Security Directory

D

Deutsche Gesellschaft für Hämatologie und Medizinische Onkologie e.V.

dgho.de

64

The Deutsche Gesellschaft für Hämatologie und Medizinische Onkologie e.V. (DGHO) is a well-established German professional medical society specializing in hematology and medical oncology. The organization provides comprehensive services including clinical guidelines via the Onkopedia portal, certification programs such as KoMedT, professional events, and member networking opportunities. Their website reflects a mature digital presence with a focus on healthcare professionals and researchers in Germany. The content is rich, professionally presented, and regularly updated with news and events relevant to their field. Social media integration and external partnerships further enhance their outreach and credibility. Technically, the website is built on the Plone CMS platform, utilizing standard web technologies like JavaScript and CSS. The site is mobile-optimized and accessible, with good SEO practices evident. However, there is room for improvement in security posture, particularly in implementing and displaying security headers such as CSP and HSTS. The site uses HTTPS but lacks visible cookie consent mechanisms, which could be enhanced to improve privacy compliance. From a security perspective, the site shows a moderate maturity level with secure login forms and HTTPS usage. No critical vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data aligns well with the website's claims, indicating a legitimate and trustworthy domain registration. Incident response and explicit security policies are not prominently featured, suggesting an area for future enhancement. Overall, DGHO's website is a professional, trustworthy, and content-rich platform serving its niche audience effectively. Strategic improvements in security headers and privacy consent mechanisms would further strengthen its compliance and security posture.

P

Printex AG

printex.ch

41

Printex AG is a Swiss-based printing company specializing in high-quality offset and digital printing, finishing, and design services. The company positions itself as a regional partner offering personalized and flexible printing solutions with a strong emphasis on craftsmanship and customer experience. The website reflects a professional and well-branded digital presence, targeting businesses and individuals seeking premium print products. Technically, the site is built on WordPress using the Avada theme and integrates common technologies such as jQuery and Yoast SEO, indicating a modern and maintainable infrastructure. Security-wise, the site benefits from HTTPS but lacks advanced security headers and visible security policies, which could be improved to enhance trust and compliance. Privacy compliance is a notable gap, with no privacy or cookie policies detected, potentially exposing the company to regulatory risks. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security measures.

E

Einkaufen in Weil am Rhein

einkaufen-in-weil.de

52

The website 'Einkaufen in Weil am Rhein' serves as a local shopping guide promoting small shops, boutiques, and local businesses in Weil am Rhein, Germany. It targets general consumers interested in local retail and services, providing an informational platform rather than direct e-commerce. The site is built using the Weblication® CMS, indicating a moderate level of technical infrastructure suitable for small business needs. The design is professional and mobile-optimized, with good accessibility and SEO practices observed. However, the site lacks critical privacy and cookie policies, contact information, and security headers, which are essential for compliance and trust. No advanced analytics or tracking mechanisms are detected, suggesting minimal user tracking. The domain registration is standard but lacks detailed registrant information, which slightly impacts trustworthiness. Overall, the site is functional and informative but requires improvements in privacy, security, and contact transparency to enhance credibility and compliance.

W

Wohnbau Weil

wohnbau-weil.de

47

Wohnbau Weil is a small local real estate company based in Germany, specializing in housing market services, senior living facilities, social management, and tenant support. Their website provides information about available apartments, senior housing, social engagement initiatives, and tenant communications. The site is primarily informational with basic navigation and content structure, targeting residents and tenants in the Weil am Rhein area. Technically, the website is built with basic HTML and CSS without modern CMS or frameworks detected. Hosting appears to be provided by netcup based on DNS nameservers. The site lacks advanced technical features such as mobile optimization, accessibility enhancements, or SEO best practices. No analytics or tracking technologies are present, indicating minimal user data collection. From a security perspective, the website does not show evidence of HTTPS enforcement or security headers, which lowers its security posture. There are no visible privacy or cookie policies beyond a basic imprint/privacy page, and no incident response or vulnerability disclosure information is provided. The WHOIS data is consistent with the website's business profile, indicating legitimacy. Overall, the website is functional for its purpose but would benefit from improvements in security, privacy compliance, and technical modernization to enhance trust and user experience.

H

HC24 GmbH & Co. KG

hc24.de

55

HC24 GmbH & Co. KG operates an online platform specializing in furnished temporary housing rentals across Germany. The website offers a user-friendly search and booking experience for furnished apartments, rooms, and houses, targeting individuals seeking flexible living arrangements. The company positions itself as a trusted intermediary with verified listings and customer support. Technically, the website is built on modern frameworks such as Next.js and React, with media assets hosted on Amazon S3, ensuring a moderate to good performance and mobile optimization. Security-wise, the site enforces HTTPS and implements a comprehensive cookie consent mechanism, though lacks visible security headers and explicit security or privacy policy pages. Overall, the site is professional, trustworthy, and compliant with basic privacy regulations, but could improve transparency and security posture by publishing detailed policies and contact information.

L

Lofo-Gewerbepark

lofo-gewerbepark.de

41

Lofo-Gewerbepark is a commercial real estate provider specializing in offering industrial and production land and properties in Weil am Rhein, Germany, strategically located in the tri-border area of Germany, France, and Switzerland. The website presents a professional image with clear business focus on attracting handcraft and production companies seeking growth opportunities in a well-connected location. The technical infrastructure is based on the Weblication® CMS platform, with a moderate performance profile and good mobile and accessibility features. Security posture is moderate, with HTTPS likely enabled but lacking explicit security headers and detailed security policies. Privacy compliance is adequate with accessible privacy and cookie policies, though terms of service and incident response information are missing. Overall, the site is trustworthy and suitable for its business purpose but could improve in security and contact transparency.

