Security Directory

T

Turn10

turn10.at

49

Turn10 is a specialized platform dedicated to apparatus gymnastics (Gerätturnen) primarily serving clubs and schools in Austria and Germany. The website provides news, training programs, event schedules, results, and contact information, positioning itself as a key resource within the regional gymnastics community. It maintains partnerships with several recognized sports organizations, enhancing its credibility and reach. The business model appears to be non-profit or association-based, focusing on education and community support rather than commercial sales, although a shop is available for gymnastics-related products. Technically, the website employs standard web technologies including HTML5, CSS, and JavaScript, with some use of external libraries such as iframe-resizer. The site is mobile-optimized and offers a clear navigation structure. Performance is moderate with no major technical issues detected. The absence of heavy analytics or tracking scripts suggests a privacy-conscious approach. However, no CMS or hosting provider details are evident from the content. From a security perspective, the site uses HTTPS and implements a cookie consent banner, indicating GDPR awareness. No advanced security headers or explicit security policies were found, and no incident response contacts are provided. The lack of visible vulnerabilities or exposed sensitive data is positive, but security posture could be improved by adding security headers and formal policies. Overall, the website is trustworthy and professional, with a high degree of content relevance and user experience quality. The lack of WHOIS data due to EURid privacy restrictions limits domain age and registrant verification, but the alignment of domain and content with known gymnastics organizations supports legitimacy. Strategic recommendations include enhancing security headers, publishing incident response information, and adding terms of service for legal completeness.

Ö

ÖFT - Österr. Fachverband für Turnen

oeft.at

49

Turnsport Austria is the official Austrian federation representing approximately 450 gymnastics clubs with over 90,000 members across various disciplines including artistic gymnastics, rhythmic gymnastics, trampoline, sport aerobics, and more. The organization serves both grassroots and elite sports communities, providing event organization, training, and certification services. The website reflects a well-maintained digital presence with comprehensive event calendars, news updates, and social media integration, targeting athletes, coaches, clubs, and sports enthusiasts in Austria. Technically, the site uses a custom CMS by Internetkonzepte.at, leveraging modern JavaScript libraries such as jQuery and Owl Carousel, and is mobile responsive with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, indicating stable and accessible infrastructure. Overall, the site demonstrates a mature digital footprint appropriate for a national sports federation.

A

ASKÖ WAT Wien

askoewat.wien

42

ASKÖ WAT Wien is a well-established regional sports association based in Vienna, Austria, operating under the umbrella of the ASKÖ Bundesorganisation. The organization focuses on providing diverse sports programs, supporting sports clubs, and promoting health and fitness activities for a broad audience including athletes, clubs, and the general public. Their website reflects a professional and community-oriented approach with clear navigation and relevant content. Technically, the site uses a mix of established JavaScript libraries and a proprietary CMS, delivering moderate performance and good mobile responsiveness. Security posture is adequate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms, indicating room for improvement in compliance and security best practices. The absence of WHOIS data reduces transparency but does not detract significantly from the site's legitimacy given the professional presentation and active content. Overall, the site is trustworthy and serves its community well, though enhancements in privacy compliance and security hardening are recommended.

A

ASKÖ Tirol

askoe-tirol.at

40

ASKÖ Tirol is a well-established regional sports association based in Innsbruck, Austria, dedicated to promoting diverse sports activities, health, and fitness programs within the Tirol region. The organization supports local sports clubs, organizes championships, and offers educational courses and community events. The website reflects a professional and community-focused business model with a strong regional presence and partnership ecosystem anchored by the ASKÖ Bundesorganisation. Technically, the website uses a traditional CMS platform with modern JavaScript libraries and is mobile-optimized, though there is room for improvement in security headers and incident response transparency. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks advanced security policies or vulnerability disclosure mechanisms. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact information and social media engagement, making it a reliable resource for its target audience.

A

ASKÖ Steiermark

askoe-steiermark.at

10

ASKÖ Steiermark is a regional non-profit sports association based in Graz, Austria, focused on promoting diverse sports activities, memberships, training, and community engagement within the Styria region. The organization operates under the umbrella of the ASKÖ Bundesorganisation, providing services such as sports center facilities, educational programs, and project funding. The website reflects a well-structured and professional digital presence, targeting sports clubs, athletes, and the general public interested in sports in Styria. Technically, the site uses a moderate tech stack including jQuery, FontAwesome, and a proprietary CMS by Internetkonzepte.at, with good mobile optimization and basic accessibility features. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are lacking. Privacy compliance is strong with clear cookie consent and a comprehensive privacy policy. Overall, the site is trustworthy and professionally maintained, with clear contact information and partner relationships.

