Security Directory

S

SIGNAL IDUNA

signal-iduna.de

68

SIGNAL IDUNA is a well-established German insurance and financial services group with over 100 years of history. The company offers a broad portfolio of insurance products including health, life, property, liability, motor, accident, and travel insurance, supported by digital customer portals and mobile applications. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the site is built on Adobe Experience Manager, leveraging modern web technologies and consent management tools to ensure GDPR compliance. Security posture is solid with HTTPS and consent mechanisms in place, though explicit security headers should be verified. Overall, the site demonstrates high professionalism and trustworthiness, with no signs of blocking or malicious content.

Zahlenzorro is an educational online platform operated by the Westermann Gruppe, offering interactive math exercises targeted at primary school students (grades 1-4) in Germany. The platform provides engaging math stories, training apps, and classroom management tools with a subscription-based licensing model for individuals, classes, schools, and school districts. The website is professionally designed with consistent branding and clear navigation, supporting both desktop and mobile devices. It integrates Piwik analytics with privacy-conscious settings and links to reputable educational partners. Security posture is moderate with HTTPS usage and some privacy considerations, but lacks explicit security headers and published security policies. Contact information and trust signals such as awards and partner logos enhance credibility. Overall, the site is safe, compliant with GDPR, and well-positioned in the German educational market.

W

Westermann

alfons.de

59

ALFONS Online-Lernwelt is an educational platform operated by Westermann, targeting primary school students, teachers, and parents in Germany. It offers interactive learning games for German, Mathematics, and English, supported by detailed evaluation tools and a centralized student management system. The platform is positioned as a reputable and certified educational service with a medium-sized market presence in the German education sector. Technically, the website is built on Angular 9 with modern web standards, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enforced, but lacks some advanced security headers and explicit incident response information. Privacy compliance is mostly met with a clear privacy policy, though cookie consent mechanisms are missing. Overall, the site is professional, trustworthy, and safe for its intended audience.

W

wedooper

karriere-hennigsdorf.de

37

The Karriereportal Hennigsdorf is a regional career portal focused on connecting companies in Hennigsdorf with young talents seeking internships, apprenticeships, study opportunities, and jobs. The platform is operated by wedooper in collaboration with the city's economic development office, positioning itself as a niche regional service provider in the education sector. The website is well-structured, with clear navigation and relevant content tailored to its target audience of local companies and job seekers. Technically, the site uses modern web technologies including jQuery, Swiper.js, and Modernizr, and is served over HTTPS with a cookie consent mechanism in place, though it lacks advanced security headers and analytics integration. Security posture is moderate with no critical vulnerabilities detected, but improvements are recommended in security headers and incident response transparency. Overall, the site is safe, professional, and trustworthy with a good balance of privacy compliance and user experience.

G

Graduate Campus Hochschule Aalen

graduatecampus.de

43

Graduate Campus Hochschule Aalen is a reputable educational institution specializing in professional continuing education and part-time study programs including Bachelor and Master degrees, certificates, and courses primarily in technology, business, and IT sectors. The website reflects a strong market position in Germany with a focus on flexible learning formats such as blended learning, online, and on-campus options. The institution leverages modern digital tools including TYPO3 CMS, Google Tag Manager, and Usercentrics for consent management, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and consent mechanisms in place, though explicit security policies and incident response contacts are absent. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO.

W

WInTO GmbH – Wirtschafts-, Innovations- und Tourismusförderung Oberhavel GmbH

youlab.de

51

youlab.de is the official website for the youlab career and educational fair organized by WInTO GmbH, serving the Oberhavel region in Germany. The site provides comprehensive information about the event, including exhibitor registration, apprenticeship opportunities, and media impressions. It targets students, young job seekers, and local companies, positioning itself as the largest career orientation fair in the region. The business model focuses on event organization and promotion, supported by local government and industry partners. Technically, the website is built on a modern stack including HTML5, CSS3, JavaScript, and uses Cookiebot for consent management and Matomo for analytics. The CMS appears to be Redaxo, inferred from media URL patterns. The site is hosted on servers indicated by the nameservers your-server.de and second-ns.de. Performance and mobile optimization are good, with basic accessibility and SEO features implemented. From a security perspective, the site enforces HTTPS and uses a cookie consent mechanism with blocking mode. No critical vulnerabilities or exposed sensitive data were detected. However, security headers are not explicitly observed in the provided data, and no published security or incident response policies were found. Privacy compliance is strong, with a clear privacy policy and cookie management aligned with GDPR requirements. Overall, the website is professional, trustworthy, and well-suited for its educational purpose. Recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and continuing to monitor third-party scripts for security risks.

W

WInTO GmbH

gruenderservice-oberhavel.de

47

WInTO GmbH operates the Gründerservice Oberhavel website, providing comprehensive support and consulting services for business founders in the Oberhavel region of Germany. The company focuses on guiding entrepreneurs through orientation, planning, implementation, and consolidation phases of business establishment. The website serves as a regional government-related platform to foster a startup-friendly environment with clear contact points and event information. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, Font Awesome icons, and Swiper.js for UI components. Cookie consent is managed via Cookiebot, ensuring GDPR compliance, and user analytics are handled through Matomo with cookies disabled to enhance privacy. The site is mobile-optimized and presents a professional design with good navigation clarity. From a security perspective, the site uses HTTPS and integrates cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response information. No vulnerabilities or suspicious elements were detected in the content or WHOIS data. The domain registration information is minimal but consistent with the business claims. Overall, the website is a trustworthy, professional resource for its target audience, with moderate technical sophistication and good privacy compliance. Strategic improvements in security headers, incident response transparency, and SEO could further enhance its posture and user trust.

