Security Directory

M

Emploi, Formation, Entrepreneur, École | Prends mon conseil

maison-emploi-pmc.fr

41

The website 'Prends mon conseil' focuses on providing advice and resources related to employment, training, entrepreneurship, and education primarily targeting French-speaking users. The content is well-structured and presented with a professional design using WordPress and Elementor, indicating a moderate level of digital maturity. However, the absence of WHOIS data limits the ability to verify domain ownership and business legitimacy fully. Technically, the site uses modern web fonts and scripts but lacks visible security headers and privacy policies, which are critical for compliance and user trust. The security posture is basic, with no evident vulnerabilities but also no advanced protections or disclosures. Overall, the site appears functional and relevant to its audience but would benefit from enhanced security and compliance measures to improve trust and legal adherence.

O

OPCO Mobilités

opcomobilites.fr

69

OPCO Mobilités operates as a key competency operator in the French mobility sector, covering 17 branches including automobile, logistics, services, and transport. The website positions itself as a central resource for skills development and training support within these industries. The company targets businesses and professionals involved in mobility-related sectors, providing structured support for workforce competency enhancement. The market position is strong within its niche, supported by professional branding and sector-specific content. Technically, the website is built on TYPO3 CMS, a robust and mature content management system, complemented by Matomo analytics and Cookiebot for GDPR-compliant cookie management. The infrastructure reflects a moderate level of digital maturity with good mobile optimization and SEO practices. Performance is moderate, with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and includes standard security headers, indicating a good baseline security posture. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests areas for enhancement in security transparency and readiness. Overall, the website presents a professional and trustworthy front for OPCO Mobilités, though the lack of WHOIS data limits domain trust assessment. The site complies well with privacy regulations, featuring comprehensive cookie consent and privacy policies. Strategic recommendations include publishing detailed security and incident response policies, improving accessibility, and enhancing contact information visibility to strengthen business credibility and user trust.

F

Fédération Nationale des Transports de Voyageurs

fntv.fr

31

The Fédération Nationale des Transports de Voyageurs (FNTV) is a well-established French national federation representing passenger transport companies. Founded in 1999, it serves as a central body providing information, regulatory updates, employment and training resources, and member services. The website reflects a professional and consistent brand image, targeting transport companies and stakeholders in France. The technical infrastructure leverages modern JavaScript libraries and APIs, including Google Maps and Flockler embeds, hosted via GANDI registrar with a domain age supporting legitimacy. Security posture is solid with HTTPS and client-side CSRF protections, though improvements are recommended such as restricting API keys and publishing explicit security policies. Privacy compliance is addressed with cookie consent and a privacy policy, though terms of service and incident response details are lacking. Overall, the site is trustworthy, functional, and serves its business purpose effectively.

F

Fédération Nationale des Transports Routiers

fntr.fr

56

The Fédération Nationale des Transports Routiers (FNTR) is a leading professional organization representing the road transport and logistics sector in France. Established since 1998, it serves as a key advocacy and support body for transport companies, providing regional syndicate coordination, publications, and industry representation. The website reflects a mature digital presence with a professional design, clear navigation, and integration of modern web technologies such as Drupal 9, Bootstrap, and FontAwesome. Analytics tools including Google Analytics, Matomo, and Facebook Pixel are employed with privacy considerations like IP anonymization and cookie consent via tarteaucitron.io. Security posture is generally good with HTTPS enforced and no evident vulnerabilities, though explicit security headers and policies are not fully documented. The absence of explicit privacy policy and terms of service pages is a notable compliance gap. Overall, the site is trustworthy, well-branded, and serves its target audience effectively.

C

Carsat Hauts-de-France

carsat-hdf.fr

66

Carsat Hauts-de-France operates as an official regional government entity providing retirement, social action, and occupational risk prevention services to residents, retirees, enterprises, and partners in the Hauts-de-France region of France. The website serves as an information portal and gateway to online services, reflecting a clear public service mission with a strong regional focus. The site is well-structured with dedicated sections for different user groups and partners, supporting accessibility and user engagement through features like text size adjustment and dyslexia mode. Technically, the website is built on the Jahia CMS platform, leveraging Bootstrap and jQuery for responsive design and interactivity. It is hosted by OVH, a reputable provider, and employs HTTPS with a good SSL configuration. The site uses Piwik analytics and tarteaucitron.js for cookie consent management, indicating attention to privacy compliance. The technical implementation is modern and supports good performance and accessibility standards. From a security perspective, the site enforces HTTPS and includes CSRF protection mechanisms. While some security headers are not explicitly detected in the HTML, the overall posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy policies and cookie management are clearly presented, supporting GDPR compliance. WHOIS data confirms domain legitimacy, with consistent registration details and no privacy protection, appropriate for a government service. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy and security best practices. It effectively serves its target audience with relevant content and services, backed by a stable technical infrastructure and sound governance.

A

AFT Transport & Logistique

aft-dev.com

57

AFT Transport & Logistique is a well-established French organization dedicated to promoting training and employment in the transport and logistics sectors across France. The website serves multiple audiences including companies, individuals seeking orientation and training, pedagogical professionals, and institutional partners. It provides rich content including news, events, videos, and regional resources, reflecting a mature digital presence. Technically, the site is built on Drupal 8, integrates modern analytics tools such as Google Analytics and Microsoft Clarity, and is hosted via Gandi SAS. The site is mobile-optimized and accessible, with good SEO practices. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks advanced DNS security and security headers, representing areas for improvement. Privacy compliance is well addressed with cookie consent and a privacy policy in French. Overall, the site is professional, trustworthy, and serves its niche effectively.

