Security Directory

G

Geo:Pro for Shopify

geoproapp.com

54

GeoProApp.com is a recently established SaaS business launched in 2023, providing geolocation-based access management tools specifically designed for Shopify store owners. The website offers features such as geolocation redirects, country blocking, and market redirects to help merchants control customer access and tailor shopping experiences based on location. The business targets e-commerce merchants using Shopify, positioning itself as a niche provider in this space. The website is professionally designed with good mobile optimization and clear navigation, though it lacks comprehensive privacy and cookie policies, which are critical for compliance and trust. Technically, the site uses modern frontend technologies including Tailwind CSS and JavaScript ES modules, with hosting and DNS services provided by Cloudflare. Google Analytics and Google Tag Manager are employed for user tracking, indicating moderate data collection practices. However, the absence of DNSSEC and security headers suggests room for improvement in security hardening. The domain registration is consistent with the business launch timeline, registered via a reputable registrar without privacy protection, which aligns with the business type. From a security perspective, the site uses HTTPS (implied by Cloudflare DNS and standard Shopify app practices), but lacks visible security headers and formal security or incident response policies. No forms or direct data collection points were detected on the main page, reducing immediate attack surface but also limiting user engagement options. The lack of privacy and cookie policies represents a compliance gap, especially under GDPR. Overall, the security posture is moderate but could be enhanced with standard best practices. The overall risk assessment is moderate with no critical vulnerabilities detected. Strategic recommendations include implementing DNSSEC, adding privacy and cookie policies, publishing contact and incident response information, and deploying security headers. These improvements will enhance compliance, trust, and security posture, supporting sustainable growth in the competitive Shopify app market.

F

fidentity AG

fidentity.ch

70

fidentity AG is a Swiss-based technology company specializing in certified digital identification and electronic signature solutions tailored primarily for banks, financial institutions, and regulated industries. The company offers modular products such as IDENT for identity verification, SIGN for legally valid digital signatures, and ONBOARD for onboarding processes, positioning itself as a trusted provider with strong compliance and certification credentials. Their market position is reinforced by partnerships with reputable banks and government entities, and certifications from KPMG and adherence to Swiss and European regulations such as ZertES and eIDAS. Technically, the website is built on modern frameworks like Astro and TailwindCSS, with strong mobile optimization and performance. The infrastructure leverages Swiss hosting partners and integrates advanced analytics and marketing tools while maintaining privacy compliance. Security posture is robust, featuring HTTPS, penetration testing, bug bounty programs, and compliance with GDPR and FINMA guidelines. Overall, the website and business demonstrate high professionalism, trustworthiness, and a mature digital presence.

Ö

Österreichische Lotterien Gesellschaft m.b.H.

win2day.at

63

win2day.at is the official Austrian online gambling platform operated by Österreichische Lotterien Gesellschaft m.b.H., offering a comprehensive range of lottery, casino, poker, and sports betting services. The website targets adult users in Austria, providing licensed and regulated gambling products with a strong emphasis on trust and fair play. The platform is well-positioned as Austria's sole licensed online gambling operator, leveraging its state-backed legitimacy and broad product portfolio to maintain market dominance. Technically, the site employs modern web technologies including Web Components, JavaScript ES modules, and a custom Ace UI framework, ensuring a responsive and performant user experience across devices. Integration with Usercentrics CMP demonstrates commitment to GDPR compliance and user privacy management. The site is well-optimized for SEO and accessibility, with fast loading times and clear navigation. From a security perspective, win2day.at enforces HTTPS, uses nonce attributes for scripts, and implements cache control headers to protect content integrity. While explicit security policies and incident response contacts are not found in the provided content, the overall security posture is strong with no visible vulnerabilities or exposed sensitive data. The WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, win2day.at presents a professional, trustworthy, and secure online gambling platform with excellent content quality and technical implementation. Strategic improvements include publishing explicit privacy and security policies and enhancing transparency around incident response and vulnerability disclosures.

W

Woody Official

woodyworld.com

10

Woody Official operates a professional e-commerce website specializing in sleepwear, nightwear, and homewear for babies, children, and adults. The brand offers a wide range of products categorized by age, size, and collection themes, targeting Dutch-speaking customers primarily. The website demonstrates a mature market position with a consistent brand presence and active social media engagement. Technically, the site uses modern JavaScript frameworks such as Alpine.js, integrates multiple marketing and analytics tools including TikTok Pixel, Facebook Pixel, Google Tag Manager, and Klaviyo, and is hosted behind Cloudflare DNS services. The site is mobile-optimized and provides a good user experience with clear navigation and structured content. Security-wise, the site enforces HTTPS and uses clientTransferProhibited domain status, but lacks DNSSEC and explicit security headers. Privacy compliance is basic with a cookie consent mechanism but no visible privacy or terms of service pages in the provided content. Overall, the website is functional and professional but could improve transparency and security posture.

G

Gstaad Saanenland Tourismus

gstaad.ch

55

The website www.gstaad.ch/sommer serves as the official tourism portal for the Gstaad holiday region in Switzerland, focusing on promoting summer activities, events, and travel planning. It targets tourists and visitors seeking comprehensive information about the region's offerings, including hiking, biking, cultural events, and accommodation options. The site is positioned as a regional destination marketing organization with a medium-sized operational scope. Technically, the website is built on TYPO3 CMS and leverages modern JavaScript modules, intersection observers, and font loading APIs to deliver a responsive and accessible user experience. It integrates analytics tools such as Matomo and Google Tag Manager with GDPR-compliant mechanisms and includes a chatbot for user engagement. Performance and mobile optimization are good, with clear navigation and SEO-friendly metadata. From a security perspective, the site enforces HTTPS and uses tracking scripts responsibly with consent mechanisms. However, it lacks explicit security headers and publicly available security policies or incident response contacts. No vulnerabilities or suspicious content were detected, and the domain registration data aligns well with the business purpose, indicating legitimacy. Overall, the website presents a professional and trustworthy tourism platform with room for improvement in privacy transparency and security documentation. Strategic recommendations include publishing comprehensive privacy and cookie policies, adding terms of service, and providing clear contact channels for security incidents to enhance user trust and compliance.