A

ASKÖ Salzburg

askoe-salzburg.at

47

ASKÖ Salzburg is a well-established regional non-profit sports association based in Salzburg, Austria, focused on promoting diverse sports activities, supporting local sports clubs, and providing training and community programs. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to sports enthusiasts and community members in the region. Technically, the site uses a modern JavaScript stack including jQuery and FontAwesome, built on the Internetkonzepte.at CMS platform, and is mobile-optimized with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and incident response disclosures. Overall, the site is trustworthy, GDPR compliant, and provides comprehensive contact information and partner links.

A

ASKÖ Oberösterreich

askoe-ooe.at

52

ASKÖ Oberösterreich is a regional non-profit sports association dedicated to promoting diverse sports activities and supporting sports clubs in Upper Austria. The organization provides a wide range of services including club support, sports education, fitness and health programs, and competitive sports event organization. It serves sports clubs, athletes, and community members, positioning itself as a key regional player in sports promotion. The website reflects a professional and consistent brand image aligned with its mission. Technically, the website uses a moderate technology stack including jQuery, FontAwesome, Owl Carousel, and a proprietary CMS by Internetkonzepte.at. The site is mobile optimized and performs moderately well, with basic SEO and accessibility features. Privacy and cookie policies are present and GDPR compliant, though explicit security policies and incident response contacts are not found. From a security perspective, the site enforces HTTPS and uses secure external scripts but lacks advanced security headers and a vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the website's claims, indicating a legitimate and established organization. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. Strategic improvements in security headers, incident response transparency, and accessibility could enhance its security posture and user trust.

A

ASKÖ Niederösterreich

askoenoe.at

48

ASKÖ Niederösterreich is a well-established regional non-profit sports association dedicated to promoting diverse sports activities and supporting sports clubs in Lower Austria. The organization offers a variety of projects, training programs, and community services aimed at athletes, sports clubs, and enthusiasts. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its target audience. Technically, the website employs a modern technology stack including jQuery, Font Awesome, and several UI libraries, running on a custom CMS by Internetkonzepte.at. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. Privacy and cookie policies are implemented with GDPR compliance, and social media integration is active, primarily via Facebook. From a security perspective, the site uses HTTPS and has basic security best practices in place, though it lacks advanced security headers and explicit incident response or vulnerability disclosure policies. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data confirms the legitimacy and consistency of the domain registration with the business entity. Overall, the website presents a low-risk profile with a solid foundation for business credibility and user trust. Strategic improvements in security headers, incident response transparency, and vulnerability disclosure could further enhance the security posture and compliance maturity.

A

ASKÖ Kärnten

askoe-kaernten.at

47

ASKÖ Kärnten is a well-established regional sports association based in Kärnten, Austria, focused on promoting diverse sports activities, fitness programs, and supporting local sports clubs. The organization targets sports enthusiasts and community members, providing events, courses, and youth development initiatives. The website reflects a professional and consistent brand presence with clear navigation and relevant content in German. Technically, the site uses a custom CMS (Internetkonzepte.at CMS) with common JavaScript libraries and social media integration, delivering a moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks advanced security headers and incident response disclosures. Overall, the domain registration aligns with the business claims, indicating legitimacy and trustworthiness.

A

ASKÖ Burgenland

askoe-burgenland.at

50

ASKÖ Burgenland is a regional non-profit sports association based in Austria, focused on promoting diverse sports activities, supporting local sports clubs, and organizing events and training programs. The organization serves athletes, trainers, and the general public within the Burgenland region, positioning itself as a key regional player in sports promotion and community engagement. The website reflects this mission with comprehensive content about services, events, and funding opportunities. Technically, the site uses a custom CMS (Internetkonzepte.at CMS) and incorporates modern JavaScript libraries such as jQuery, Owl Carousel, and Fancybox, indicating a moderate level of digital maturity. The site is mobile optimized and provides clear navigation and relevant content. Security-wise, the site enforces HTTPS and uses trusted external libraries but lacks explicit security headers and published security policies. Privacy compliance is strong with clear GDPR-aligned privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-maintained, with room for improvement in security policy transparency and technical enhancements.