Z

Zipchat Inc

zipchat.ai

68

Zipchat Inc operates the website zipchat.ai, offering an advanced AI chatbot platform tailored for e-commerce businesses. Their solution integrates sales, support, WhatsApp marketing, and data analytics into a single autonomous AI agent designed to enhance customer engagement and increase sales conversion rates. The company targets online retailers using platforms such as Shopify, WooCommerce, and Magento, positioning itself as a top-rated AI chatbot provider with strong client testimonials and measurable performance metrics. The business model is subscription-based SaaS, founded recently in 2023, focusing on small to medium-sized e-commerce enterprises. Technically, the website is built on Webflow CMS and leverages modern JavaScript libraries such as GSAP for animations and multiple analytics and tracking tools including Crazy Egg, Microsoft Clarity, Amplitude, Facebook Pixel, and Google Tag Manager. The site is mobile-optimized, SEO-friendly, and implements a cookie consent mechanism via Cookiefirst, indicating a moderate level of digital maturity and compliance awareness. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in the HTML content. However, explicit security headers and formal security policies are not present, and no incident response or vulnerability disclosure mechanisms are found. The WHOIS data is privacy-protected, which is typical for SaaS businesses, but limits direct verification of registrant details. Overall, the security posture is good but could be improved with additional headers and transparency. The overall risk assessment is low, with the website demonstrating professionalism, trustworthiness, and compliance with basic privacy standards. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and implementing vulnerability disclosure to further strengthen trust and compliance.

The website at attrxs.de currently presents no accessible content, consisting only of an empty HTML structure with no metadata, scripts, or visible information. This lack of content prevents any meaningful analysis of the business, services, or compliance posture. The domain uses custom name servers but lacks publicly available registrant details, limiting trust and legitimacy assessment. Technically, the site shows no evidence of modern web technologies, security headers, or privacy policies, indicating a very low digital maturity level. Security posture cannot be properly evaluated due to absence of content and configuration data. Overall, the site appears either under construction, blocked by a security mechanism, or abandoned, resulting in a critical risk for users and stakeholders due to lack of transparency and security controls.

FUTOUR GmbH is a well-established German consultancy specializing in tourism and regional development with over 30 years of experience. The company offers a broad range of services including tourism concepts, regional management, feasibility studies, marketing consulting, and quality management. Their market position is strong within their niche, supported by multiple regional offices and a professional online presence. Technically, the website uses modern web technologies including Google Maps API and Google Fonts, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and cookie consent implemented, though there is room for improvement in security headers and incident response transparency. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

K

Klimahelden GmbH

klimahelden.eu

70

Envalor, formerly known as Klimahelden, is a German-based small enterprise specializing in AI-driven ESG automation solutions, focusing on CSRD reporting and CO₂ balance calculations. The company offers a SaaS platform that simplifies sustainability reporting for businesses subject to EU regulations. The website reflects a professional and consistent brand presence, targeting businesses needing compliance with sustainability directives. Technically, the site is built on WordPress with modern analytics and marketing integrations, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS and domain transfer protections, though improvements like DNSSEC and security headers are recommended. Privacy compliance is partially met with cookie consent mechanisms but lacks explicit privacy and terms of service pages. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

T

tatwort Nachhaltige Projekte GmbH

tatwort.at

50

tatwort Nachhaltige Projekte GmbH is a small Austrian company specializing in sustainable projects, aiming to create solutions with lasting impact. The website is professionally designed using WordPress with Astra theme and includes key navigation for company information, services, projects, team, and contact. The site is primarily in German and targets a general audience interested in sustainability. Technically, the site is hosted by World4You Internet Services GmbH, uses HTTPS with a valid SSL certificate, and employs modern WordPress plugins including Borlabs Cookie for GDPR-compliant cookie consent. Security posture is good with HTTPS and cookie consent but lacks advanced security headers and explicit security policies. No contact emails or phone numbers are directly visible on the homepage, and no terms of service or vulnerability disclosure pages are present. Overall, the site is trustworthy, professional, and compliant with basic privacy regulations.

K

KATE Umwelt & Entwicklung e.V.

kate-stuttgart.org

66

KATE Umwelt & Entwicklung e.V. is a small environmental consultancy based in Stuttgart, Germany, specializing in climate management, sustainability consulting, and educational services for companies and social institutions. Their offerings include climate risk analysis according to ISO 14090 and support for sustainability reporting under VSME standards. The website is professionally designed using the Wix platform, featuring modern JavaScript technologies and error monitoring via Sentry. However, the site lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security posture is generally good with HTTPS enforced, but security headers are not evident, and no incident response or vulnerability disclosure information is provided. Overall, the domain appears legitimate though WHOIS data is unavailable due to privacy protection or query issues.

T

Terra Institute - Empowering Responsible Growth

terra-institute.eu

70

Terra Institute is a German-based consulting firm specializing in organizational sustainability topics, with over 15 years of experience supporting companies aiming for authentic sustainable practices and communication. The company positions itself as a service partner facilitating positive global change through sustainability consulting. Their digital presence is built on a modern WordPress platform using the Divi theme, enhanced with various plugins for user experience and cookie consent management. The website is professionally designed, mobile-optimized, and SEO-friendly, targeting German-speaking corporate clients interested in sustainability. Security posture is adequate with HTTPS enabled and cookie consent implemented, though additional security headers and explicit privacy policies are absent. No critical vulnerabilities or blocking mechanisms were detected, indicating a stable and legitimate online presence.