The website www.muenchenstein.ch serves as the official online presence of the Einwohnergemeinde Münchenstein, the municipal government of Münchenstein, Switzerland. It provides comprehensive information and services for residents, families, seniors, foreign residents, and local businesses. The site offers access to administrative services, community news, event announcements, waste disposal information, and local project updates, positioning itself as a key resource for the local population. The business model is that of a governmental service provider focused on community engagement and service delivery. Technically, the website employs modern web technologies including Bootstrap for responsive design, Matomo for analytics, and ES modules for JavaScript. The site is mobile optimized and accessible, with good SEO practices and a clear navigation structure. The CMS used appears to be i-web, a specialized platform for municipal websites. Performance is moderate, with asynchronous loading of analytics scripts and modular JavaScript enhancing user experience. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, it lacks explicit security policy documentation, incident response contacts, and vulnerability disclosure mechanisms such as security.txt. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy and consistency with the municipal identity. Overall, the website is a trustworthy, well-maintained municipal portal with good content quality and technical implementation. Strategic improvements include publishing a security policy, adding incident response contacts, and enhancing security headers to further strengthen the security posture.

B

Boch & Fernsh

bochfernsh.com

46

Boch & Fernsh is a well-established creative advertising agency based in Mumbai, India, with over two decades of experience. The company offers a comprehensive suite of services including branding, advertising campaigns, video production, digital marketing, social media management, and web design. Their market position is strong, supported by multiple industry awards and a reputable client portfolio. Technically, the website employs modern web technologies and integrates various analytics and marketing tools, hosted on DreamHost. The site is mobile-optimized and professionally designed, providing an excellent user experience. Security posture is good with HTTPS enforced, but lacks some advanced security headers and explicit privacy compliance mechanisms. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and trustworthiness.

P

Prosegur Deutschland

prosegur.de

72

Prosegur Deutschland is a leading security and cash management service provider in Germany, specializing in secure transportation and handling of physical and digital assets. The company positions itself as the market leader in Germany, serving B2B clients including banks, public institutions, and enterprises. Their comprehensive service portfolio includes cash management outsourcing, cash deposit solutions, technical services, and high-security storage. Technically, the website employs modern tracking and consent management tools, hosted on a reputable CDN provider (Akamai), and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, supporting Prosegur's strong market presence.

E

Eidgenössisches Institut für Geistiges Eigentum

swissreg.ch

64

The website swissreg.ch is the official portal of the Swiss Federal Institute for Intellectual Property (Eidgenössisches Institut für Geistiges Eigentum). It serves as the authoritative source for intellectual property rights in Switzerland, including trademarks, patents, and design protections. The site targets businesses, legal professionals, inventors, and the general public seeking information and services related to intellectual property. As a government entity, it holds a strong market position as the official Swiss authority in this domain. Technically, the website employs modern web technologies such as Angular and Material Design components, ensuring a responsive and accessible user experience. The presence of Font Awesome icons and Dynatrace monitoring scripts indicates a mature digital infrastructure focused on usability and performance. The site is well-structured with good design quality and navigation clarity, optimized for mobile devices. From a security perspective, the site uses HTTPS and modern JavaScript frameworks, but lacks explicit security headers and detailed privacy or cookie policies. No forms or direct contact information were detected in the provided content, which limits user interaction and transparency in privacy compliance. The WHOIS data confirms the domain's legitimacy as a Swiss federal government asset, reinforcing trustworthiness. Overall, the website demonstrates a solid security posture and technical maturity appropriate for a government service portal. However, improvements in privacy compliance documentation and security header implementation are recommended to enhance user trust and regulatory adherence.

R

rockit GmbH

rockit.at

44

rockit GmbH is a specialized TYPO3 CMS agency based in Vienna, Austria, offering comprehensive web development services including responsive design, accessibility, SEO, and GDPR-compliant solutions. The company holds certifications as TYPO3 integrators and serves a diverse client base including government and large organizations, positioning itself as a trusted technology service provider in the Austrian market. Their business model focuses on delivering tailored TYPO3 websites with ongoing maintenance and quality assurance. Technically, the website is built on a modern TYPO3 CMS platform with a rich technology stack including PHP, TailwindCSS, JavaScript frameworks like Vue.js and Alpine.js, and uses Matomo for privacy-conscious analytics. The site is well-optimized for mobile devices, accessibility, and SEO, reflecting a mature digital infrastructure. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, there is room for improvement in publishing explicit security policies, incident response contacts, and implementing additional HTTP security headers. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional and trustworthy digital presence with strong compliance and technical maturity. The lack of WHOIS data limits domain trust verification but does not detract from the evident business legitimacy. Strategic recommendations include enhancing security header implementation and publishing formal security policies to further strengthen trust and compliance.