S

Städte-Verlag E. v. Wagner & J. Mitterhuber GmbH

staedte-verlag.de

56

Städte-Verlag E. v. Wagner & J. Mitterhuber GmbH is a well-established media company specializing in cartographic advertising media such as city maps, brochures, online portals, and digital infoterminals. With over 70 years of market leadership in Germany and subsidiaries in neighboring countries, the company targets both end-users seeking orientation and businesses aiming to advertise in relevant local contexts. The business model centers on direct sales through a dedicated field sales team, supported by modern digital platforms and traditional print media. Technically, the website is built on TYPO3 CMS, integrates Google Tag Manager and Cookiebot for analytics and consent management, and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent but lacks published security policies or incident response contacts. Overall, the site is professional, trustworthy, and compliant with GDPR, though it could improve transparency around security and vulnerability disclosures.

G

Gemeinde Zell ZH

zell.ch

40

The website www.zell.ch serves as the official digital presence of the Gemeinde Zell ZH, a small Swiss municipality. It provides comprehensive information about the community, including local governance, services, events, and economic activities. The site targets local residents, businesses, and visitors seeking municipal information or services. The business model is centered on public service delivery and community engagement, positioning the municipality as a trusted local authority. Technically, the website employs a modern CMS platform (i-web CMS) with a clean HTML5 and CSS3 implementation, leveraging JavaScript modules and Matomo analytics for visitor insights. The site is mobile-optimized and accessible, with good SEO practices and structured navigation. Performance is moderate, with no critical technical debt observed. From a security perspective, the site enforces HTTPS and uses secure login forms. However, it lacks explicit security headers and does not publish a dedicated security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is addressed with a clear privacy and cookie policy, including user consent for analytics. Overall, the website is a well-maintained, trustworthy municipal portal with a strong focus on community service. Strategic improvements in security policy transparency and header implementation could further enhance its security posture and user trust.

G

Gemeinde Wila

wila.ch

46

Gemeinde Wila operates as a local government entity providing administrative and community services to residents of Wila, Switzerland. The website serves as an information hub and service portal, offering access to online administrative functions, news, events, and official communications. The site targets local citizens and stakeholders seeking municipal information and services. Technically, the site is built on the Swiss eGovernment CMS GOViS, leveraging modern JavaScript libraries such as jQuery and Font Awesome for UI elements, and employs Matomo for privacy-conscious analytics tracking. The website demonstrates good mobile responsiveness, accessibility, and SEO practices, ensuring a positive user experience. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms compliant with GDPR, though it lacks explicit security policies or incident response disclosures. Overall, the site is trustworthy, professionally maintained, and aligned with the expectations for a municipal government portal.

E

Else Kröner-Fresenius-Stiftung

ekfs.de

54

Else Kröner-Fresenius-Stiftung (EKFS) is a well-established German non-profit foundation founded in 1983, dedicated to funding medical research and supporting humanitarian projects. The website clearly communicates the foundation's mission, funding opportunities, and recent news, targeting medical researchers and humanitarian stakeholders. The organization maintains a professional online presence with comprehensive content and clear navigation, supporting its credibility and outreach efforts. Technically, the website is built on Drupal 10, leveraging modern web technologies including Matomo for privacy-conscious analytics and AddToAny for social sharing. The site is mobile-optimized, accessible, and performs moderately well. Hosting appears stable with consistent domain and DNS configurations. From a security perspective, the site enforces HTTPS, implements cookie consent mechanisms aligned with GDPR, and respects user privacy by disabling tracking cookies unless consented. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks explicit security policy documentation and incident response contacts, which are recommended for enhanced trust and compliance. Overall, EKFS demonstrates a strong digital maturity and trustworthy online presence suitable for its non-profit healthcare sector role. Strategic improvements in security transparency and formal policies would further strengthen its posture.

S

Stiftung Leben mit Krebs

stiftung-leben-mit-krebs.de

39

Stiftung Leben mit Krebs is a German non-profit organization dedicated to improving the quality of life for people affected by cancer. The foundation operates multiple funding and charity projects aimed at supporting cancer patients and raising awareness. Their website is professionally designed using WordPress and Elementor, hosted on Cloudpit, and includes comprehensive privacy and cookie policies with consent management, reflecting a strong commitment to GDPR compliance. Contact information and social media presence are clearly provided, enhancing accessibility and trust. Technically, the website employs modern web technologies and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies could be improved. No WAF or blocking mechanisms interfere with content accessibility. Overall, the website presents a trustworthy and professional image suitable for its healthcare and non-profit mission. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining up-to-date software to further strengthen security and compliance.

H

Haufe X360

haufe-x360.ch

52

Haufe X360 is a cloud-based ERP software platform designed specifically for small and medium-sized enterprises (KMU) primarily in Switzerland and the German-speaking DACH region. The company leverages strong technology partnerships with Acumatica and Microsoft Azure to deliver a scalable, modular ERP solution that integrates core business functions such as finance, CRM, production, and e-commerce. The website presents a professional and comprehensive overview of their offerings, targeting mid-market companies seeking digital transformation and process automation. Technically, the site is built on TYPO3 CMS, uses modern consent management via Usercentrics, and integrates Google Tag Manager for analytics. Hosting is implied to be on Microsoft Azure, ensuring robust cloud infrastructure. Security posture is strong, supported by ISO 27001 certification and encrypted data storage in German data centers. However, the site lacks a publicly accessible privacy policy and explicit incident response or vulnerability disclosure information, which are areas for improvement. Overall, the website is well-designed, content-rich, and trustworthy, with no signs of blocking or WAF interference.