A

Aktion Weihnachtspäckli

weihnachtspaeckli.ch

63

Aktion Weihnachtspäckli is a Swiss non-profit organization dedicated to collecting and distributing Christmas gift packages to disadvantaged children, seniors, families, single parents, refugees, and people with disabilities in Eastern Europe. The organization collaborates with four established aid organizations to coordinate collection points, organize events, and distribute packages. Their website is professionally designed, content-rich, and targets donors and volunteers primarily in Switzerland. The site provides comprehensive information about participation, events, and the impact of the donations. Technically, the website is built on WordPress with modern plugins and frameworks, ensuring good SEO and mobile responsiveness. Security posture is solid with HTTPS and secure cookies, but lacks some advanced security headers and explicit incident response information. Privacy compliance is partially addressed with a privacy policy but lacks cookie consent mechanisms. Overall, the website is trustworthy and well-positioned in its niche.

H

HostGator | India

hostgator.in

75

HostGator India is a well-established web hosting provider offering a broad range of hosting services including shared, WordPress, cloud, VPS, dedicated servers, domain registration, and website security solutions. The company targets individuals and businesses in India seeking reliable and affordable hosting solutions. The website prominently announces an upcoming merger with BigRock, indicating strategic consolidation in the Indian hosting market. Technically, the website employs modern web technologies such as jQuery, Bootstrap, Google Analytics, and various marketing and tracking tools, reflecting a mature digital infrastructure. The site is mobile-optimized and SEO-friendly, with structured data enhancing search visibility. Security-wise, the site enforces HTTPS and uses reCAPTCHA and cookie consent mechanisms, but lacks explicit security policies or incident response contacts. Overall, the website is professional, trustworthy, and well-positioned in the Indian hosting sector, though it could improve transparency around privacy and security policies.

N

New Private Markets

newprivatemarkets.com

75

New Private Markets is a subscription-based intelligence service specializing in sustainable investment, ESG, and impact investing across private equity, real estate, infrastructure, and debt sectors. The website targets investors and financial professionals seeking in-depth research and insights in these niche markets. The company positions itself as a trusted source for ESG and impact investing intelligence, leveraging a professional digital presence and subscription model to monetize its content. Technically, the website is built on WordPress with a modern tech stack including WPBakery Page Builder, Slider Revolution, WooCommerce for e-commerce capabilities, Algolia for search, and multiple analytics and marketing integrations such as Google Tag Manager, Marketo, Sailthru, and Datadog. Cookie consent is managed via Cookiebot with compliance to IAB TCF v2.2 standards, indicating attention to privacy regulations. The site is mobile optimized and uses HTTPS, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, employs cookie consent mechanisms, and restricts copy-pasting of content to protect intellectual property. However, it lacks explicit privacy policy and terms of service pages, and no security.txt or incident response contacts are published. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional website content. Overall, the site demonstrates a good security posture and technical maturity but would benefit from enhanced transparency in privacy and security policies. The absence of WHOIS data impacts trustworthiness and should be addressed. Strategic recommendations include publishing comprehensive privacy and terms policies, adding vulnerability disclosure information, and providing clear incident response contacts to improve compliance and trust.

D

Diversidays

diversidays.com

67

Diversidays is a French non-profit organization dedicated to promoting digital inclusion and accelerating diversity within the technology sector. The website presents a professional and consistent brand image, targeting a general audience interested in equality of opportunity and digital empowerment. Their key services revolve around community engagement, inclusion programs, and diversity advocacy in digital fields. Technically, the site is built on WordPress using the Divi theme, with integrations such as Google Tag Manager and Cookiebot for analytics and cookie consent management. The website demonstrates good SEO practices and mobile optimization, although accessibility features are basic. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks DNSSEC and explicit security headers, which are recommended for enhanced protection. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service in the provided content. Overall, the domain registration data aligns well with the organization's profile, indicating legitimacy and transparency.

B

BECOMTECH

becomtech.fr

58

BECOMTECH is a French organization dedicated to promoting gender diversity and equality in the IT and digital sectors, where women are underrepresented. The website serves as an advocacy and educational platform targeting a general audience interested in technology and social inclusion. The organization appears to be a small-sized entity founded in 2018, with a clear mission to foster inclusivity in technology fields. Technically, the website is built on WordPress using the Divi theme, incorporating modern web technologies such as Google Analytics for user tracking and Google Fonts for typography. The site is mobile optimized and presents a professional design with good navigation and content relevance. Security-wise, the site enforces HTTPS and implements a cookie consent banner, but lacks advanced security headers and explicit security or incident response policies. WHOIS data confirms the domain's legitimacy and consistency with the organization's profile. Overall, the website is trustworthy and functional but could improve in privacy compliance and security best practices.