H

Hochschule für nachhaltige Entwicklung Eberswalde

hnee.de

54

The website www.hnee.de represents the Hochschule für nachhaltige Entwicklung Eberswalde, a German higher education institution specializing in sustainable development. It offers over 20 degree programs and hosts numerous research projects, targeting students, researchers, and sustainability professionals. The site is well-structured, professionally designed, and provides comprehensive academic and event information, reflecting a strong market position in sustainability education. Technically, the site is built on TYPO3 CMS, employs modern web technologies including responsive design, WebP images, and Matomo analytics for user tracking. Hosting is managed via telta.de nameservers, indicating a stable infrastructure. Performance and accessibility are good, with SEO best practices observed. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or suspicious content were detected, and WHOIS data confirms legitimate domain registration consistent with the institution's identity. Overall, the website demonstrates a solid digital presence with good security posture and business credibility, though improvements in privacy policy visibility and security disclosures are recommended.

O

OITS - ISTO

oits-isto.org

56

The website for OITS - ISTO represents a non-profit organization dedicated to promoting social and sustainable tourism globally. It provides informational resources, event announcements, and partnership details targeting tourism professionals and stakeholders interested in social tourism. The site is built on a JavaServer Faces framework with PrimeFaces and jQuery, hosted behind Cloudflare DNS, and uses a recently registered domain. While the content is relevant and well-structured, the site lacks critical privacy and cookie policies, security headers, and modern analytics tools, indicating room for improvement in compliance and security maturity. The domain's recent registration date contrasts with the apparent organizational maturity, suggesting a possible recent domain acquisition or migration.

L

Linking Tourism and Conservation e.V. (Ö.T.E.-LT&C e.V.)

ltandc.org

63

Linking Tourism and Conservation e.V. (Ö.T.E.-LT&C e.V.) is a small non-profit organization focused on promoting sustainable tourism and conservation efforts primarily in Europe. The website serves as an information hub showcasing projects, publications, news, and membership opportunities. The organization targets environmental groups, tourism professionals, and the general public interested in sustainable development. Technically, the site is built on a Verwaltungsportal CMS platform using common JavaScript libraries like jQuery and Slick Carousel, with good mobile optimization and accessibility features. Security posture is moderate with cookie consent implemented but lacking visible security headers and unknown SSL configuration. The WHOIS data is incomplete and malformed, which reduces domain trustworthiness, but the website content and social media presence support legitimacy. Overall, the site is professional and trustworthy but could improve security and transparency.

M

MJ Marketing LTD.

nfi.at

52

NFI Gesundheits Magazin is a small, professional online health magazine focused on alternative medicine, superfoods, supplements, healing mushrooms, and healing stones, targeting German-speaking health-conscious audiences in Austria and Germany. The website is built on WordPress with modern technologies including Yoast SEO Premium and Elementor, providing a good user experience with clear navigation and mobile optimization. Security posture is solid with HTTPS and secure forms, though lacking some security headers and published policies. Privacy compliance is partial with a comprehensive privacy policy but no cookie consent mechanism. Business credibility is strong with clear company information and contact details. Overall, the site is trustworthy and well-positioned in its niche.

G

GSTC - Global Sustainable Tourism Council

gstcouncil.org

54

The Global Sustainable Tourism Council (GSTC) operates as an international non-profit organization focused on managing global standards for sustainable travel and tourism. It serves as the accreditation body for sustainable tourism certification, providing standards, certification accreditation, training programs, and membership services. The website targets a broad audience including hotels, tour operators, destinations, business travelers, certification bodies, consultants, and travelers. The organization is positioned as a key authority in sustainable tourism with a professional and comprehensive digital presence. Technically, the website is built on WordPress using the Avada theme framework, enhanced with multilingual support via WPML, and optimized for SEO with Yoast SEO Premium. It employs modern technologies including Google Tag Manager, LinkedIn Insight, and CookieYes for cookie consent management. The site is fast, mobile-optimized, and accessible, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses security headers, and integrates bot management services from Akamai and Cloudflare. The cookie consent mechanism is robust, offering detailed categories and user customization. However, the absence of a publicly accessible privacy policy, explicit contact information, and a vulnerability disclosure policy are notable gaps. WHOIS data is unavailable or privacy protected, which is common for non-profit organizations but limits domain trust analysis. Overall, the website presents a low-risk profile with strong professionalism and security posture but would benefit from enhanced transparency in privacy and contact disclosures to improve compliance and trustworthiness.

M

M&L Consulting GmbH

mlconsulting.ch

46

M&L Consulting GmbH is a Swiss-based specialist company providing filtration solutions primarily for breweries and the beverage industry. With over 20 years of experience, they offer a wide range of filtration products including Kieselgur candle filters, PVPP filters for beer stabilization, and turnkey filtration systems. Their business model focuses on B2B partnerships, delivering customized filtration solutions and after-sales support. The website reflects a professional and consistent brand image with clear product information and contact channels. Technically, the site uses modern frameworks such as Bootstrap and jQuery, integrates privacy-conscious Matomo analytics, and employs Cloudflare Turnstile captcha for form security. Security posture is solid with HTTPS and basic best practices, though some security headers and explicit policies could be improved. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and trustworthiness.

