabilities or suspicious indicators were found. WHOIS data is unavailable due to privacy protection or query failure, which is common and justified for non-profit entities. Overall, the website demonstrates a strong security posture, good privacy compliance, and high business credibility.

C

Carl Götz

carlgoetz.de

63

Carl Götz is a medium-sized German company specializing in the retail and distribution of wood products and related construction materials. The website presents a comprehensive catalog of products including panels, wood construction materials, flooring, doors, and garden-related items, targeting both business and private customers. The company maintains multiple physical locations and offers digital services such as customer login, configurators, and sample services. Technically, the website is built on the Shopware CMS platform, uses modern web technologies including Google reCAPTCHA and Google Tag Manager, and is hosted on a reliable DNS provider. Security posture is good with HTTPS enforced and CSRF protection on forms, though additional security headers and policies could enhance protection. Privacy compliance is basic with a cookie consent mechanism but lacks a visible privacy policy or terms of service. Overall, the website is professional, trustworthy, and well-structured, with room for improvement in privacy and security transparency.

A

Atlas Estate Agents

atlasestateagents.co.uk

45

Atlas Estate Agents is a well-established real estate agency specializing in residential and commercial property sales, lettings, and management in Liverpool, UK. The company emphasizes competitive pricing, family business values, and customer service, positioning itself as a trusted local market player since 1965. Their website provides property search functionality, valuation requests, and detailed service information targeting buyers, sellers, landlords, and tenants in the Liverpool area. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Google Maps API, Google reCAPTCHA, Google Tag Manager, and Facebook Pixel. The site is mobile-optimized with good navigation and SEO practices, though some accessibility features are basic. Security measures include HTTPS enforcement and spam protection via reCAPTCHA, but lack certain HTTP security headers and cookie consent mechanisms. From a security perspective, the site shows a moderate maturity level with no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and formal privacy/cookie consent banners indicates room for improvement in compliance and defense-in-depth. The WHOIS lookup failed due to querying a subdomain rather than the registered domain, limiting domain trust verification. Overall, the site is professional and trustworthy but could enhance its security posture and privacy compliance. Strategically, the company should prioritize implementing security headers, cookie consent mechanisms, and publishing security policies to strengthen user trust and regulatory compliance. Additionally, clarifying domain registration details and improving accessibility would further enhance their digital maturity and risk management.

C

Cotec

cotec.es

10

Cotec is a Spanish non-profit foundation dedicated to promoting innovation through research, projects, and public engagement. The website reflects a well-established organization with a clear focus on innovation and youth, providing reports, observatories, and events. Technically, the site is built on WordPress with modern plugins and integrations such as HubSpot and Google Tag Manager, ensuring good SEO and user experience. Security posture is solid with HTTPS, cookie consent, and reCAPTCHA, though formal security policies and incident response contacts are absent. Overall, the site is professional, compliant with GDPR, and trustworthy, serving a broad audience interested in innovation in Spain.

W

Wiki Software International - Consulenza finanziaria

wikisoftware.it

43

Wiki Software International is a specialized Italian company founded in 2011, offering financial consultancy and software solutions focused on synchronizing financial flows and reducing errors in payment processes. Their market position is that of a niche provider with strong banking and financial know-how, targeting CFOs and financial departments of enterprises. The website reflects a professional B2B business model with key services including assessment, consultancy, international finance, IBAN checking, and a competence center. Technically, the site is built on WordPress with modern plugins and SEO tools, showing good mobile optimization and moderate performance. Security posture is adequate with HTTPS, DNSSEC, and reCAPTCHA, but the expired domain status is a critical risk. Privacy compliance is limited due to missing privacy and terms policies. Overall, the site is trustworthy and professional but requires urgent domain renewal and enhanced compliance documentation.