F

Fonds de dotation 16H24

16h24.org

46

The Fonds de dotation 16H24 is a French non-profit foundation dedicated to supporting young people placed in foster care or social assistance to become autonomous between the ages of 16 and 24. The foundation operates under the aegis of Fondation Caritas and focuses on funding projects that help these youths overcome social and economic challenges. The website is professionally designed using WordPress and Elementor, with good SEO practices implemented via Yoast SEO. It is hosted by OVH sas, a reputable provider, and uses HTTPS with a good SSL configuration. Security measures include the use of hCaptcha on forms and domain status protections, though DNSSEC is not enabled and security headers are lacking. Privacy compliance is basic, with a privacy policy present but no explicit GDPR compliance statements or detailed cookie policies. Contact information is limited to a contact form, with no direct emails or phone numbers publicly listed. Overall, the website is trustworthy and well-positioned within its niche non-profit sector.

P

Photoclimat

photoclimat.com

48

Photoclimat is a French non-profit organization that organizes environmental and social photography biennales and exhibitions, primarily in Paris and surrounding regions. The website serves as a platform to promote these cultural events, providing information about upcoming biennales, exhibitions, and opportunities to support or volunteer. The business model is focused on cultural promotion and public engagement through free outdoor exhibitions. Technically, the website is built on WordPress with a modern theme and several plugins for galleries, forms, and analytics. The site is mobile-optimized and uses Google Analytics for visitor tracking. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanism. Contact information is not explicitly provided on the analyzed pages, which may impact user trust. Overall, the website is professional and relevant to its niche but would benefit from enhanced privacy and security practices.

C

Clean my Calanques

cleanmycalanques.fr

56

Clean my Calanques is a Marseille-based non-profit association founded in 2017, dedicated to environmental preservation and raising awareness about ecological issues. The organization focuses on organizing regular clean-up events, educating youth, and fostering partnerships with local businesses and communities. Their website reflects a strong local presence with clear mission statements and community engagement metrics. Technically, the site is built using modern web technologies such as React and Gatsby, hosted via OVH, and integrates Google Tag Manager for analytics. Security posture is solid with HTTPS enabled and no critical vulnerabilities detected, although some security headers could be improved. Privacy compliance is addressed with a GDPR-compliant privacy policy and cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with the organization's mission.

The website at wearesista.com is currently inaccessible, returning a 403 Forbidden error page which blocks access to any meaningful content. The domain is registered with Gandi SAS since 2018 and is valid until 2026, indicating a legitimate registration history. However, the lack of accessible content, absence of privacy, cookie, and terms of service policies, and no contact information severely limit the ability to assess the business or its services. Technically, the site lacks DNSSEC and security headers, and no SSL/TLS details are available from the content provided. Overall, the website appears to be either under maintenance, restricted, or misconfigured, resulting in a poor user experience and low trustworthiness.

F

France Invest

franceinvest.eu

63

France Invest is a prominent French association that federates actors in private equity, debt, and infrastructure investment to support the growth of startups, SMEs, and mid-sized companies in France. The organization focuses on fostering economic growth, job creation, and infrastructure development. The website reflects a mature digital presence with comprehensive content including studies, events, training, and member services, positioning France Invest as a key player in the French finance sector. Technically, the website is built on WordPress with modern integrations such as Algolia for search, Google Tag Manager for analytics, and a cookie consent framework (Tarteaucitron) ensuring GDPR compliance. The site is mobile-optimized and well-structured, providing a good user experience and SEO optimization. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, though explicit security headers are not evident in the HTML. No vulnerabilities or suspicious elements were detected. WHOIS data is privacy protected by EURid, which is typical for .eu domains, and no suspicious registration patterns were found. Overall, France Invest’s website demonstrates a strong business credibility and digital maturity with good privacy compliance and a safe content profile. Strategic recommendations include enhancing security headers and publishing explicit security policies to further strengthen trust and compliance.

E

EMNA Web GmbH

deinadieu.ch

55

DeinAdieu.ch is a Swiss-based online service portal operated by EMNA Web AG, specializing in legal end-of-life planning tools such as testament creation, patient decrees, and advance care directives. The platform targets Swiss residents seeking to manage their legal affairs related to inheritance and healthcare decisions. It holds a strong market position within its niche, supported by a consistent brand presence, media recognition, and partnerships with legal professionals. Technically, the website is built on WordPress with modern JavaScript frameworks and libraries, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is robust with HTTPS enforcement and security headers, though it lacks explicit cookie consent and published security policies. Overall, the site demonstrates high professionalism and trustworthiness, suitable for its audience and business model.

