Security Directory

R

ROWE Mineralölwerk GmbH

rowe-oil.com

60

ROWE Mineralölwerk GmbH is a well-established German company specializing in the production and distribution of high-quality motor oils, gear oils, transmission oils, and lubricants for automotive and industrial applications. Founded in 1995, the company has built a strong international presence with a comprehensive product portfolio and a network of distributors. The website reflects a mature digital infrastructure with multi-language support, professional design, and clear navigation tailored to both industrial and private customers. Technically, the site employs modern technologies including Pimcore CMS, Matomo analytics, and Usercentrics for privacy compliance, ensuring a good user experience and adherence to GDPR standards. Security posture is robust with HTTPS enforcement and security headers, though some security policy documentation and incident response contacts are absent. The absence of WHOIS registration data is a notable concern, potentially indicating privacy protection or registration issues, which slightly impacts the trustworthiness score. Overall, the website is professional, secure, and compliant, serving as a credible digital front for ROWE Mineralölwerk GmbH.

S

Servus in Stadt & Land

servus.com

73

Servus.com is a well-established Austrian media platform focused on lifestyle content including recipes, gardening, culture, and regional traditions. The site offers a rich content experience with over 3,500 recipes and multiple magazine editions, supported by subscription and marketplace services. The technical infrastructure leverages modern web technologies, including Google Tag Manager and OneTrust for privacy compliance, ensuring a good user experience across devices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data suggests privacy protection or data unavailability, but the site's affiliation with Red Bull Media House and professional presentation indicate legitimacy. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements.

Pfadiheime.ch is a specialized non-profit platform operated by Stiftung Pfadiheime Schweiz, serving as the primary directory and booking platform for scout homes across Switzerland. With over 25 years of history, it provides comprehensive search and booking functionalities tailored to scout groups and home administrators. The platform also promotes HeimV, a home management software, enhancing operational efficiency for home administrators. The website is well-structured, mobile-optimized, and offers clear navigation, targeting a niche audience effectively. Technically, the site leverages modern web technologies including HTML5, CSS3, JavaScript with jQuery, and likely a Ruby on Rails backend. The presence of CSRF tokens indicates attention to form security, though there is room for improvement in security headers and privacy compliance mechanisms. Performance is moderate with good mobile responsiveness and basic accessibility features. From a security perspective, the site uses HTTPS and includes CSRF protection but lacks visible security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR explicit indicators. Contact information is limited to a general info email, with no phone or physical address provided. Overall, the platform presents a trustworthy and professional service with a strong business credibility score. Strategic improvements in privacy compliance, security headers, and incident response documentation would enhance its security posture and regulatory adherence.

S

Schweizerische Elektro-Einkaufs-Vereinigung (eev Genossenschaft)

e-tec.swiss

50

The website www.e-tec.swiss is a professionally designed online magazine focused on electrical and communication technology topics, primarily serving the Swiss market. It provides comprehensive content on intelligent living, building automation, security systems, solar energy, and related electrical engineering subjects. The site is affiliated with the Schweizerische Elektro-Einkaufs-Vereinigung (eev Genossenschaft), which adds credibility and industry relevance. The content is well-structured, regularly updated, and targets both professionals and consumers interested in these technologies. Technically, the website uses a modern but somewhat dated JavaScript library (jQuery 1.11.3) alongside Google Tag Manager and Cookiebot for analytics and cookie consent management. The site is mobile optimized with good SEO practices and uses HTTPS securely. However, no advanced security headers were detected, and no CMS or hosting provider information was found. The site performance is moderate, with good mobile responsiveness and accessibility at a basic level. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks visible security policies or incident response contacts. No vulnerabilities or suspicious external links were found. WHOIS data is privacy protected, which is common for Swiss domains, and the domain appears legitimate and consistent with the website's professional nature. Overall, the website presents a low risk profile with strong business credibility and good privacy compliance. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and updating JavaScript libraries to maintain security posture.

S

Servizio nazionale «Abusi nel contesto ecclesiale»

abusi-catt-info.ch

10

The website 'abusi-catt-info.ch' is a Swiss institutional platform dedicated to scientific research and reprocessing of sexual abuse cases within the Roman Catholic Church in Switzerland. It is supported by major Swiss Catholic organizations such as the CVS, RKZ, and KOVOS. The site provides detailed information on ongoing research projects, support services for victims, and national measures to combat abuse. The target audience includes victims, researchers, church members, and the general Swiss public interested in this sensitive topic. The business model is non-profit and institutional, focusing on transparency, education, and victim support. Technically, the website employs modern web technologies including SVG graphics, web fonts, and Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized with good SEO practices and clear navigation. However, no major CMS or hosting provider information is evident. Performance is moderate, and accessibility is basic but functional. From a security perspective, the site uses HTTPS with good SSL configuration and does not expose sensitive data or vulnerable libraries. However, it lacks explicit security headers and does not publicly disclose a security policy or incident response plan. Privacy compliance is strong with a clear privacy policy and cookie policy, though no explicit cookie consent mechanism is present. Contact information is transparent and professional, enhancing trust. Overall, the website presents a low-risk profile with a high trustworthiness rating. Strategic recommendations include implementing security headers, publishing security policies, and adding cookie consent mechanisms to further enhance compliance and security posture.

