Security Directory

W

Woody Official

woodyworld.com

10

Woody Official operates a professional e-commerce website specializing in sleepwear, nightwear, and homewear for babies, children, and adults. The brand offers a wide range of products categorized by age, size, and collection themes, targeting Dutch-speaking customers primarily. The website demonstrates a mature market position with a consistent brand presence and active social media engagement. Technically, the site uses modern JavaScript frameworks such as Alpine.js, integrates multiple marketing and analytics tools including TikTok Pixel, Facebook Pixel, Google Tag Manager, and Klaviyo, and is hosted behind Cloudflare DNS services. The site is mobile-optimized and provides a good user experience with clear navigation and structured content. Security-wise, the site enforces HTTPS and uses clientTransferProhibited domain status, but lacks DNSSEC and explicit security headers. Privacy compliance is basic with a cookie consent mechanism but no visible privacy or terms of service pages in the provided content. Overall, the website is functional and professional but could improve transparency and security posture.

S

S.M.A.K.

smak.be

11

S.M.A.K. is a well-established contemporary art museum located in Ghent, Belgium, with a domain age dating back to 1999, reflecting its long-standing presence in the cultural sector. The website effectively showcases exhibitions, collections, events, and membership programs, targeting a diverse audience of art enthusiasts and the general public. The business model is non-profit and focused on cultural enrichment and accessibility. Technically, the site employs modern JavaScript frameworks and integrates multiple analytics and marketing tools, supported by a reputable hosting provider. The site is mobile-optimized, fast, and SEO-friendly, providing an excellent user experience. Security posture is strong with HTTPS and consent management, though there is room for improvement in publishing explicit security policies and incident response details. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, making it a reliable digital presence for the museum.

D

Dewaele Vastgoeddiensten

dewaele.com

9

Dewaele Vastgoeddiensten is a prominent Belgian real estate company specializing in residential, luxury, and commercial properties. The company offers a comprehensive range of services including buying, selling, renting, investing, property management, and advisory services. The website is multilingual, targeting Dutch, French, and English-speaking audiences, reflecting a broad market reach within Belgium. The presence of multiple subsidiary brands under the Dewaele umbrella indicates a diversified and well-established market position. Technically, the website employs modern web technologies such as JavaScript frameworks (likely Alpine.js), Google Tag Manager for analytics, and Imgix for image delivery. The site is mobile-optimized and features a professional design with clear navigation, enhancing user experience. However, some technical improvements could be made, such as adding explicit security headers and improving accessibility features. From a security perspective, the website uses HTTPS and implements cookie consent mechanisms, indicating a baseline security posture and some privacy compliance. However, the absence of a visible privacy policy, terms of service, and WHOIS data raises concerns about transparency and domain legitimacy. No critical vulnerabilities were detected in the provided content, but the lack of security headers and incident response information suggests room for improvement. Overall, the website presents a professional and trustworthy front for a large real estate business, but the missing WHOIS data and privacy documentation reduce the confidence level. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and verifying domain registration details to improve trust and compliance.

F

Flamant

flamant.com

39

Flamant is a well-established retail and e-commerce business specializing in luxury home furniture, décor, textiles, paint, and gifts. With a history spanning approximately 45 years, the company targets consumers seeking high-quality and elegant home living solutions. The website reflects a professional and consistent brand image, supporting multiple languages and offering a rich catalog of products and inspiration content. Technically, the site employs modern JavaScript frameworks, tracking tools, and content delivery networks, indicating a mature digital infrastructure. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit privacy policies are missing. The absence of WHOIS data for the domain raises concerns about domain registration transparency, which slightly impacts trustworthiness. Overall, Flamant presents a credible and professional online presence with room for improvement in privacy and security disclosures.

RainPharma is a small Finnish company specializing in natural health and wellness products, including supplements, skin care, and aromatherapy. The website is built on the Shopify platform and employs modern JavaScript libraries and marketing tools such as Visual Website Optimizer and Cookiebot for consent management. The domain is well-established since 2009, consistent with the company's founding year, and is registered with Cloudflare, indicating stable hosting and DNS management. Security posture is adequate with HTTPS enabled and clientTransferProhibited domain status, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Contact information is not readily found on the analyzed page, which may impact user trust. Overall, the website presents a professional and consistent brand image focused on natural wellness products.

S

Small Luxury Hotels of the World

myslh.com

58

Small Luxury Hotels of the World operates the mySLH portal as a member login platform for its luxury hospitality services. The website serves as an access point for registered users to manage bookings and membership details. The domain is well-established since 2008, indicating a mature business presence in the luxury hotel sector. The technical infrastructure includes Umbraco CMS and modern JavaScript libraries, with hosting DNS managed via Cloudflare. The site is moderately optimized for mobile and performance but lacks comprehensive SEO and accessibility features. From a security perspective, the website employs basic best practices such as clientTransferProhibited domain status and anti-forgery tokens in forms. However, it lacks DNSSEC, explicit security headers, and published privacy or cookie policies, which are critical for compliance and trust. Google Analytics and Tag Manager are used for user tracking, but no cookie consent mechanism is evident, indicating potential GDPR compliance gaps. Overall, the website is functional and consistent with the brand but requires improvements in privacy compliance, security hardening, and transparency to enhance user trust and regulatory adherence. No adult or explicit content is present, making it safe for general audiences.