C

Caritas Regio

caritas-regio.ch

65

Caritas Regio is a Swiss non-profit organization dedicated to supporting people affected by poverty and social disadvantage across Switzerland. The website presents a comprehensive range of social, legal, and integration services, alongside opportunities for donations and volunteer engagement. The organization holds the ZEWO certification, indicating recognized trustworthiness in the Swiss charitable sector. The website is professionally designed, multilingual (German and French), and provides clear navigation and relevant content tailored to its target audience.

C

Caritas beider Basel

caritas-beratung.ch

52

Caritas beider Basel operates the Caritas Beratung website, providing free social counseling services to individuals facing temporary financial difficulties in the Basel region of Switzerland. The organization offers budget relief advice, information on social benefits, and potential financial bridging. The website is well-structured, primarily in German, and targets local residents seeking social support. It holds recognized certifications such as SQS and ZEWO, enhancing its credibility and trustworthiness. Technically, the site is built on WordPress with popular plugins like Yoast SEO and Elementor, ensuring good SEO and user experience. Security posture is adequate with HTTPS enforced, though some security headers could be improved. Privacy compliance is basic but present, with a cookie consent mechanism and a privacy policy page. Overall, the site is professional, trustworthy, and serves a clear non-profit social service mission.

C

Caritas

kulturlegi.ch

57

KulturLegi.ch is a Swiss non-profit initiative operated by Caritas that provides a discount card to individuals with limited financial means, enabling access to over 4,200 offers in culture, sports, education, and health sectors across Switzerland. The website is well-branded, consistent, and targets socially disadvantaged groups to promote inclusion. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and integrates Google Analytics and Tag Manager for analytics. The site is mobile-optimized and SEO-friendly with good navigation and content quality. Security posture is solid with HTTPS enforced and privacy compliance evident through cookie consent and a comprehensive privacy policy. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the domain registration aligns well with the business claims, enhancing trust and legitimacy.

C

Caritas beider Basel

caritas-shop.ch

51

Caritas beider Basel operates the Caritas Shop, a non-profit retail platform offering discounted food and daily necessity items to financially vulnerable populations in Switzerland. The shop also provides social employment opportunities, supporting individuals transitioning into the primary labor market. The website is built on WordPress with WooCommerce and Elementor, reflecting a moderate level of digital maturity with good content quality and user experience. The presence of GDPR-compliant cookie consent and privacy policy indicates attention to privacy regulations. However, security posture shows weaknesses, particularly in credential handling via JavaScript and cookies, and lack of HTTP security headers. Overall, the website is legitimate, trustworthy, and serves a clear social mission with room for security improvements.

Teleboy.ch is a Swiss telecommunications service provider specializing in TV streaming and media content delivery. The website is currently inaccessible due to Cloudflare Web Application Firewall blocking access, displaying a 'You are Blocked' message. This prevents a full content and security analysis. The visible content is minimal, with only a contact email provided for support. The technical infrastructure includes Cloudflare services and JavaScript-based analytics. No privacy, cookie, or terms of service policies are present on the landing page, indicating potential compliance gaps. Security headers and SSL configuration details are not available from the provided data, limiting security posture assessment. Overall, the site shows consistent branding but lacks accessible content and transparency for users.

T

TVEpg.eu

tvepg.eu

64

TVEpg.eu is a specialized online media service providing comprehensive TV program guides primarily for Finland, with additional coverage of European and other countries' channels. The website offers multi-language support and detailed channel listings, targeting TV viewers seeking up-to-date program schedules. The business model appears to be advertising-supported, leveraging Google Adsense and social media presence to engage users. The site is hosted via GoDaddy.com, LLC and uses modern web technologies including Bootstrap, Google Fonts, and JavaScript libraries for enhanced user experience. The technical infrastructure supports mobile optimization and reasonable performance, although accessibility features are basic. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks explicit security policies or incident response information. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security disclosures.

O

OneLog AG

oneid.live

72

OneID is a digital advertising identity initiative focused on the Swiss market, enabling privacy-compliant targeting of over 3 million users across premium Swiss publishers. The platform is supported by major Swiss media and advertising companies, positioning it as a key player in Swiss digital advertising. The website is professionally designed, multilingual, and emphasizes user privacy and control through compliance with TCF 2.2 and integration of OneTrust cookie consent mechanisms. Technically, the site is built on Webflow, uses Google Tag Manager for analytics, and includes modern web fonts and scripts, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. WHOIS data is unavailable due to privacy protection, but the website's professional presentation and partnerships suggest legitimacy. Overall, the site demonstrates a good balance of business credibility, technical implementation, and privacy compliance.