H

HessenChemie

hessenchemie.de

56

HessenChemie is a regional industry association serving the chemical, pharmaceutical, and plastics processing sectors in Hessen, Germany. The organization provides a range of services including industry representation, publications, training, and events targeted at member companies and stakeholders. The website reflects a professional and well-structured digital presence, leveraging TYPO3 CMS and modern frontend technologies to deliver content effectively. The target audience includes industry professionals, trainees, and member companies within Hessen's chemical industry. The business model centers on membership services and industry advocacy. Technically, the website is built on TYPO3 CMS with Bootstrap and jQuery, and uses Matomo for privacy-conscious analytics. The site is mobile-optimized, accessible, and SEO-friendly. Hosting appears to be managed by a professional provider with consistent DNS records. Cookie consent mechanisms are implemented with opt-in features, supporting GDPR compliance. The login form includes security measures such as CSRF tokens. From a security perspective, the site uses HTTPS and secure forms but lacks explicit published security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The site could improve by adding security headers and a vulnerability disclosure policy. Overall, the security posture is solid but could be enhanced with formal documentation and transparency. The website is trustworthy, with clear contact options, active social media presence, and consistent branding. No adult or questionable content is present. The domain registration data aligns with the business claims, supporting legitimacy. Strategic recommendations include publishing security policies, adding incident response contacts, and enhancing security headers to strengthen trust and compliance.

W

Winkgen Medical Systems GmbH & Co. KG

winkgen.de

51

Winkgen Medical Systems GmbH & Co. KG is a specialized German company founded in 1986, focusing on pharmaceutical process technology, particularly radiopharmacy laboratories, clean room technology, and software development for laboratory and nuclear medicine. The company maintains a strong market position with nearly four decades of experience and trusted customer relationships. Their website reflects a professional B2B service provider model targeting pharmaceutical and healthcare technology sectors. Technically, the website is built on WordPress with modern plugins for SEO, analytics, and user interaction, hosted on NSHost servers. The site is well-optimized for mobile and SEO, with good content quality and clear navigation. Security posture is solid with HTTPS, cookie consent, and CAPTCHA protections, though some HTTP security headers could be improved. Privacy compliance is well addressed with GDPR-aligned policies and consent mechanisms. Overall, the website presents a trustworthy and professional digital presence aligned with the company's business focus.

E

Econocom Products & Solutions GmbH

energy-net.de

64

Energy Net, operating under Econocom Products & Solutions GmbH, is a well-established Apple reseller and digital transformation service provider targeting businesses and public institutions primarily in Germany and Europe. The company offers a broad portfolio of services including Apple Enterprise Services, collaboration solutions, device management, financing, and repair services. As part of the publicly listed Econocom Group, Energy Net benefits from a strong market position and extensive experience in technology and service delivery. The website reflects a professional and consistent brand image with clear service offerings and business information. Technically, the site is built on TYPO3 CMS with modern JavaScript modules and includes GDPR-compliant privacy and cookie policies with a consent mechanism. Security posture is solid with HTTPS enforced and secure forms, though some security headers and explicit security policies are missing. Overall, the site is trustworthy, well-maintained, and business-focused.

A

Aeiforia GmbH

aeiforia.de

57

Aeiforia GmbH is a specialized consulting and training firm serving the financial services sector, particularly insurers, building societies, and fund providers focused on private and occupational pension products. The company offers a broad range of services including product development, actuarial consulting, process optimization, legal and tax advisory, IT systems consulting, sales and organizational support, as well as training and coaching. Aeiforia also provides contract management services specifically for Riester pension products, positioning itself as a niche expert in the pension market in Germany. Technically, the website is built on Joomla CMS and employs modern JavaScript libraries such as jQuery and nocaptcha for form security. The site is hosted on a reputable DNS provider (DomainControl by GoDaddy) and uses HTTPS with a good SSL configuration. The site is mobile-optimized and provides a professional user experience with clear navigation and relevant content. Privacy compliance is well addressed with a comprehensive privacy policy, cookie consent mechanism, and GDPR adherence. From a security perspective, the site enforces HTTPS and uses cookie consent but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The domain registration data is consistent with the business claims, supporting legitimacy. Overall, Aeiforia GmbH presents a professional and trustworthy online presence with a solid business model and technical foundation. Strategic improvements in security headers and incident response transparency would enhance their security posture and trust further.

T

ThisSacredLife.Earth

gertischoen.net

62

ThisSacredLife.Earth is a small-scale professional service provider specializing in training and coaching in healing, psychotherapy, yoga, and energy work. The website targets individuals seeking professional development in these wellness disciplines. The business operates primarily in Germany, as indicated by the structured data address in Würzburg. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard Wix UI components, providing a moderate level of technical maturity and mobile optimization. However, the domain WHOIS data is missing or indicates the domain may be unregistered or expired, which raises concerns about the legitimacy and trustworthiness of the domain registration. Security posture is moderate with HTTPS implied but lacking explicit security headers and privacy compliance documentation. Overall, the site presents professional content but requires improvements in domain legitimacy, privacy compliance, and security best practices.

A

Amplified Humanity

amplified-humanity.com

64

Amplified Humanity is a niche counseling service focused on providing unconventional counseling and coaching to deep thinkers, creatives, idealists, and non-conformists. The business offers specialized services including psychological and systemic counseling, death doula support, kink and BDSM coaching, somatic trauma therapy, and psychedelic integration counseling. The website is professionally designed and hosted on Squarespace, with modern web technologies and multimedia content enhancing user experience. However, the absence of WHOIS registration data raises concerns about domain legitimacy. Security posture is strong with HTTPS and HSTS enabled, and cookie consent mechanisms are in place, but privacy policies and direct contact information are missing, impacting compliance and trust. Overall, the site is functional and secure but would benefit from improved transparency and business credibility disclosures.