A

advertising.com

advertising.com

64

Advertising.com is a mature technology company specializing in programmatic advertising solutions, offering a suite of services including DSP, SSP, engagement platforms, and search solutions. The company targets businesses with large user bases seeking to enhance user engagement and revenue through tailored advertising technologies. The recent acquisition of Underdog Media expands their access to premium publisher inventory, strengthening their market position. Technically, the website is built on WordPress with modern analytics tools such as Google Analytics and Microsoft Clarity, hosted likely on AWS infrastructure. The site is well-designed, mobile-optimized, and SEO-friendly, providing a good user experience. Security posture is adequate with HTTPS and CAPTCHA protections, but lacks DNSSEC and explicit security headers, which are recommended for improvement. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism detected. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

B

BPER Banca

bper.it

70

BPER Banca is a large Italian banking group offering a wide range of financial services including retail banking, corporate banking, wealth management, loans, mortgages, and digital banking services. The website targets private individuals, businesses, and wealth management clients, providing comprehensive product offerings and digital access points. The site is built on a modern technical infrastructure using Liferay CMS, React, and various JavaScript libraries, ensuring a good user experience and mobile optimization. Security posture is strong with HTTPS enforced and bot protection via reCAPTCHA, though explicit security headers and published security policies are lacking. Privacy compliance is partially addressed with a cookie consent mechanism but no visible privacy policy or terms of service links in the main content. Overall, the website is professional, trustworthy, and well-positioned in the Italian banking sector.

S

SOBAG AG

nordagenda.ch

65

Nordagenda.ch is a regional event and cultural platform operated by SOBAG AG and associated with Meier + Cie AG, focusing on providing comprehensive event listings, cinema programs, gastronomy guides, and cultural information primarily for the Schaffhausen region and neighboring areas in Switzerland and southern Germany. The website offers categorized event data, interactive search and calendar features, and integrates social media channels to engage its audience. Technically, the site uses a modern tech stack including Bootstrap, jQuery, and various analytics and advertising services, delivering a good user experience with mobile responsiveness and clear navigation. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks some recommended security headers and explicit security policies. Privacy compliance is basic with a cookie consent banner and a privacy policy accessible via the contact/impressum page. Overall, the site is legitimate, well-branded, and serves its target audience effectively.

ÖKK is a Swiss insurance company specializing in providing health insurance products tailored to private clients. The company positions itself as a reliable and sensible insurance provider with a focus on customer needs. The website reflects a professional and consistent brand image, targeting private clients primarily within Switzerland. The business model revolves around offering various insurance models and supplementary services to meet diverse client requirements. Technically, the website employs modern web technologies including JavaScript frameworks, font services, and third-party consent management tools, ensuring a responsive and user-friendly experience. Security-wise, the site enforces HTTPS, implements strong security headers, and uses reCAPTCHA to protect forms, although it lacks a dedicated security policy or incident response page. Overall, the website demonstrates a mature digital presence with good privacy compliance and trustworthy business information.

O

Office du Tourisme et des Congrès de la métropole de Lyon

visiterlyon.com

69

The website www.visiterlyon.com serves as the official tourism portal for Lyon and its metropolitan area, operated by the Office du Tourisme et des Congrès de la métropole de Lyon. It provides comprehensive tourism information, online booking services for hotels, restaurants, leisure activities, and city passes such as the Lyon City Card. The site targets tourists, families, business travelers, and groups, positioning itself as an authoritative and trusted source for visiting Lyon. The content is rich, professionally presented, and available in multiple languages, enhancing accessibility and user experience. Technically, the website employs modern web technologies including Alpine.js for interactivity, Swiper.js for sliders, and MapLibre GL for mapping. It integrates Google Tag Manager and Google reCAPTCHA for analytics and security. The site is mobile-optimized, accessible, and SEO-friendly, with good performance metrics. Security best practices are observed with HTTPS enforcement, security headers, and secure forms, although explicit security policy and incident response information are not published. The security posture is strong with no detected vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, GDPR adherence, and consent mechanisms. However, WHOIS data for the domain is missing or unavailable, which is unusual for an official entity and slightly impacts trustworthiness. Despite this, the website's certifications, social media presence, and comprehensive content support its legitimacy. Overall, the website is a high-quality, secure, and user-friendly platform for promoting tourism in Lyon. Strategic recommendations include publishing a dedicated security policy, incident response contacts, and a vulnerability disclosure policy to further enhance trust and transparency.