B

Bauspot.de

bauspot.de

60

Bauspot.de is a German online platform serving the construction industry by providing product information, training, webinars, and a partner portal for manufacturers. The site targets construction professionals and manufacturers within Germany, positioning itself as a niche resource and marketplace. Technically, the website employs modern technologies such as Vue.js, integrates third-party services like YouTube and Vimeo for video content, and uses Cookiebot for GDPR-compliant cookie consent management. Hosting is provided via German-based nameservers, consistent with the business location. Security posture is solid with HTTPS enabled, CSRF protection, and anonymized IP tracking in analytics, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. No direct contact emails or phone numbers are publicly listed, with contact likely via legal or contact pages. Overall, the website is professional, trustworthy, and well-structured, with moderate tracking and advertising practices primarily through Google services.

I

IGT – Institut für Gebäudetechnologie GmbH

igt-institut.de

55

IGT – Institut für Gebäudetechnologie GmbH is an independent German institute specializing in consulting, training, and lectures focused on modern building technology, smart buildings, energy efficiency, and e-mobility. The company targets professionals and organizations seeking expertise in these areas, offering tailored services including inhouse and web-based training. Their market position is that of a niche expert institute with a clear focus on innovative building solutions. Technically, the website is built on WordPress 6.2.8, utilizing Bootstrap for responsive design and common plugins such as Contact Form 7 and Matomo for privacy-conscious analytics. Hosting is provided by rzone.de, a German hosting provider, and the site employs HTTPS with a good SSL configuration. The site demonstrates moderate performance and good mobile optimization, with basic accessibility features and solid SEO practices. From a security perspective, the site enforces HTTPS and includes a GDPR-compliant cookie consent banner. However, no explicit security headers were detected in the provided data, and there is no published security policy or incident response contact. The use of Matomo analytics indicates a privacy-aware approach. No vulnerabilities or exposed sensitive data were found in the HTML content. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though it could improve its security posture by implementing additional HTTP security headers and publishing security-related policies. The business information is clear and consistent with the domain registration data, supporting a legitimacy score of 80 out of 100.

S

SFS Group

sfs.com

71

SFS Group is a globally recognized supplier specializing in application-critical precision components, mechanical fastening systems, quality tools, and procurement solutions. The company targets industrial and manufacturing sectors, providing mission-critical products embedded in customer processes. Their market position is strong, with a worldwide footprint and a large operational scale. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored for B2B audiences. Technically, the site employs modern JavaScript libraries, Google Tag Manager for analytics, and Cookiebot for privacy compliance, indicating a commitment to data protection and user consent. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though explicit security headers could be improved. The absence of WHOIS data limits domain registration trust verification, but the overall site professionalism and active social media presence support legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and establishing a vulnerability disclosure program to further strengthen trust and compliance.

R

Radio Munot Club

radiomunotclub.ch

32

Radio Munot Club is a non-profit organization supporting the local radio station Radio Munot in Schaffhausen, Switzerland. The club finances investments and supports the training of the radio team, fostering local media presence. The website is well-structured, professionally designed, and provides relevant content for its target audience of members and supporters. Technically, it is built on WordPress with modern plugins and SEO tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and security headers, but lacks explicit security policies and incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and credible, reflecting a legitimate local media support organization.

O

Ombud-PostCom

ombud-postcom.ch

64

Ombud-PostCom is a neutral arbitration service operating under the Swiss Federal Post Commission (PostCom) to resolve civil disputes related to postal services in Switzerland. The website serves as an official platform providing information, dispute submission forms, and annual reports in multiple languages (German, French, Italian, English), targeting both private and business customers within Switzerland. The business model is non-profit and government-affiliated, focusing on avoiding costly and lengthy court proceedings through mediation.

