Security Directory

A

Agendaless Consulting, Inc.

agendaless.com

40

Agendaless Consulting, Inc. is a specialized consulting firm focused on delivering large-scale Python web application projects, tactical development support, team bootstrapping, and training services. The company positions itself as a pioneer in Python web applications with a global reputation, targeting technology professionals and organizations requiring expert consulting. The website content is professional and clearly communicates the business offerings, although it lacks formal privacy and cookie policies. Technically, the website uses older frontend technologies such as Bootstrap 2.2.2 and jQuery 1.9.0.1, which may impact modernization and mobile responsiveness. The site is accessible without WAF or blocking mechanisms and does not employ analytics or tracking scripts, indicating a minimal user tracking approach. However, security headers and advanced security practices are absent, and HTTPS status is unknown from the provided data. From a security perspective, the site shows basic security posture with no visible vulnerabilities or exposed sensitive data but lacks important compliance documentation such as privacy and cookie policies. The WHOIS data aligns well with the website's business claims, showing consistent registration information and legitimacy. Overall, the site is safe for general audiences and demonstrates high business credibility but requires improvements in security and privacy compliance. Strategic recommendations include implementing HTTPS with strong SSL/TLS, adding security headers, publishing privacy and cookie policies, and enhancing mobile optimization and accessibility to improve user experience and compliance.

The website cheetahtemplate.org serves as the official documentation portal for Cheetah3, a Python-powered open source template engine. The business behind the domain is DamnSimple Solutions, a Canadian entity established in 2001, which aligns with the domain's long registration history. The site targets Python developers and technical users seeking templating and code generation tools. It offers comprehensive documentation, user guides, and community engagement through GitHub. The business model is primarily open source with community support and contributions. Technically, the site is built using Sphinx for documentation, enhanced with JavaScript libraries such as jQuery and Underscore.js. Hosting appears to be professionally managed with AWS DNS infrastructure. The site is moderately optimized for performance and basic mobile and accessibility standards. SEO and metadata are minimal but sufficient for a documentation site. From a security perspective, the site lacks several best practices including security headers, privacy and cookie policies, and incident response contact information. No WAF or blocking mechanisms are detected, and the site content is fully accessible and safe for general audiences. The WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, the site scores moderately well in content quality and business credibility but falls short in privacy compliance and security posture. Strategic improvements in these areas would enhance trust and compliance.

F

Find My Electric

findmyelectric.com

65

Find My Electric operates as a specialized online marketplace focused on the buying and selling of used electric vehicles, including popular brands such as Tesla, Rivian, and others. The platform offers a comprehensive inventory of over 4000 EV listings, targeting consumers interested in affordable pre-owned electric vehicles. The website is built on a WordPress CMS with WooCommerce integration, leveraging modern web technologies and third-party analytics and marketing tools to enhance user experience and business insights. Despite a professional design and good technical implementation, the absence of WHOIS registration data raises concerns about domain legitimacy. Additionally, the lack of visible privacy and cookie policies indicates potential compliance gaps. Security posture is generally good with HTTPS and some best practices in place, but could be improved with enhanced security headers and published security policies. Overall, the site presents a moderate risk profile with recommendations to improve transparency, compliance, and security to strengthen trust and credibility.

E

Evangelisch-reformierte Kirche des Kantons St.Gallen

ref-sg.ch

59

The Evangelisch-reformierte Kirche des Kantons St.Gallen operates as a regional religious institution serving the canton of St.Gallen in Switzerland. The website provides information about church services, community events, pastoral care, and educational offerings. It targets local residents and church members, positioning itself as a trusted non-profit religious organization with a medium-sized operational scope. The site is well-branded and consistent, reflecting its established presence in the community. Technically, the website is built on the Contao CMS platform and leverages modern JavaScript libraries such as Vue.js and jQuery, alongside UI components like Slick Carousel and Colorbox. The site is mobile-optimized and offers a moderate performance profile. SEO and accessibility are basic but functional. No advanced analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS with good SSL configuration but lacks explicit security headers and formal security or incident response policies. No vulnerabilities or exposed sensitive data were found in the HTML content. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the website presents a low-risk profile with good business credibility and moderate technical maturity. Strategic improvements in security headers, cookie consent, and incident response documentation would enhance its security posture and compliance.

T

Thallo Design

thallo.design

47

Thallo Design is a specialized rebranding studio offering comprehensive branding and marketing services to businesses seeking to modernize and enhance their brand identity. The company emphasizes flexibility, proven marketing strategies, and is certified as a female and minority owned business. Their service offerings include brand identity redesign, digital footprint upgrades, campaign management, and brand audits. The website reflects a professional and consistent brand image with a clear focus on client success and quality deliverables. Technically, the website is built on WordPress with common industry tools such as Slider Revolution, Google Analytics, and Hotjar for analytics and user behavior tracking. The site is mobile optimized and demonstrates good SEO practices, though accessibility features are basic. Performance is moderate, with room for improvement in loading speed and security header implementation. From a security perspective, the site uses HTTPS and includes opt-out mechanisms for tracking, but lacks explicit privacy and cookie policies, which may pose compliance risks. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data reduces transparency and trustworthiness, though the website content and certifications support legitimacy. Overall, the site presents a trustworthy and professional business presence with moderate technical maturity and some gaps in privacy compliance. Strategic improvements in security headers, privacy disclosures, and WHOIS transparency would enhance the site's trust and compliance posture.