S

Stad Leuven

leuven.be

68

Stad Leuven operates an official municipal government website providing comprehensive information and services to residents and visitors of Leuven, Belgium. The site offers key services such as event agendas, job vacancies, parking information, appointment scheduling, and problem reporting. It maintains a strong market position as the authoritative source for local government information. The website is well-branded, professionally designed, and supports multiple languages (Dutch and English). Technically, it is built on Drupal CMS with modern web technologies including Bootstrap and lazy loading for images. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and policies could be improved. No vulnerabilities or suspicious content were detected. Overall, the website demonstrates high trustworthiness and professionalism.

H

HBF Textiles

hbftextiles.com

50

HBF Textiles is a professional textile manufacturing company specializing in woven upholstery, wrapped panels, wallcoverings, coated fabrics, leather, and drapery products. The company targets designers, furniture manufacturers, and commercial and residential clients, positioning itself as a medium-sized player in the manufacturing sector. The website is built on a modern Drupal 10 CMS with e-commerce capabilities, integrating advanced technologies such as Google Tag Manager and Adobe DTM for analytics and marketing. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature approach to data protection. Security posture is strong with HTTPS enforcement and security headers, though the absence of a published security policy and incident response information suggests room for improvement. The lack of WHOIS registration data is a notable concern, potentially indicating privacy protection or domain registration issues, which should be further investigated. Overall, the website is professional, well-structured, and trustworthy, with a good balance of business and technical maturity.

N

Nettavisen

nettavisen.no

66

Nettavisen is a prominent Norwegian online news media company providing continuous news coverage across various sectors including economy, sports, and celebrity news. It operates under the parent company Amedia and targets a broad general audience in Norway. The website employs a subscription and advertising-based business model, offering both free and premium content. Technically, Nettavisen utilizes modern web technologies such as service workers, ES modules, and advanced ad serving frameworks to deliver a performant and responsive user experience. The site is well-structured with clear navigation and mobile optimization. Security-wise, the site enforces HTTPS and uses security headers, but lacks publicly visible privacy and cookie policies, which are critical for compliance and user trust. No WHOIS data is available due to Norwegian domain privacy policies, but the domain appears legitimate and consistent with the business profile. Overall, Nettavisen demonstrates a mature digital presence with room for improvement in privacy transparency and security disclosures.

R

RBA Grupo

revistainteriores.es

62

Revista Interiores is a Spanish online magazine specializing in interior design, decoration, architecture, and lifestyle content. It operates under the RBA Grupo, a recognized Spanish publishing group. The website offers rich editorial content, subscription services, and advertising opportunities, targeting a general audience interested in home and design trends. Technically, the site uses a modern JavaScript stack with consent management and multiple ad networks integrated, ensuring monetization and compliance with privacy regulations. Security posture is solid with HTTPS and security headers, though some improvements in incident response transparency are recommended. Overall, the site is professional, trustworthy, and compliant with GDPR, but WHOIS data is unavailable due to query restrictions, limiting domain legitimacy assessment.

I

Interargem GmbH

interargem.de

50

Interargem GmbH operates as a regional energy company specializing in environmentally responsible waste-to-energy solutions through its modern waste incineration plants in Bielefeld and Hameln, Germany. The company focuses on converting regional waste into electricity and district heating, contributing significantly to environmental and climate protection efforts. Their market position is that of a trusted regional leader providing essential waste management and energy services to local businesses, households, and public institutions. Technically, the website is built on a WordPress CMS platform enhanced with Yoast SEO for search optimization and Consentmanager for GDPR-compliant cookie management. The site demonstrates good mobile optimization and a professional design, although some accessibility features could be improved. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and employs a cookie consent mechanism, but lacks advanced security headers and published security policies or incident response contacts. No vulnerabilities or suspicious content were found, indicating a generally sound security posture, though improvements are recommended to enhance protection and transparency. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its target audience effectively. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility to further strengthen the company's digital presence and security posture.

B

BITel Gesellschaft für Telekommunikation mbH

bitel.de

51

BITel Gesellschaft für Telekommunikation mbH is a regional telecommunications provider operating primarily in Germany, focusing on delivering fiber optic internet, telephone, and TV services to private customers in areas such as Bielefeld and Gütersloh. The company is backed by parent entities Stadtwerke Bielefeld and Stadtwerke Gütersloh, indicating strong regional infrastructure support. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive service offerings tailored to local customers. Technically, the site is built on TYPO3 CMS and integrates modern marketing and analytics tools while maintaining GDPR compliance through explicit privacy and cookie policies. Security posture is solid with HTTPS enforcement and consent management, though some security headers could be more explicitly declared. Overall, the website and domain registration data align well, supporting the legitimacy and trustworthiness of the business.

The website cgmlife.com currently serves no accessible content beyond an empty HTML skeleton, indicating it is either under construction, blocked, or improperly configured. The domain is registered since 2010 with a reputable registrar and is not privacy protected, suggesting a legitimate registration. However, the lack of any visible business information, metadata, or content severely limits the ability to assess the company's operations, market position, or services. Technically, the site lacks any detectable technology stack, security headers, or SEO elements, reflecting a very low digital maturity level. Security posture is minimal with no HTTPS or security best practices observed. Overall, the site presents a high risk due to lack of transparency and content, and it is recommended to verify the business legitimacy through other channels before engagement.