W

webEdition e.V.

webedition.org

47

webEdition e.V. operates the website www.webedition.org, offering an open source web application framework and content management system established since 2001. The platform targets developers, agencies, and content editors seeking scalable and flexible CMS solutions with full control over code. The business model is community-driven, supported by a partner network and licensing variants. The website is professionally designed, content-rich, and well-structured, primarily in German, reflecting a mature and active technology project. Technically, the site uses the webEdition CMS platform with PHP, MySQL, JavaScript, Bootstrap, and jQuery, delivering moderate performance and good mobile optimization. Security posture is solid with HTTPS and Content-Security-Policy headers, though some CSP directives allow 'unsafe-inline' scripts, which could be improved. Privacy compliance is strong, featuring a comprehensive privacy policy, cookie consent modal, and GDPR adherence. However, WHOIS data is unavailable or malformed, limiting domain trust verification. Overall, the site demonstrates high professionalism and trustworthiness with minor areas for security enhancement.

DIABASS PRO 6 is a mature, GDPR-compliant diabetes data management software solution targeting medical practices and clinics primarily in Europe. The product emphasizes local data storage to ensure patient privacy and avoid cloud-related risks. The company mediaspects GmbH operates the website and provides comprehensive support and integration options, including telemedicine and AI-assisted data analysis. The website is professionally designed with detailed product information and device compatibility lists, supporting multiple languages and offering a free trial license. Technically, the site uses standard web technologies with moderate performance and good mobile optimization. Security practices focus on data privacy and encrypted telemedicine data transfer, though some modern security headers and cookie consent mechanisms are missing. The domain registration is consistent with the business claims, showing a long-standing presence in the healthcare software market. Overall, the website and business present a trustworthy and professional image with strong compliance to GDPR and data protection standards.

H

Hochschulbibliothekszentrum des Landes Nordrhein-Westfalen (hbz)

hbz-nrw.de

10

The Hochschulbibliothekszentrum des Landes Nordrhein-Westfalen (hbz) is a key regional institution supporting library processes and services across academic institutions in North Rhine-Westphalia, Germany. Their website provides comprehensive information about their products, projects, literature search services, and publications, targeting libraries, researchers, and students. The organization is positioned as an essential service provider in the education sector with a medium-sized operational scale and a founding date consistent with the domain registration. Technically, the website is built on the Plone CMS platform, utilizing modern web technologies such as jQuery, Leaflet.js, and FontAwesome. It is mobile-optimized, accessible, and integrates Matomo analytics for privacy-conscious user tracking. The site is served over HTTPS with no detected blocking or WAF interference, indicating good digital maturity. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and does not publish a dedicated security policy or incident response contacts. Privacy compliance is well addressed with clear privacy and cookie policies, including a consent mechanism. Contact information is available but no direct email addresses are listed in the HTML content. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements include adding security headers, publishing a security policy, and implementing a vulnerability disclosure mechanism to enhance security posture and transparency.

A

agence logo

agence-logo.fr

10

Agence logo is a small, professional communication and graphic design agency based in Brittany, France, established in 2009. The company specializes in web design, visual identity creation, and printed communication, serving startups, businesses, institutions, and associations primarily in the Brittany region but also internationally. Their website reflects a consistent brand image and offers a portfolio showcasing their expertise. Technically, the site is built on WordPress with modern plugins and tools such as Yoast SEO and ElfSight Instagram feed, indicating a mature digital infrastructure. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though the absence of security headers and explicit security policies suggests room for improvement. Privacy compliance is partial, with cookie consent mechanisms present but no explicit privacy or terms of service pages found. Overall, the website is professional and trustworthy with moderate tracking and analytics usage.

Contenthub is a specialized platform serving the Jubla scout community by providing content elements, blogs, and detailed instructions to assist in website management and migration. The platform targets scout group administrators and offers a niche service focused on content reuse and website support. Technically, the website is built on Neos CMS with modern web technologies, hosted likely behind Cloudflare, and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and cookie consent mechanisms are missing. Overall, the site is professional, trustworthy, and safe for general audiences.

S

Sven Röhler

roehler.ch

26

The website roehler.ch serves as a personal and professional wiki and documentation platform managed by Sven Röhler, focusing on IT solutions and services primarily for small and medium enterprises (KMU) and private users in Switzerland. The site provides extensive technical content, guides, and links related to Linux, Windows, programming, and IT infrastructure. The market position is niche and local, with a focus on knowledge sharing and IT consultancy. Technically, the site is built on CMSimple 5.12 with standard web technologies including HTML5, CSS3, JavaScript, and jQuery. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. Security posture is basic, with no HTTPS enforcement or security headers detected, and no published privacy or cookie policies, which are critical gaps. No contact information or incident response channels are provided, limiting user trust and compliance. Overall, the site is functional and content-rich but requires significant improvements in security, privacy compliance, and professional contact transparency to enhance trust and compliance.