K

KULA Institute

kula-institute.com

42

KULA Institute is a newly established educational organization based in Germany, specializing in a 2-year training program for psychedelic facilitators. The institute targets therapists, coaches, and individuals interested in supporting transformative processes through psychedelics. The website is professionally designed, well-structured, and provides comprehensive information about the training, faculty, and related resources such as blogs and podcasts. Technically, the site is built on WordPress with Elementor and uses modern web technologies and cookie consent management tools. Security posture is good with HTTPS enforced and clientTransferProhibited domain status, though improvements like DNSSEC and enhanced security headers are recommended. Privacy compliance is strong with clear GDPR-aligned policies and consent mechanisms. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. The site is safe for general audiences and does not contain adult or explicit content.

P

Psychedelic Therapies

psychedelictherapies.de

60

Psychedelic Therapies is a small German-based service provider specializing in counseling and integration therapy related to psychedelic treatments. The website targets clients and facilitators interested in psychedelic therapy, positioning itself as a niche mental health service provider. The digital infrastructure is built on the Squarespace platform, leveraging modern web technologies and providing a responsive and professionally designed user experience. Security posture is strong with HTTPS and HSTS enabled, and Google reCAPTCHA is used to protect forms. However, the site lacks explicit privacy policies, terms of service, and direct contact information, which are important for compliance and trust. Overall, the site is safe, well-structured, and suitable for its target audience, but improvements in privacy compliance and business transparency are recommended.

H

Heitech Service GmbH

lausitz-hosting.de

46

Lausitz-Hosting, operated by Heitech Service GmbH, is a regional and national internet service provider specializing in web hosting, domain registration, email services, and SSL certificates. The company emphasizes personal customer service and caters to a diverse clientele including small and medium enterprises, large industrial companies, municipalities, and associations primarily in Germany. Their market position is strengthened by a focus on regional identity and trusted certifications such as ISO/IEC 27001 and ITIL frameworks. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, and Slick Carousel, hosted on servers associated with Heitech. The site is mobile-optimized and presents a professional design with clear navigation. Performance is moderate, with room for improvement in accessibility and SEO optimization. Security posture is solid with HTTPS enforced and hosting in a certified Tier 3 data center, though security headers and incident response details are lacking. From a security and compliance perspective, the site demonstrates adherence to recognized standards and provides privacy and cookie policies, albeit without explicit consent mechanisms. No vulnerabilities or exposed sensitive data were detected. The absence of a vulnerability disclosure policy and security.txt file suggests an area for enhancement. Overall, the risk profile is low with recommendations to strengthen security headers and privacy compliance. Strategically, Lausitz-Hosting is well-positioned in its niche with a clear business model and trusted service offerings. The website supports business credibility through customer references and certifications, though it could benefit from enhanced transparency in security incident handling and privacy consent.

C

Caldecott Music Group

caldecottmusic.com

61

Caldecott Music Group is a global operator, innovator, and investor in the music industry, connecting various music brands and products worldwide. The company positions itself as a significant player in the media and music sectors, with multiple subsidiaries and brands under its umbrella, including BandLab Technologies, NME Networks, and Vista Musical Instruments. The website reflects a professional and modern digital presence built on the Framer platform, with integration of Google Analytics for user tracking. Security posture is generally good with HTTPS enabled, but lacks some security headers and formal privacy and cookie policies, which are important for compliance and trust. Overall, the site is accessible and well-structured, targeting music industry professionals and investors.

H

Haus der Diakonie

haus-der-diakonie.ch

47

Haus der Diakonie is a non-profit community project based in Switzerland focused on repurposing the Kirchgemeindehaus Wipkingen into a center for diaconal social services and community engagement. The website serves as an informational platform for the project, showcasing testimonials, project updates, and contact information. Technically, the site is built on WordPress with common plugins and frameworks, offering a moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms but lacks advanced security headers and vulnerability disclosure. Overall, the site is trustworthy and professionally presented, though it could improve privacy and security transparency.

TonSPuR.org is a niche website dedicated to providing spiritual care and audio content for police and rescue personnel, primarily in the German-speaking region of Switzerland. The site serves as a resource especially during pandemic-related event cancellations, offering an archive of audio contributions. The business model is non-commercial and focused on community support rather than profit. The website is built on WordPress, utilizing common plugins such as Podlove Podcasting and standard web fonts, hosted by Hostpoint AG. The technical infrastructure is moderate with good mobile optimization but lacks advanced SEO and accessibility features. Security posture is adequate with HTTPS enabled but lacks important security headers and DNSSEC. No privacy or cookie policies are present, indicating compliance gaps. Contact information is minimal, limiting direct communication channels. Overall, the site is functional and serves its intended audience but requires improvements in privacy, security, and transparency to enhance trust and compliance.