B

Bank für Kirche und Diakonie eG - KD-Bank

kd-bank.de

11

Bank für Kirche und Diakonie eG - KD-Bank is a specialized cooperative bank with a century-long tradition, focusing on ethical and sustainable financial services primarily for church and diaconal institutions as well as private customers. The bank offers a broad range of services including private banking, business accounts, sustainable investment funds, financing solutions, and a dedicated donations portal. Their market position is strong within their niche, emphasizing trust, sustainability, and community engagement. Technically, the website is built on modern frameworks such as Angular and integrates Adobe Experience Manager components, ensuring a responsive and accessible user experience. Security posture is robust with HTTPS enforcement, consent management, and no visible vulnerabilities, although explicit security headers should be confirmed. Overall, the site demonstrates high professionalism, good privacy compliance, and strong business credibility.

A

Agrola Ladelösungen

ladeloesungen.ch

36

Agrola Ladelösungen is a Swiss-based company specializing in providing comprehensive charging solutions for electric vehicles. Their business model focuses on renting, operating, and monitoring charging stations, targeting tenants, property professionals, and fleet managers. The company positions itself as a niche provider in the energy and transportation sectors, offering tailored services for residential and commercial clients. The website reflects a professional and consistent brand image with clear navigation and relevant content, supporting their market presence since 2021. Technically, the website is built on WordPress using Elementor and several modern JavaScript libraries and plugins, indicating a mature digital infrastructure. The site is mobile-optimized and employs standard SEO practices, though performance is moderate. Analytics tools such as Google Analytics and LinkedIn Insight are integrated for user tracking and marketing purposes. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers and explicit security policies. No forms or sensitive data exposures were detected, but the absence of privacy and cookie policies represents a compliance gap, especially under GDPR. The WHOIS data aligns well with the business claims, supporting the domain's legitimacy. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security hardening to improve trust and regulatory adherence.

Deine Wege is a German-language website operated under the auspices of the Deutscher Verkehrssicherheitsrat (DVR), focusing on promoting safe mobility in corporate and public sectors. The platform offers a variety of services including prevention planning, consulting, seminars, safety trainings, campaigns, and a media/material portal. The website is well-branded with consistent use of logos from reputable German traffic safety and insurance organizations, indicating a strong market position within the transportation safety sector. The target audience primarily includes businesses and organizations interested in traffic safety and mobility management. Technically, the site is built on TYPO3 CMS and uses Matomo for analytics with privacy-conscious configurations such as disabled cookies and a clear cookie consent mechanism. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content.

The website spiraclethemes.com is currently inaccessible beyond a security challenge page that blocks direct content access. This page appears to be a generic WAF or anti-bot challenge, preventing analysis of the actual website content. The domain is registered since 2016 with a reputable registrar but uses DNS parking name servers and lacks DNSSEC, suggesting minimal active hosting or a placeholder status. No business, contact, or policy information is available on the landing page. The technical infrastructure is minimal, with only JavaScript used for the challenge mechanism. Security posture is weak due to lack of visible HTTPS enforcement and security headers, compounded by the blocking challenge. Overall, the site cannot be fully assessed for business or security maturity due to this access restriction.

P

Poper

showpopup.com

72

Poper is a technology company offering an AI-powered onsite engagement platform that enhances user interactions, retention, and conversion rates through smart popups, widgets, notifications, and gamification tools. The company targets website owners, e-commerce stores, and marketers seeking to improve engagement and sales. Their market position is supported by serving over 2000 brands and providing a comprehensive suite of AI-driven marketing tools. Technically, the website is built on modern frameworks such as Next.js and React, with good SEO, mobile optimization, and performance. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although no explicit security policy or incident response contacts are published. Overall, the website is professional, trustworthy, and well-structured, with privacy and cookie policies in place. WHOIS data is privacy protected, which is justified for this SaaS business, but limits registrant transparency.

The website moranduzzo.com is currently inaccessible beyond a security challenge page implementing a client-side proof-of-work CAPTCHA. This indicates the presence of a Web Application Firewall (WAF) or similar security mechanism designed to block automated access and bots. Due to this, no substantive business content, contact information, or policies are available for analysis. The domain is long-established, registered since 1997, with stable registrar status but lacks DNSSEC and visible security headers. The technical infrastructure includes advanced JavaScript cryptographic functions and uses AWS Cloudfront CDN for content delivery. The security posture is moderate given the CAPTCHA protection but lacks transparency in policies and contact channels. Overall, the site is low in content quality and business credibility due to the blocking mechanism and absence of public information.

The website www.holyart.it is currently inaccessible, returning a 403 Forbidden error page with minimal HTML content. Due to this access restriction, no meaningful business, technical, or security information could be extracted or analyzed. The lack of accessible content prevents assessment of the company's market position, services, or compliance posture. Technically, the site shows no metadata, scripts, or security headers, indicating a lack of publicly available infrastructure details. Security posture cannot be evaluated beyond the fact that access is blocked, which may be intentional or due to misconfiguration. Overall, the site presents a high risk of being non-operational or improperly configured, and no trust or credibility indicators are visible.

LibreriadelSanto.it is an established Italian online bookstore specializing in Catholic religious books, articles, and media. The website offers a broad catalog exceeding 100,000 items including new, used, and ebook formats. It targets Italian-speaking customers interested in religious literature and related products. The business operates an e-commerce model with customer support and a clear focus on religious retail. Technically, the site uses a mix of legacy and modern technologies including jQuery, Google Tag Manager, and Iubenda for privacy compliance. The site is hosted on Amazon Cloudfront CDN, ensuring reasonable performance and availability. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected. WHOIS data aligns well with the business profile, indicating legitimacy and transparency. Overall, the site is professional, privacy-conscious, and well-positioned within its niche market.