R

rapidmail

emailsys1a.net

55

Rapidmail operates as a German-based email marketing and servicedomain provider targeting businesses and marketers primarily in German-speaking regions. The website presents a professional but basic digital presence with a focus on servicedomain offerings. The technical infrastructure is standard, utilizing modern web fonts and CSS, hosted with DNS Made Easy, indicating a reliable DNS setup. However, the site lacks visible advanced frameworks or CMS indications. Security posture is minimal with no detected security headers or incident response information, and privacy compliance is not evident due to missing privacy and cookie policies. Overall, the site is accessible and safe but would benefit from enhanced security and compliance features to strengthen trust and regulatory adherence.

M

MissioNET

missionet.org

45

MissioNET is a small non-profit multimedia platform owned by the Xaverian Missionaries, focused on missionary animation and vocational promotion through a video library. The website is built on Joomla CMS with Yootheme and UIkit frameworks, providing a good user experience with mobile optimization and clear navigation. The technical infrastructure is modern and includes Google Analytics for tracking, though lacks some advanced security headers and DNSSEC. Security posture is moderate with HTTPS enabled and domain transfer protections in place. However, the absence of privacy and cookie policies, as well as no visible incident response or security policies, indicates gaps in compliance and transparency. Overall, the website is legitimate, professionally presented, and serves a niche religious community audience effectively.

H

Hogrefe TEA Ediciones

hogrefe-tea.com

50

Hogrefe TEA Ediciones operates as a specialized publisher and distributor of psychological tests, personality assessments, intelligence and aptitude tests, HR evaluations, and online psychology courses primarily targeting professionals and students in Spain. The website is well-branded and professionally designed, reflecting a medium-sized educational business with a clear market position in the psychology sector. Technically, the site is built as a modern Angular single-page application leveraging FontAwesome icons, Swiper.js for carousels, and Google Fonts, ensuring a responsive and user-friendly experience. Security-wise, the site employs HTTPS with a good SSL configuration and domain transfer protections, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Privacy compliance is strong, with comprehensive privacy and cookie policies and an active consent mechanism. Overall, the website demonstrates a solid digital maturity with room for improvement in security transparency and accessibility.

T

TAV Academy - Trans Audio Video Group

tav-academy.com

65

TAV Academy is a division of the established TAV Group, focused on providing professional training and education in audiovisual technologies including photo, video, audio, and security. The website positions itself as a key player in the Italian audiovisual market, offering courses, workshops, masterclasses, and events to professionals, students, and enthusiasts. The business model centers on education and community engagement with a strong emphasis on technology and innovation. Technically, the website is built using Canva's platform with modern web standards, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and domain transfer protections, but lacks advanced security headers and DNSSEC. Privacy compliance is supported by a comprehensive privacy policy via Iubenda, though cookie consent mechanisms are absent. Overall, the website is professional, trustworthy, and well-aligned with its business objectives.

C

Connectyca s.r.l.s.

connectyca.it

60

Connectyca s.r.l.s. operates the ThingsIoT website, providing IoT and M2M SIM card solutions with extensive global coverage. The company positions itself as an authorized reseller of Tele2, targeting businesses requiring reliable IoT connectivity and fleet management services. Their offerings include multi-operator SIM cards, data pooling, and a management portal with security features such as SIM blocking. The website is professionally designed, mobile-optimized, and provides comprehensive contact and legal information, supporting a trustworthy business presence. Technically, the site employs modern web technologies including Bootstrap, jQuery, and Slider Revolution, with Google Analytics and reCAPTCHA integrated for analytics and spam prevention. The site is served over HTTPS with no visible security vulnerabilities, though security headers and explicit security policies are absent. Privacy and cookie policies are present and GDPR compliance is indicated, though could be enhanced with more detailed disclosures. Security posture is moderate with good SSL usage and form protections but lacks advanced security headers and incident response information. No vulnerabilities or suspicious content were detected. WHOIS data aligns well with the business claims, showing consistent registrant information and domain age appropriate for the company's market presence. Overall, the website demonstrates a solid business and technical foundation with room for improvement in security policies and compliance transparency. It is suitable for its target audience of IoT connectivity customers and partners.

D

Die Siedlung Saarbrücken

siedlung-saarbruecken.de

41

Die Siedlung Saarbrücken operates as a municipal housing provider for the city of Saarbrücken, Germany, offering rental apartments through a transparent and fair process. The website serves as a portal for current housing offers and provides a registration option for notifications about new listings. The target audience is local residents seeking affordable housing solutions. The business model is focused on public sector housing management with a medium-sized operational scale. Technically, the website uses basic HTML and CSS with custom fonts but lacks advanced frameworks or CMS indications. The site is moderately optimized for performance and mobile use but lacks accessibility and SEO enhancements. No analytics or tracking technologies were detected, indicating a privacy-conscious or minimalistic approach. From a security perspective, the site lacks visible security headers and published policies such as privacy or cookie policies, which are critical for GDPR compliance. No contact information or incident response channels are provided, limiting transparency and user trust. The domain registration data is consistent with the business's geographic and operational profile, supporting legitimacy. Overall, the website is functional and provides relevant content but requires improvements in privacy compliance, security posture, and user contact transparency to enhance trust and regulatory adherence.

The website bildungsportal-niedersachsen.de is currently inaccessible due to a Cloudflare Turnstile security challenge page, which blocks access to the actual content. This prevents extraction of meaningful business, security, or compliance information. The domain appears to be protected by Cloudflare, indicating an intent to secure the site from automated abuse or attacks. Without access to the real content, no privacy policies, contact information, or business details can be confirmed. The technical infrastructure includes Cloudflare's security mechanisms but lacks visible analytics or advertising technologies in the provided content. The security posture cannot be fully evaluated due to the content block, but the presence of Cloudflare indicates a baseline security measure. Overall, the site is likely a public educational portal, but the analysis is limited by the WAF challenge.