B

BAQUE-Internetservice

baque-internetservice.de

45

BAQUE-Internetservice is a small, established web agency based in Kaiserslautern, Germany, with over 20 years of experience in professional web design, webshops, SEO, and website maintenance. The company targets local businesses and organizations seeking effective and user-friendly websites optimized for search engines. Their business model focuses on providing tailored web solutions using popular CMS and shop systems such as WordPress, Typo3, Joomla, and Shopware. The website reflects a consistent brand image and professional content that supports their market position as a reliable local web agency. Technically, the website is built on WordPress with modern plugins including Yoast SEO and Complianz GDPR for compliance. It uses Google Tag Manager for analytics and tracking. Hosting is provided by kasserver.com, indicated by the nameservers. The site is mobile-optimized and performs moderately well, with good SEO practices in place. However, some security headers are missing, which could be improved to enhance security posture. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected. The absence of a dedicated security policy or incident response contact is noted but not uncommon for small businesses. Overall, the security posture is solid but could benefit from additional headers and explicit security documentation. The domain WHOIS data is consistent with the website's claims, showing no privacy protection and a domain age that matches the company's stated history. Contact information is clear and verified, including email, phone, and physical address. The site contains no adult or questionable content, making it safe for general audiences. The AI overall score reflects a well-maintained, professional, and trustworthy website with minor areas for improvement.

R

routes.com

routes.com

54

Routes.com is a long-established content curation platform that organizes information into structured 'routes' across diverse lifestyle and interest categories. It targets a general audience seeking curated educational content and offers contributors opportunities to submit and monetize content. The website is built on custom technology with a moderate technical infrastructure including Google Analytics and RD Navbar framework. Security posture is moderate with HTTPS implied but lacks DNSSEC and explicit security headers. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Contact is available only via forms, with no direct emails or phone numbers listed. Overall, the site is trustworthy and professional but could improve security and privacy practices.

V

VNR Verlag für die Deutsche Wirtschaft AG

vnrgroup.com

47

VNR Group is a family-run German publishing and media company offering publishing, consulting, SaaS, and full-service platform solutions aimed at helping individuals and professionals succeed. The website is well-structured, professionally designed, and multilingual, targeting German and English-speaking audiences. Technically, it is built on WordPress with the Divi theme and uses modern plugins and services such as Google Tag Manager and Friendly Captcha. Security posture is adequate with HTTPS and captcha protections, but lacks some security headers and explicit incident response information. Privacy compliance is strong with comprehensive cookie consent and GDPR-aligned privacy policies. However, WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency. Overall, the site is trustworthy and professional but could improve security and transparency aspects.

C

Cottages.com

cottages.com

70

Cottages.com is a well-established UK-based online platform specializing in self-catering holiday cottage bookings. With over 45 years of experience and a portfolio exceeding 18,000 properties, it serves a broad audience including families, couples, and pet owners. The company emphasizes customer satisfaction, demonstrated by its adherence to ABTA's Code of Conduct and excellent Trustpilot ratings. Technically, the website leverages modern frameworks such as Next.js and integrates advanced analytics and consent management tools, ensuring a robust digital presence. Security measures include HTTPS enforcement, reCAPTCHA Enterprise, and comprehensive privacy controls, although a dedicated security policy page is absent. Overall, cottages.com presents a professional, trustworthy, and user-friendly platform with strong market positioning in the UK holiday accommodation sector.

U

uponline

uponline.md

55

The website uponline.md serves as a digital platform primarily for clients and partners affiliated with Up Moldova, providing secure login access for companies and card users. It supports user account management and promotes the Up Mobil mobile application available on iOS and Android platforms. The site targets Moldovan users and operates within the technology sector, focusing on service delivery to its client base. The business model revolves around facilitating digital access and management for affiliated users, positioning itself as a regional service platform in Moldova. Technically, the website employs modern frontend technologies such as Vue.js and Font Awesome for UI elements, with additional security measures like Cloudflare Turnstile captcha to mitigate automated abuse. Hosting leverages Azure CDN infrastructure, contributing to moderate performance and good mobile optimization. However, the site lacks visible advanced SEO and accessibility features, and no CMS or backend technologies are explicitly identified. From a security perspective, the platform demonstrates basic protective measures including HTTPS and captcha integration. Nonetheless, it lacks published security policies, incident response contacts, and security headers, which are critical for enhancing trust and compliance. The absence of privacy and terms of service documents further limits its privacy posture. No vulnerabilities or malicious content were detected in the analyzed content. Overall, the website presents a functional and professional interface for its intended audience but would benefit from enhanced transparency in privacy and security policies, improved accessibility, and stronger security header implementation to elevate its trustworthiness and compliance standing.

The website cadhoc.ma is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block, which prevents access to any meaningful content or business information. The domain is registered since 2008 with GENIOUS COMMUNICATIONS and uses Cloudflare for DNS and security services. Due to the WAF block, no privacy, cookie, or terms of service policies are visible, nor any contact or business details. This limits the ability to assess the company's market position, services, or technical infrastructure beyond the use of Cloudflare. From a technical perspective, the site relies on Cloudflare's security mechanisms, but no further technology stack or CMS information is available. The lack of accessible content and metadata prevents evaluation of SEO, accessibility, or performance. Security posture cannot be fully assessed due to missing headers and SSL details. The security posture is currently unknown but the presence of a WAF block indicates active protection against attacks. However, the inability to access the site content severely limits trust and business credibility assessments. No vulnerabilities or compliance gaps can be identified from the blocked page. Overall, the site presents a high risk for users and analysts due to inaccessibility. Strategic recommendations include resolving the WAF blocking issues to allow legitimate access, publishing clear privacy and cookie policies, and providing transparent business and contact information to improve trust and compliance.