C

charicomm.de is available for purchase - Sedo.com

charicomm.de

71

The website is a domain sales landing page hosted by Sedo.com, a well-established domain marketplace with over 26 years of experience. The page offers the domain charicomm.de for sale at 699 EUR, highlighting services such as free transfer, personal assistance, and multiple payment options. The target audience is domain buyers and investors. The business model is domain brokerage and marketplace services, with a strong market position supported by high monthly domain transfer volumes. Technically, the site uses modern web technologies including JavaScript ES modules and Cloudflare DNS/CDN services. The site is mobile optimized with good design and basic accessibility features. Performance is moderate, and SEO is basic but functional. The SSL configuration is good with HTTPS enforced, but DNSSEC is not enabled, representing a minor security gap. Security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the site lacks published privacy policies, terms of service, security policies, and incident response contacts, which are important for compliance and trust. Contact information is clearly provided with a verified company email and phone number. No suspicious or malicious content was detected, and the content is safe for general audiences. Overall, the domain and website appear legitimate and trustworthy, with room for improvement in privacy compliance and security policy transparency. The AI overall score is 77, reflecting a good but not perfect security and compliance posture.

R

ROWE Mineralölwerk GmbH

rowe-oil.com

60

ROWE Mineralölwerk GmbH is a well-established German company specializing in the production and distribution of high-quality motor oils, gear oils, transmission oils, and lubricants for automotive and industrial applications. Founded in 1995, the company has built a strong international presence with a comprehensive product portfolio and a network of distributors. The website reflects a mature digital infrastructure with multi-language support, professional design, and clear navigation tailored to both industrial and private customers. Technically, the site employs modern technologies including Pimcore CMS, Matomo analytics, and Usercentrics for privacy compliance, ensuring a good user experience and adherence to GDPR standards. Security posture is robust with HTTPS enforcement and security headers, though some security policy documentation and incident response contacts are absent. The absence of WHOIS registration data is a notable concern, potentially indicating privacy protection or registration issues, which slightly impacts the trustworthiness score. Overall, the website is professional, secure, and compliant, serving as a credible digital front for ROWE Mineralölwerk GmbH.

P

Pinterest

pinterest.at

69

Pinterest is a leading global visual discovery and social media platform that enables users to find and share ideas such as recipes, home decor, and style inspiration. The website at.pinterest.com serves the Austrian market and reflects the brand's consistent and professional digital presence. The platform operates on a robust technical infrastructure leveraging modern JavaScript frameworks, strong security policies, and cloud hosting services. The site demonstrates excellent mobile optimization and accessibility, ensuring a seamless user experience across devices. Security posture is strong with HTTPS enforcement, comprehensive Content Security Policy, and integration of advanced bot mitigation technologies like reCAPTCHA Enterprise. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms, aligning with GDPR requirements. Overall, Pinterest maintains a high level of trustworthiness and professionalism, suitable for its enterprise scale and market position.

D

DAB+

dabsy.ch

49

The website dabsy.ch/login is a minimal login page titled 'DAB+'. It appears to be a user authentication portal with no publicly available business description, contact information, or policies. The site uses modern JavaScript modules and the Quill rich text editor library, indicating some level of technical maturity. However, the lack of privacy, cookie, and terms of service policies, as well as absence of contact or security information, limits trust and compliance assessment. No WAF or blocking mechanisms were detected, and the content is accessible and safe for general audiences. The domain WHOIS is privacy protected, which restricts transparency about ownership and legitimacy. Overall, the site shows basic technical implementation but lacks critical security and compliance disclosures.

S

SELECT Sport International

select-sport.com

75

SELECT Sport International operates a professional e-commerce website specializing in sports equipment, including footballs, futsal balls, handballs, sportswear, and training equipment primarily targeting clubs and athletes. The company leverages the Shopify platform to deliver a modern, responsive, and user-friendly online shopping experience. The website demonstrates good content quality, consistent branding, and comprehensive privacy and cookie policies, reflecting a mature digital presence. However, the absence of WHOIS registration data introduces some uncertainty regarding domain ownership transparency. Technically, the site employs modern web technologies including Shopify's Liquid framework, JavaScript ES modules, and integrates third-party analytics and marketing tools such as Google Analytics and Facebook Pixel. The site is hosted on Shopify's CDN infrastructure, ensuring good performance and security. Cookie consent mechanisms are robust, supporting GDPR compliance. Accessibility and SEO optimizations are present but could be enhanced further. From a security perspective, the website enforces HTTPS with strong SSL configuration and includes standard security headers, although explicit security policies and incident response contacts are not published. No vulnerabilities or exposed sensitive data were detected. The overall security posture is solid but could benefit from additional transparency and documentation. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include publishing explicit security and incident response policies, improving accessibility compliance, and addressing the WHOIS data gap to enhance trust and transparency.