V

Virgin Money UK PLC

virginmoneyukplc.com

73

Virgin Money UK PLC operates as a financial services provider in the United Kingdom, offering a broad range of products including credit cards, mortgages, savings accounts, ISAs, investments, and insurance. The company positions itself as a fair and rewarding alternative to traditional banks, emphasizing social good and customer-centric values. The website reflects a mature corporate presence with dedicated sections for investor relations, corporate sustainability, and community engagement, indicating a well-established market position within the UK banking sector. Technically, the website employs modern web technologies such as jQuery, Adobe Dynamic Tag Manager, and Visual Website Optimizer for marketing and analytics purposes. Evidon consent management scripts ensure compliance with privacy regulations, and the site is mobile-optimized with good accessibility features. Performance is moderate, with a well-structured navigation system and professional design quality. From a security perspective, the site enforces HTTPS and integrates content security policies via Evidon scripts. However, explicit security headers like HSTS and X-Frame-Options are not visibly present in the HTML content. There is no publicly available incident response or vulnerability disclosure information, which could be improved to enhance transparency and trust. The absence of WHOIS data for the domain is a notable anomaly, though the website content and branding strongly suggest legitimacy. Overall, Virgin Money UK PLC's website demonstrates a strong business and technical foundation with good privacy compliance and user experience. Addressing minor security header gaps and publishing incident response details would further strengthen its security posture and trustworthiness.

N

Nationale Dienststelle Missbrauch im kirchlichen Kontext

missbrauch-kath-info.ch

49

The website www.missbrauch-kath-info.ch serves as a dedicated platform for the scientific research and transparent processing of sexual abuse cases within the Catholic Church in Switzerland. It is a non-profit initiative backed by major Swiss Catholic organizations such as the Schweizer Bischofskonferenz (SBK), Römisch-Katholische Zentralkonferenz (RKZ), and Katholische Ordensgemeinschaften der Schweiz (KOVOS). The site provides information on ongoing research projects, church measures, support for victims, and updates on the state of processing abuse cases. The target audience includes victims, church authorities, researchers, and the general public interested in this sensitive topic. The business model is non-commercial, focusing on social responsibility and transparency.

W

webXells GmbH

webxells.com

66

webXells GmbH is a German technology company specializing in advanced web solutions, information security, GIS, OSINT, and data integration services. Established in 2008, the company serves a niche market including government agencies and large enterprises, evidenced by client logos such as SAP, Google, and various Brandenburg state entities. Their service offerings include data management, drone data analysis, off-grid emergency communication, and LoRaWAN technologies, positioning them as a trusted provider in specialized technology sectors. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and Leaflet.js for interactive maps, with a clean and professional design optimized for mobile devices. The domain is registered with INWX GmbH since 2008, consistent with the company's history, and the website demonstrates good SEO and accessibility practices. However, some security enhancements such as enabling DNSSEC and implementing HTTP security headers are recommended. From a security perspective, the site uses HTTPS and has a login form with password inputs, but lacks explicit security headers and a vulnerability disclosure policy. The privacy policy is comprehensive and GDPR compliant, reflecting a strong commitment to data protection. Contact information is clearly provided, including a designated data protection officer, enhancing trustworthiness. Overall, webXells GmbH presents a professional and credible online presence with a solid business foundation and good privacy compliance. Security posture is moderate with room for improvement in DNS and HTTP header configurations. The site is safe for general audiences with no adult or questionable content detected.

B

BILD

bild.de

64

BILD.de is a leading German news media website operated by Axel Springer SE, offering a wide range of news, entertainment, sports, and video streaming services. The site targets a general audience with a comprehensive content offering including free and subscription-based (BILDplus) content. The business model relies on advertising and subscriptions, positioning BILD as a major player in the German media landscape. Technically, the website employs modern web technologies including ES6 JavaScript, CSS3, and HTML5, with a strong focus on performance and mobile optimization. Hosting is managed via Akamai, ensuring fast content delivery. The site integrates a Consent Management Platform to comply with GDPR requirements and uses various third-party scripts for analytics and advertising. From a security perspective, BILD.de enforces HTTPS and implements consent mechanisms for privacy compliance. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly visible, representing areas for improvement. The site shows no signs of WAF blocking or content restrictions, and no adult or NSFW content is present. Overall, BILD.de demonstrates a mature digital presence with strong business credibility and technical infrastructure. Strategic enhancements in transparency around privacy policies and security incident handling would further strengthen trust and compliance.

M

MÁV-csoport

mavcsoport.hu

48

MÁV-csoport is the Hungarian state-owned railway group providing comprehensive passenger transport, infrastructure management, and related services. The website serves as an information and service portal targeting travelers, business partners, and the general public. It offers ticketing, schedules, news, and corporate information, positioning itself as the leading national railway operator in Hungary. The site is well-branded, consistent, and professionally maintained. Technically, the website is built on Drupal CMS with modern JavaScript libraries and responsive design, ensuring good mobile optimization and accessibility. It integrates Google Analytics and Facebook Pixel for analytics and marketing, with a clear cookie consent mechanism compliant with GDPR. Performance is moderate with room for optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though additional security headers and a public security policy could enhance trust. No incident response or vulnerability disclosure information is publicly available. Overall, the site is trustworthy, compliant, and professionally managed, reflecting the stature of a large state enterprise.