The website www.1001saboresrm.es serves as an official regional tourism and gastronomy portal for the Region of Murcia, Spain. It promotes local culinary experiences, gastronomic events, and restaurants bearing the 1001 Sabores seal. The platform targets tourists, food enthusiasts, and local residents interested in regional gastronomy, positioning itself as a key government-backed resource for culinary tourism. The business model is primarily promotional, supported by regional government entities, aiming to boost tourism and local gastronomy awareness. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, Slider Revolution, and Google Analytics for user tracking. The site is mobile-optimized with good navigation and content structure, though accessibility features are basic. Performance is moderate, with no major technical issues detected. Privacy policies and cookie policies are present, but the cookie consent mechanism is lacking, which could be improved for GDPR compliance. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries visibly. However, security headers are not explicitly detected, and there is no visible vulnerability disclosure or incident response contact information. The WHOIS data for the domain is unavailable due to query restrictions, limiting the ability to fully verify domain legitimacy. Overall, the site appears trustworthy and professional, with a low risk profile but room for security and privacy enhancements. Strategically, the site should focus on enhancing security headers, implementing explicit cookie consent, and providing clear contact channels for security incidents. These improvements will strengthen compliance and user trust, supporting the site's role as a regional tourism authority.

E

EKO-PUNKT

eko-punkt.de

65

EKO-PUNKT is a German-based competence center specializing in sustainable packaging management, including packaging licensing, circular contracting, ecodesign, and recycled material delivery. The company operates under the REMONDIS Group umbrella, a well-established waste management conglomerate. Their website reflects a professional and business-focused approach, targeting companies needing compliance and sustainability solutions in packaging. The digital infrastructure is built on TYPO3 CMS, integrating modern tools like Cookiebot for consent management and Google Tag Manager for analytics. The site is well-structured, mobile-optimized, and provides clear navigation, although explicit contact details like emails and phone numbers are not directly visible, relying instead on contact forms.

R

Rhenus

aktenvernichtung.de

72

Rhenus operates a professional German-language website focused on secure destruction and disposal services for documents, data carriers, and hard drives. The company positions itself as a leading provider in Germany with over 40 years of experience and multiple security locations. The website is built on TYPO3 CMS and integrates modern technologies including Google Tag Manager and Usercentrics for consent management. The site is well-structured, mobile-optimized, and SEO-friendly, targeting both business and private customers. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and published policies are lacking. Contact is primarily via a contact form with no direct emails or phone numbers visible. Overall, the domain and website appear legitimate and consistent with the Rhenus Group brand.

R

REMONDIS SE & Co. KG

remondis-whistleblower-policy.de

58

REMONDIS SE & Co. KG operates a dedicated whistleblower policy website providing downloadable policy documents in multiple languages, demonstrating a commitment to corporate compliance and governance. The website targets employees and stakeholders seeking whistleblower information and is part of a large enterprise likely operating in the waste management and recycling sector. The technical infrastructure is based on TYPO3 CMS, indicating a professional and scalable content management approach. The website is moderately optimized for performance and mobile use, with basic accessibility and SEO features. Security posture is adequate with HTTPS usage but lacks visible security headers and explicit privacy or cookie policies. No contact or incident response information is provided, which limits user engagement and compliance transparency. Overall, the site is trustworthy and professionally maintained but could improve in privacy compliance and security best practices.

C

Computer-L.A.N. GmbH

lansoftware.de

51

Computer-L.A.N. GmbH operates LAN Software, a specialized software house based in Fulda, Germany, focusing on software solutions for education institutions, seminar houses, authorities, and group accommodations. Their offerings include cloud-based seminar management (LANcloud), house and academy management (AkademieManager), group house management (HausManager), and ERP and HCM solutions via Sage partnerships. The company positions itself as an experienced, regional provider with a strong focus on tailored business software and customer support including workshops and training. Technically, the website is built on WordPress with modern plugins and frameworks, including Yoast SEO, Bootstrap, and Borlabs Cookie for privacy compliance. The site is well-optimized for SEO and mobile devices, with moderate performance and good accessibility. Security posture is solid with HTTPS, cookie consent, and no visible vulnerabilities, though some HTTP security headers could be improved. Privacy compliance is robust with clear policies and consent mechanisms. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and trustworthiness.

RoFa Sport is a specialized bicycle retailer and service provider based in Graz, Austria, established in 2012. The company focuses on personalized bike sales, bike fitting, leasing options, and workshop services including repairs and setup. Their market position is that of a trusted local bike shop with a strong emphasis on customer service and quality products. The website reflects a professional and consistent brand image with clear contact information and active social media engagement. Technically, the site uses modern frontend technologies such as Alpine.js and Tailwind CSS, and integrates privacy-focused analytics and third-party widgets for social proof and customer engagement. Security posture is adequate with HTTPS enforced and secure form handling, but lacks some security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and well-maintained, suitable for its business purpose.