I

ImmoScout24

immobilienscout24.at

11

ImmoScout24 is a leading real estate marketplace platform operating in Austria since 2012, providing comprehensive property listings for rent and purchase, along with related services such as real estate agent directories, financial calculators, and valuation tools. The platform targets property seekers and sellers in Austria and is part of the Scout24 SE group, a well-established player in the real estate digital market. The website demonstrates a mature digital infrastructure with modern web technologies including React, Apollo GraphQL, and advanced image formats, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforced and secure form implementations, although explicit security headers and incident response information are not publicly detailed. Privacy compliance is robust with clear privacy and cookie policies aligned with GDPR requirements. Overall, the site presents a professional, trustworthy, and user-friendly experience with high content quality and clear business credibility.

D

Druid

druidplatform.com

66

Druidplatform.com is a technology-focused website offering enterprise chatbot solutions. The site presents itself as a provider of advanced chatbot technology aimed at businesses seeking to leverage AI-driven conversational platforms. The website uses modern web technologies including Angular and PrimeNG, hosted on Azure DNS infrastructure, indicating a moderate level of digital maturity. However, the content is minimal with limited metadata and no visible contact or policy information, which impacts user trust and compliance visibility. Security posture is moderate with HTTPS implied but no explicit security headers or policies found. The absence of privacy and cookie policies, as well as contact details, suggests gaps in compliance and user engagement. Overall, the site is functional and professional but would benefit from enhanced transparency and security practices.

K

Kaffeemacher:innen

kaffeemacher.de

66

Kaffeemacher:innen operates an e-commerce platform specializing in coffee products, barista accessories, and educational courses, targeting coffee enthusiasts primarily in Germany. The website is built on Shopify, leveraging modern web technologies and third-party integrations for subscriptions, reviews, and analytics. The business positions itself as a niche provider with a strong content marketing approach through blogs and videos. Technically, the site is well-structured, mobile-optimized, and performs moderately well, with a consistent brand presentation and active social media presence. Security posture is solid with HTTPS and platform protections, though explicit security headers and formal privacy/cookie policies are missing. Overall, the site is trustworthy and professional but could improve compliance and security transparency.

W

Walz GmbH

babywalz.at

68

Walz GmbH operates the baby-walz.at website, a leading e-commerce platform specializing in baby equipment and articles for parents and caregivers in Austria and Germany. The website offers over 20,000 high-quality products including baby clothing, strollers, car seats, toys, and baby care items. It targets expectant mothers and families with young children, providing a comprehensive shopping experience with free returns and customer support. The company positions itself as a trusted and established retailer in the baby products market. Technically, the website is built on modern frameworks such as Nuxt.js and uses the Storyblok CMS, ensuring a responsive and well-structured user experience. The site includes structured data for SEO and contact information, enhancing discoverability and trust. Security posture is good with HTTPS and nonce usage, but lacks some security headers and cookie consent mechanisms. WHOIS data is unavailable due to quota limits, limiting domain registration verification. Overall, the site is professional, trustworthy, and well-optimized for its target audience.

S

Service IT

serviceit.by

52

Service IT operates a login portal likely serving as an access point for its clients or users to IT services or platforms. The website is built using modern frontend technologies such as Vue.js and PrimeVue, indicating a contemporary technical infrastructure. However, the site lacks public-facing content beyond the login form, with no privacy, cookie, or terms of service policies available, which limits transparency and compliance visibility. Security posture is moderate with HTTPS usage implied but no visible security headers or advanced protections in place. The absence of contact information and security policies suggests areas for improvement in trust and compliance. Overall, the site appears legitimate and consistent with its domain registration data, but it would benefit from enhanced security practices and compliance documentation.

K

Kaffeemacher

kaffeemacher.ch

71

Kaffeemacher is a Swiss-based specialty coffee e-commerce business offering a curated selection of coffee beans, accessories, and educational courses. The website is built on the Shopify platform, leveraging modern web technologies and integrations such as Judge.me for customer reviews and Seal Subscriptions for recurring orders. The company targets coffee enthusiasts primarily in Switzerland and Germany, positioning itself as a niche provider with a strong focus on quality and education. The digital infrastructure is robust, with good performance and mobile optimization, supported by Shopify's CDN and security features. Security posture is strong with HTTPS enforcement and standard security headers, though explicit privacy and cookie policies are not found in the provided content, indicating room for compliance improvement. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

L

LOTTO Schleswig-Holstein

gluexmagazin-lotto-sh.de

69

The website 'gluexmagazin-lotto-sh.de' serves as an official regional lottery magazine for LOTTO Schleswig-Holstein, providing lottery results, news, recipes, and contests targeted at lottery players and interested individuals in Schleswig-Holstein, Germany. The site is professionally designed with consistent branding and offers relevant content for its audience. Technically, it employs modern JavaScript frameworks such as Alpine.js, uses Usercentrics for GDPR-compliant consent management, and integrates etracker analytics with cookie blocking features. Hosting is provided by a German hosting provider as indicated by the nameservers. Security posture is solid with HTTPS enforced and consent mechanisms in place, though additional security headers and published policies could enhance trust and compliance. No adult or questionable content is present, making it safe for general audiences. Overall, the site reflects a mature digital presence for a regional government lottery publication.