R

Red Carpet Event & Gastro GmbH

redcarpet-event.at

10

Red Carpet Event & Gastro GmbH is a small hospitality company based in Austria specializing in exclusive event catering and event management services primarily in Vienna. The company offers tailored event experiences including gala events, Oktoberfest-style festivals, corporate and private celebrations, and catering services. Their market position is that of a niche provider focusing on high-quality, bespoke event gastronomy. The website is built on WordPress with modern technologies such as LiteSpeed caching and jQuery, providing a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and explicit incident response policies are absent. Privacy compliance is partially met with a privacy and cookie policy present but lacking a consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with the business model.

H

Hölibu 3000

hoelibu.ch

44

The website hoelibu.ch serves as a digital paperless songbook for the Jubla Freiburg youth organization, offering members access to a curated collection of songs with features such as filtering, transposition, and night mode. It is designed as an internal club publication with controlled access via login credentials, targeting members and contributors within the community. The site uses modern web technologies including Meteor.js and SVG graphics to provide a responsive and user-friendly experience. While the site is functional and well-designed for its niche audience, it lacks publicly available privacy and cookie policies, which limits its compliance with data protection regulations. Security posture is moderate with HTTPS enforced and login access controlling content visibility, but no advanced security headers or incident response information are present. Overall, the site is a niche community tool with a good technical foundation but could improve in privacy and security transparency.

S

Seal Subscriptions

sealsubscriptions.com

60

Seal Subscriptions is a specialized SaaS provider offering a subscription management app tailored for Shopify merchants. The company positions itself as a leading solution in the Shopify subscription app market, boasting over 30,000 merchants and 1,800+ positive reviews with an average rating of 4.9. Their key services include automatic recurring payments, subscription boxes, product swaps, and loyalty discounts, targeting e-commerce businesses seeking to increase customer lifetime value and retention. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence.

G

givve

givve.com

48

givve is a German-based company founded in 2006 specializing in innovative digital employee benefits and payment solutions. Their offerings include tax-free benefit cards, meal subsidies, and B2B incentivization programs, targeting employers seeking flexible and scalable employee motivation tools. The website is professionally designed, mobile-optimized, and uses modern technologies such as Google Tag Manager and Usercentrics for consent management, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforcement and domain protection statuses, though DNSSEC is not enabled and some security headers are not explicitly confirmed. Privacy compliance is supported by a cookie consent mechanism, but explicit privacy and terms of service pages were not found in the provided content. Overall, givve presents a trustworthy and professional online presence consistent with its business model and market position.

Baunetz Architekt*innen is a well-established German-language online platform dedicated to showcasing architectural firms, their projects, news, events, and job opportunities. The site serves a broad audience interested in architecture, including professionals and enthusiasts, positioning itself as a key resource within the German-speaking architecture community. The platform is part of the BauNetz network, which includes several related portals and services, enhancing its market presence and ecosystem. Technically, the website employs modern JavaScript frameworks, lazy loading, and a reputable cookie consent management system, ensuring a good user experience and compliance with privacy regulations. Security-wise, the site uses HTTPS and Cloudflare DNS, but lacks explicit security policies or incident response information, which could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR, with no signs of blocking or suspicious activity.

C

compass private pflegeberatung GmbH

compass-pflegeberatung.de

11

Compass private pflegeberatung GmbH is a German healthcare service provider specializing in free and independent care consultation for privately insured individuals and their families. The company operates nationwide with regional teams and offers telephone, on-site, and video consultations. It is affiliated with the PKV-Verband and recognized as a trusted care consultation service with a strong market presence. The website is professionally designed, content-rich, and well-branded, targeting a general audience seeking care advice and support.

F

FOOBY

fooby.ch

66

FOOBY is a culinary content platform operated under the Swiss retail giant Coop, offering recipes, cooking inspiration, and community engagement. The website targets general consumers interested in cooking and food culture, providing a rich set of features including recipe categories, cooking school content, and interactive tools like menu configurators and apps. The platform is well-branded and consistent with Coop's retail identity, positioning FOOBY as a trusted source for culinary content in Switzerland. Technically, the website employs modern web technologies including service workers, consent management via Usercentrics, and tag management with Tealium, indicating a mature digital infrastructure. However, explicit privacy policies and terms of service pages were not found in the analyzed content, which is a gap in compliance and transparency. Security posture is generally good with HTTPS and service workers, but lacks visible security headers and incident response contacts. Overall, FOOBY presents a professional, trustworthy, and content-rich platform with room for improvement in privacy and security disclosures.

C

Caritas Regio

caritas-regio.ch

65

Caritas Regio is a Swiss non-profit organization dedicated to supporting people affected by poverty and social disadvantage across Switzerland. The website presents a comprehensive range of social, legal, and integration services, alongside opportunities for donations and volunteer engagement. The organization holds the ZEWO certification, indicating recognized trustworthiness in the Swiss charitable sector. The website is professionally designed, multilingual (German and French), and provides clear navigation and relevant content tailored to its target audience.