W

World Council of Churches

oikoumene.org

62

The World Council of Churches website serves as the digital presence for a large, established non-profit organization dedicated to fostering unity, justice, and peace among global Christian churches. The site offers rich content including news, events, resources, and educational materials, targeting a worldwide ecumenical audience. The organization is well-positioned in its sector with a history dating back to 1948 and a domain registered since 2003, reflecting stability and credibility. Technically, the website is built on Drupal 11, leveraging modern web technologies and hosted with Cloudflare DNS services. It demonstrates good mobile optimization, accessibility, and SEO practices. The presence of Google Analytics and social sharing tools indicates moderate user tracking balanced with privacy compliance, including a clear cookie consent mechanism. From a security perspective, the site enforces HTTPS, employs standard security headers, and restricts domain transfers, contributing to a strong security posture. However, DNSSEC is not enabled, and explicit security policies or incident response contacts are not published, representing areas for improvement. Overall, the website is professional, trustworthy, and safe for general audiences, with no adult or questionable content detected. The domain registration and website content are consistent, supporting a high legitimacy score. Strategic recommendations include enabling DNSSEC, publishing security and incident response policies, and adding vulnerability disclosure information to enhance transparency and trust.

V

Viva con Agua

vivaconagua.ch

54

Viva con Agua is a non-profit network dedicated to ensuring global access to clean drinking water. The organization operates primarily in Switzerland and targets a general audience interested in charitable causes and sustainability. Their website serves as an information hub and fundraising platform, promoting their water projects and branded mineral water. The site is multilingual, supporting German, French, and English, reflecting their international outreach. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO for optimization, Google Tag Manager for analytics, and multilingual support via WPML. The site demonstrates good mobile optimization and moderate performance, with a clean and professional design that enhances user experience. However, some accessibility features could be improved. From a security perspective, the site uses HTTPS with excellent SSL configuration and employs best practices such as no exposed sensitive data and secure script loading. Nonetheless, it lacks important security headers and formalized security policies such as a security.txt or incident response contacts. Privacy compliance is limited due to the absence of explicit privacy and cookie policies or consent mechanisms. Overall, Viva con Agua's website is a credible and trustworthy platform with strong business credibility and a good security posture. To further enhance their digital maturity and compliance, they should implement comprehensive privacy and cookie policies, add security headers, and provide clear incident response information.

S

Skat Foundation

skat-foundation.ch

49

Skat Foundation is a Swiss non-profit organization dedicated to development cooperation and sustainable development initiatives. The website presents a professional image with a focus on international development services, capacity building, and advisory roles. The target audience includes development professionals, donors, and partner organizations. The business model is typical for a non-profit foundation operating in the international cooperation sector. Technically, the website is built on WordPress using the Divi theme, with standard plugins for multilingual support and cookie consent management. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. Security posture is adequate with HTTPS enabled and a cookie consent mechanism in place; however, there is room for improvement in security headers and published security policies. No critical vulnerabilities or blocking mechanisms were detected. Overall, the domain registration data aligns well with the website's claims, indicating legitimacy and trustworthiness.

K

Katholische Hochschulseelsorge

aki-unibe.ch

46

The website www.aki-unibe.ch represents the Katholische Hochschulseelsorge, a small non-profit educational and community support institution located in Bern, Switzerland. It provides a welcoming space for students to engage in events, counseling, group activities, and personal projects, emphasizing inclusivity regardless of religious affiliation. The site content is well-structured, informative, and targeted primarily at the academic community. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries, ensuring a good user experience and mobile optimization. However, there is room for improvement in security practices, particularly in implementing HTTP security headers and publishing privacy and cookie policies. No security incidents or vulnerability disclosures are evident, and the domain registration aligns well with the organization's identity, supporting legitimacy and trustworthiness.

T

Treezor

treezor.com

76

Treezor is a European leader in Banking-as-a-Service, providing a comprehensive modular platform that enables fintechs and large businesses to embed financial services seamlessly into their customer journeys. The company offers a wide range of services including core banking, payment issuing and acquiring, SEPA payments, KYC/KYB compliance, and credit solutions. Their market position is strong within Europe, supported by a professional website with rich content, multilingual support, and visible trust indicators such as PCI DSS certification and client success stories. Technically, the website is built on WordPress with modern tools like WPBakery, jQuery, and Swiper.js, and integrates Google Analytics and Tag Manager for analytics. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Security posture is solid with HTTPS enforced and PCI DSS certification, but lacks some security headers and explicit incident response contact information. The WHOIS data is missing, which raises some concerns about domain registration transparency, but the professional presentation and business legitimacy mitigate this risk. No blocking or WAF challenges were detected, allowing full content analysis. Overall, the site demonstrates a mature digital presence with good security and compliance practices, suitable for its fintech audience. Recommendations include enhancing security headers, publishing an incident response policy, adding vulnerability disclosure mechanisms, and improving accessibility to further strengthen trust and compliance.

A

apload GmbH

apload.ch

50

apload GmbH is a Swiss-based internet agency specializing in web-based communication solutions including web development, mobile apps, SEO, software, and hosting services. The company targets businesses seeking tailored digital communication tools and maintains a regional presence in Olten, Switzerland. Their website reflects a professional and consistent brand image with clear service offerings and client references. Technically, the site employs modern frameworks such as Bootstrap and jQuery, integrates Google Analytics and Facebook Pixel for marketing and analytics, and is mobile optimized with good SEO practices. Security posture is solid with HTTPS enabled and cookie consent implemented, though security headers and explicit security policies are absent. The domain registration data aligns well with the company’s identity, supporting legitimacy. Overall, the website scores well on content quality, technical implementation, security, privacy compliance, and business credibility, making it a trustworthy and professional digital presence.