C

Café Stoa Basel

cafestoa.ch

46

Café Stoa Basel is a small hospitality business located near the Christoph-Merian-Park in Basel, Switzerland. The café offers coffee specialties, food including pizza, focaccia, vegetarian and vegan menus, as well as apéro and catering services. The website positions the business as a local eatery with weekend and lunch offerings, targeting general audiences in the Basel area. The site is built on WordPress with a moderate technical infrastructure including modern JavaScript libraries and embedded Google Maps for location. Social media presence on Facebook and Instagram supports customer engagement. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies, indicating room for compliance improvement. No forms or analytics scripts are detected, suggesting minimal data collection and tracking. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

G

Getswish AB

swish.nu

63

Getswish AB operates the Swish mobile payment service, a leading FinTech solution in Sweden since 2012. The company provides real-time mobile payments targeting private individuals, companies, and payment ecosystem participants. The website reflects a professional and consistent brand with clear business information and a strong social media presence. Technically, the site uses modern JavaScript modules, Vue.js framework, and Contentful CMS, delivering a good user experience with mobile optimization and moderate performance. Security posture is strong with HTTPS and no visible vulnerabilities, though security headers and cookie consent mechanisms could be improved. Privacy compliance is adequate with a clear privacy policy but lacks cookie consent banners and terms of service pages. Overall, the domain registration aligns well with the business claims, indicating high legitimacy and trustworthiness.

G

Getswish AB

swish.com

63

Getswish AB operates the Swish mobile payment service, a widely adopted real-time payment platform in Sweden since 2012. The company targets both consumers and businesses, offering fast, secure payments authenticated via Mobile BankID. The website reflects a mature digital presence with modern technologies such as Vue.js and Contentful CMS, optimized for mobile users. Security posture is strong with HTTPS and secure payment authentication, though some security headers and incident response details are missing. The absence of WHOIS data for the domain introduces some uncertainty about domain registration transparency, but the professional website and business information support legitimacy. Overall, the risk is moderate with recommendations to enhance security headers, privacy compliance, and domain registration transparency.

M

medcom.de is available for purchase - Sedo.com

medcom.de

3

The analyzed website is a domain sales landing page hosted on Sedo.com, offering the domain medcom.de for purchase. The page contains minimal content focused solely on domain availability, with no business operations or services described. The technical infrastructure includes modern JavaScript modules and Cloudflare DNS services, with Cloudflare WAF protection evident through challenge scripts and hidden iframes. The site uses Google Analytics for user tracking but lacks privacy, cookie, or terms of service policies, and does not provide any contact information or business credentials. Security posture is weak with no visible security headers or HTTPS confirmation in the provided content. Overall, the site functions as a marketplace intermediary for domain sales rather than a traditional business website.

G

Gemeinde Zell ZH

zell.ch

40

The website www.zell.ch serves as the official digital presence of the Gemeinde Zell ZH, a small Swiss municipality. It provides comprehensive information about the community, including local governance, services, events, and economic activities. The site targets local residents, businesses, and visitors seeking municipal information or services. The business model is centered on public service delivery and community engagement, positioning the municipality as a trusted local authority. Technically, the website employs a modern CMS platform (i-web CMS) with a clean HTML5 and CSS3 implementation, leveraging JavaScript modules and Matomo analytics for visitor insights. The site is mobile-optimized and accessible, with good SEO practices and structured navigation. Performance is moderate, with no critical technical debt observed. From a security perspective, the site enforces HTTPS and uses secure login forms. However, it lacks explicit security headers and does not publish a dedicated security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is addressed with a clear privacy and cookie policy, including user consent for analytics. Overall, the website is a well-maintained, trustworthy municipal portal with a strong focus on community service. Strategic improvements in security policy transparency and header implementation could further enhance its security posture and user trust.

A

ASKÖ Tirol

askoe-vereine.at

59

ASKÖ Tirol operates a Vereinsdatenbank platform targeted at clubs and existing customers in the Tirol region of Austria. The website provides login and registration functionality for club data management. The business is positioned as a regional service provider supporting sports and club organizations. Technically, the site uses modern frontend technologies including Laravel Livewire, Alpine.js, and Tailwind CSS, delivering a responsive and user-friendly experience. Security posture is solid with HTTPS and CSRF protections, though security headers are not evident and could be improved. Privacy compliance is strong with clear cookie consent and GDPR-aligned policies. Overall, the website is professional, trustworthy, and well-suited for its audience, though WHOIS data unavailability limits full domain trust verification.

T

TMC Amplio GmbH

tmc-brandwork.de

43

TMC Brandwork, operated by TMC Amplio GmbH, is a German branding agency specializing in brand strategy, communication, and creative production for both B2B and B2C clients. The company positions itself as a provider of tailored solutions to strengthen brands with a professional portfolio and notable client references. The website reflects a strong market presence with consistent branding and clear contact points, including a named CEO and company email. Technically, the site uses modern web technologies such as Alpine.js and Tailwind CSS, hosted on a provider indicated by the nameservers. The site is mobile-optimized, fast-loading, and SEO-friendly. Security posture is good with HTTPS enforced and cookie consent implemented, though no explicit security policy or incident response information is published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

The website dafuer-sein-ist-alles.de is operated by the Deutscher Olympischer Sportbund e.V. (DOSB), the German Olympic Sports Confederation, serving as a platform to promote and inform about Germany's bid for the Olympic and Paralympic Games. It targets the German public and stakeholders interested in the Olympic movement, providing detailed information on bidding concepts from major German cities and regions, interactive tools, and news updates. The site enjoys strong government backing, evident from the partnership with the German Federal Ministry of the Interior and official logos displayed. Technically, the website employs modern web technologies including ES modules, Alpine.js for interactivity, and Vite for bundling. It integrates consent management via Consentmanager.net, analytics through Matomo, and uses Google reCAPTCHA for form security. The site is well-optimized for mobile devices, fast loading, and accessible, with good SEO practices and structured data enhancing search visibility. From a security perspective, the site enforces HTTPS, uses reCAPTCHA to protect forms, and manages cookie consent properly. While explicit security headers like X-Content-Type-Options and X-Frame-Options are not visible in the HTML, the overall security posture is strong with no exposed sensitive data or vulnerable libraries detected. Privacy compliance is robust, with a comprehensive privacy policy and cookie consent mechanism in place. Overall, the website presents a professional, trustworthy, and secure platform aligned with its governmental and non-profit nature. It effectively balances user engagement, privacy, and security, making it a reliable source for information on Germany's Olympic bid.