T

TV-opas - Finland - lauantai - TVListings.eu

tvlistings.eu

54

TVListings.eu is a specialized media website providing TV program listings primarily for Finland and other European countries. The site offers multi-language support and detailed channel guides, targeting general audiences interested in TV schedules. The business model appears to be advertising-supported, leveraging Google Adsense and other ad networks. The website is hosted by GoDaddy.com, LLC and uses modern frontend technologies such as Bootstrap 5, jQuery, and integrates Google Analytics and Facebook SDK for tracking and analytics. The site is mobile optimized and provides a good user experience with clear navigation and structured content. Security posture is adequate with HTTPS enforced, but lacks important security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies and no consent mechanisms. Contact information is limited to a contact form without direct emails or phone numbers. Overall, the site is trustworthy and safe for general audiences but would benefit from enhanced privacy and security practices.

Z

Zuckerbusch Bakery

zuckerbusch.ch

52

Zuckerbusch Bakery is a small Swiss bakery specializing in cupcakes and other sweet treats, offering direct ordering and popup bakery events. The website is professionally designed using WordPress and Elementor, providing a good user experience with clear navigation and mobile optimization. The business targets general consumers interested in bakery products within Switzerland. Technically, the site uses modern web technologies and includes Google Analytics for tracking. Security posture is adequate with HTTPS enforced and cookie consent implemented, though additional security headers and policies could enhance protection. The domain registration is consistent with the business location and nature, indicating legitimacy. Overall, the website is trustworthy and well-maintained, suitable for a small local retail bakery.

P

PKS Kaffeemaschinen AG

pauli.ch

58

PKS Kaffeemaschinen AG is a specialized Swiss company with over 40 years of experience in selling and servicing professional coffee machines for the hospitality and commercial sectors. Their website reflects a focused business model targeting restaurants, bars, hotels, offices, and care homes, offering high-quality coffee equipment and tailored coffee concepts. The company positions itself as a trusted partner with strong industry relationships, notably with Thermoplan, a leading coffee machine manufacturer. Technically, the website is built on a modern platform (Duda), uses contemporary JavaScript libraries, and integrates analytics tools such as Google Analytics and Snowplow. The site is mobile-optimized and performs moderately well. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers and policies could be improved. Privacy compliance is basic with a cookie consent mechanism and a privacy policy page, but lacks detailed GDPR compliance indicators and terms of service. Overall, the website is professional, trustworthy, and well-aligned with the company's business objectives.

K

KnowS

knows.ch

52

KnowS is a Swiss-based online platform that connects individuals seeking support with verified local service providers, enabling users to find help or earn money flexibly and securely. The platform emphasizes community trust through verified profiles, user reviews, and insurance coverage via Zurich, positioning itself as a reliable marketplace for various service categories. The website is built on TYPO3 CMS and integrates modern technologies including Google Tag Manager, LiveChat, and Stripe for payments, reflecting a mature digital infrastructure. Security practices include HTTPS enforcement and security headers, though there is room for improvement in publishing formal security policies and incident response information. The absence of WHOIS registration data raises concerns about domain legitimacy, but the professional presentation and active user engagement mitigate some risk. Overall, KnowS demonstrates a solid business and technical foundation with moderate privacy compliance and good security posture.

H

Hotel Château Gütsch

chateau-guetsch.ch

64

Hotel Château Gütsch is a boutique hotel located in Luzern, Switzerland, offering scenic views over the city and Lake Lucerne. The website presents a professional and well-structured digital presence built on WordPress, integrating booking functionalities and analytics tools. The business targets travelers seeking a unique and tranquil hotel experience. Technically, the site uses modern web technologies and plugins to enhance user experience and SEO. Security measures include HTTPS and cookie consent mechanisms, though explicit privacy and terms policies are not found in the provided content. Overall, the site demonstrates a solid security posture with room for improvement in privacy transparency and contact information availability.

S

Stiftung Solvita

solvita.ch

51

Stiftung Solvita is a well-established Swiss non-profit foundation dedicated to serving people with disabilities for over 50 years. The organization offers a broad range of services including production and logistics, residential care, education, employment, and professional integration. Their market position is strong within their regional and sectoral niche, supported by a clear mission and comprehensive service offerings. The website reflects a professional and consistent brand image with clear navigation and relevant content targeted at beneficiaries, partners, and the community. Technically, the website is built on WordPress using modern plugins such as Elementor for design, WooCommerce for e-commerce capabilities, and Yoast SEO for search optimization. Google Analytics is used for visitor tracking, and the site is mobile-optimized with good performance. Accessibility is basic but present. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though some security headers could be improved. No critical security or privacy compliance issues were detected. The site includes a privacy policy and cookie consent mechanism compliant with GDPR. Contact information is clearly provided, enhancing business credibility. No adult or unsafe content is present, making the site safe for general audiences. Overall, Stiftung Solvita's website demonstrates a mature digital presence aligned with its mission and audience, with room for incremental security and privacy enhancements.