E

eurobahn GmbH & Co. KG

eurobahn.de

51

eurobahn GmbH & Co. KG operates as a regional passenger rail transport provider serving parts of Lower Saxony, North Rhine-Westphalia, and the Netherlands. The company offers extensive rail connections, timetable information, ticketing services, and customer support, positioning itself as an important regional mobility player. The website reflects a professional and user-friendly digital presence with clear navigation, multilingual support, and comprehensive service information. Technically, the site is built on TYPO3 CMS, integrates Matomo analytics, and employs modern UI components ensuring good performance and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be enhanced. Overall, the site demonstrates strong business credibility, compliance with GDPR, and effective communication channels, supporting a trustworthy and professional brand image.

T

TMC Amplio GmbH

tmc-brandwork.de

43

TMC Brandwork, operated by TMC Amplio GmbH, is a German branding agency specializing in brand strategy, communication, and creative production for both B2B and B2C clients. The company positions itself as a provider of tailored solutions to strengthen brands with a professional portfolio and notable client references. The website reflects a strong market presence with consistent branding and clear contact points, including a named CEO and company email. Technically, the site uses modern web technologies such as Alpine.js and Tailwind CSS, hosted on a provider indicated by the nameservers. The site is mobile-optimized, fast-loading, and SEO-friendly. Security posture is good with HTTPS enforced and cookie consent implemented, though no explicit security policy or incident response information is published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

D

Deutsche UNESCO-Kommission

unesco.de

37

The Deutsche UNESCO-Kommission website serves as the central contact point for all UNESCO-related matters in Germany, acting as a mediator for foreign cultural and educational policy. The site is well-structured, content-rich, and professionally designed, targeting a general audience interested in cultural diversity, education, science, and heritage. It operates on TYPO3 CMS, indicating a mature technical infrastructure with good accessibility and SEO practices. However, the absence of explicit privacy and cookie policies, as well as security headers, represents compliance and security gaps that should be addressed to enhance trust and regulatory adherence. The domain registration data is consistent and trustworthy, supporting the legitimacy of the entity. Overall, the website reflects a stable, credible governmental non-profit organization with room for improvement in privacy and security transparency.

C

Culturescapes

culturescapes.ch

10

Culturescapes is a Swiss-based cultural festival and platform dedicated to international cultural exchange, with a focus on thematic editions such as Sahara 2025 that explore North African culture and its political ties with Switzerland. The website offers a rich array of content including event programs, magazines, books, and archives, targeting cultural enthusiasts, academics, and the general public interested in intercultural dialogue. The business operates primarily as a non-profit cultural organization, leveraging events and publications to engage its audience. Technically, the website employs modern web technologies including Vue.js, ES modules, and Swiper.js for interactive content presentation. It integrates Mailchimp for newsletter subscriptions and maintains a responsive design optimized for mobile devices. While the site performs moderately well, there is room for improvement in accessibility and SEO optimization. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, but lacks explicit security headers and publicly available security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy policy and cookie banner present but no terms of service or vulnerability disclosure policy. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements in security policies, contact transparency, and compliance documentation would enhance its security posture and user trust.

V

Victoria and Albert Museum

vam.ac.uk

76

The Victoria and Albert Museum (V&A) is a prominent UK-based family of museums dedicated to art, design, and performance. It offers a wide range of exhibitions, educational programs, and membership opportunities, positioning itself as a leading cultural institution with a strong public and international presence. The website reflects this stature with comprehensive content, clear navigation, and consistent branding. Technically, the site is built on a modern Ruby on Rails framework, employs responsive design, and integrates privacy and consent management tools such as OneTrust. Security practices are robust, with HTTPS enforced, CSRF protection, and no visible vulnerabilities. However, explicit security policies and incident response contacts are not publicly detailed, representing an area for improvement. Overall, the site demonstrates a mature digital infrastructure aligned with its institutional mission.

D

Deutscher Turner-Bund

dtb.de

46

The Deutscher Turner-Bund (DTB) is a prominent German sports federation specializing in gymnastics, rhythmic sports gymnastics, trampoline, and fitness activities. The organization combines competitive sports with health and fitness initiatives, promoting values such as fairness, tolerance, team spirit, and respect. The website serves as a comprehensive portal for members, athletes, and the general public, offering information on events, education, and various sports disciplines. DTB holds a leading position in the German sports federation landscape, targeting a broad audience including children, youth, and adults interested in gymnastics and fitness.

U

Untold

untold.app

60

Untold is a Norwegian media company operating a subscription-based podcast app offering exclusive and original podcast content, including popular true crime and history series. The company positions itself as a leading provider of exclusive Norwegian podcasts with a strong focus on original content and a user-friendly subscription model featuring a free trial. Technically, the website employs modern CSS frameworks and responsive design, ensuring good mobile optimization and user experience. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and incident response information. Privacy compliance is partially met with clear privacy and terms pages, though cookie consent mechanisms are absent. Overall, Untold presents a professional and trustworthy digital presence with room for improvement in security and privacy transparency.

T

The AN Media Group

archpaperawards.com

55

The Archpaper Awards website is a professionally designed media platform operated by The AN Media Group, focusing on recognizing excellence in architecture, products, and design within the AEC industry. The site showcases award winners, sponsors, and media partners, targeting architecture and design professionals. The business model revolves around event organization and media publishing, positioning itself as a niche leader in architecture awards. Technically, the site is built on WordPress with modern plugins like Yoast SEO and Bootstrap for responsive design. Google Analytics is used for user tracking, and the site is hosted likely via GoDaddy, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS and domain registration protections, but lacks DNSSEC and security headers, and does not provide explicit security or incident response policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy, professional, and safe for general audiences.