D

DiG Plus GmbH

dig-berlin.de

55

DiG Plus GmbH is a Berlin-based design and communication agency specializing in political and social themes with over 20 years of experience. The company offers services including campaign design, publishing, and product development, targeting political organizations, social campaigns, and non-profits. The website reflects a professional and consistent brand presence with detailed project showcases and clear contact information. Technically, the site uses standard web technologies such as HTML5, CSS3, jQuery, and Bootstrap icons, with moderate performance and good mobile optimization. Security posture is moderate with basic best practices like email obfuscation and meta referrer policy, but lacks advanced security headers and HTTPS confirmation. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the site is safe, professional, and trustworthy with room for security and privacy improvements.

The website carolinemakes.art is currently inaccessible, presenting a 403 Forbidden error page that blocks access to any substantive content. The domain is registered through a privacy protection service (Domains By Proxy, LLC) and hosted on SiteGround servers. There is no visible business information, contact details, or privacy and cookie policies on the site. The lack of accessible content and metadata severely limits the ability to assess the business or its services. Technically, the site uses basic HTML and CSS with Google Fonts but lacks modern SEO, accessibility, or security headers. The domain is relatively new, created in 2022, and uses domain status prohibitions to prevent unauthorized changes. Overall, the site exhibits minimal digital maturity and poor content quality due to the access restriction.

S

Soziales Basel

sozialesbasel.ch

65

Soziales Basel operates as a local government/non-profit platform providing comprehensive information and referral services for social institutions and support offers in Basel-Stadt, Switzerland. The website targets residents seeking assistance in areas such as education, work, finance, health, housing, migration, and emergencies. It is positioned as a trusted local resource with partnerships from recognized organizations and government entities. Technically, the site employs modern web technologies including htmx and Sprig components, with responsive design and good accessibility. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers and explicit security policies are lacking. Overall, the site is professional, trustworthy, and well-aligned with its mission, with room for improvement in security policy transparency and technical hardening.

G

GGG Voluntas

ggg-voluntas.ch

51

GGG Voluntas is a Swiss non-profit organization specializing in healthcare consultation services, particularly focusing on patient advance directives, health planning, and accompaniment services for the sick at home. The organization targets elderly individuals, patients, and caregivers primarily in Basel, Switzerland. Their website presents a professional and consistent brand image with clear navigation and relevant content including podcasts and interviews that enhance their community engagement. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, jQuery, and Plyr.js for media playback, with hosting of audio content on Amazon S3. Analytics are handled via privacy-focused Plausible Analytics, reflecting a commitment to user privacy. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers and incident response policies are not published. Overall, the site is well-structured, mobile-optimized, and trustworthy, though improvements in cookie consent and formal security disclosures are recommended.

InfoSpace is a small cultural collective and exhibition platform based in Basel, Switzerland, collaboratively run by multiple art collectives and organizations. It offers a public program of exhibitions, talks, and events focused on contemporary art and collective practices. The website serves as an information hub and event calendar for the local cultural community. Technically, the site is built with standard HTML and CSS, includes a Mailchimp newsletter subscription form, and is mobile responsive with good accessibility features. However, it lacks advanced technical frameworks or CMS integration. Security posture is moderate with HTTPS usage implied but no visible security headers or published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and professionally presented but would benefit from improved compliance and security practices.

The website karinborer.ch serves as the professional portfolio for artist Karin Borer, based in Basel, Switzerland. It primarily showcases her exhibitions, collaborations, and artist editions, targeting art enthusiasts, galleries, and cultural institutions. The site positions Karin Borer as an active artist with a regional and international presence, supported by partnerships with galleries and museums. Technically, the website is built with standard HTML and CSS, including custom fonts, and is mobile responsive with a moderate performance profile. However, it lacks advanced frameworks, CMS, or analytics integrations. Security posture is minimal with no detected security headers or privacy policies, and no explicit HTTPS confirmation from the provided data. The site does not implement cookie consent or terms of service, which are important for compliance. Overall, the domain registration aligns well with the website content, indicating legitimacy and trustworthiness. Strategic improvements in security and privacy compliance would enhance the site's professional standing and user trust.

C

cpress

cpress.ch

43

cpress is a small independent media publisher based in Switzerland, founded in 2014 by Christof Nüssli and Christoph Oeschger. The company focuses on publishing books and films, targeting a general audience interested in niche media content. The website reflects this business model with clear navigation to books and films sections and news updates about upcoming releases and events. The market position appears to be that of a specialized publisher serving a focused community rather than a mass-market player. Technically, the website is built using standard HTML5, CSS3, and JavaScript without reliance on major CMS or frameworks. The site is moderately optimized for performance and mobile use, though accessibility and SEO features are basic. No advanced analytics or advertising technologies are detected, indicating a minimalistic digital footprint. From a security perspective, the site lacks published privacy, cookie, or terms of service policies, and no security headers are detected. There is no visible contact information for security incidents or data protection officers. The domain registration data is consistent with the business claims, showing no privacy protection and a domain age matching the founding year, which supports legitimacy. Overall security posture is moderate but could be improved by implementing standard compliance and security best practices. The overall risk is low given the nature of the business and content, but the lack of privacy and security policies and contact information could impact trust and compliance with regulations such as GDPR. Strategic improvements in these areas would enhance the company's security posture and user trust.