F

Francesco Diani

bibbia.net

53

The website www.lachiesa.it/bibbia/ is a niche religious platform offering the Italian Bible in three versions with synoptic comparison and search capabilities. It targets Italian-speaking Christian audiences seeking easy and free access to biblical texts and audio files. The business is small-scale and informational, managed by an individual named Francesco Diani. Technically, the site uses basic HTML, CSS, and JavaScript with integrations for Google Tag Manager and Iubenda cookie consent. The design and user experience are functional but basic, with moderate performance and limited mobile optimization. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and incident response information. Privacy compliance is partial due to the absence of a privacy policy and terms of service pages. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the site.

The website 'LITURGIA DELLE ORE' serves as an Italian-language platform providing liturgical content related to the Liturgy of the Hours, targeting Italian-speaking Catholics and religious practitioners. It offers daily prayers, liturgical hours, and downloadable content such as Word and ePub files, alongside a newsletter subscription. The business model is informational and non-commercial, focusing on niche religious content. The site is small in scale and primarily serves a specialized audience. Technically, the website employs AngularJS 1.6.9, W3.CSS, and Font Awesome for its frontend, with some scripts and advertising tags commented out. The site shows moderate performance and basic mobile optimization. However, the use of an outdated AngularJS version and lack of visible security headers indicate technical debt and potential security risks. SEO and accessibility features are basic, with no structured data or Open Graph metadata present. From a security perspective, the site lacks explicit privacy and cookie policies, and no incident response or security policy information is provided. The absence of security headers and use of outdated libraries reduce the security posture score. No WAF or blocking mechanisms are detected, and the content is accessible. The domain uses privacy protection for WHOIS data, which is justified given the site's nature. No suspicious patterns or exposed sensitive data were found. Overall, the website is functional and provides relevant religious content but would benefit from improved security practices, updated technologies, and enhanced privacy compliance to increase trust and protect users better.

F

Francesco Diani

santiebeati.it

57

The website santiebeati.it is an Italian-language religious encyclopedia dedicated to saints, blessed individuals, and witnesses of faith. It offers extensive biographical content, images, and indexes for over 14,500 entries, targeting users interested in Catholic hagiography and religious studies. The site is operated by Francesco Diani and includes newsletter subscription and advertising as key components of its business model. Technically, the site uses standard web technologies including Google Analytics, Google Tag Manager, and Ezoic for advertising and consent management. While the site is accessible and functional, it lacks advanced security headers and formalized security or incident response policies. Privacy compliance is basic, with a privacy policy hosted externally and cookie consent managed via Gatekeeper Consent and Ezoic scripts. Overall, the site is a niche informational resource with moderate technical maturity and basic security posture.

F

Francesco Diani

siticattolici.it

6

Siti Cattolici Italiani is a niche directory website curated by Francesco Diani, providing a comprehensive and updated listing of Catholic websites across Italy. The site targets the Italian Catholic community and those interested in Catholic institutions, offering categorized indexes including dioceses, parishes, religious orders, and Catholic cultural entities. The business model is primarily informational, serving as a resource rather than a commercial platform. The website is small-scale and appears to be a personal or hobby project rather than a corporate entity. Technically, the website relies on outdated HTML frameset technology, which negatively impacts user experience, accessibility, and SEO. The presence of Google Tag Manager indicates some level of analytics and tracking, but there is no evidence of modern CMS usage or mobile optimization. Performance is moderate but limited by legacy design choices. Security posture is weak, with no visible HTTPS enforcement or security headers, and no privacy or cookie policies are present to ensure GDPR compliance. From a security perspective, the site lacks critical protections such as HTTPS and security headers, and no incident response or vulnerability disclosure mechanisms are evident. The use of privacy-protected WHOIS data is typical for small personal sites but reduces transparency. Overall, the site is safe in terms of content but requires significant improvements in security and privacy compliance to meet modern standards. The overall risk is moderate due to outdated technology and lack of security best practices. Strategic recommendations include migrating to modern web standards, implementing HTTPS, adding privacy and cookie policies, and enhancing security headers and incident response capabilities.

J

Jungwacht Blauring Schweiz

jubla.ch

56

Jungwacht Blauring Schweiz is a well-established non-profit youth organization focused on providing meaningful leisure activities and camps for children and adolescents in the German-speaking part of Switzerland. The organization operates through a large network of approximately 400 local groups, offering structured programs and volunteer opportunities. The website reflects a professional and consistent brand image, targeting families and youth participants. Technically, the site leverages modern web technologies including Google Tag Manager, Hotjar, and Google Maps API, built on the TYPO3 Neos CMS framework. The site is mobile-optimized with good SEO and accessibility basics. Security posture is solid with HTTPS and some security best practices, though explicit security headers and policies are not fully implemented. Privacy compliance is limited due to the absence of visible privacy and cookie policies. Overall, the domain registration aligns well with the organization's claims, supporting legitimacy and trustworthiness.

M

mediaspects Beratungsgesellschaft für neue Medien mbH

mediaspects.com

47

Mediaspects Beratungsgesellschaft für neue Medien mbH is a German technology company specializing in software development, telemedicine, online competence, consulting, and OEM development services. Established in 2005, the company targets business clients seeking digital media and healthcare technology solutions. The website is built on TYPO3 CMS with Bootstrap and jQuery, reflecting a moderate level of digital maturity with basic mobile optimization and SEO practices. Security posture is adequate with HTTPS usage and no visible vulnerabilities, but lacks advanced security headers and cookie consent mechanisms. Privacy compliance is minimal with a basic privacy policy and no cookie banner. Overall, the website presents a professional image with clear contact information and consistent branding, but could improve in privacy and security transparency.