A

Armin Werren AG

werrenag.ch

60

Armin Werren AG is a specialized painting, plastering, staining, varnishing, wallpapering, and sandblasting service provider based in Gstaad, Switzerland. The company focuses on creating sophisticated and personalized living environments for private, hospitality, and business clients. Their website reflects a professional and consistent brand image with clear service offerings and company information. Technically, the site uses modern web technologies including Google Analytics and Cookiebot for tracking and consent management, with a responsive design and good SEO practices. Security posture is solid with HTTPS enforced and email obfuscation implemented, though explicit security headers and incident response information are absent. Overall, the website is trustworthy, compliant with GDPR, and well-suited for its target audience.

O

Orde van Architecten - Vlaamse Raad

architect.be

63

The Orde van Architecten - Vlaamse Raad website serves as the official platform for the Flemish Council of Architects, providing information, advice, and regulatory oversight for architects, builders, and trainees in Belgium. The site targets a professional audience including architects, trainees, and foreign architects seeking to practice in Belgium. It positions itself as a key government-related professional body with a clear mission to support and regulate the architectural profession in the Flemish region. The website content is well-structured, professionally presented, and accessible, reflecting the organization's authoritative role. Technically, the website is built on Drupal 11, leveraging modern web technologies such as SVG graphics and JavaScript modules. The site is mobile-optimized and includes accessibility certification (AnySurfer label), indicating a mature digital infrastructure focused on usability and compliance. While performance is moderate, the technical stack is contemporary and well-maintained. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, demonstrating compliance with privacy regulations such as GDPR. However, explicit security headers and incident response policies are not evident, and WHOIS data is unavailable or blocked, which slightly impacts trust. No vulnerabilities or tracking technologies were detected, and no contact information for security incidents is published. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic improvements include enhancing security headers, publishing security policies, and improving WHOIS transparency to further strengthen trust and security posture.

H

Holidu GmbH

holidu.fr

58

Holidu GmbH operates a comprehensive vacation rental platform targeting European travelers seeking verified and affordable holiday homes, villas, and apartments. The website offers a wide range of accommodation types with features such as family-friendly and pet-friendly options, supported by a mobile app and extensive search capabilities. The company positions itself as a specialist in European vacation rentals with a strong brand presence across multiple localized domains. Technically, the website employs modern JavaScript frameworks, fingerprinting technologies, and integrates multiple analytics and advertising services, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforcement and standard security headers, though explicit security policies and incident response information are not publicly disclosed. Privacy compliance is well addressed with clear cookie consent and privacy policies aligned with GDPR requirements. Overall, the site is professional, trustworthy, and safe for general audiences, though WHOIS data is unavailable, limiting full domain trust analysis.

R

Renault Trucks Afrique

renault-trucks.africa

48

Renault Trucks Afrique is a well-established regional branch of the historic French truck manufacturer Renault Trucks, founded in 1894. The company offers a comprehensive range of transport solutions including new trucks, fleet management, and specialized transport services for sectors such as construction, mining, and fuel transport. The website targets transport professionals across Africa, providing localized content in French and other languages. Technically, the site is built on Drupal CMS with modern web technologies and integrates HubSpot and Google Tag Manager for analytics and marketing. Security posture is solid with HTTPS and secure forms, though explicit security policies and incident response contacts are not publicly disclosed. The domain uses privacy protection consistent with commercial practices and shows no suspicious patterns. Overall, the website is professional, compliant with GDPR, and trustworthy, supporting Renault Trucks' strong market position in Africa.

H

Holidu GmbH

holidu.com

69

Holidu GmbH operates a sophisticated online vacation rental search engine and booking platform, specializing in verified vacation homes, villas, cabins, and condos primarily across Europe. The website presents a professional, user-friendly interface with extensive listings and features tailored for families, pet owners, and travelers seeking specific amenities. Technically, the site leverages modern JavaScript frameworks, including React, and integrates multiple analytics and marketing tools such as Google Analytics and Tag Manager, ensuring robust data collection and user engagement tracking. Security posture is strong with HTTPS enforcement and standard security headers, although explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS registration details slightly impacts trust but is mitigated by the website's professional presentation and comprehensive privacy and cookie policies. Overall, Holidu demonstrates a mature digital infrastructure and a secure, privacy-conscious approach suitable for its hospitality industry role.

R

Robert-Enke-Stiftung

robert-enke-stiftung.de

59

The Robert-Enke-Stiftung is a German non-profit foundation dedicated to promoting open dialogue about depression and other mental illnesses, as well as supporting suicide prevention projects. The website reflects a strong commitment to mental health awareness through educational initiatives, social engagement opportunities, and partnerships with prominent sports organizations. The foundation targets a broad audience including individuals affected by mental health issues, students, and the sports community. The business model is centered on non-profit activities, fundraising, and community outreach. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as jQuery, Lottie animations, and SVG graphics. It is hosted on a CDN ensuring fast performance and excellent mobile optimization. The site includes a cookie consent mechanism compliant with GDPR, enhancing privacy compliance. Navigation is clear and content is professionally presented, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and uses a cookie consent banner, but lacks explicit security policy pages or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data shows consistent domain registration with no suspicious patterns, supporting the legitimacy of the organization. Overall, the website demonstrates a high level of professionalism, security, and compliance suitable for a non-profit organization focused on sensitive health topics. Strategic improvements could include publishing a dedicated security policy, vulnerability disclosure information, and enhancing security headers to further strengthen the security posture.