C

Ciao Press

ciaopress.com

54

Ciao Press is a small Swiss-based independent publisher specializing in art, contemporary photography, illustration, and design books. Founded by Nicolas Polli in late 2017, the company focuses on producing limited edition, high-quality printed books that appeal to art enthusiasts and collectors. The website presents detailed information about their publications, including edition sizes, ISBNs, and pricing, reflecting a niche market positioning. Technically, the website uses modern web technologies such as HTML5, CSS3, JavaScript, and the Flickity carousel for image galleries. It is hosted by Infomaniak Network SA, a Swiss hosting provider, and uses HTTPS for secure connections. However, DNSSEC is not enabled, and no security headers were detected, indicating room for improvement in security hardening. The site lacks privacy and cookie policies, which are important for GDPR compliance, and no incident response or vulnerability disclosure information is provided. Contact information is limited to a single email address, with no phone or physical address listed. Overall, the website is professionally designed with good content relevance and user experience but could enhance its security posture and privacy compliance to build greater trust and meet regulatory requirements.

P

Potpuri

potpuri.org

52

Potpuri.org is an independent publishing platform and collaborative initiative focused on experimental research methodologies, investigative journalism, and production, primarily serving the Albanian diaspora and social issues between Kosovo and Switzerland. The website is hosted on the Cargo.site platform and uses modern web technologies including JavaScript frameworks and responsive design. The site is multilingual and includes partner acknowledgments from the European Union and local initiatives. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers. Privacy compliance is good with a cookie consent mechanism and a privacy policy present. However, contact information and terms of service are missing, which impacts business credibility and user trust. Overall, the site is functional, professionally designed, and serves a niche media and research audience.

M

MOULURE MAGAZINE

mouluremagazine.ch

49

MOULURE MAGAZINE is a small interdisciplinary art and design collective based in Switzerland, providing a platform for artists and designers to share their creative processes and works. The website serves as an online magazine and includes an online shop, targeting artists, designers, and art enthusiasts. The platform is hosted on Cargo Collective and integrates Stripe for payment processing. The technical infrastructure is modern and functional, with good mobile optimization and a clean design. Security posture is adequate with HTTPS and secure payment integration, but lacks advanced security headers and formal privacy and cookie policies. Overall, the site is professional and trustworthy but could improve compliance and security practices.

H

Heissi Schnitte – Catering

heissi-schnitte.ch

51

The website heissi-schnitte.ch appears to represent a small Swiss business, likely in the bakery or food sector, based on the domain and language context. The site is built on WordPress using the Elementor page builder, indicating a moderate level of digital maturity with a focus on visual presentation. The content is primarily in German (Switzerland) and is business-oriented but lacks detailed business information, contact details, and formal policies such as privacy or cookie policies. Technically, the site uses HTTPS, which is a positive security indicator, but lacks important security headers and formal privacy compliance mechanisms. No analytics or tracking scripts were detected, suggesting minimal user tracking. The absence of contact information and security policies reduces the overall trust and compliance posture. The domain WHOIS data is consistent with the website's Swiss origin and shows no privacy protection, supporting legitimacy. Overall, the website is functional and visually adequate but requires improvements in privacy, security, and business transparency to enhance trust and compliance.

Stretcher is a small, artist-run exhibition project based in Basel, Switzerland, founded in 2023 by artists Karin Borer and Daniel Kurth. The project focuses on contemporary art exhibitions, artist editions, readings, and collaborative art events, operating within the InfoSpace collective art community. The website provides detailed program information, contact details, and event schedules, targeting a general audience interested in contemporary art. Technically, the website is built with standard HTML and CSS, uses Google Fonts, and integrates a newsletter subscription via Mailchimp. The site is mobile-optimized with good navigation and content relevance but lacks advanced technical frameworks or CMS. Security posture is moderate with no explicit HTTPS or security headers information available, and no privacy or cookie policies are present, indicating compliance gaps. Overall, the domain registration data aligns well with the business claims, supporting legitimacy.

S

Stiftung Liste Basel

liste.ch

57

Liste Art Fair Basel is a Swiss-based non-profit foundation organizing a well-established contemporary art fair event in Basel. The website serves as an information portal for visitors, artists, partners, and press, providing event details, application information, and contact channels. The business is positioned as a key cultural event with long-term partnerships, notably with E. Gutzwiller & Cie, Banquiers. Technically, the site is built on Magnolia CMS, uses modern web standards, and integrates Google Analytics and Tag Manager for visitor tracking. The site is mobile-optimized and provides a cookie consent mechanism, indicating a basic level of privacy compliance. Security posture is good with HTTPS enforced, but lacks advanced security headers and dedicated security policy disclosures. Overall, the website is professional, trustworthy, and serves its audience effectively.