I

International Association of Insurance Supervisors

iais.org

72

The International Association of Insurance Supervisors (IAIS) is a globally recognized voluntary membership organization comprising insurance supervisors and regulators from over 200 jurisdictions, representing 97% of the world's insurance premiums. Established in 1994, IAIS serves as the global standard-setting body for insurance supervision, developing principles, standards, and guidance to promote fair, safe, and stable insurance markets worldwide. The organization supports its members through capacity building, implementation assessments, and financial stability monitoring, positioning itself as a key player in global financial stability. Technically, the IAIS website is built on a modern WordPress CMS platform utilizing Elementor for page building, Revolution Slider for dynamic content display, and integrates Google reCAPTCHA for form security. The site employs Matomo analytics for user tracking and demonstrates good mobile optimization, accessibility, and SEO practices. Performance is moderate, with a professional design and clear navigation enhancing user experience. From a security perspective, the website enforces HTTPS and uses reCAPTCHA to protect forms, but lacks explicit security headers and dedicated security or incident response pages. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a strong commitment to user privacy. Overall, the IAIS website presents a professional, trustworthy, and content-rich platform suitable for its global supervisory audience. The main limitation is the absence of WHOIS data, which restricts domain registration trust analysis. However, the organization's global reputation and website quality mitigate this concern. Strategic recommendations include enhancing security headers, publishing explicit security policies, and verifying WHOIS data for improved trust.

L

laSuite fitnessclub AG

lasuite-fit.ch

61

laSuite fitnessclub AG operates a fitness club located in Luzern, Switzerland, offering 24/7 access to members along with professional personal training, physiotherapy services through a partnership with MoveSphere, and a retail shop for health and fitness products. The company positions itself as a local premium fitness provider with a focus on holistic training including strength, endurance, coordination, and nutrition support. The website is built on TYPO3 CMS and integrates modern web technologies such as HTML5 video and Google Tag Manager for analytics. The site is well-designed, mobile-optimized, and provides clear navigation and contact information, enhancing user experience and trust. Security posture is good with HTTPS enforced, though improvements are recommended in security headers and cookie consent mechanisms to enhance compliance and protection. WHOIS data confirms the legitimacy of the domain registration consistent with the business location and identity. Overall, the website reflects a professional and credible fitness business with room for technical and compliance enhancements.

G

Gstaad Saanenland Tourismus

gstaad.ch

55

The website www.gstaad.ch/sommer serves as the official tourism portal for the Gstaad holiday region in Switzerland, focusing on promoting summer activities, events, and travel planning. It targets tourists and visitors seeking comprehensive information about the region's offerings, including hiking, biking, cultural events, and accommodation options. The site is positioned as a regional destination marketing organization with a medium-sized operational scope. Technically, the website is built on TYPO3 CMS and leverages modern JavaScript modules, intersection observers, and font loading APIs to deliver a responsive and accessible user experience. It integrates analytics tools such as Matomo and Google Tag Manager with GDPR-compliant mechanisms and includes a chatbot for user engagement. Performance and mobile optimization are good, with clear navigation and SEO-friendly metadata. From a security perspective, the site enforces HTTPS and uses tracking scripts responsibly with consent mechanisms. However, it lacks explicit security headers and publicly available security policies or incident response contacts. No vulnerabilities or suspicious content were detected, and the domain registration data aligns well with the business purpose, indicating legitimacy. Overall, the website presents a professional and trustworthy tourism platform with room for improvement in privacy transparency and security documentation. Strategic recommendations include publishing comprehensive privacy and cookie policies, adding terms of service, and providing clear contact channels for security incidents to enhance user trust and compliance.

황

황동산업(주)

themetal.kr

66

THE METAL (황동몰) is a South Korean e-commerce business specializing in metal products and DIY hardware, including handles, locks, decorative items, and custom manufacturing services. The company operates a well-established online retail platform using the Cafe24 e-commerce system, targeting DIY enthusiasts and professional customers in the metal hardware sector. The website is professionally designed with consistent branding and a clear focus on its niche market. The domain registration data aligns well with the business identity, showing a legitimate and stable presence since 2013. Technically, the website leverages modern JavaScript libraries and integrates Google Analytics and Tag Manager for marketing and analytics purposes. Hosting and platform services are provided by Cafe24, a reputable Korean e-commerce provider. While the site is functional and moderately optimized for performance, mobile optimization and accessibility features are basic and could be improved. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and DNSSEC implementation. From a security and compliance perspective, the site does not prominently display privacy, cookie, or terms of service policies, which may impact GDPR and other regulatory compliance. No incident response or vulnerability disclosure information is found. The site content is safe for general audiences with no adult or explicit material. Overall, the business appears credible and trustworthy, but could enhance its security and privacy practices to improve compliance and user trust.

M

Missionswerk MSD

msd-online.ch

52

Missionswerk MSD is a Swiss-based non-profit organization dedicated to mission work and charitable activities. The website serves as an informational platform to present their mission, projects, and ways to support their cause. The organization targets individuals interested in religious outreach and charitable giving. The business model is donation-based, focusing on small to medium scale operations within the non-profit sector. Technically, the website is built on WordPress using the Divi theme, leveraging common web technologies such as jQuery and PHP. The site is multilingual, supporting German, French, and English, enhancing accessibility for a broader audience. Performance and mobile optimization are moderate to good, though accessibility features are basic. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks advanced security headers and formal security policies. No vulnerability disclosure or incident response information is provided, indicating room for improvement in security maturity. Privacy compliance is weak, with no visible privacy or cookie policies and no consent mechanisms. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security policies, and explicit contact information to improve trust and regulatory adherence.