W

World YWCA

shespeaksworldywca.org

53

World YWCA operates a well-established non-profit digital platform focused on empowering women and girls globally through advocacy, storytelling, and community engagement. The website 'She Speaks' serves as a hub for sharing stories, resources, and opportunities, positioning itself as a key voice in women's leadership and rights. The organization is registered in Switzerland and maintains a consistent brand presence across multiple social media channels. Technically, the site is built on WordPress with a modern plugin ecosystem, including analytics and social integrations, hosted on Infomaniak servers. Security measures include HTTPS and reCAPTCHA, though there is room for improvement in DNS security and HTTP headers. Privacy compliance is partial, with a cookie consent mechanism but no explicit privacy policy found in the provided content. Overall, the site demonstrates a solid business credibility and technical foundation with moderate security posture.

T

Think Blue Data

thinkbluedata.com

47

Think Blue Data is a technology service provider specializing in interactive data experiences, custom data tools, and workflows tailored to client branding. Founded in 2012, the company positions itself as a niche player in data visualization and big data integration, targeting businesses seeking to transform complex data into actionable insights. The website is built on Drupal 10 with modern front-end frameworks and big data technologies, hosted by GoDaddy. The site demonstrates good design quality, mobile optimization, and accessibility, but lacks explicit privacy and cookie policies, as well as security headers and incident response information. The domain registration is consistent with the business age and shows no suspicious patterns. Overall, the website is professional and trustworthy but could improve compliance and security posture.

E

Eric Frank Trust

ericfranktrust.org.uk

58

The Eric Frank Trust is a small UK-based non-profit organization dedicated to supporting the development of young people, particularly through leadership development within Scouting and related projects. The organization provides grants to support leadership initiatives and occasionally supports research in this domain. The website is built on WordPress using the Enfold theme and Yoast SEO plugin, indicating a moderate level of digital maturity. The site is well-structured, mobile-optimized, and uses HTTPS with basic security measures such as anti-clickjacking scripts. However, it lacks visible privacy and cookie policies, security headers, and incident response information, which are areas for improvement. The WHOIS data is unavailable due to domain naming rules, but the website content and contact details appear legitimate and consistent with a small non-profit entity.

Y

YMCA Nederland

ymca.nl

58

YMCA Nederland is a well-established non-profit organization focused on youth development through summer camps, youth work, training, and community engagement. The organization has a strong historical presence dating back to 1853 and operates multiple related sites and accommodations. The website is professionally designed, primarily in Dutch with English alternatives, and targets youth and volunteers. Technically, the site is built on WordPress with common plugins and demonstrates moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information is clearly provided, including email, phone, and physical address. Social media presence is active across major platforms. Overall, the site is trustworthy and credible with room for security and privacy improvements.

C

ChickTech

act-w.org

52

ChickTech is a US-based non-profit organization dedicated to advancing the careers of technical women. The analyzed domain act-w.org serves primarily as a redirect or placeholder directing visitors to chicktech.org, the main website. The organization focuses on providing programs, events, and community support to empower women in technology careers. The website uses WordPress CMS hosted via Cloudflare with standard plugins and scripts such as Slider Revolution and jQuery. The technical infrastructure is moderate in performance and mobile optimization, with basic SEO and accessibility features. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy and cookie policies are absent, indicating compliance gaps. Social media presence is strong and consistent with the organization's branding. Overall, the website is legitimate and trustworthy but would benefit from enhanced security and privacy compliance measures.

A

ACLU of Oregon

aclu-or.org

69

The ACLU of Oregon is a well-established non-profit organization dedicated to protecting civil rights and liberties within the state of Oregon. As an affiliate of the national ACLU, it focuses on legal advocacy, policy reform, public education, and community engagement. The website reflects a professional and consistent brand image, targeting residents, activists, and donors interested in social justice and civil liberties. Technically, the site is built on Drupal 7 with modern JavaScript libraries and analytics tools, offering good mobile optimization and accessibility. Security posture is solid with HTTPS and anti-spam measures, though some security headers and explicit policies could be improved. The absence of WHOIS data limits domain registration transparency but does not detract significantly from the site's legitimacy given its affiliation and content quality. Overall, the site is trustworthy, safe, and well-positioned to serve its audience.

W

Write the Docs

writethedocs.org

60

Write the Docs is a global community focused on technical documentation, providing conferences, online resources, and networking opportunities for documentarians and related professionals. The organization operates primarily as a community-driven non-profit with a strong presence in the technology and education sectors. Their website is well-structured, content-rich, and targets a diverse audience including programmers, technical writers, and customer support professionals. Technically, the site leverages modern documentation tools such as Sphinx and is hosted on the Read the Docs platform, ensuring reliable performance and accessibility. Security-wise, the site enforces HTTPS but lacks some security headers and explicit privacy and cookie policies, which are areas for improvement. Overall, the website is trustworthy and professional, with a strong community focus and good digital maturity.

M

Missio Schweiz

missio.ch

55

Missio Schweiz is a Swiss non-profit organization affiliated with the Pontifical Mission Societies, dedicated to supporting missionary and social projects in the global south. Their website serves as a digital platform to promote their mission, facilitate donations, and engage supporters through newsletters and an online shop. The organization maintains a professional and consistent brand presence, targeting a general audience interested in charitable and missionary work. Technically, the website is built on the Soulclick CMS platform, utilizing modern web technologies such as jQuery, Selectize.js, and Google Fonts. The site is hosted on a cloud provider with good performance and mobile optimization. SEO and accessibility considerations are well implemented, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and uses secure forms with CSRF protection. However, some security headers are missing, and no explicit security or incident response policies are published. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms aligned with GDPR requirements. Overall, the website is trustworthy, professionally maintained, and suitable for its non-profit mission. There are no indications of malicious activity or content safety concerns. Strategic improvements in security headers and incident response transparency could further enhance the security posture.