B

Baufragen Software GmbH

baufragen-software.com

51

Baufragen Software GmbH is a specialized software provider focused on the construction industry, offering platforms such as Baufragen.de and Bauspot.de that serve as expert knowledge bases and social media platforms for construction professionals. The company targets a broad audience including architects, planners, craftsmen, real estate professionals, and building authorities, positioning itself as a key player in digital transformation within the construction sector. Founded in 2016 and based in Germany, the company maintains a professional online presence with over 270,000 users engaged in its digital community. Technically, the website employs modern web technologies including jQuery, Cookiebot for GDPR-compliant cookie consent, and Google Tag Manager for analytics and marketing. The site is hosted by Cronon GmbH and uses HTTPS, ensuring secure communications. While the site demonstrates good mobile optimization and SEO practices, there is room for improvement in accessibility and security headers implementation. From a security perspective, the site benefits from HTTPS and a robust cookie consent mechanism but lacks visible security policies or incident response information. No critical vulnerabilities or suspicious activities were detected. The WHOIS data aligns well with the business claims, indicating a legitimate and consistent domain registration. Overall, Baufragen Software GmbH presents a trustworthy and professional digital footprint with good compliance to privacy regulations and a solid technical foundation. Strategic improvements in security headers, incident response transparency, and contact information visibility could further enhance trust and security posture.

B

Baufragen Software GmbH

baufragen.de

55

Baufragen Software GmbH operates a specialized online platform, Baufragen.de, offering free expert consultation in the construction sector via chat. The platform connects users such as architects, planners, craftsmen, and housing companies with over 200 experts across more than 40 competence areas. This unique service aims to streamline research and planning processes in construction projects by providing direct access to product and planning advice online. The company positions itself as an independent, transparent, and cost-free service provider within the German construction industry. Technically, the website employs modern web technologies including JavaScript and Vue.js frameworks, with responsive design optimized for mobile devices. The hosting is managed via rzone.de nameservers, indicating a professional hosting environment. SEO and accessibility are adequately addressed, though some improvements could be made in accessibility features and performance optimization. From a security perspective, the site uses HTTPS and includes CSRF tokens, but lacks visible security headers and explicit cookie consent mechanisms. No direct contact information or security policies are prominently displayed, which could be improved to enhance trust and compliance. WHOIS data aligns well with the business identity, supporting legitimacy. Overall, Baufragen.de presents a professional and trustworthy platform with good content quality and business credibility. However, enhancements in privacy compliance, security headers, and contact transparency would strengthen its security posture and user trust.

2

20 Minuten

20minuten.ch

77

20 Minuten is the largest Swiss news portal offering 24/7 news coverage, videos, and community features primarily targeting the German-speaking Swiss audience. The website demonstrates a mature digital infrastructure using modern frameworks such as Next.js and React, supported by various third-party analytics and advertising technologies. Security posture is solid with HTTPS enforcement and standard security headers, although explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is well addressed through cookie consent mechanisms and a comprehensive privacy policy. Overall, the website presents a professional, trustworthy, and user-friendly platform with extensive content and good technical implementation.

P

Privacy service provided by Withheld for Privacy ehf

tvguide.asia

60

TVGuide.asia is a specialized online media platform offering detailed TV guide and scheduling information primarily for the Australia ACT, Canberra region, with multi-genre and multi-language support. The website targets TV viewers seeking comprehensive and up-to-date channel listings and program schedules. The business model appears to be advertising-supported, leveraging Google Adsense and other ad networks to monetize traffic. The platform also maintains partnerships with related TV guide services such as tvepg.eu and americatvguide.com. Technically, the website employs modern web technologies including Google Fonts, FontAwesome, Google Tag Manager, and Facebook SDK, hosted behind Cloudflare DNS services. The site is mobile-optimized with good navigation and content relevance, though accessibility features are basic. Security posture is adequate with HTTPS enforced and domain transfer protection enabled, but lacks advanced security headers and DNSSEC. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy or terms of service pages detected. Overall, the website is functional and professional but could improve in security and compliance documentation.

A

AmericaTVGuide.com

americatvguide.com

51

AmericaTVGuide.com is a niche media website providing comprehensive TV guide and schedule listings primarily for the United States, with multi-language and multi-country support. The site aggregates channel and program data from various partners and sources, offering users detailed listings across genres such as movies, sports, music, and documentary. The business model appears to be content aggregation monetized through advertising. Technically, the site uses modern web technologies including FontAwesome, Google Fonts, Google Adsense, and Facebook SDK, hosted behind Cloudflare DNS and CDN services. The website is mobile-optimized and offers a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled and domain locks in place, but lacks DNSSEC and security headers, and does not provide privacy or cookie policies, which are compliance gaps. Overall, the domain registration is consistent and legitimate, supporting the business claims. The site is safe for general audiences with no adult or questionable content detected.

C

Caritas

carteculture.ch

54

CarteCulture.ch is a Swiss non-profit website operated under the auspices of Caritas, providing a free personal discount card to financially disadvantaged adults and children aged five and above. The card offers up to 70% discounts on over 4200 cultural, sports, educational, and health offers across Switzerland. The website is multilingual, with French as the primary language for this domain, and supports other Swiss national languages via related domains. The business model focuses on social inclusion and cultural participation, positioning CarteCulture as a trusted national social program supported by Caritas and certified by ZEWO. Technically, the site is built on TYPO3 CMS with a modern but stable technology stack including Bootstrap, jQuery, and Google services for analytics and tag management. The site is mobile-optimized and SEO-friendly, with good navigation and content quality. Security posture is solid with HTTPS enforced and privacy-conscious analytics configurations, though explicit security policies and incident response contacts are not published. Overall, the domain registration data aligns well with the website's claims, indicating legitimacy and trustworthiness.