B

Bundesministerium für Bildung, Wissenschaft und Forschung

erwachsenenbildung.at

62

erwachsenenbildung.at is an official Austrian government portal dedicated to adult education, providing comprehensive information, services, and learning opportunities for trainers, coaches, and educational managers. The site is managed by the Bundesministerium für Bildung, Wissenschaft und Forschung and supported by partners such as CONEDU and the Bundesinstitut für Erwachsenenbildung. It serves as a national and international hub for networking and professional development in the adult education sector. Technically, the website employs modern web standards, including HTML5, CSS3, JavaScript, and integrates Cookiebot for consent management and Google Tag Manager for analytics. The site is well-optimized for mobile devices and accessibility, with good SEO practices in place. Security-wise, the site enforces HTTPS, uses appropriate security headers, and provides a robust cookie consent mechanism, although explicit security and incident response policies are not publicly available. Overall, the domain registration aligns perfectly with the official government entity, reinforcing the site's legitimacy and trustworthiness.

W

Walzwerk

walzwerk.ch

52

Walzwerk is a mixed-use commercial real estate area located in Münchenstein and Arlesheim, Switzerland, offering a vibrant environment combining business, education, culture, gastronomy, and leisure. The website presents the property as a regional hub for diverse activities, targeting local businesses, cultural participants, and visitors seeking educational and recreational experiences. The business model centers on leasing commercial and cultural spaces and hosting events, supported by a parent company, SF Urban. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript with jQuery and GSAP, and integrates Google Analytics for user tracking. The site is well-structured, mobile-optimized, and SEO-friendly, though accessibility features are basic. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit security policies. No critical vulnerabilities or suspicious elements were detected. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, though contact information is not explicitly provided in the HTML content.

O

Opportunus s.r.o.

ecpaper.cz

42

EcPaper, operated by Opportunus s.r.o., provides a digital solution for converting traditional printed catalogs and flyers into interactive online formats. Their service targets businesses seeking to enhance customer engagement through responsive, SEO-optimized digital catalogs accessible on multiple devices. The company positions itself as a niche technology provider within the Czech Republic, offering tools for catalog management, analytics integration, and online sales channel enhancement. The website reflects a professional and consistent brand image with clear contact information and client references, supporting its credibility in the market. Technically, the website employs modern web standards including HTML5, CSS3, JavaScript, and jQuery, with responsive design facilitated by Bootstrap. Integration with Google Fonts and Google Maps API enhances user experience. The site is powered by dmpCMS, indicating a managed content platform. Performance is moderate with good mobile optimization and basic accessibility features. SEO practices are evident through meta tags and structured content. Security posture is adequate with HTTPS usage and secure form handling, but lacks advanced security headers and cookie consent mechanisms, which are important for GDPR compliance. No WHOIS data was retrievable, which raises concerns about domain registration transparency. No signs of malicious content or vulnerabilities were detected in the visible content. Overall, the website presents a trustworthy business front with room for improvement in security best practices and privacy compliance. Strategic recommendations include implementing security headers, cookie consent, and publishing terms of service to enhance user trust and regulatory adherence.

B

BGO

findalternative.co.uk

43

Findalternative.co.uk is a website promoting a real estate development project named '105 Victoria Street' in London, managed by the developer BGO. The site focuses on showcasing the workspace and commercial property offerings with a target completion date in Q3 2026. The business model centers on real estate development and leasing, targeting commercial tenants and businesses seeking workspace in a prime London location. The website is professionally designed with modern web technologies, including SVG graphics and Google Analytics integration, indicating a moderate level of digital maturity. However, the site lacks critical compliance elements such as privacy and cookie policies, and no forms or extensive contact details are provided, limiting user engagement and transparency. Security posture is moderate with HTTPS usage but no visible security headers or explicit security policies. The domain registration is consistent with the business timeline and registered through a reputable registrar, supporting legitimacy. Overall, the site presents a professional front for a niche real estate project but requires improvements in privacy compliance, security best practices, and richer contact information to enhance trust and regulatory adherence.

The website jplayer.it is currently inaccessible beyond a Cloudflare security challenge page, which prevents access to any actual business content or information. The domain WHOIS data is suspicious, showing a creation date in the future (September 18, 2025), which undermines trust and legitimacy. No privacy, cookie, or terms of service policies are present, nor is there any contact information or business description visible. The site uses Cloudflare Turnstile for bot verification, indicating a security mechanism to prevent automated access. Overall, the website lacks transparency and content, making it impossible to assess the business or its services accurately. The security posture is moderate due to HTTPS and DNSSEC, but the absence of security headers and policies reduces confidence.

M

Magistra, a.s.

magistra.cz

62

Magistra.cz is a Czech Republic based online pharmacy and retail pharmacy chain operating over 200 physical locations nationwide. The company offers a broad range of pharmaceutical and healthcare products through its e-commerce platform, supported by a loyalty program and a mobile application facilitating e-prescription reservations. The website is professionally designed with clear navigation and relevant content targeted at general consumers seeking pharmaceutical products and health-related services. Technically, the site uses modern web technologies including HTTPS, Google Tag Manager, and multiple analytics platforms, hosted partially on Microsoft Azure Blob Storage. Security posture is adequate with HTTPS enforced but lacks visible security headers and explicit privacy and cookie policies, which are important for compliance and user trust. The WHOIS data is unavailable, likely due to privacy protection, which is common and justified for this business type. Overall, the site demonstrates a strong business presence and trustworthy e-commerce platform in the healthcare sector.