Glarnerland Tourismus operates as the official tourism promotion organization for the Glarnerland region in Switzerland, focusing on providing comprehensive information about seasonal activities such as hiking, family events, and cultural highlights. The website serves as a destination marketing platform targeting tourists and families interested in outdoor and cultural experiences. Technically, the site is built on the Contao Open Source CMS and integrates modern marketing and analytics tools like Google Tag Manager and Facebook Pixel. The website is mobile optimized and presents a professional design with clear navigation, although some accessibility features could be improved. Security-wise, the site uses HTTPS and includes some security best practices but lacks explicit security headers and incident response information. Privacy compliance is weak due to the absence of visible privacy and cookie policies. Overall, the domain registration details align well with the website's purpose, indicating a legitimate and trustworthy entity.

Braunwald.ch is the official website for the Braunwald tourism destination in Switzerland, focusing on family-friendly, car-free mountain vacations. The site provides comprehensive information on activities, events, booking options, and local highlights, targeting tourists and families seeking outdoor and cultural experiences. The website is built on the Contao CMS and integrates modern web technologies including jQuery, Google Tag Manager, and Google Analytics, reflecting a moderate to good level of digital maturity. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and security headers present, though there is a lack of visible privacy and cookie policies, which impacts privacy compliance. No incident response or vulnerability disclosure information is published, indicating room for improvement in security transparency. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security policy disclosures to improve compliance and user trust.

Y

YMCA 175

ymca175.com

50

YMCA175 is a global youth leadership event organized by YMCA Europe and hosted by YMCA England & Wales, targeting young leaders aged 16-35 worldwide. The event focuses on workshops, seminars, and leadership training to empower youth and foster global change. The website is built on WordPress with modern plugins and SEO tools, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled but lacks some security headers and incident response information. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professional, serving a non-profit sector audience effectively.

M

Measuring Impact of Youth Organisations

impactofyouth.org

46

The Measuring Impact of Youth Organisations (MIYO) project is a collaborative non-profit initiative involving major European youth organisations such as the World Organisation of Scout Movement (WOSM), YMCA Europe, and Maynooth University. The project focuses on bridging policy-making, academic research, and practical applications to empower youth organisations across Europe. The website serves as an information hub providing resources, news, and toolkits to support this mission. Technically, the site is built on WordPress using Elementor and related plugins, hosted by Hosting Concepts B.V. The site is well-structured, mobile-optimized, and uses HTTPS, but lacks some security headers and privacy compliance documentation. No direct contact information or privacy policies are present on the homepage, which is a notable gap for compliance and user trust. Overall, the site presents a professional and trustworthy image consistent with a small non-profit consortium.

G

galledia group ag

galledia-group.ch

48

The galledia group ag is the largest independent media company in Eastern Switzerland, offering regional and thematic information across print, digital, and online media channels. Their business model focuses on media publishing and advertising, serving a regional audience with a portfolio of newspapers and online portals. The website reflects a professional and consistent brand presence with clear navigation and relevant content. Technically, the site is built on Drupal 9 with modern JavaScript libraries, providing good mobile optimization and accessibility. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though the absence of security headers and cookie consent mechanisms are areas for improvement. Overall, the domain registration and WHOIS data align well with the business claims, supporting legitimacy and trustworthiness.

N

NumFOCUS

pydata.org

61

PyData.org is the official website for the PyData community, organized under the non-profit NumFOCUS. It serves as a hub for developers, data scientists, and researchers interested in open-source data science tools, primarily in Python. The site offers information about community events, projects, and resources, positioning itself as a key player in the open-source data science ecosystem. The business model is community-driven, focusing on education and collaboration rather than commercial sales. The domain is well-established since 2011, reinforcing its credibility and longevity in the market. Technically, the website is built on WordPress using the Divi theme, leveraging common web technologies such as jQuery and Google Fonts. It employs Cloudflare for DNS and uses Google Analytics and HubSpot for marketing and analytics. The site demonstrates moderate performance and good mobile optimization but lacks advanced accessibility features. SEO is basic but functional. From a security perspective, the site uses HTTPS with a good SSL configuration and has domain transfer protections enabled. However, it lacks DNSSEC and security headers, which are recommended for enhanced security. There are no visible privacy or cookie policies, nor incident response or vulnerability disclosure information, which are gaps in compliance and transparency. The WHOIS data is consistent and public, with no privacy protection, supporting legitimacy. Overall, PyData.org is a reputable and professional community website with solid business credibility and technical implementation. To improve, it should implement comprehensive privacy and cookie policies with consent mechanisms, enhance security headers, and publish security and incident response policies to strengthen trust and compliance.

P

Python Software Foundation

psfmember.org

50

The Python Software Foundation (PSF) operates as a non-profit organization dedicated to supporting the Python programming language and its community. The website serves primarily as a membership and donation portal, encouraging users to become supporting or contributing members to fund Python development, community events, and projects. The PSF holds a strong market position as the leading organization for Python advocacy and support, targeting developers and open source contributors globally. Technically, the website is built on WordPress CMS, leveraging common web technologies such as jQuery and hosted likely on AWS infrastructure. The site demonstrates moderate performance and good mobile optimization, with a consistent and professional design. However, it lacks advanced SEO and accessibility features and does not implement cookie consent or privacy policies visibly. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protections in place. However, it lacks DNSSEC and explicit security headers, which are recommended to enhance security posture. No vulnerability disclosure or incident response information is provided, and privacy compliance is minimal, with no visible privacy or cookie policies. Overall, the website is trustworthy and professional but could improve in privacy compliance and security best practices. Strategic enhancements in these areas would strengthen user trust and regulatory adherence.