C

Culturescapes

culturescapes.ch

10

Culturescapes is a Swiss-based cultural festival and platform dedicated to international cultural exchange, with a focus on thematic editions such as Sahara 2025 that explore North African culture and its political ties with Switzerland. The website offers a rich array of content including event programs, magazines, books, and archives, targeting cultural enthusiasts, academics, and the general public interested in intercultural dialogue. The business operates primarily as a non-profit cultural organization, leveraging events and publications to engage its audience. Technically, the website employs modern web technologies including Vue.js, ES modules, and Swiper.js for interactive content presentation. It integrates Mailchimp for newsletter subscriptions and maintains a responsive design optimized for mobile devices. While the site performs moderately well, there is room for improvement in accessibility and SEO optimization. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, but lacks explicit security headers and publicly available security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy policy and cookie banner present but no terms of service or vulnerability disclosure policy. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements in security policies, contact transparency, and compliance documentation would enhance its security posture and user trust.

P

Paul Mellon Centre for Studies in British Art

richardwilsononline.ac.uk

65

Richard Wilson Online is a scholarly digital catalogue raisonné dedicated to the works of the 18th-century British landscape artist Richard Wilson. Funded by the Paul Mellon Centre for Studies in British Art, the site serves as an evolving research tool for academics, collectors, and the public interested in British art history. The platform offers comprehensive access to paintings, drawings, prints, biographies, exhibitions, and bibliographical resources, supported by advanced search and interactive features. The project is non-commercial and positioned as a specialized educational resource with strong academic credibility. Technically, the website employs modern web technologies including ES modules and CSS with a custom CMS solution developed by iBase Ltd. The site is mobile optimized, accessible, and performs moderately well. It uses Google Tag Manager for analytics and implements GDPR-compliant privacy and cookie policies with user consent mechanisms. However, no explicit security policies or vulnerability disclosures are published. From a security perspective, the site enforces HTTPS and uses secure login forms. While no security headers were detected in the HTML content, no vulnerabilities or exposed sensitive data were found. The lack of WHOIS data due to privacy protection is typical for academic projects and does not detract from the site's legitimacy. Overall, the site demonstrates a good security posture but could improve by adding explicit security policies and headers. The overall risk assessment is low given the academic nature, absence of suspicious content, and professional presentation. Strategic recommendations include enhancing security headers, publishing incident response contacts, and adding vulnerability disclosure information to further strengthen trust and compliance.

P

Pinterest

pinterest.dk

74

Pinterest is a globally recognized visual discovery and social media platform that enables users to find and share ideas such as recipes, home decor, and style inspiration. The Danish localized site (dk.pinterest.com) reflects the company's commitment to regional markets with tailored content and language support. Pinterest operates primarily on an advertising-based business model, leveraging user engagement to deliver targeted ads. The website demonstrates a mature technical infrastructure using modern JavaScript frameworks like React, advanced security measures including HTTPS and Content Security Policy, and integrations with reputable third-party services for advertising and fraud prevention. The security posture is strong, with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with comprehensive policies and consent mechanisms aligned with GDPR requirements. Overall, the site presents a professional, trustworthy, and user-friendly experience suitable for a broad audience.

M

Messe München GmbH

bauma.de

61

The bauma.de website represents the official online presence of the bauma trade fair, the world's leading exhibition for construction, mining, and building machinery. Managed by Messe München GmbH, the site serves a global audience of exhibitors, visitors, and journalists, providing comprehensive information about the event, including dates, exhibitor directories, programs, and visitor services. The business model centers on event organization and industry networking, positioning bauma as a key innovation and market platform in the manufacturing and transportation sectors. Technically, the website employs modern web technologies such as JavaScript ES modules, web components, and cloud-based hosting via Amazon Cloudfront and Azure Elastic Cloud, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforcement, security headers, and GDPR-compliant cookie consent mechanisms, although explicit security policies and incident response contacts are not prominently published. Overall, the site is professional, trustworthy, and well-aligned with industry standards, with no detected vulnerabilities or suspicious elements.

L

Loonexx AG

smartaxxess.io

9

The website smartaxxess.io serves as a login portal for the smartakte service, operated by Loonexx AG, a German technology company founded in 2022. The site targets professional users requiring secure access to digital services. The business model appears to be subscription or account-based access to a technology platform. The website is professionally designed with a consistent brand presence and basic content quality focused on user authentication. Technically, the site uses modern web technologies including JavaScript ES modules and CSS, hosted by IONOS SE. The site is mobile optimized and performs moderately well. However, it lacks advanced SEO and accessibility features. Security is enforced via HTTPS and CSRF tokens in forms, but no security headers or DNSSEC are implemented, representing areas for improvement. From a security posture perspective, the site shows good basic protections but lacks published privacy, cookie, and terms policies, as well as incident response or vulnerability disclosure information. No contact information or social media presence is visible, which limits transparency. The WHOIS data is consistent and trustworthy, with no suspicious patterns. Overall, the site is safe and suitable for general audiences, with no adult or questionable content. The main risks relate to compliance and security best practices gaps. Strategic recommendations include implementing security headers, publishing privacy and cookie policies, enabling DNSSEC, and providing clear contact and incident response information to enhance trust and compliance.