T

The Skills Development Scotland Co. Limited

apprenticeships.scot

68

The website apprenticeships.scot serves as the official Scottish apprenticeship information portal managed by The Skills Development Scotland Co. Limited. It provides comprehensive resources and services for apprentices, employers, and learning providers in Scotland, facilitating apprenticeship vacancies, guidance, and development. The site is well-positioned as a government-backed platform with a clear focus on education and workforce development in Scotland. Technically, the site employs modern frameworks such as Astro and Svelte, integrates Google Tag Manager for analytics, and uses Iubenda for cookie consent management, reflecting a mature digital infrastructure. The website is mobile-optimized, accessible, and SEO-friendly, offering a professional user experience. Security-wise, the site enforces HTTPS, uses cookie consent mechanisms, and avoids exposing sensitive data, though it could improve by enabling DNSSEC and adding explicit security headers and a security policy page. Overall, the domain registration details align with the website's official nature, indicating high legitimacy and trustworthiness. Strategic recommendations include enhancing DNS security, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen security posture.

W

websiteria GmbH

supcura.ch

48

Supcura, operated by websiteria GmbH, is a Swiss-based small technology company specializing in developing and customizing software applications for the healthcare sector. Their product suite includes several apps designed to optimize healthcare workflows such as rental management, scheduling, notifications, locating assets, and barcode scanning. The company targets healthcare providers seeking digital transformation solutions. The website presents a professional and consistent brand image with clear contact information and client references, positioning itself as a niche player in healthcare technology solutions. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses common plugins such as Yoast SEO and Tidio chat for marketing and customer engagement. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is adequate with HTTPS enforced and cookie consent implemented; however, there is room for improvement in security headers and explicit security policies. No incident response or vulnerability disclosure information is provided. Overall, the website is trustworthy and well-maintained with no signs of malicious content or blocking mechanisms.

A

Alexis Regnaud

alexisregnaud.com

60

Alexis Regnaud is a freelance web and mobile developer with over 10 years of experience, including 5 years at Samsung. The website showcases his expertise in creating custom web and mobile interfaces using modern technologies such as React, Next.js, and React Native. The business model is focused on freelance services with collaboration from trusted partners, targeting clients seeking high-quality digital solutions. Technically, the site is built on a modern stack with excellent performance and mobile optimization. Security posture is good with HTTPS and reCAPTCHA integration, though it lacks some security headers and formal privacy policies. The absence of WHOIS registration data is a concern for domain legitimacy but does not detract from the professional presentation of the site. Overall, the site is trustworthy and professional but would benefit from enhanced compliance and security documentation.

V

Vigicorp

vigicorp.fr

57

Vigicorp is a Nantes-based digital agency specializing in bespoke web development and comprehensive digital transformation services. The company positions itself as an expert in creating and optimizing e-commerce platforms (B2B and B2C), custom business applications, and marketing solutions. Their client portfolio and detailed service offerings indicate a strong market presence in the technology sector, targeting businesses seeking to enhance their digital capabilities. Technically, the website leverages modern CMS platforms such as WordPress, Symfony, Drupal, Prestashop, and Shopify, reflecting a mature and versatile technology stack. The site is well-optimized for performance, mobile responsiveness, and SEO, supported by structured data and comprehensive metadata. Analytics and marketing tools like Matomo and Google Analytics are used with appropriate consent mechanisms, demonstrating digital maturity and privacy awareness. From a security perspective, the site enforces HTTPS, employs security headers, and integrates cookie consent management, indicating a solid security posture. However, explicit security policies and incident response contacts are not found, suggesting areas for improvement. The absence of WHOIS data due to privacy protection is typical for professional agencies and does not detract from the site's legitimacy. Overall, Vigicorp's website reflects a professional, trustworthy, and secure digital presence suitable for its business model. Strategic recommendations include publishing a dedicated security policy, incident response information, and a vulnerability disclosure policy to further enhance trust and compliance.

0

Intimate Private Equity Events in Europe

0100conferences.com

66

Zero One Hundred Conferences operates as a niche event organizer specializing in intimate private equity networking events across Europe. The website positions itself as a premier platform for private market professionals seeking exclusive conference experiences. The business model centers on event facilitation and networking services tailored to private equity stakeholders. Technically, the website employs modern web technologies including Vue.js/Nuxt.js frameworks, and integrates multiple third-party analytics and marketing tools such as Google Analytics, HubSpot, Facebook Pixel, and LinkedIn Insight Tag. Hosting is via Amazon CloudFront CDN, supporting moderate performance and good mobile optimization. Security posture is moderate with HTTPS likely enabled but lacking visible security headers and formal privacy or cookie policies, which are critical for compliance and trust. The absence of WHOIS registration data raises concerns about domain legitimacy and registration status, impacting overall trustworthiness. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. Overall, the site is professional and content-rich but requires improvements in security, compliance, and transparency to enhance credibility and risk posture.

1

100% SPORT

100prozent-sport.at

57

100% SPORT is an Austrian non-profit organization dedicated to promoting gender competence and safe sport within the Austrian sports community. Established by the Austrian Ministry of Sport as an autonomous association, it serves as a national center for advancing gender equality and safe sport agendas. The organization offers training, advisory services, and networking opportunities to sports organizations, athletes, and stakeholders. The website reflects a professional and consistent brand presence, supported by government and partner logos, and targets sports organizations and individuals interested in gender and safety issues in sports.