V

VideoWeek

videoweek.com

53

VideoWeek is a specialized media platform focused on the video and CTV advertising industry, providing news, analysis, research reports, guides, podcasts, and organizing industry events. The website demonstrates a professional and consistent brand presence with a clear target audience of industry professionals and businesses. Technically, the site is built on WordPress with a modern tech stack including Yoast SEO, Google Analytics, and various plugins for social media integration and content management. The site is hosted via GoDaddy and uses HTTPS with good security practices, though DNSSEC is not enabled. Advertising is managed primarily through Google AdSense and DoubleClick, with tracking pixels for analytics and marketing. Privacy compliance is partially addressed with a cookie consent mechanism, but no explicit privacy policy or terms of service were found in the provided content. Overall, the site is credible, well-maintained, and trustworthy with a domain age consistent with its business history.

K

Knack

knack.com

75

Knack is a well-established no-code application development platform that enables businesses to build, automate, and scale operations without coding. The company offers a unified platform combining database management, workflow automation, forms, and front-end design, targeting a broad range of industries including government, non-profit, and technology sectors. With over 6,000 users and a medium-sized company profile, Knack positions itself as a leading SaaS provider in the no-code space. The website is professionally designed, content-rich, and optimized for SEO and mobile use, reflecting a mature digital presence. Technically, the website leverages WordPress CMS with modern frameworks like Bootstrap and integrates multiple analytics and marketing tools such as Google Analytics, Microsoft Clarity, HubSpot, and various ad networks. The site uses HTTPS with good SSL configuration and includes several security best practices, although some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. From a security and compliance perspective, Knack provides comprehensive privacy and cookie policies with GDPR compliance indicators. However, the absence of WHOIS domain registration data raises concerns about domain transparency and trustworthiness, which slightly impacts the overall risk assessment. No explicit incident response or vulnerability disclosure information is publicly available. Overall, Knack presents a strong business and technical profile with a secure and user-friendly website. The main risk lies in the lack of publicly available domain registration details, which should be addressed to enhance trust. Strategic recommendations include improving security headers, publishing incident response contacts, and ensuring WHOIS transparency to bolster credibility.

C

Comundi

comundi.fr

56

Comundi is a well-established French professional training organization specializing in the development of professional skills through a wide range of training programs, consulting services, e-learning modules, and events. The company targets professionals and organizations seeking certified and innovative training solutions. Their market position is strong, supported by recognized certifications such as Qualiopi and a broad client base including major corporations. Technically, the website employs modern web technologies and analytics tools, ensuring a good user experience with mobile responsiveness and clear navigation. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in explicit security headers and published security policies. The absence of WHOIS data reduces transparency but does not detract significantly from the overall credibility based on website content and branding. Overall, Comundi presents a professional and trustworthy online presence suitable for its educational sector.

A

ArtFocus

ubytovani-aktualne.cz

56

The website www.ubytovani-aktualne.cz operates as a Czech-language online catalog specializing in affordable accommodation options across the Czech Republic and select neighboring countries. It targets families and individual tourists seeking budget-friendly lodging such as cottages, pensions, hotels, and campsites. The platform offers categorized listings by region and type, last-minute deals, and travel tips, positioning itself as a niche regional hospitality directory. The business appears to be a small-scale operation, with web design and SEO services provided by ArtFocus since at least 2009. Technically, the site employs traditional web technologies including jQuery, jQuery UI, Font Awesome, and Google Analytics for tracking. While the site is functional with good content quality and navigation, it shows signs of dated technology and basic mobile optimization. Security posture is moderate with HTTPS implied but lacking visible security headers and formal privacy or cookie policies. No explicit contact or incident response information is provided, which limits transparency and compliance. Overall, the security posture is adequate for a small hospitality directory but could be improved by implementing modern security headers, enforcing HTTPS, and adding privacy and cookie policies. The absence of WHOIS registrant data due to privacy protection reduces trust signals but does not necessarily indicate malicious intent. The site content is family-friendly and safe, with no adult or questionable material detected. Strategic recommendations include enhancing security best practices, improving privacy compliance, adding clear contact and incident response channels, and modernizing the technical stack to improve performance and mobile experience.

Scena Performance is a small, specialized event organization company focused on trail running, triathlon, and endurance sports events primarily in Northern California and globally. The company operates a WordPress-based website that provides event information, registration links, and blog updates to its target audience of endurance athletes and sports enthusiasts. The business model centers on organizing and promoting endurance sports events ranging from 5K to 50K races and related festivals. The website demonstrates consistent branding and a good level of content quality, supporting its niche market position. Technically, the website uses a modern WordPress CMS with Bootstrap for responsive design, jQuery, and several marketing and analytics tools including Google Analytics and Facebook Pixel. The site is hosted likely via GoDaddy, with a valid SSL certificate ensuring HTTPS security. Performance is moderate with good mobile optimization and basic accessibility features. SEO is enhanced by Yoast SEO plugin and structured data (JSON-LD) implementation. From a security perspective, the site enforces HTTPS but lacks DNSSEC and explicit security headers, which are recommended for improved security posture. There is no visible security policy or incident response information, and cookie consent mechanisms are absent, indicating partial privacy compliance. Tracking scripts are present but without clear user consent mechanisms, which may pose compliance risks under GDPR. The domain WHOIS data is consistent with the business claims, showing a long-standing registration without privacy protection, supporting legitimacy. Overall, the website is functional, professional, and trustworthy for its business purpose but would benefit from enhanced security practices and privacy compliance improvements to reduce risk and increase user trust.