M

Mosaiq

mosaiq.ch

51

Mosaiq is a Swiss-based full-service marketing and communication agency specializing in integrated brand success. The company offers a broad range of services including consulting, content marketing, creative design, online marketing, and web development. Positioned as a trusted partner for small and medium-sized enterprises in the Mittelland region, Mosaiq emphasizes comprehensive brand identity and multi-channel communication strategies. The website reflects a professional and modern digital presence with strong branding consistency and client testimonials that reinforce trust. Technically, the website is built on WordPress with UIkit framework and leverages modern tools such as Google Tag Manager, Microsoft Clarity, and Brevo for marketing automation. The site is mobile-optimized, accessible, and SEO-friendly, indicating a mature digital infrastructure. Security measures include HTTPS enforcement and use of Google reCAPTCHA, although some security headers could be enhanced. The security posture is solid with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a clear privacy policy, cookie consent mechanism, and GDPR adherence. However, there is no explicit security policy or incident response information publicly available. Overall, the website and domain registration data indicate a legitimate and trustworthy business with a strong online presence. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and improving incident response contact visibility to further strengthen security and trust.

C

Café Stoa Basel

cafestoa.ch

46

Café Stoa Basel is a small hospitality business located near the Christoph-Merian-Park in Basel, Switzerland. The café offers coffee specialties, food including pizza, focaccia, vegetarian and vegan menus, as well as apéro and catering services. The website positions the business as a local eatery with weekend and lunch offerings, targeting general audiences in the Basel area. The site is built on WordPress with a moderate technical infrastructure including modern JavaScript libraries and embedded Google Maps for location. Social media presence on Facebook and Instagram supports customer engagement. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies, indicating room for compliance improvement. No forms or analytics scripts are detected, suggesting minimal data collection and tracking. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

G

Gotthilf Benz Turngerätefabrik GmbH + Co. KG

benz-sport.at

50

Firma Benz Turn- und Sportgeräte Gesellschaft m.b.H operates a professional e-commerce platform specializing in sports equipment, targeting a broad audience primarily in Austria and German-speaking regions. The company offers a wide range of products including balls, gymnastics equipment, fitness and strength training gear, team sports accessories, martial arts supplies, and swimming products. The website is well-structured, leveraging the PrestaShop CMS platform, and provides clear contact information and localized content. The presence of multiple country-specific domains indicates a regional market focus with multilingual support. Technically, the website employs modern web technologies such as jQuery, Nivo Slider for image slideshows, and Google reCAPTCHA for form security. The site is served over HTTPS with a good SSL configuration, ensuring secure data transmission. Cookie consent mechanisms are implemented to comply with GDPR requirements, although an explicit privacy policy page was not found in the provided content. The site demonstrates good mobile optimization and SEO practices, contributing to a positive user experience. From a security perspective, the website benefits from HTTPS and CAPTCHA protections but lacks visible security headers and formal security policies such as incident response or vulnerability disclosure statements. The absence of WHOIS registrant data reduces transparency but does not necessarily indicate malicious intent. Overall, the site maintains a solid security posture with room for improvement in policy disclosures and header implementations. The overall risk assessment is moderate with no critical vulnerabilities detected. Strategic recommendations include publishing comprehensive privacy and security policies, implementing security headers, and enhancing WHOIS transparency to build greater trust. These steps will strengthen compliance, security posture, and user confidence in the platform.

G

Gotthilf Benz Turngerätefabrik GmbH + Co KG

benz-sport.com

57

Gotthilf Benz Turngerätefabrik GmbH + Co KG operates a professional e-commerce platform specializing in sports equipment, targeting a broad audience in Germany and neighboring countries. The company positions itself as a quality manufacturer and retailer with a comprehensive product catalog and service offerings including maintenance and partner cooperation. The website is well-branded, consistent, and provides clear contact information and trust signals such as the EHI certification. Technically, the site is built on PrestaShop 1.7, leveraging modern web technologies and marketing tools like Google Tag Manager and Facebook Pixel, ensuring a moderate to good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, though there is room for improvement in security headers and explicit security policies. Overall, the site is trustworthy, GDPR compliant, and professionally maintained, supporting the company's retail business effectively.

M

Medyum Şehrazat Hoca

medyum-sehrazat-hoca.de

63

Medyum Şehrazat Hoca operates as a small-scale spiritual and occult service provider primarily targeting Turkish-speaking individuals in Germany and Europe. The website presents a professional and consistent brand image, offering a range of services including love spells, tarot readings, horoscope analysis, and spiritual protection. The business leverages testimonials and direct contact channels to build trust with its audience. Technically, the website uses common frontend frameworks such as Bootstrap and jQuery, with Cookiebot integrated for cookie consent management. While the site is mobile-optimized and user-friendly, it lacks advanced security headers and explicit incident response policies. Overall, the security posture is moderate with room for improvement in formalizing security and privacy policies. The domain registration data aligns with the website's claims, indicating legitimacy. Strategic recommendations include enhancing security headers, publishing detailed privacy and security policies, and improving incident response readiness.

B

Britta Mackenrodt | Privatpraxis für Frauenheilkunde

frauenarzt-mackenrodt.de

63

Britta Mackenrodt operates a private gynecology and obstetrics practice in Köln, Germany, focusing on holistic and personalized women's healthcare. The website presents a professional image with clear descriptions of services such as bioidentical hormones, laser therapy, and preventive medicine. The practice targets female patients seeking advanced and empathetic gynecological care. Technically, the website uses modern web technologies including Bootstrap and Cookiebot for cookie consent management, hosted with DNS services from DomainControl. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enabled and cookie consent implemented, though security headers are not detected and no explicit security or incident response policies are published. Overall, the website is trustworthy and compliant with GDPR, with clear contact information and no suspicious content.