Naturfreunde Österreich is a well-established non-profit organization dedicated to promoting nature, environmental protection, and outdoor activities across Austria. The website serves as a comprehensive portal for members and the public, offering information on memberships, events, educational courses, insurance, and merchandise. The organization maintains a strong regional presence with multiple subsidiary domains representing Austrian states. Technically, the website is built on the SilverStripe CMS and employs modern JavaScript libraries such as AngularJS and jQuery, ensuring a responsive and user-friendly experience. Security measures include HTTPS enforcement and standard security headers, contributing to a solid security posture. Privacy and cookie policies are present with consent mechanisms, reflecting GDPR compliance. However, explicit incident response and vulnerability disclosure information are not publicly available, which could be improved. Overall, the website is professional, trustworthy, and well-aligned with the organization's mission.

A

ASKÖ Burgenland

wirbewegenburgenland.at

42

ASKÖ Burgenland is a regional non-profit sports association based in Austria, focused on promoting diverse sports activities and supporting local sports clubs. The organization offers a variety of services including training, event organization, funding facilitation, and health programs. It operates under the umbrella of the ASKÖ Bundesorganisation, indicating a structured and established presence in the Austrian sports sector. The website reflects a professional and consistent brand image, targeting sports clubs, athletes, and the general public interested in sports within the Burgenland region. Technically, the website is built on the Internetkonzepte.at CMS and utilizes modern JavaScript libraries such as jQuery, Font Awesome, and Owl Carousel to provide a responsive and user-friendly experience. The site is mobile optimized and includes SEO best practices, although accessibility features are basic. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and uses trusted external libraries but lacks explicit security headers and publicly available security policies or incident response information. Privacy compliance is strong, with a clear GDPR-compliant privacy policy and cookie consent mechanism. Contact information is transparent and professionally presented, enhancing trustworthiness. Overall, ASKÖ Burgenland's website is a well-maintained digital presence that supports its mission effectively. Strategic improvements in security headers and incident response transparency could further enhance its security posture and stakeholder confidence.

A

Action paquets de Noël

paquetsdenoel.ch

52

The website www.paquetsdenoel.ch represents a Swiss non-profit initiative called 'Action paquets de Noël' focused on collecting and distributing Christmas gift packages to needy populations in Eastern and Southeastern Europe. It is a collaborative project involving four established charitable organizations, providing a strong trust foundation and community engagement. The site offers information on participation, collection points, sponsorship, and related events, targeting individuals and groups interested in charitable giving and solidarity. Technically, the website is built on WordPress with modern plugins like Yoast SEO and Divi Builder, ensuring good SEO and mobile responsiveness. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and policies could be improved. Privacy compliance is basic, lacking cookie consent mechanisms and detailed GDPR indicators. Overall, the site is professional, trustworthy, and well-positioned within its charitable niche.

L

Licht im Osten Schweiz

lio.ch

65

Licht im Osten Schweiz is a well-established non-profit organization founded in 1920, dedicated to providing humanitarian aid and missionary support in Eastern Europe and Central Asia. The organization focuses on alleviating material, medical, and spiritual needs through various projects including child sponsorship, aid distribution, and community development. Their market position is strong within the charitable sector, supported by a consistent brand and clear communication of their mission and services. Technically, the website is built on the Webflow platform, utilizing modern web technologies such as jQuery, Google Tag Manager, and Adobe Typekit fonts. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure suitable for their audience. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect forms, but lacks some advanced security headers and explicit security policies. Privacy compliance is partially addressed with a comprehensive GDPR privacy policy, though cookie consent mechanisms are absent despite the use of tracking scripts. No incident response or vulnerability disclosure policies are evident. Overall, the website presents a low-risk profile with high trustworthiness and professionalism. Strategic improvements in security headers, cookie consent, and transparency policies would enhance their security posture and compliance standing.

H

HMK – Hilfe für Mensch und Kirche

hmk-aem.ch

50

HMK – Hilfe für Mensch und Kirche is a Swiss-based Christian non-profit organization dedicated to supporting persecuted Christians, churches, and humanitarian aid efforts in approximately 60 countries. The website presents a professional and well-structured digital presence, leveraging WordPress with Elementor and various plugins to deliver multilingual content and facilitate donations. The organization maintains active social media channels and integrates a reputable payment processor for donations, enhancing trust and user engagement. Technically, the site employs modern web technologies, SEO best practices, and performance optimizations such as lazy loading and caching. Security posture is solid with HTTPS enforcement and partial security header implementation, though improvements are recommended in header completeness and incident response transparency. Privacy compliance is basic, with a cookie consent mechanism but no explicit privacy or security policies found. Overall, the site is trustworthy, well-maintained, and effectively supports the organization's mission.

C

Christliche Ostmission

ostmission.ch

66

Christliche Ostmission is a Swiss-based non-profit organization dedicated to combating human trafficking, promoting education and business development, and providing direct aid in emergency situations primarily in Eastern Europe. The organization has a strong market position supported by over 50 years of history and recognized certifications such as the Ehrenkodex SEA. Their website reflects a professional and trustworthy presence with clear calls to action for donations and volunteer engagement. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes a consent management platform for GDPR compliance. Security posture is solid with HTTPS and privacy-conscious analytics, though there is room for improvement in security headers and incident response transparency. Overall, the website is well-structured, accessible, and compliant with privacy regulations, supporting the organization's credibility and donor confidence.