M

MVB GmbH

mvb-online.com

65

MVB GmbH operates as a central technology and information provider in the book industry, offering digital platforms and media formats to publishers, booksellers, self-publishers, and service providers primarily in Germany and internationally. The company has a strong market position as a connector within the book industry, supported by a professional and content-rich website that reflects its business focus and international presence. Technically, the website employs modern web technologies including FontAwesome, Google Tag Manager, and a cookie consent management system, hosted on Anexia infrastructure. The site is mobile optimized and SEO friendly, providing a good user experience. Security posture is solid with HTTPS enforced and domain transfer protection, though improvements like DNSSEC and enhanced security headers are recommended. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the domain registration data aligns well with the business claims, indicating a trustworthy and established entity.

T

Tønsbergs Blad

tb.no

64

Tønsbergs Blad is a regional Norwegian newspaper providing local news, sports, culture, and community information primarily targeting residents of the Tønsberg area. The website offers subscription services alongside advertising and classified listings, positioning itself as a trusted local media outlet under the parent company Amedia. The digital platform is built on a modern tech stack with progressive web app features and integrates multiple advertising networks and marketing tools. Security posture is strong with HTTPS enforcement and security headers, though public security policies and incident response contacts are not found. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the site is professional, accessible, and trustworthy with moderate to good technical performance.

D

Drammens Tidende

dt.no

10

Drammens Tidende is a Norwegian local news media outlet providing comprehensive coverage of local news, sports, culture, business, and obituaries. The website operates a subscription-based business model complemented by advertising revenue, targeting local Norwegian residents interested in regional news and events. The site is part of the Amedia group, a significant media company in Norway. Technically, the website employs modern web technologies including service workers, ES modules, and header bidding for advertising, indicating a mature digital infrastructure. The site is mobile responsive and optimized for performance with good SEO and accessibility basics. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy and cookie policies are present and GDPR compliant, reflecting good privacy practices. Contact information is clearly provided, enhancing business credibility. Overall, the site is professional, trustworthy, and well-maintained, serving as a reliable source of local news.

H

Haugesunds Avis

h-avis.no

66

Haugesunds Avis is a regional Norwegian newspaper providing local news, sports, culture, and community information primarily targeting residents of Haugesund and surrounding areas. The website operates on a subscription and advertising business model, integrated within the Amedia media group ecosystem. It offers digital subscriptions, eAvis (digital paper editions), and advertising services. The site is professionally designed with consistent branding and clear navigation, supporting a good user experience for desktop and mobile users. Technically, the site uses modern web technologies including ES modules, service workers, header bidding with Prebid.js, and Google Publisher Tags for advertising. The CMS and framework appear custom-built by Amedia, optimized for responsive design and performance. Accessibility is basic but present, and SEO practices are good with proper meta tags and structured data. Performance is moderate, with room for optimization. Security posture is strong with HTTPS enforced, secure forms, and no exposed sensitive data. However, additional security headers like CSP and HSTS could improve defenses. Privacy compliance is good with clear privacy and cookie policies and GDPR adherence. Contact information is transparent, enhancing business credibility. No WHOIS data is publicly available due to Norid policies, which is standard for Norwegian domains, and the domain appears legitimate and consistent with the business. Overall, Haugesunds Avis presents a trustworthy, professional, and secure digital presence for a regional media company, with solid technical infrastructure and compliance practices.

A

Active City Hamburg

hamburg-activecity.de

56

Active City Hamburg is a government-backed public initiative promoting sports and physical activities for all residents and visitors of Hamburg. The platform offers a comprehensive activity program, event information, and sports club details, supported by a dedicated mobile app. The website is well-branded, professionally designed, and targets a broad audience interested in an active lifestyle. Technically, the site uses modern web technologies including Vue.js and Mapbox GL JS, hosted on AWS infrastructure with S3 storage. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS and CSRF protections, though some security headers could be improved. Privacy compliance is strong with a clear privacy policy and cookie consent mechanism. Overall, the site is trustworthy and serves as a valuable resource for the Hamburg community.

A

Alt

alt.no

57

Alt.no is a Norwegian news media website delivering news content primarily in Norwegian language. The site targets a general Norwegian audience and operates as a digital news platform likely monetized through subscriptions and advertising. The website uses modern web technologies including Firebase for analytics and push notifications, indicating a moderate level of digital maturity. However, the absence of visible privacy and cookie policies, as well as lack of contact information, suggests room for improvement in compliance and user trust. The security posture is basic with HTTPS enabled and service workers used for push notifications, but lacks explicit security headers and incident response information. Overall, the website appears legitimate and functional but would benefit from enhanced transparency and security best practices.

A

Amedia

aid.no

69

aID.no is an identity management solution provided by the Norwegian media conglomerate Amedia. It serves as a centralized login and user profile platform used by over 100 Norwegian newspapers, facilitating seamless authentication and user data management across multiple media outlets. The service targets Norwegian media consumers and subscribers, offering features such as mobile number and password management, and supports modern authentication methods like WebAuthn for enhanced security. Technically, the website employs modern JavaScript frameworks including Svelte and uses ES modules with a Vite build system. It integrates advanced authentication protocols such as WebAuthn, indicating a mature and security-conscious technical infrastructure. The site is mobile-optimized and demonstrates good performance and SEO practices, although some accessibility features could be improved. From a security perspective, the site enforces HTTPS and integrates passwordless login mechanisms, which are strong security indicators. However, explicit security headers are not evident, and there is no visible cookie consent mechanism, which may pose compliance risks. The absence of WHOIS data due to privacy protection limits transparency but is justified given the business nature. No critical vulnerabilities or exposed sensitive data were detected. Overall, aID.no presents a professional and trustworthy identity solution within the Norwegian media sector. Strategic recommendations include implementing explicit security headers, adding cookie consent mechanisms to enhance GDPR compliance, and publishing detailed security and incident response policies to improve transparency and user trust.