L

Literaturhaus Basel

literaturhaus-basel.ch

55

Literaturhaus Basel is a well-established non-profit cultural institution based in Switzerland, dedicated to promoting literature through events, courses, and community projects. The organization enjoys strong local support from cultural authorities and foundations, positioning it as a key player in Basel's literary scene. The website reflects this with clear event listings, accessibility information, and community engagement features. Technically, the site uses modern web technologies including HTMX and Plyr for media, and integrates Google Analytics for visitor insights. The site is mobile-optimized and accessible, though there is room for improvement in cookie consent and security policy transparency. Security posture is adequate with HTTPS and no visible vulnerabilities, but lacks explicit security headers and incident response information. Overall, the domain registration is consistent with the organization's profile, enhancing trustworthiness.

W

Westend Verlag

westendverlag.de

59

Westend Verlag is a German publishing company specializing in academic, political, and cultural literature. Their website offers a range of books, eBooks, and media content such as videos and podcasts, targeting readers interested in critical discourse and scholarly works. The business operates primarily through online sales and media distribution, positioning itself as a niche publisher with a focus on quality content and intellectual engagement. Technically, the website is built on a modern e-commerce platform likely Shopware, utilizing Google reCAPTCHA v3 for bot protection and Google Tag Manager for analytics. The site is hosted on German servers with HTTPS enabled, providing a secure browsing experience. The design is professional, mobile-optimized, and offers clear navigation, although some SEO and accessibility features could be enhanced. From a security perspective, the site implements basic best practices such as HTTPS and IP anonymization in analytics but lacks explicit security headers and published security policies. No vulnerability disclosure or incident response contacts are provided, which could be improved to enhance trust and compliance. Privacy compliance is partial, with cookie consent mechanisms active but no dedicated privacy or cookie policy pages detected. Overall, the website is functional, professional, and safe for general audiences, with room for improvement in privacy transparency and security documentation. The domain registration data aligns well with the business profile, indicating legitimacy and consistency.

G

Google LLC

googlemaps.com

68

This website is a Google consent management page designed to handle user consent preferences for Google services, specifically Google Maps, targeting German users. It is part of Google's extensive ecosystem for privacy compliance and user data management. The page is professionally designed, mobile optimized, and uses modern web technologies consistent with Google's standards. The domain is a subdomain of google.com, which is a well-established and trusted domain owned by Google LLC, a subsidiary of Alphabet Inc. The WHOIS data for the subdomain is not separately registered, which is typical for such subdomains. Technically, the site employs Google's proprietary scripts and Material Design Components, hosted on Google Cloud Platform, ensuring fast performance and high availability. Security is robust with HTTPS enforced, comprehensive security headers, and no visible vulnerabilities. Privacy compliance indicators are moderate on this page alone, as explicit privacy and cookie policy links are not present here but are expected on parent domains. No contact information is directly provided on this page. Overall, the security posture is strong, with no detected vulnerabilities or suspicious elements. The site is safe for general audiences, with no adult or explicit content. The domain and content are consistent with a legitimate Google service, supporting a high trustworthiness rating. Strategic recommendations include maintaining security best practices, enhancing explicit privacy and cookie policy visibility, and continuous monitoring of third-party scripts.

H

HESCOM-Software GbR

hescom.de

57

HESCOM-Software GbR is a small German software company specializing in software solutions for antiquarian bookshops, collectors, galleries, and publishers. Their offerings include proprietary software products such as Antiquar-PC, Exlibris-PC, and an integrated webshop solution, targeting niche markets with tailored IT consulting and web design services. The company has a consistent market presence since 2006 and maintains a professional website with clear navigation and relevant content. Technically, the website uses a proprietary web framework with standard web technologies including jQuery and Slick Carousel, and employs Piwik/Matomo for analytics. Mobile optimization and SEO are adequately addressed, though accessibility is basic. Security posture is moderate with HTTPS implied but lacking explicit security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the website is functional and professional but could improve in security and privacy compliance aspects.

o.open is a small German IT service provider specializing in network design, system integration, hosting, and administration of internet and office networks. The company focuses on supporting social and left-wing projects, providing technical expertise and infrastructure services. The website content is professional and targeted at a niche audience within Germany, with references to partner organizations and detailed contact information. The business appears to have been founded in the early 2000s, with a strong community and social orientation. Technically, the website uses standard modern web technologies such as HTML5, CSS3, and vanilla JavaScript with some security-conscious practices like nonce usage in scripts. However, there is no evidence of advanced frameworks or CMS platforms. The site is moderately optimized for performance and mobile use but lacks comprehensive accessibility and SEO features. Security posture is moderate, with no visible security headers or HTTPS confirmation in the provided data, and no cookie or privacy consent mechanisms detected. From a security perspective, the site does not show signs of blocking or WAF interference, and no vulnerabilities or exposed sensitive data were found in the content. The WHOIS data is limited due to DENIC privacy policies but shows consistent nameservers under the domain's control. The domain legitimacy is high, though some WHOIS details like creation and expiry dates are not disclosed. Privacy compliance is basic, with GDPR-related documents available but no cookie consent. Overall, the website is trustworthy and professional but could improve its security posture and privacy compliance. Strategic recommendations include implementing HTTPS verification, adding security headers, introducing cookie consent mechanisms, and enhancing mobile and accessibility features to improve user experience and compliance.