A

ACTS

andacts.ch

51

ACTS is a Swiss-based educational organization specializing in leadership and vocation training with a Christian focus. Their website offers detailed information about their training modules, intensive programs, cultural training, and community living options. The organization targets individuals seeking to deepen their calling and leadership skills through biblical study and practical training. The website is professionally designed, mobile-optimized, and integrates modern WordPress technologies and plugins, including WPBakery, Slider Revolution, and Everest Forms. Social media presence on Facebook, Instagram, and YouTube supports their outreach efforts. Technically, the site uses HTTPS with good SSL configuration and integrates Google Analytics and Tag Manager with consent mode configured to deny personalization and ad storage in the EU/CH region, reflecting some privacy awareness. However, the absence of explicit privacy and cookie policies is a compliance gap. Security headers are not detected, and no published security or incident response policies exist, indicating room for improvement in security posture. Overall, the website is trustworthy and credible, with consistent WHOIS data supporting legitimacy. The site is safe for general audiences, with no adult or explicit content. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, and establishing incident response documentation to enhance compliance and security maturity.

I

ISTL

istl.ch

58

ISTL is an educational institution specializing in dual theological studies offering Bachelor and Master degree programs as well as Bible school education. The website targets individuals interested in theological education primarily in Switzerland and Germany. The institution maintains a professional online presence with comprehensive privacy and cookie policies, and active social media engagement. Technically, the website is built on WordPress using the Astra theme and integrates modern analytics and marketing tools such as Google Analytics 4, Google Ads, and Meta Pixel, all managed with user consent via a cookie banner. Security posture is good with HTTPS enforced and no obvious vulnerabilities detected, though some security headers could be improved. The lack of WHOIS data for the domain introduces uncertainty about domain registration legitimacy, which should be further investigated. Overall, the website is professional, user-friendly, and compliant with GDPR requirements.

B

BDVT

bdvt.de

47

BDVT is a professional German association serving trainers, consultants, and coaches by providing membership services, networking opportunities, education, certification, and awards. The website is built on Weblication® CMS and hosted on German servers, reflecting a moderate level of digital maturity with good design and mobile optimization. Security posture is adequate with HTTPS and consent-based tracking but lacks published privacy policies and security headers. Overall, the site is trustworthy and professional but could improve compliance and security transparency.

R

Raxalpenhof

raxalpenhof.com

52

Raxalpenhof is a family-run hospitality business located in Reichenau an der Rax, Austria, offering lodging, wellness, culinary experiences, and seminar facilities. The website is professionally designed, content-rich, and targets tourists, seminar guests, and families seeking a nature-oriented vacation. The technical infrastructure includes modern analytics and tracking tools, with good mobile optimization and accessibility. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements in security headers and explicit cookie consent are recommended. The absence of WHOIS data slightly reduces trust but the overall business credibility remains high due to clear contact information, certifications, and partner affiliations.

C

Café Konditorei Reichenau

cafe-konditorei-reichenau.at

53

Café Konditorei Reichenau is a small hospitality business located in Reichenau an der Rax, Austria, specializing in pastries, cakes, breakfast, and savory snacks. The website reflects a local café with a historical reputation and seasonal event focus, targeting tourists, hikers, and local visitors. The business model centers on retail and on-site dining with options for pre-ordering specialty cakes. Technically, the website uses standard web technologies with moderate performance and good mobile optimization but lacks advanced frameworks or CMS identification. Security posture is adequate with HTTPS enforced but lacks security headers and explicit security policies. Privacy compliance is good with a visible cookie consent mechanism and privacy policy. Contact information is clear and professional, enhancing business credibility. Overall, the website is safe, professional, and trustworthy with no adult or questionable content detected.

B

Bienen Meier AG

bienen-meier.ch

55

Bienen Meier AG is a specialized Swiss retailer focused on beekeeping supplies, offering a comprehensive online shop with a wide range of products including protective clothing, honey containers, and beekeeping tools. The company targets beekeepers and honey producers, positioning itself as a trusted provider with Swiss-made products and customer engagement initiatives such as surveys and consultation for new beekeepers. Technically, the website is built on the PepperShop e-commerce platform, leveraging modern libraries like jQuery and Bootstrap, and integrates Google Analytics for user tracking. The site is mobile-optimized with good navigation and content relevance. Security-wise, the site enforces HTTPS and uses client-side validation but lacks some advanced security headers and a formal vulnerability disclosure policy. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional and trustworthy but could improve in security and privacy transparency.

A

APINATURA

apinatura.ch

53

APINATURA is a Swiss-based small business specializing in the production and sale of bee products and cosmetics derived from bee products, with a strong emphasis on apitherapy. The company leverages a long family tradition in beekeeping and combines traditional knowledge with modern scientific methods. Their market position is niche and regional, targeting health-conscious consumers interested in natural and bee-based products. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive product and company information. Technically, the site uses the indual CMS platform with common libraries such as jQuery and Fancybox, and integrates Google Analytics for user tracking. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit security policy or incident response contacts are provided. Overall, the site is trustworthy, compliant with GDPR, and presents a safe user experience.