J

J.Lindeberg

jlindeberg.com

65

J.Lindeberg is a premium fashion brand specializing in men’s and women’s activewear and sports-inspired apparel, including golf, ski, and tennis collections. The company operates a direct-to-consumer e-commerce platform hosted on Shopify, complemented by physical retail locations. Their website features a membership program offering exclusive benefits, positioning them as a lifestyle brand blending fashion and sport. The technical infrastructure leverages modern e-commerce technologies and integrates multiple marketing and analytics tools such as Trustpilot, Klaviyo, and Microsoft Clarity, indicating a mature digital presence. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, though explicit security policies and vulnerability disclosures are absent. The domain WHOIS data is missing or unregistered, which raises concerns about domain legitimacy despite the professional website presence. Overall, the site is well-designed, performant, and compliant with privacy regulations, but domain registration inconsistencies warrant further verification.

G

Gemeinde Schöftland

schoeftland.ch

59

The website www.schoeftland.ch serves as the official digital presence of the municipality of Schöftland in Switzerland. It provides residents and visitors with comprehensive information about the community, local politics, administration, events, and public services. The site features an online service portal (Online-Schalter), event calendars, news updates, and contact information, positioning itself as a key resource for local governance and citizen engagement. Technically, the website is built on the i-web CMS platform, utilizing modern web technologies such as ES modules, responsive CSS, and asynchronous JavaScript loading. It integrates Matomo analytics for visitor tracking while maintaining GDPR compliance through clear privacy and cookie policies. The site is mobile-optimized and accessible, with a clear navigation structure and professional design. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks explicit security headers and does not publicly disclose a security policy or incident response contacts. No vulnerabilities or suspicious domains were detected, and the WHOIS data aligns well with the municipal identity, indicating high legitimacy. Overall, the website demonstrates a solid balance of usability, compliance, and security suitable for a local government entity. Strategic improvements in security headers and incident response transparency would further enhance its security posture and trustworthiness.

G

Gemeinde Roggwil BE

roggwil.ch

61

The website www.roggwil.ch serves as the official digital presence of the municipality of Roggwil BE in Switzerland. It provides residents and visitors with comprehensive information about local government services, community news, events, and administrative online tools such as the Online-Schalter. The site is well-positioned as a local government portal, focusing on public service delivery and community engagement. Technically, the site employs modern web technologies including a CMS platform (i-web), asynchronous analytics via Matomo, and responsive design ensuring good mobile usability. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Privacy compliance is addressed with a clear privacy policy and cookie consent mechanism. Overall, the site is trustworthy, professional, and well-maintained, serving its target audience effectively.

K

Kulturdirektoratet

kulturdirektoratet.no

11

Kulturdirektoratet is a Norwegian government agency under the Ministry of Culture and Equality, dedicated to promoting arts and culture nationwide. The website serves as an official portal providing information on grant schemes, cultural policies, publications, and guidance for artists and cultural organizations. It maintains a strong market position as a key governmental cultural institution in Norway. Technically, the website is built on modern web technologies including Craft CMS, Alpine.js, and uses privacy-focused Matomo analytics. It employs Cloudflare services inferred from cookies and CDN usage, ensuring fast performance and excellent mobile optimization. The site implements a comprehensive cookie consent mechanism via CookieYes, reflecting good privacy compliance. From a security perspective, the site uses HTTPS with strong SSL configuration and includes essential security headers. No vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response contacts are not published, which could be improved. Overall, the website is professional, trustworthy, and well-maintained, with clear contact information and social media presence. The lack of public WHOIS data is due to privacy protection, which is justified for a government entity. The site poses low risk and aligns well with compliance and security best practices.

Auto Lang - Shop operates a specialized e-commerce platform focused on Mercedes-Benz branded automotive accessories and lifestyle products, targeting primarily German-speaking customers in Switzerland. The website presents a professional and consistent brand image with a clear market niche in premium automotive merchandise. The business model revolves around online retail with fast shipping and a curated product selection. Technically, the site leverages Shopify's robust e-commerce infrastructure, modern JavaScript modules, and integrates multiple marketing and analytics tools such as Facebook Pixel and Klaviyo, indicating a mature digital marketing approach. Security posture is strong with HTTPS enforcement, security headers, and CAPTCHA protections, although explicit privacy and terms of service documentation are missing, which could impact compliance. Overall, the site is trustworthy and well-implemented but would benefit from enhanced transparency and compliance documentation.

The website 'DIETÜR - Digitales Türentool' appears to be a digital door tool or configurator platform based on its title. However, the current accessible content is minimal, showing only a loading spinner and a JavaScript module, indicating the site may be under development or experiencing loading issues. There is no visible business description, contact information, or user-facing content to assess the business model or market position. Technically, the site uses modern JavaScript ES modules but lacks visible SEO, accessibility, or performance optimizations. Security posture is weak due to the absence of HTTPS confirmation, security headers, and privacy policies. Overall, the site presents a low trust profile with limited business credibility and compliance indicators.