D

Die Linke im Europaparlament

dielinke-europa.eu

44

Die Linke im Europaparlament is a political group representing left-wing interests within the European Parliament, focusing on social justice, peace, and democracy in Europe. The website serves as an information hub for their parliamentary activities, news, publications, and contact with representatives. It targets European citizens interested in progressive politics and EU governance. The organization maintains a consistent brand presence and leverages official EU affiliations to establish trust. Technically, the website is built on WordPress with common plugins such as Contact Form 7 and uses modern web technologies including jQuery and FontAwesome. The site is hosted by http.net Internet GmbH and demonstrates moderate performance with good mobile optimization and basic accessibility features. SEO practices are well implemented with proper metadata and Open Graph tags. From a security perspective, the site enforces HTTPS and includes privacy consent mechanisms in its contact forms, aligning with GDPR requirements. However, it lacks advanced security headers and a public vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data indicates a consistent and legitimate domain registration. Overall, the website presents a professional and trustworthy digital presence for a political organization, with room for improvement in security hardening and cookie consent implementation to enhance privacy compliance and user trust.

B

BookGazette!

bookgazette.xyz

55

Book Gazette is a small independent media platform based in Germany focused on literary reviews, podcasts, and profiles of independent book publishers. The website offers curated content in German targeting readers interested in discovering books from independent publishers. Technically, the site uses modern web standards including HTTPS, JSON-LD structured data, and CDN-hosted assets, delivering a good user experience with responsive design and clear navigation. Security posture is adequate with HTTPS enforced but lacks advanced security headers and published security policies. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professionally presented but could improve in security and privacy transparency.

R

Rotpunktverlag AG

rotpunktverlag.ch

67

Rotpunktverlag AG is a well-established Swiss publishing company specializing in politically engaged and culturally relevant literature, including fiction, political non-fiction, and travel guides. The company has a strong regional presence in Switzerland and a loyal target audience of literature enthusiasts. Their business model includes book publishing, event hosting, and community engagement through shareholder participation and project funding. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content that supports their market position. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, and uses Google Tag Manager for analytics. Hosting assets on Amazon AWS indicates a reliable infrastructure. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is good with HTTPS enforced and CSRF protections, but could be improved with explicit security headers and published incident response policies. Overall, the website demonstrates a high level of professionalism and trustworthiness, with transparent contact information and social media presence. Privacy compliance is adequate with a privacy policy and cookie policy present, though lacking an explicit cookie consent mechanism. No signs of malicious activity or content safety concerns were found. Strategically, the company should enhance its security and privacy posture by publishing a security policy, incident response contacts, and implementing a cookie consent mechanism to improve GDPR compliance and user trust.

P

Pädagogische Hochschule Weingarten

ph-weingarten.de

58

Pädagogische Hochschule Weingarten is a well-established public university in Germany specializing in educational sciences and teacher training. Founded in 1949, it offers a broad range of bachelor and master programs, emphasizing research-based and practice-oriented education. The institution maintains a strong regional presence and actively engages in knowledge transfer to society. The website reflects a professional and comprehensive digital presence with clear navigation and rich content tailored to students, educators, and researchers. Technically, the site uses modern web standards and privacy-conscious analytics (Matomo), hosted likely on a regional academic network (BelWü). Security posture is good with HTTPS and no exposed sensitive data, though explicit security headers and cookie consent mechanisms could be improved. Overall, the site is trustworthy, compliant with GDPR, and professionally managed.

H

Domain Default page

hdw.dev

41

The website hdw.dev currently serves as a default placeholder page generated by Plesk, a hosting control panel platform. It does not represent an active business or service but provides informational content about Plesk and related tools such as Sitejet Builder and WP Guardian. The site targets web professionals and site owners interested in hosting management solutions. Technically, the site uses basic HTML, CSS, and JavaScript with no detected CMS or advanced frameworks. The hosting environment is likely managed via Plesk. Security posture is minimal with no visible HTTPS enforcement or security headers, and no privacy or cookie policies are present. The domain WHOIS data is privacy protected, limiting trust assessment. Overall, the site is functional as a placeholder but lacks business and security maturity.

L

Lehrer-Online

lehrer-online.de

67

Lehrer-Online is a well-established German educational platform providing over 20,000 quality-assured teaching materials, self-learning courses, and tools targeted at teachers and educators. The platform is built on TYPO3 CMS and integrates privacy-conscious analytics (Matomo) and advertising (AdSpirit) with a robust cookie consent mechanism. The website demonstrates a high level of professionalism, excellent content quality, and good technical infrastructure with modern security practices such as HTTPS and Content-Security-Policy headers. However, explicit contact information and formal security policies are not prominently published, which could be improved to enhance trust and compliance. Overall, Lehrer-Online presents a secure, privacy-aware, and user-friendly environment for its educational audience.

H

Happyworm Ltd

jplayer.org

52

jPlayer.org is the official website for jPlayer, a free and open source HTML5 audio and video media player plugin for jQuery and Zepto. Operated by Happyworm Ltd, the site serves a developer audience seeking cross-platform media playback solutions. The project is well-established since 2010 with an active community and GitHub presence, positioning it as a reputable player in the web media technology space. Technically, the site uses a modern JavaScript stack with jQuery, Zepto, and HTML5, supported by Cloudflare DNS and external analytics and social media integrations. However, some technical debt is evident in the lack of modern security headers and partial use of HTTP resources. Security posture is moderate with no critical vulnerabilities detected but lacking in privacy and cookie policy compliance. The domain registration is consistent and legitimate, with no privacy protection masking ownership, supporting trustworthiness. Overall, the site is professional and functional but would benefit from improved privacy compliance and security hardening.