T

TrailCon

trailconference.com

58

TrailCon is a specialized event organizer focusing on the trail running industry, hosting an annual conference that brings together brands, athletes, and fans to discuss and shape the future of trail running. The website presents a professional and well-structured platform showcasing event schedules, panelists, sponsors, and related activities. Technically, the site is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. The site is hosted with WordPress.com nameservers and secured with HTTPS, though it lacks DNSSEC and some security headers. Privacy compliance is minimal, with no visible privacy or cookie policies, which is a notable gap. Overall, the site demonstrates good business credibility and user experience but could improve in security and privacy transparency.

Micropub Rocks! is a specialized online validator tool designed to assist developers and implementers in testing their Micropub client and server implementations. The website provides various testing capabilities and publishes implementation reports, targeting a niche audience within the IndieWeb and Micropub community. The business model is based on offering an open source, freely accessible validation service, with no evident commercial monetization or advertising. The site is small in scale and founded around 2016, consistent with the domain registration date. Technically, the website uses a straightforward technology stack including HTML5, CSS with Semantic UI, and JavaScript with jQuery. Hosting is provided by Linode, a reputable VPS provider. The site is moderately optimized for mobile and performance, with basic accessibility and SEO features. The code is open source and publicly available on GitHub, enhancing transparency. From a security perspective, the site lacks several modern security best practices such as DNSSEC, security headers, and visible SSL/TLS configuration details. The domain is privacy protected, which is reasonable for a small open source project. The site uses an email-based sign-in mechanism with a simple anti-bot field to facilitate authorization testing without complex authentication flows. No privacy or cookie policies are present, which is a compliance gap. No incident response or vulnerability disclosure information is provided. Overall, the website is functional and trustworthy within its niche but would benefit from improved security hardening and privacy compliance. The risk level is low given the nature of the site and its limited data collection. Strategic improvements in security headers, DNSSEC, and privacy documentation would enhance trust and compliance.

Aaron Parecki operates a personal brand website focused on livestreaming tutorials, gear reviews, and consulting services. The site targets livestreaming enthusiasts and professionals seeking expert advice and educational content. The business model combines content creation with paid consulting and affiliate marketing, positioning Aaron Parecki as a niche expert in the media space. The website is well-branded, content-rich, and supported by active social media channels, enhancing its market presence. Technically, the website is built using standard web technologies including HTML5, CSS3, JavaScript, and jQuery, hosted on Linode infrastructure. The design is responsive and user-friendly, with embedded video content and calendar integration. Analytics are handled via privacy-focused Fathom Analytics, indicating a moderate level of digital maturity. However, the site lacks CMS usage and some modern security headers, which could be improved. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. The domain is privacy protected but consistent with a personal brand site. No security or incident response policies are published, and no cookie or privacy policies are present, representing compliance gaps. DNSSEC is not enabled, and security headers are missing, suggesting room for security posture enhancement. Overall, the website is trustworthy, professional, and safe for general audiences. Strategic improvements in privacy compliance, security headers, and formal policies would strengthen its security and regulatory posture, supporting long-term business credibility and user trust.

C

cathkathcatt.ch

cathkathcatt.ch

43

cathkathcatt.ch is a multilingual Catholic media platform serving the Swiss Catholic community across German, French, and Italian language groups. The website provides news, job listings, and advertising space related to Catholic institutions in Switzerland. The platform is built on WordPress and uses common web technologies such as Bootstrap, jQuery, and integrates tracking tools like Google Tag Manager, Facebook Pixel, and Mouseflow. The website's content is minimal on the main page, with a 'Nothing Found' message indicating possible content gaps or misconfiguration. Contact information is limited to a contact form page without direct emails or phone numbers. No privacy or cookie policies are found, and no security headers are implemented, although HTTPS is enforced. The site links to partner domains representing language variants and job listings for Catholic institutions.

V

Vysoká škola evropských a regionálních studií

vsers.cz

59

Vysoká škola evropských a regionálních studií (VŠERS) is a Czech higher education institution specializing in regional and European studies, offering bachelor's degree programs primarily in Security and Legal Activities and Public Administration. The institution targets prospective students in the Czech Republic, providing educational services, lifelong learning, and research activities. The website reflects a well-established educational entity with a domain registered since 2003, consistent with its business claims. Technically, the website is built on WordPress 6.8.2, utilizing popular plugins such as Slider Revolution and SiteOrigin Panels, and employs modern web technologies including jQuery and Font Awesome. The site is hosted under a Czech registrar with appropriate DNS configurations. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site enforces HTTPS, includes some security headers, and does not expose sensitive data. Privacy compliance is strong, with a clear privacy policy and cookie consent mechanism aligned with GDPR requirements. No critical vulnerabilities or security incidents were detected. Overall, the website demonstrates a solid risk posture with no blocking WAF or security challenges, making it accessible and trustworthy. Strategic recommendations include enhancing security headers and maintaining up-to-date software to mitigate emerging threats.