The website tiun.store presents itself as an e-commerce platform specializing in digital e-paper content. The business appears to be newly established in 2023, with a domain registration consistent with a startup. The site content is minimal, lacking visible business contact details, privacy policies, or terms of service, which limits user trust and compliance transparency. Technically, the site uses modern JavaScript modules and is hosted on DigitalOcean, a reputable cloud provider, but lacks visible security headers and DNSSEC, which are important for security hardening. There is no evidence of HTTPS enforcement or security best practices from the provided data. Overall, the security posture is weak due to missing policies and technical safeguards. The site is accessible without WAF or blocking mechanisms but is very basic in content and structure, indicating an early development stage or placeholder status.

S

Sedo.com

onteam.de

71

Sedo.com operates as a well-established domain marketplace platform, offering domain sales, transfers, and brokerage services. The website analyzed is a sales landing page for the domain onteam.de, providing clear pricing, purchase options, and contact information. Sedo has a strong market position with over 26 years of experience and a high volume of domain transfers monthly, targeting domain buyers and sellers globally. The business model focuses on facilitating domain transactions with personal assistance and multiple payment methods. Technically, the site uses modern JavaScript modules, Cloudflare DNS, and HTTPS with good mobile optimization and moderate performance. Security posture is solid with HTTPS and domain transfer protection, though DNSSEC is not enabled and security headers are missing. Privacy compliance is basic with a cookie consent mechanism but no visible privacy or terms policies on this page. Overall, the site is professional, trustworthy, and safe for general audiences.

L

LANKELEISI.CO.UK

lankeleisi.co.uk

65

LANKELEISI.CO.UK operates as the official UK online store for Lankeleisi electric bikes, specializing in dual motor e-bikes, all-terrain models, and accessories. The business is relatively young, founded in 2021, and leverages the Shopify platform for e-commerce operations. The website presents a professional and consistent brand image with a focus on quality products backed by a three-year warranty. The target audience includes UK consumers interested in electric bikes and related gear. Technically, the site uses modern web technologies and integrates multiple third-party services for marketing, reviews, and shipping protection, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and headers could be improved. Privacy compliance is basic, with cookie consent implemented but lacking a visible privacy policy. Overall, the site is trustworthy and functional but could enhance transparency and contact accessibility.

S

S-Com

sparkassen-finanzportal.de

63

S-Com is a creative agency embedded within the Sparkassen-Finanzgruppe ecosystem, specializing in brand communication, digitalization, and customer experience solutions. The company positions itself as a trusted partner with over 25 years of experience, serving financial institutions primarily in Germany. The website reflects a mature digital presence built on Adobe Experience Manager, with modern web technologies and a professional design. Security measures such as HTTPS and a strict Content-Security-Policy are implemented, alongside a consent management platform to comply with cookie regulations. However, explicit privacy policies and terms of service are not found in the provided content, and contact information is absent, which could impact user trust and compliance. Overall, the site is well-structured, performant, and trustworthy, serving its target audience effectively.

N

Niedersächsische Lotto-Sport-Stitung

stiftungsbericht.de

53

The website www.stiftungsbericht.de represents the Niedersächsische Lotto-Sport-Stiftung, a non-profit foundation established in 2009 by the Lower Saxony government through the merger of two prior foundations. The site primarily publishes annual foundation reports for public access, targeting a general audience interested in the foundation's activities and impact. The foundation holds a stable market position as a regional non-profit entity in Germany. Technically, the website employs modern web technologies including JavaScript ES modules, CSS, and the htmx framework, hosted on servers associated with kasserver.com. It uses Matomo analytics configured to disable cookies, reflecting a privacy-conscious approach. The site is mobile optimized with good SEO and accessibility basics, though some accessibility features could be improved. Security-wise, HTTPS is enforced with no visible sensitive data exposure, but lacks explicit security headers and formal security policies published on the site. No forms or contact details are present, limiting direct user engagement and incident response readiness. Overall, the site is professional and trustworthy but could enhance privacy and security transparency.

S

Stadt Uster

uster.ch

61

Stadt Uster operates as the official municipal government website for the city of Uster, Switzerland. It provides comprehensive information and services to residents, businesses, and visitors, including online administrative services, event announcements, and local news. The site targets a broad audience within the community and supports civic engagement through accessible contact and feedback channels. The business model is centered on public service delivery and community information dissemination. Technically, the website employs modern web technologies including Matomo for analytics, ES modules for JavaScript, and a Swiss-based CMS platform (i-web). The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Hosting appears to be local to Switzerland, enhancing data sovereignty and compliance. From a security perspective, the site enforces HTTPS, uses secure login forms, and implements privacy and cookie policies with user consent mechanisms. However, it lacks a dedicated security policy or incident response contact information, and no advanced security headers were detected. No vulnerabilities or suspicious content were found, indicating a solid security posture appropriate for a government website. Overall, Stadt Uster's website is a trustworthy, professional, and well-maintained digital presence for the municipality. It effectively balances user experience, privacy compliance, and security, though it could benefit from enhanced transparency around security policies and incident response procedures.

D

Deutscher Olympischer Sportbund (DOSB)

sterne-des-sports.de

56

The website sterne-des-sports.de represents the official platform for the 'Sterne des Sports' awards, a prestigious German recognition program honoring sports clubs for their social engagement. Operated under the Deutscher Olympischer Sportbund (DOSB) and in partnership with Volksbanken Raiffeisenbanken, the site serves as an information hub for participants, partners, and the public. It offers detailed content about the competition, participation guidelines, news updates, and multimedia resources. The target audience includes sports clubs, banking partners, sports associations, and media professionals. The business model is non-profit, focusing on community engagement and corporate social responsibility within the sports sector.