U

UnderTheDoormat Group

underthedoormatgroup.com

66

UnderTheDoormat Group is a UK-based hospitality and real estate company focused on providing comprehensive accommodation services through multiple brands. Their offerings span premium property management, SaaS platforms for property managers, corporate sales, and short-term rentals. The website is professionally designed using Squarespace, with good mobile optimization and SEO practices. Security posture is strong with HTTPS and HSTS enabled, though explicit privacy and security policies are missing. The absence of WHOIS registration data raises concerns about domain legitimacy, though the business branding and social media presence support credibility. Contact information is limited to a contact form without direct emails or phone numbers. Overall, the company appears established in the real estate and hospitality sectors but should improve transparency and compliance documentation.

swissdatabox.com is a Swiss-based cloud storage and backup service provider operated by alixon gmbh, a small IT company located in Aarau, Switzerland. The company offers secure cloud solutions emphasizing Swiss data sovereignty, automatic synchronization across devices, and team collaboration features. Their business model is subscription-based with tiered pricing plans targeting individuals and teams seeking reliable and secure cloud storage. The website content is professional and well-structured, providing clear information about services, pricing, and contact details. Technically, the website leverages the Nextcloud open source platform and uses ExtJS for frontend interactions. While the site is accessible and functional, technical implementation shows room for improvement in performance optimization, mobile responsiveness, and accessibility. The presence of Lead Forensics tracking indicates moderate user tracking without visible privacy compliance mechanisms such as cookie consent banners or privacy policies. From a security perspective, the website benefits from Swiss data center hosting with high physical security standards and encrypted data transmission. However, the absence of HTTP security headers, lack of visible security policies, and missing WHOIS domain registration data raise concerns about the overall security posture and domain legitimacy. The login form lacks advanced protections such as CSRF tokens or CAPTCHA, which could be improved to enhance security. Overall, swissdatabox.com presents a credible business offering with good content quality and moderate technical maturity. The main risks stem from incomplete domain registration transparency and insufficient published privacy and security policies. Strategic improvements in these areas would enhance trust and compliance.

The website alixon-web.ch presents a small technology business offering a modular web management platform primarily targeting organizations and businesses needing address management, event scheduling, website content editing, and communication tools. The platform uses a proprietary CMS with Ext JS for UI components and provides multiple portal options for different user groups. The site is primarily in German and hosted on subdomains related to alixon-web. Technically, the site uses HTTPS for login forms but lacks visible security headers and privacy policies, indicating room for improvement in security and compliance. No contact emails or phone numbers are provided, which may affect user trust and support accessibility. Overall, the site is functional with basic content and moderate technical implementation but lacks comprehensive privacy and security measures.

J

Jamf

jamfnow.com

74

Jamf Now is a cloud-based mobile device management solution focused on Apple devices, providing easy and affordable device management for businesses without requiring IT support. The website analyzed is the official login portal for Jamf Now, featuring a professional design, modern Angular framework, and secure HTTPS connections. The site includes comprehensive privacy and terms of service documentation, reflecting a mature compliance posture. Security features such as secure password inputs and cookie consent mechanisms are implemented, though explicit security headers were not detected in the provided data. The absence of WHOIS data for the subdomain is typical and does not detract from the legitimacy of the service, as the main domain is well-known and trusted. Overall, the site demonstrates a strong technical and security posture suitable for enterprise SaaS services.

S

Skio

skio.com

60

Skio is a subscription platform designed to serve Shopify brands that have outgrown their existing subscription solutions. The company focuses on reducing churn, increasing customer lifetime value, and delivering engaging subscriber experiences. With over 1,000 Shopify brands as clients, including notable names like Grüns, Supergoop, and Dog is Human, Skio positions itself as a specialized SaaS provider in the e-commerce subscription space. The website is built using Framer CMS and integrates modern analytics and tracking tools such as Google Analytics, Microsoft Clarity, and LinkedIn Insight, indicating a mature digital infrastructure. However, the absence of explicit privacy and cookie policies, as well as contact information, suggests areas for compliance and trust improvement. Security measures include HTTPS and domain registration protections, but lack DNSSEC and security headers, which could enhance overall security posture. Overall, Skio presents a professional and focused business with moderate technical and security maturity, suitable for its target market but with room for compliance and security enhancements.

E

eEnergy

eenergy.com

61

eEnergy is a UK-based digital energy services provider specializing in energy efficiency, decarbonisation, and sustainability solutions for sectors including education, healthcare, public, and commercial industries. The company offers a range of services such as LED lighting upgrades, solar PV generation, EV charging infrastructure, energy analytics, and compliant financing options with no upfront costs. Their market position is supported by over 1,200 successful projects and significant investment in energy efficiency initiatives. Technically, the website is built on WordPress with modern SEO and analytics tools, optimized for performance and accessibility. Security posture is strong with HTTPS, security headers, and bot management, though explicit security policies and incident response information are not published. Privacy compliance is well addressed with comprehensive policies and cookie consent mechanisms. However, the WHOIS data is missing, which raises some concerns about domain registration transparency. Overall, the website is professional, trustworthy, and well-positioned in its market niche.

C

Codana GmbH

codana.de

57

Codana GmbH is a professional software agency founded in 2020, specializing in custom digital solutions including mobile apps, web applications, AI integration, and digital process automation. The company targets businesses primarily in Germany, Austria, and Switzerland, offering tailored software development services to digitally transform enterprises. Their market position is that of a trusted small to medium-sized agency with over 100 satisfied clients and recognizable partnerships. Technically, the website leverages modern frameworks such as Next.js and React, with hosting on Microsoft Azure, ensuring fast performance and excellent mobile optimization. Security-wise, the site enforces HTTPS, integrates Google reCAPTCHA, and employs GDPR-compliant cookie consent mechanisms, though it lacks explicit privacy policies and incident response disclosures. Overall, the website is professional, trustworthy, and well-structured, with minor gaps in formal security and privacy documentation.