E

Enki o.p.s.

enki.cz

46

Enki o.p.s. is a Czech non-profit research organization specializing in applied environmental research and laboratory services, operating since 1999. Their website reflects a professional presence with a focus on environmental balance and scientific expertise. The organization offers a range of services including accredited laboratory testing, educational programs, and mobile laboratory services. The site is built on WordPress using the Divi theme, indicating a modern and maintainable technical infrastructure. Security posture is strong with HTTPS and security headers implemented, though privacy compliance could be improved by adding cookie consent mechanisms and clearer contact information. Overall, the website supports the organization's credibility and mission effectively.

V

Vysoká škola technická a ekonomická v Českých Budějovicích

vstecb.cz

53

Vysoká škola technická a ekonomická v Českých Budějovicích (VŠTE) is a public higher education institution located in the Czech Republic, specializing in technical and economic disciplines. The university distinguishes itself by a strong emphasis on practical education, offering accredited bachelor and master degree programs. It serves students primarily from the Czech Republic and international students through exchange programs. The institution maintains a medium-sized presence with various subsidiaries including a basic and nursery school, sports clubs, and student organizations. The website reflects a professional and well-structured digital presence with comprehensive information about academic programs, admissions, and student services. Technically, the website is built on WordPress CMS with modern plugins such as Yoast SEO, WPBakery Page Builder, and Cookiebot for cookie consent management. It uses Bootstrap for responsive design and integrates Google Analytics and Facebook Pixel for analytics and marketing. The site is mobile-optimized and accessible, with clear navigation and ARIA attributes enhancing usability. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and a public security policy or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data limits domain registration trust verification, but the website content and official contact details support legitimacy. Overall, VŠTE's website is a reliable and professional digital asset supporting its educational mission. Strategic improvements in security headers, incident response transparency, and WHOIS data availability would enhance trust and compliance. The site is safe for general audiences with no adult or questionable content detected.

E

Evangelisch-reformierte Kirche Basel-Landschaft

ref-bl.ch

67

The Evangelisch-reformierte Kirche Basel-Landschaft operates a professional and well-structured website serving its community in Basel-Landschaft, Switzerland. The site provides comprehensive information about church services, community engagement, and social support, targeting members and prospective members of the regional church. The organization positions itself as a key religious and non-profit entity in the region, with clear branding and consistent messaging. Technically, the website employs modern web technologies including UIkit, jQuery, and FontAwesome, supported by a CloudTec CMS platform. It integrates privacy-conscious analytics via Matomo and implements a robust cookie consent mechanism through Cookiebot, reflecting a mature digital infrastructure. The site is mobile-optimized and SEO-friendly, though some accessibility improvements could be made. From a security perspective, the website enforces HTTPS and uses a Content-Security-Policy header, ensuring a good baseline security posture. However, additional security headers and explicit incident response information are absent. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with a detailed GDPR-compliant privacy policy and user consent mechanisms. Overall, the website is trustworthy, professionally maintained, and aligned with the organization's mission. Strategic enhancements in security headers, incident response transparency, and accessibility would further strengthen its posture.

C

ChooseMyCompany - Certified reviews

choosemycompany.com

67

ChooseMyCompany is a well-established platform founded in 2014 that specializes in providing certified ESG reviews, rankings, and job postings for companies and schools. The platform targets businesses, employees, trainees, and job seekers, offering services such as review collection, benchmarking, and certified review broadcasting with a strong emphasis on GDPR compliance and data protection. The website demonstrates a high level of professionalism, content quality, and user experience, supported by multiple language options and recognized certifications like HappyIndex®. Technically, the site employs modern JavaScript libraries including jQuery, Bootstrap Vue, and cookie consent management tools, hosted on a reputable cloud provider. Performance and mobile optimization are good, though accessibility could be improved. Security posture is solid with HTTPS enforced and domain transfer protection, but lacks DNSSEC and some security headers. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is trustworthy and credible, though it would benefit from publishing explicit security policies and incident response contacts.

L

LUMI consortium

lumi-supercomputer.eu

70

The LUMI website represents a large-scale European supercomputing consortium providing high-performance computing resources and AI services to researchers and industry. The site is well-structured, professionally designed, and targets a technical audience involved in HPC and AI innovation. The technical infrastructure is based on WordPress with modern plugins and frameworks, ensuring good performance and mobile optimization. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit security headers could be improved. Privacy compliance is well addressed with a comprehensive cookie policy and privacy page. The absence of terms of service and security policy pages is noted but does not critically impact trust. Overall, the website reflects a credible and mature digital presence aligned with its business goals.

V

Visuelle Fabrik

visuellefabrik.ch

60

Visuelle Fabrik is a small, professional branding and graphic design agency based in Basel, Switzerland. The company specializes in corporate branding, design, marketing, and consulting services aimed at businesses seeking to enhance their brand identity and market presence. Their website reflects a strong market position with a clear focus on quality and client engagement. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and SEO tools such as Rank Math and Google Tag Manager. The site is well-optimized for mobile devices and provides a good user experience. Security-wise, the website uses HTTPS and implements a comprehensive cookie consent mechanism, but lacks explicit privacy and security policy pages and security headers, which are recommended for enhanced compliance and protection. Overall, the domain registration details are consistent with the business claims, supporting the legitimacy of the site.