B

Basler Kantonalbank

baslerkantonalbank.ch

76

Basler Kantonalbank is a well-established regional Swiss bank providing a broad range of financial services to private customers. The website targets private clients with offerings including accounts, cards, investment advisory, mortgages, and pension planning. The bank maintains a professional online presence with consistent branding and a clear navigation structure. Technically, the website uses modern web technologies and implements cookie consent via OneTrust, ensuring compliance with basic privacy standards. Security posture is strong with HTTPS enforced and good SSL configuration, although explicit security headers and incident response information are not publicly available. Overall, the website reflects a mature digital infrastructure suitable for a large financial institution, with room for improvement in transparency around privacy policies and security disclosures.

S

StatusPal UG

statuspal.io

73

StatusPal UG operates a SaaS platform providing hosted status pages and incident communication tools targeted at CTOs, DevOps, SREs, and support engineers. The company positions itself as a reliable and scalable solution for monitoring and communicating system status, with features including multi-language support, notifications, and powerful APIs. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the site uses modern frameworks such as Next.js and React, integrates Google Tag Manager and Cookiebot for analytics and consent management, and employs SVG graphics for visual appeal. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and published security policies are absent. Overall, the domain WHOIS data is privacy protected, which is common for SaaS businesses, and no suspicious patterns are detected. The website demonstrates high trustworthiness and professionalism.

M

MTF Solutions AG

mtf.ch

10

MTF Solutions AG is a Swiss IT company specializing in digital transformation, consulting, cloud solutions, and holistic IT services tailored for small and medium-sized enterprises (SMEs). With a strong regional presence across Switzerland and Liechtenstein, the company positions itself as a trusted partner for future-oriented digitalization, offering a comprehensive portfolio including IT management, cybersecurity, modern workplace solutions, business applications, professional services, and cloud infrastructure. Their market position is solid within the Swiss SME segment, emphasizing competence, innovation, and regional proximity. Technically, the website employs modern web technologies such as Google Tag Manager, Cookiebot for consent management, and SVG graphics for scalable visuals. The presence of remote support links via TeamViewer indicates operational readiness to assist clients efficiently. The site is mobile-optimized with lazy loading for performance, though accessibility features could be enhanced. SEO practices are good, supported by structured data and meta tags. From a security standpoint, the website enforces HTTPS with strong SSL configuration and includes essential security headers. Cookie consent mechanisms comply with GDPR, and no exposed sensitive data or vulnerable libraries were detected. However, explicit incident response contacts and vulnerability disclosure policies are not found, representing areas for improvement. Overall, MTF Solutions AG demonstrates a mature digital presence with strong business credibility and compliance posture. The risk profile is low, but strategic enhancements in security transparency and accessibility would further strengthen trust and operational resilience.

U

Union TLF

e-tlf.com

66

Union TLF is a well-established professional organization representing the transport and logistics sectors in France. Founded in 2000, it serves a large membership base of companies involved in various transport modes and logistics services. The website reflects a mature digital presence with comprehensive information about the organization's services, regional delegations, and industry engagements. The site is professionally designed, well-structured, and optimized for SEO and accessibility, targeting transport and logistics professionals and companies in France. Technically, the site is built on WordPress with modern tools such as Matomo for analytics and Tarteaucitron for cookie consent, demonstrating a commitment to privacy and GDPR compliance. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Overall, the domain registration data aligns well with the business claims, indicating a legitimate and trustworthy entity.

A

Astra

stadtautobahn.ch

69

The website stadtautobahn.ch serves as the official information portal for the renewal of the Stadtautobahn in St. Gallen, Switzerland, managed by Astra, the Federal Roads Office. It provides timely updates on construction, traffic conditions, and community engagement through news articles and an SMS notification service. The site targets local residents and commuters, offering clear and relevant content about the infrastructure project. Technically, the site is built on WordPress with Yoast SEO for optimization, uses Matomo for privacy-conscious analytics, and integrates Google reCAPTCHA to secure user input forms. The design is professional, mobile-optimized, and user-friendly, with consistent branding and trust indicators such as official logos and HTTPS encryption. Security posture is solid with HTTPS and form protections, though it lacks some advanced security headers and published security policies. Privacy compliance is partial due to the absence of a visible privacy policy and terms of service. Overall, the domain registration aligns well with the website's governmental purpose and project timeline, indicating high legitimacy and trustworthiness.

The website www.flechten-deutschland.de is a specialized scientific project operated by Zentralstelle Deutschland, focusing on the distribution, description, and photographic documentation of lichens in Germany. It serves a niche audience of biologists, environmentalists, and nature enthusiasts by providing comprehensive data, checklists, and community engagement opportunities such as mapping and data maintenance. The site is supported by reputable Bavarian environmental and botanical institutions, enhancing its credibility and trustworthiness. Technically, the website employs modern frontend technologies including Tailwind CSS and jQuery, hosted on INWX infrastructure, and is optimized for mobile devices with good navigation and content structure. Security posture is moderate with HTTPS usage but lacks explicit security headers and published security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism detected. Overall, the site is professional, trustworthy, and well-aligned with its scientific mission.