C

CMSimple

cmsimple.org

44

CMSimple.org is the official website for CMSimple, an open source PHP-based content management system that uniquely operates without requiring a database. Founded in 2004 and based in Germany, CMSimple targets users seeking a lightweight, provider-independent CMS solution. The website offers extensive documentation, plugins, templates, and community support, positioning itself as a niche player in the CMS market. The business model revolves around open source distribution supplemented by partner services and sponsorships. Technically, the site uses PHP, JavaScript, and CSS with a focus on simplicity and responsiveness. The site is well-structured, mobile-optimized, and SEO-friendly, though it lacks some advanced accessibility features.

L

Lichtblick Römisch-katholisches Pfarrblatt Nordwestschweiz

lichtblick-nw.ch

52

Lichtblick Römisch-katholisches Pfarrblatt Nordwestschweiz is a regional non-profit publication serving the Catholic parishes in the Swiss cantons of Aargau, Basel, and Solothurn. The website provides parish news, event agendas, job listings, and multimedia content such as videos and podcasts. It targets the Catholic community and interested readers in the region, positioning itself as a trusted source of religious and community information. The business model focuses on information dissemination and community engagement rather than commercial profit. Technically, the website is built on WordPress 6.8.3 with modern web technologies including jQuery, Google Tag Manager, and reCAPTCHA for form security. The site is mobile-optimized with good SEO practices and uses structured data (JSON-LD) for enhanced search engine understanding. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. Email addresses are obfuscated to reduce spam. However, some security headers are not explicitly detected and could be implemented to strengthen security posture. No critical vulnerabilities or exposed sensitive data were found. Overall, the website is professional, trustworthy, and compliant with GDPR and cookie regulations. It provides clear contact information and maintains a consistent brand presence. The risk level is low, with recommendations focusing on enhancing security headers and ongoing maintenance to ensure continued compliance and security.

L

La Chiesa

lachiesa.it

54

LaChiesa.it is a niche Italian-language religious website focused on providing daily liturgical readings, a liturgical calendar, biblical search tools, and links to related Catholic resources. The site targets Catholic faithful and those interested in liturgy, offering informational content supported by donations. Technically, the site employs a variety of JavaScript libraries and ad networks, including Google Tag Manager, TheMoneytizer, and Criteo, with moderate performance and good mobile responsiveness. Security posture is adequate with HTTPS enforced and consent management via Iubenda, but lacks explicit security headers and published security policies. Privacy compliance is basic, with no dedicated privacy or terms of service pages found. Overall, the site is legitimate and consistent with its religious informational purpose, though improvements in security and privacy transparency are recommended.

A

Aliena

aliena.ch

49

Aliena is a Basel-based non-profit organization dedicated to supporting women involved in the sex industry, including those currently active, former workers, and those seeking professional reorientation. The organization focuses on improving living and working conditions, advocating for rights, and combating social exclusion and stigmatization. Their services include information dissemination, language courses, meeting points, and comprehensive support for integration and personal challenges. The website is multilingual, professionally designed, and provides clear contact information, reflecting a focused social service mission. Technically, the website is built on WordPress with several plugins enhancing functionality such as multilingual support (WPML), email obfuscation, and interactive sliders. The site is mobile-optimized and performs moderately well, though some accessibility features could be improved. Security-wise, HTTPS is properly implemented, and email addresses are protected against scraping. However, the absence of security headers and cookie consent mechanisms indicates room for improvement in security posture and privacy compliance. Overall, the security posture is adequate for the organization's scope but lacks formal policies and incident response details. The domain uses privacy protection, which is justified given the sensitive nature of the services. No adult explicit content is present, making the site safe for general audiences. Strategic recommendations include implementing security headers, publishing comprehensive privacy and cookie policies, and adding incident response contacts to enhance trust and compliance.

I

Impulse

plumpopup.com

64

Impulse is a SaaS company offering an all-in-one no-code solution to boost sales for e-commerce stores by providing banners, timers, forms, and popups. The platform targets e-commerce marketers and store owners seeking easy-to-use tools to increase conversions and engagement. The website is professionally designed, mobile-optimized, and integrates modern technologies such as Webflow CMS, Google Tag Manager, and Crisp Chat for customer support. Security posture is strong with HTTPS enforced and CAPTCHA protection on forms, though some security headers are missing and cookie consent mechanisms are absent. The domain is newly registered with privacy protection, consistent with a startup business. Overall, the website demonstrates a mature digital presence with good trust signals and user experience.