W

World YWCA

worldywca.org

58

World YWCA is a globally recognized non-profit organization dedicated to empowering women, young women, and girls through grassroots leadership and advocacy. It holds a strong market position as the largest organization of its kind, engaging millions annually. The website reflects a mature digital presence with comprehensive content, clear navigation, and multiple engagement channels including donations, membership, and events. Technically, the site is built on WordPress with modern frameworks and integrates analytics and translation services, indicating a well-maintained infrastructure. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. Overall, the site demonstrates high professionalism and trustworthiness, supported by certifications and clear contact information.

Y

YMCA Europe

ymcaeurope.com

52

YMCA Europe is a well-established non-profit umbrella organization serving 36 national YMCA movements across Europe, impacting millions of beneficiaries through youth empowerment, community development, and advocacy programs. The website reflects a mature digital presence built on WordPress with modern plugins and SEO optimizations. Security posture is good with HTTPS and secure forms, though some security headers and explicit incident response policies are absent. The WHOIS data is missing or privacy protected, which slightly reduces trust but is mitigated by the organization's transparency and social media presence. Overall, the site is professional, content-rich, and trustworthy with room for security enhancements.

Cevi Schweiz is a Swiss non-profit organization dedicated to youth community engagement, education, and social projects. The website serves as an informational and resource platform for members and interested parties, offering details on events, courses, and donation opportunities. The organization holds a reputable position in the Swiss non-profit sector, supported by trust indicators such as ZEWO certification and active social media channels. Technically, the website is built on the Contao CMS platform, utilizing modern JavaScript libraries for enhanced user experience. It is secured with HTTPS and employs a cookie consent mechanism compliant with GDPR standards. However, some security headers and detailed security policies are absent, representing areas for improvement. Overall, the site is professional, trustworthy, and well-structured, targeting youth and community members in Switzerland.

C

Cevi Region Basel

duranna.ch

47

Duranna is a non-profit organization operating an environmentally friendly holiday house in the Basel region of Switzerland, targeting families and youth groups for various camps and retreats. The website is built on WordPress using modern plugins and themes, demonstrating moderate digital maturity with good mobile optimization and user experience. Security posture is adequate with HTTPS and privacy mechanisms in place, though additional security headers and explicit policies could enhance protection. Overall, the site is trustworthy, professionally presented, and compliant with GDPR requirements.

Q

QuickpageX

quickpagex.ch

48

QuickpageX is a Swiss-based service providing flexible website solutions tailored primarily for institutional clients such as church communities and aid organizations. The company emphasizes ease of use by allowing clients to focus on content creation while managing technical aspects including domain registration and email accounts. Their market position is niche, focusing on privacy-conscious institutions with a subscription-based business model that includes a free trial period and annual fees. Technically, the website is built on WordPress with Bootstrap and jQuery, integrating privacy-friendly tools like Matomo analytics and OpenStreetMap instead of Google services. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS enforced and no exposed sensitive data, though it lacks some advanced security headers and a published security policy. Privacy compliance is strong with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with its business goals.

R

Relimedia

relimedia.ch

54

Relimedia is a Swiss-based ecumenical media center specializing in providing physical, audiovisual, and print media focused on church, religions, ethics, and life education. The organization operates a media lending, sales, and digital download/streaming service primarily targeting religious and educational institutions. The website demonstrates a solid technical infrastructure built on WordPress with modern plugins and SEO optimizations, offering a good user experience with mobile responsiveness and accessibility. Security posture is adequate with HTTPS and anti-spam measures, though lacking explicit cookie consent and security policies. Overall, the domain registration and business information are consistent and trustworthy, supporting a positive legitimacy assessment.

K

Katholisches Medienzentrum

blogs-kath.ch

51

Blogs kath.ch is a Swiss Catholic church blog platform operated by the Katholisches Medienzentrum, providing current and relevant content for the Catholic community in Switzerland. The site serves as a niche media platform offering blog hosting, news, job listings, and advertising space related to Catholic church activities. Technically, the website is built on WordPress 6.7.1 with modern frameworks like Bootstrap and uses analytics tools such as Matomo and Mouseflow, indicating a moderate level of digital maturity. The site is mobile-optimized and presents a professional design with clear navigation. Security-wise, the site enforces HTTPS and avoids exposing sensitive data but lacks security headers and a formal vulnerability disclosure mechanism. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and well-positioned within its niche but could improve security and privacy practices.

C

cath.ch

cath.ch

58

cath.ch is a well-established Swiss Catholic news portal serving the French-speaking Catholic community with news, commentary, multimedia, and community services. The site is professionally designed and offers a broad range of content including news from Switzerland, Vatican, and international Catholic affairs. It operates on a WordPress CMS with a modern tech stack including Bootstrap and various analytics and marketing tools. The website demonstrates a good level of digital maturity with mobile optimization and clear navigation. Security posture is adequate with HTTPS and some security best practices, though improvements are recommended such as implementing a Content-Security-Policy and publishing incident response contacts. Privacy compliance is basic, with a privacy policy present but lacking a cookie consent mechanism. Overall, the site is trustworthy and credible, with clear contact information and social media presence.

K

Known, Inc.

withknown.com

48

Known, Inc. operates with a focus on providing an open source social publishing platform that enables individuals and groups to collaboratively publish blog posts, photos, and media on their own sites with syndication to social networks. The company targets users interested in decentralized and multi-author blogging solutions, leveraging the Indieweb movement. The website positions Known as a niche player in the social publishing technology sector with a small but consistent presence since 2014. Technically, the website employs modern web technologies including Bootstrap, jQuery, Google Fonts, and Google Analytics, hosted on AWS infrastructure. The site is mobile responsive and well-structured, though some accessibility features are basic. SEO practices are adequately implemented with proper meta tags and Open Graph data. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and important security headers such as Content-Security-Policy. No explicit security or incident response policies are published. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Tracking via Google Analytics is active without visible user consent. Overall, the website is professional and trustworthy with moderate security posture and privacy compliance. Strategic improvements in security headers, DNSSEC, and privacy consent would enhance trust and compliance.