B

Basler Kantonalbank

bkb.ch

76

Basler Kantonalbank is a well-established Swiss cantonal bank providing a broad range of financial services to private customers, including banking accounts, investment advisory, mortgages, and pension planning. The website reflects a professional and consistent brand presence targeting private banking clients primarily in Switzerland. The technical infrastructure uses modern web technologies with a cookie consent mechanism implemented via OneTrust, ensuring basic privacy compliance. Security posture is adequate with HTTPS enforced, but lacks explicit security headers and published security policies. No blocking or WAF interference was detected, allowing full content access. Overall, the website demonstrates a mature digital presence suitable for a large financial institution.

T

tabmag / publish! Content-Marketing-Agentur

tabmag.de

55

tabmag is a German-based digital magazine platform and content marketing service provider specializing in transforming traditional print content into interactive, responsive digital magazines. The company operates under the umbrella of the publish! Content-Marketing-Agentur and targets organizations such as companies, associations, and clubs seeking modern digital publishing solutions. The website demonstrates a high level of digital maturity with modern technologies, multimedia content, and interactive tools like a cost-saving calculator. Security posture is solid with HTTPS and form validation, though some enhancements like CSP headers and incident response contacts could improve it further. Privacy compliance is well addressed with clear privacy and terms pages, though a cookie consent mechanism is not evident. Overall, the website is professional, trustworthy, and well-positioned in its niche market.

M

MIDNIGHT STUDIO IO LTD.

midnight.agency

61

Midnight Studio IO Ltd. is a UK-based small technology company specializing in web development services tailored for creative teams and design agencies. Their business model focuses on partnering with design teams to deliver high-end digital experiences, positioning themselves as a reliable and client-facing technology partner. The company showcases a strong portfolio with notable clients such as Meta, Cartier, CNN, and The North Face, indicating a solid market position in the creative technology sector. Technically, the website is built using modern frameworks including Next.js and React, with Contentful CMS integration. The site demonstrates excellent design quality, mobile optimization, and accessibility features, reflecting a mature digital infrastructure. Performance is fast, and SEO practices are well implemented, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and includes key security headers, indicating good baseline security hygiene. However, the absence of explicit privacy and cookie policies, vulnerability disclosure mechanisms, and incident response contacts suggests areas for improvement in compliance and transparency. No critical vulnerabilities or suspicious content were detected. Overall, Midnight Studio IO Ltd. presents a trustworthy and professional online presence with strong business credibility and technical maturity. Strategic enhancements in privacy compliance and security transparency would further strengthen their security posture and user trust.

S

Sørby Utleie AS

sorbyutleie.no

57

Sørby Utleie AS is a well-established Norwegian company specializing in the rental of machinery and equipment primarily for construction, industrial, and private sectors. Founded in 2009, the company emphasizes quality, service, and sustainability, offering nationwide delivery and green solutions. Their digital presence is professional, featuring a modern, responsive website with integrated search and self-service rental options. The company maintains active social media profiles and demonstrates trustworthiness through certifications like Miljøfyrtårn and customer references. Technically, the website employs modern web technologies, including lazy loading, custom fonts, and a proprietary platform, ensuring good performance and accessibility. Security posture is solid with HTTPS and nonce-based script/style protection, though there is room for improvement in explicit security headers and incident response disclosures. Privacy compliance is adequate with clear privacy and cookie policies, but lacks a consent mechanism. Overall, the site reflects a mature business with a strong market position in equipment rental in Norway.

N

Norske Tog AS

norsketog.no

59

Norske Tog AS is a Norwegian state-owned enterprise responsible for procuring, owning, and managing passenger train vehicles in Norway. The company holds a key position in the national transportation sector, focusing on ensuring modern and efficient rolling stock for passenger rail services. Their website provides comprehensive information about their projects, train types, sustainability efforts, and investor relations, targeting both the general public and industry stakeholders. Technically, the website is well-implemented with modern JavaScript, SVG graphics, and privacy-focused analytics (Plausible). It is mobile-optimized and accessible with good SEO practices. Security posture is solid with HTTPS enforced and secure form handling, though explicit security headers and incident response information are absent. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. Overall, the site projects professionalism and trustworthiness, though the lack of WHOIS data from the Norid registry is a notable gap requiring verification. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure mechanisms.

S

Surbana Jurong

surbanajurong.com

64

SJ Group is a global enterprise specializing in urban development, infrastructure, and managed services, owned by Temasek. The company offers a comprehensive portfolio of services including advisory, planning, design, construction, operations, and integrated solutions such as security and digital technology services. Their market position is strong with a presence in 40 countries and subsidiaries like SMEC, Atelier Ten, and Robert Bird Group. The website reflects a professional and consistent brand image with excellent content quality and SEO optimization. Technically, the website is built on WordPress with modern JavaScript libraries and integrations including HubSpot Analytics, Google Tag Manager, and Weglot for multilingual support. The site is mobile optimized, accessible, and performs moderately well. Security posture is good with HTTPS enforced and secure forms, though some security headers could be improved. Privacy compliance is adequate with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the security posture is strong with no visible vulnerabilities or exposed sensitive data. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but is common for enterprises. The website is trustworthy, professional, and safe for general audiences. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing incident response information.