A

AVC Schweiz

avc-ch.org

55

AVC Schweiz is an established international non-profit organization founded in 2009, dedicated to supporting persecuted Christians and people in need worldwide. The organization operates in over sixty countries and engages local partners to deliver humanitarian aid, advocacy, and community support. Their website reflects a professional and consistent brand presence, offering multilingual content, event information, donation options, and volunteer opportunities. Technically, the site is built on Joomla CMS with modern frameworks like Bootstrap and integrates Matomo for analytics, ensuring a moderate to good performance and mobile optimization. Security posture is adequate with HTTPS enforced and CSRF protections in forms, but lacks advanced security headers and DNSSEC. Privacy compliance is basic with privacy and cookie policies present but no active consent mechanism. Overall, AVC Schweiz demonstrates a credible and trustworthy online presence aligned with its mission.

A

ASKÖ Sport GmbH

abc-ooe.at

45

ASKÖ Sport GmbH operates the ABC Bewegungscenter Oberösterreich, a regional sports and event center located in Linz, Austria. The company provides a range of services including sports activities, seminar facilities, accommodation, and restaurant services, targeting a general audience interested in sports and events. The website reflects a medium-sized regional business with consistent branding and clear contact information, supporting its market position as a trusted local service provider. Technically, the website is built on the Internetkonzepte.at CMS platform and utilizes modern JavaScript libraries such as jQuery, Owl Carousel, and integrates Google Analytics and Facebook SDK for tracking and marketing purposes. The site is mobile optimized with good navigation and SEO practices, although some accessibility features are basic. Performance is moderate, with room for improvement in loading speed and technical modernization. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, indicating basic privacy compliance. However, it lacks explicit security policies, incident response information, and security headers, which are recommended to enhance its security posture. No vulnerabilities or exposed sensitive data were detected, and the WHOIS data confirms the legitimacy of the domain and company. Overall, the website presents a professional and trustworthy digital presence with moderate technical and security maturity. Strategic improvements in security policies, technical modernization, and enhanced privacy compliance would further strengthen the site's reliability and user trust.

S

Sport Austria

sportaustria.at

68

Sport Austria is a prominent non-profit interest representation and service organization dedicated to organized sports in Austria. The website serves as a central hub for information, services, and communication targeted at sports organizations and stakeholders within Austria. It offers extensive resources including news, training, event information, and policy advocacy, positioning itself as a key player in the Austrian sports ecosystem. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies and Google Tag Manager for analytics. The site demonstrates good mobile optimization, accessibility basics, and SEO practices, providing a user-friendly experience. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and detailed privacy policy. From a security perspective, the site enforces HTTPS and employs cookie consent but lacks explicit published security policies or incident response contacts. No critical vulnerabilities or suspicious content were detected. The WHOIS data aligns well with the website's claims, indicating a trustworthy and legitimate domain. Overall, the website presents a professional and secure digital presence suitable for its audience, with recommendations to enhance security transparency and incident response readiness to further strengthen trust and compliance.

C

Club Aktiv Gesund

clubaktivgesund.at

56

Club Aktiv Gesund is a small regional health and fitness service provider based in Salzburg, Austria. The organization focuses on promoting health and movement for all, offering state-certified health-promoting exercise programs, tests, and lectures on sports nutrition. The website is built on the Wix platform, leveraging standard Wix technologies and polyfills to ensure compatibility and moderate performance. The content is primarily in German and targets a general audience interested in health and fitness in the Salzburg region. The business model centers on service provision in the healthcare and wellness sector with a local market focus. Technically, the website is moderately optimized for mobile devices and has basic SEO features but lacks advanced accessibility and comprehensive privacy compliance mechanisms. Security posture is good with HTTPS enforced and some security hardening scripts, but explicit security headers and incident response information are missing. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. However, the absence of privacy and cookie policies, limited contact information, and lack of terms of service reduce privacy compliance and user trust. Strategic improvements in these areas would enhance the website's security and compliance profile.

V

Venuzle

venuzle.at

49

Venuzle is an Austrian-based online platform specializing in the discovery and booking of sports venues, courses, and camps. It serves sports enthusiasts and local communities by providing a comprehensive directory and booking system for various sports facilities such as football fields, tennis courts, gyms, and specialized courses. The platform is supported by local government and regional partners, enhancing its credibility and reach within Austria. Technically, the website is built on WordPress with WooCommerce and WP Job Manager plugins, integrating Google Analytics and Facebook Pixel for marketing and analytics purposes. While the site is well-structured and offers a good user experience with mobile optimization, it uses outdated WordPress and WooCommerce versions, which may pose security risks. Security posture is moderate with HTTPS enforced but lacking some modern security headers and cookie consent mechanisms. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR, but would benefit from technical updates and enhanced security practices.

W

WAT - Wiener Arbeiter Turn- und Sportverband

wienlaeuft.at

42

Wienläuft is a community-focused running and sports initiative operated by the Wiener Arbeiter Turn- und Sportverband (WAT) in Vienna, Austria. The organization provides running events, training sessions, and community sports activities targeting local sports enthusiasts and runners. The website serves as an information hub for upcoming events, news, and partner collaborations, positioning Wienläuft as a key local non-profit sports organizer in Vienna. Technically, the website is built on the Internetkonzepte.at CMS platform and utilizes common web technologies such as jQuery, Font Awesome, and Google Fonts. It features responsive design elements and moderate performance, with basic SEO and accessibility implementations. The site integrates social media plugins and cookie consent mechanisms, reflecting a moderate level of digital maturity. From a security perspective, the website enforces HTTPS and avoids exposing sensitive data. However, it lacks advanced security headers and a formal security policy or vulnerability disclosure mechanism. Privacy compliance is addressed through a GDPR-compliant privacy policy and cookie consent banner. Contact information is clearly provided, enhancing business credibility. Overall, Wienläuft presents a trustworthy and professional online presence suitable for its community sports mission. Strategic improvements in security headers, accessibility, and formal security policies would further strengthen its posture and compliance.