M

maxFlite

maxflite.de

53

maxFlite is a German-based e-commerce retailer specializing in aviation-themed garden wind decorations, targeting garden enthusiasts and aviation fans. The website presents a professional and consistent brand image with a clear product focus on windmills and garden decor shaped like airplanes, cars, and animals. The business operates primarily in the retail sector with a niche market position and has been active since at least 2019. The website leverages WordPress and WooCommerce platforms with popular plugins for SEO, marketing, and analytics, indicating a moderate level of digital maturity.

Bayer AG is a globally recognized enterprise operating primarily in healthcare, agriculture, and related life sciences sectors. The website serves as the German country platform, providing localized content, news, and corporate information. Bayer holds a strong market position as a leader in pharmaceuticals and crop science, supported by a large enterprise scale and multiple subsidiaries such as Monsanto and Covestro. The site reflects a professional and consistent brand image with comprehensive content tailored to a broad audience including customers, investors, and partners. Technically, the website is built on Drupal 11, leveraging modern web technologies and third-party services such as Google Analytics, Hotjar, and OneTrust for cookie compliance. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and employs security best practices including cookie consent mechanisms and security modules. However, explicit security headers like Content-Security-Policy and X-Frame-Options were not confirmed in the HTML and should be verified. No vulnerabilities or exposed sensitive data were detected. The absence of a public incident response or vulnerability disclosure page suggests an area for improvement. Overall, the website is trustworthy, compliant with GDPR, and professionally maintained. The missing WHOIS data is likely due to registry restrictions or privacy protection and does not detract from the site's legitimacy. Strategic recommendations include enhancing security header implementation, publishing incident response policies, and continuous monitoring of third-party libraries for vulnerabilities.

D

Digt AG

digt.ch

61

Digt AG is a Swiss-based company specializing in community building, brand creation, and product promotion within the e-commerce sector. Their website presents a professional and modern digital presence, targeting businesses seeking to grow their communities, create brands, and promote products in the Swiss market. The company appears to be relatively new, founded around 2021, with a clear focus on service provision in e-commerce and brand distribution. Technically, the website is built on WordPress with a solid tech stack including Bootstrap, jQuery, and SEO tools like Yoast. It is mobile-optimized and uses Google Analytics and Tag Manager for tracking, indicating a moderate level of digital maturity. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, but lacks some security headers and explicit policies, which could be improved. Overall, the site is trustworthy and professional, with minor gaps in privacy compliance and security transparency.

S

Schweizer Agrarmedien AG

agrarmedien.ch

67

Schweizer Agrarmedien AG is the largest agricultural specialized publishing company in Switzerland, offering a portfolio of print and digital media products including newspapers, magazines, and online marketplaces focused on agriculture, nature, and environment. Their target audience includes farming families, animal and nature enthusiasts, and professionals in the Swiss agricultural sector. The company maintains a strong market position with multiple well-known media brands and digital platforms. Technically, the website is built on TYPO3 CMS and leverages modern JavaScript libraries and analytics tools such as Matomo, Microsoft Clarity, and Google Tag Manager, indicating a mature digital infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and use of reCAPTCHA, but lacks some security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is trustworthy and professionally managed, with room for improvement in security and privacy transparency.

A

Agirc-Arrco

agirc-arrco.fr

58

Agirc-Arrco is a French government-related organization managing supplementary pension schemes for private sector employees. The website provides information and services related to retirement and pension rights, targeting private individuals and retirees. The organization holds a leading position in the French pension market, offering key services such as pension management and online account access. Technically, the website is built on Drupal 11 with modern web technologies and is mobile-optimized, providing a good user experience. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though security headers and explicit privacy policies are missing. The absence of WHOIS data limits domain ownership verification but does not detract from the site's professional appearance and trustworthiness. Overall, the site is safe, well-structured, and serves its audience effectively.

G

Gemeinde- und Schulbibliothek Turbenthal

bibliothek-turbenthal.ch

59

The website www.bibliothek-turbenthal.ch represents the Gemeinde- und Schulbibliothek Turbenthal, a local public and school library in Switzerland. It serves as a community hub offering books, digital media, children's Tonie figures, films, games, and local events. The site is built on the Wix platform, leveraging Wix Thunderbolt and editor elements, providing a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and scripts to harden client-side requests, but lacks explicit security headers and privacy/cookie policies. No contact emails or phone numbers were found in the analyzed content, which limits direct user engagement and compliance transparency. Overall, the site is professional and trustworthy for its purpose but would benefit from enhanced privacy compliance and security best practices.

H

Heilpädagogische Schule Turbenthal

hps-turbenthal.ch

47

Heilpädagogische Schule Turbenthal is a specialized day school located in Turbenthal, Switzerland, providing educational services to children and youth with special learning and life needs. The institution offers a range of services including therapies, lunch programs, school social work, and parent forums, positioning itself as a local leader in special education. The website is professionally designed using WordPress with a focus on accessibility and clear navigation, targeting families and stakeholders in the education sector. Technical infrastructure leverages common WordPress plugins and frameworks, ensuring moderate performance and mobile optimization. Security posture is adequate with HTTPS enforced and cookie consent implemented, though lacking advanced security headers and explicit incident response policies. Overall, the site demonstrates a trustworthy and compliant digital presence suitable for its educational mission.