B

Bosch Sicherheitssysteme GmbH

boschsecurity.com

69

Bosch Sicherheitssysteme GmbH operates a professional corporate website focused on security and safety systems, particularly fire alarm and detection technologies. The company is positioned as a large enterprise within the technology and manufacturing sectors, serving industrial and commercial clients globally. The website reflects a mature digital presence with consistent branding and comprehensive content about their realignment and product offerings. Technically, the site employs modern web technologies including Google Tag Manager and custom privacy consent management, ensuring GDPR compliance and user privacy. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and a dedicated security policy page are absent. WHOIS data is unavailable from the raw output, which is unusual but the website's professional nature and corporate branding strongly support legitimacy. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations.

N

Norske arkitekters landsforbund

arkitektur.no

67

Arkitektur.no is a well-established Norwegian architecture media portal operated by Norske arkitekters landsforbund. It provides comprehensive news, project showcases, opinion pieces, and job listings targeted at architects and design professionals in Norway. The website demonstrates a strong market position within the Norwegian architecture sector, supported by consistent branding and professional content. Technically, the site employs modern web technologies including Vue.js, hCaptcha for form security, and integrates advertising via Adnuntius. The site is mobile-optimized, accessible, and SEO-friendly, ensuring a positive user experience. Security posture is solid with HTTPS enforcement and CAPTCHA protection, although explicit security policies and incident response contacts are absent. Overall, the site is trustworthy, compliant with GDPR, and maintains good privacy practices.

O

okaj zürich

okaj.ch

47

okaj zürich is a well-established non-profit umbrella organization dedicated to coordinating and supporting open, associative, and church-based child and youth work in the canton of Zürich, Switzerland. With a history spanning 100 years, it serves approximately 600 member organizations and operates under a mandate from the canton government. The website effectively communicates its mission, projects, and events, targeting professionals in youth work, government officials, and member organizations. The organization emphasizes education, networking, and advocacy through various projects and publications.

O

Oslo Architecture Triennale

oslotriennale.no

50

Oslo Architecture Triennale is a cultural institution organizing architecture-related exhibitions, journals, films, and urban labs primarily targeting architects, urban planners, cultural institutions, and the general public interested in architecture and urbanism. The website presents a professional and consistent brand image with rich content and partnerships with reputable organizations. Technically, the site uses modern web technologies including Google Analytics and Imgix for image optimization, though it still relies partially on deprecated Universal Analytics. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy and cookie policies. No WHOIS data is publicly available due to privacy protection, which is common for Norwegian domains and does not raise immediate concerns. Overall, the website is trustworthy and professionally maintained but would benefit from improved privacy compliance and security best practices.

The Federal Ministry of Food and Agriculture (BMLEH) operates an official government website providing comprehensive information on topics such as food and nutrition, consumer protection, farming, animal welfare, rural regions, forests, fisheries, international affairs, and digitalisation. The site targets the general public, stakeholders in agriculture and food sectors, and international partners, serving as a key communication and service platform for the ministry. The website is well-structured, professionally designed, and consistent with government branding standards. Technically, the website is built on the Government Site Builder CMS platform, utilizing modern web standards including HTML5, CSS3, and SVG graphics. It incorporates Matomo analytics for anonymous visitor statistics and implements a granular cookie consent mechanism compliant with GDPR. Mobile optimization and accessibility features are well addressed, ensuring a good user experience across devices. From a security perspective, the site enforces HTTPS with excellent SSL configuration and includes standard security headers such as Content-Security-Policy and Strict-Transport-Security. The cookie consent banner clearly distinguishes necessary cookies from optional tracking and third-party content cookies. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not present, representing areas for improvement. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. The domain appears legitimate and consistent with official government use. No WAF or content blocking was detected, allowing full content accessibility. Strategic recommendations include publishing detailed security policies, providing incident response contact channels, and establishing a vulnerability disclosure process to enhance security posture and transparency.

S

Stadtsportbund Hannover e.V.

ssb-hannover.de

58

Stadtsportbund Hannover e.V. is a well-established non-profit organization dedicated to supporting and promoting club sports in Hannover, Germany. The organization provides advisory, funding, training, and networking services to over 350 sports clubs and related stakeholders. Their website reflects a professional and comprehensive digital presence with clear navigation, rich content, and a focus on community engagement. The target audience includes sports clubs, coaches, volunteers, and sports enthusiasts in the Hannover region. Technically, the website uses modern web technologies including JavaScript, jQuery, Owl Carousel, and SVG graphics, managed via the AmphiCMS platform. Accessibility features such as font size changers and visual assistance tools are implemented, and the site is mobile-optimized with good SEO practices. The presence of a consent management platform ensures compliance with privacy regulations. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms but lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or suspicious content were detected. The WHOIS data is limited but does not raise concerns about legitimacy. Overall, the website demonstrates a strong security posture, good privacy compliance, and high business credibility. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further improve trust and security maturity.