H

HomoDigital

homodigital.pl

36

HomoDigital is a Polish technology-focused media outlet established in 2020, delivering news, analysis, and educational content on artificial intelligence, cybersecurity, e-commerce, and the IT labor market. The site targets Polish-speaking technology enthusiasts and professionals, positioning itself as a niche blog with a consistent brand and active social media presence. Technically, the website is built on WordPress, leveraging modern web technologies including Google Analytics, Google Tag Manager, reCAPTCHA, and OneSignal for push notifications. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. Security posture is solid with HTTPS enforced and anti-bot measures in place, but could be enhanced by enabling DNSSEC and adding security headers. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the website is professional, trustworthy, and safe for general audiences.

D

dailyweb

dailyweb.pl

42

Dailyweb.pl is a well-established Polish technology and entertainment news portal founded in 2014. It provides daily content focused on technology, mobile devices, entertainment, and related topics, targeting technology enthusiasts and general internet users interested in tech news and reviews. The website operates on WordPress CMS with performance optimizations such as WP Rocket and lazy loading of scripts, ensuring good user experience and mobile optimization. The business model primarily revolves around content publishing supported by advertising networks like Google Adsense and Advanced Ads. The site maintains a consistent brand presence with active social media channels and structured data for SEO enhancement. Technically, the site leverages modern web technologies including jQuery, WP Rocket, and integrates analytics services such as Plausible, Gemius, and Request Metrics. Hosting is provided by OVH SAS, a reputable provider, with the domain registered since 2014, indicating a stable and legitimate online presence. Performance is rated as fast with good SEO practices and basic accessibility features. From a security perspective, the site enforces HTTPS and uses some security best practices but lacks DNSSEC and some recommended security headers like X-Frame-Options and Referrer-Policy. There is no visible incident response or vulnerability disclosure information, and no cookie consent mechanism is implemented, which could be improved for GDPR compliance. No critical vulnerabilities or suspicious patterns were detected. Overall, Dailyweb.pl presents a trustworthy and professional online presence with good content quality and technical implementation. Strategic recommendations include enhancing security headers, enabling DNSSEC, and implementing a cookie consent mechanism to improve privacy compliance and security posture.

W

Web Design Company & Digital Marketing Agency, Bali

celax.de

42

Indonesia Digital Marketing & BiruDaun Web Studio is a small, established digital marketing and web design agency based in Bali, Indonesia, with over 25 years of experience. They specialize in ecommerce sales, performance marketing, SEO, web design, and analytics, targeting businesses seeking to improve their online presence and direct sales. The website is professionally designed using WordPress with Elementor and Astra theme, featuring good mobile optimization and SEO practices. Security posture is solid with HTTPS and privacy-focused analytics (Matomo), but lacks formal privacy and cookie policies, and no visible security or incident response policies. WHOIS data for the domain is missing, which raises some concerns about domain registration legitimacy. Overall, the site is trustworthy and professional but would benefit from improved compliance documentation and security headers.

M

Media One s.r.o.

mediaone.cz

45

Media One s.r.o. is a Czech media agency specializing in producing television shows, advertising formats, and event organization, with a strong focus on the Czech TV market. The company collaborates with major broadcasters such as TV Prima, Česká televize, and Canal+ Sport, offering clients integrated media campaigns and branded content solutions. Their website showcases a professional portfolio of current and past projects, client logos, and a detailed team section, reflecting a mature business presence established since 2011. Technically, the website employs modern frontend technologies including jQuery, Bootstrap, Owl Carousel, and Flickity, ensuring a responsive and interactive user experience. While the site is well-structured and mobile-optimized, some security best practices such as implementing security headers and privacy policies are missing. The contact form collects user data via POST but lacks visible anti-CSRF protections. From a security perspective, the site uses HTTPS and does not expose sensitive data in the HTML. However, the absence of privacy and cookie policies indicates compliance gaps with GDPR requirements. No incident response or security policy information is published, which could be improved to enhance trust. The domain registration data aligns well with the business claims, showing a consistent and legitimate presence in the Czech media sector. Overall, Media One presents a credible and professional media agency with solid business credibility and a good technical foundation. Addressing privacy compliance and enhancing security headers would improve their security posture and regulatory adherence.

D

Daibau International d.o.o.

daibau.cz

67

Daibau.cz is a Czech Republic-based online platform specializing in connecting customers with verified construction and renovation service providers. The platform offers a comprehensive directory of service providers, project inquiry submission, price estimation tools, and customer reviews, positioning itself as the largest service platform in its market. The website demonstrates a good level of digital maturity, employing modern web technologies such as jQuery, lazy loading, Google Tag Manager, and Facebook Pixel for analytics and marketing. It also implements a robust cookie consent mechanism aligned with GDPR requirements. Security posture is solid with HTTPS enforcement and CSRF protection, though some HTTP security headers could be improved. The absence of WHOIS data limits domain trust assessment, but the professional presentation and extensive content suggest a legitimate business. Overall, the site provides a user-friendly experience with good mobile optimization and clear navigation.