Security Directory

F

FM Director

fmdirector.com

0

FM Director is a UK-based, high-end printed magazine and digital media platform focused on the facilities management sector. It serves FM professionals and influencers by providing industry-leading content, including monthly magazine issues and features. The business operates under the Business Daily Group umbrella, leveraging a network of related FM services such as FM Recruiter and FM Directory. The website demonstrates a professional and consistent brand presence with clear contact information and active social media engagement. Technically, the site is built on WordPress with Elementor, employing modern web technologies and Google Analytics for tracking. While the site is well-structured and mobile-optimized, it lacks some advanced security headers and cookie consent mechanisms, which are recommended for compliance and enhanced security. The domain registration is consistent with the business age and shows no suspicious patterns, supporting the legitimacy of the website.

FM Recruiter is a UK-based specialist job board focused on the facilities management sector, operated by Business Daily Group. The platform offers job listings, CV upload, job alerts, and career advice tailored to facilities management professionals and recruiters. The website is professionally designed with clear navigation and mobile optimization, supporting a positive user experience for its target audience. Technically, it is built on ASP.NET WebForms with common web technologies and integrates Google Analytics and Bing UET for tracking. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is addressed with clear privacy and cookie policies and consent mechanisms. Contact information is transparent and includes phone numbers, email, and a physical address, enhancing business credibility. Overall, FM Recruiter presents as a trustworthy and functional niche recruitment platform with room for security enhancements.

B

Business Daily Group Limited

businessdailygroup.co.uk

0

Business Daily Group Limited is a UK-based business support company specializing in helping ambitious organizations grow across multiple sectors including rail, facilities management, and hydrogen industries. The company offers a comprehensive suite of services such as business advice, marketing, media publishing, recruitment, and community building. Their market position is that of a trusted partner to hundreds of clients, with a strong focus on profile enhancement and sector-specific expertise. The website reflects a professional and consistent brand image, targeting businesses seeking growth and market expansion. Technically, the website is built on WordPress using Elementor and Yoast SEO plugins, indicating a modern and maintainable infrastructure. The site is mobile-optimized with good SEO practices, though accessibility features are basic. Performance is moderate with no critical technical issues detected. The absence of advanced analytics or tracking scripts suggests a minimal user tracking approach. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers and cookie consent mechanisms, which are recommended for GDPR compliance and enhanced security posture. No vulnerabilities or exposed sensitive data were detected. The WHOIS lookup for the 'www' subdomain failed due to domain naming rules, but the main domain appears legitimate with clear company registration details. Overall, the website presents a low-risk profile with good business credibility and technical implementation. Strategic improvements in security headers, privacy compliance, and incident response documentation would further strengthen the security posture and trustworthiness.

N

Naturpark Zittauer Gebirge e. V.

naturpark-verein.de

0

Naturpark Zittauer Gebirge e. V. operates a regional nature park website focused on promoting the unique cultural and natural landscape of the Zittauer Gebirge region in Saxony, Germany. The site provides information on nature experiences, educational programs, events, and regional development initiatives, targeting tourists, local residents, and educational institutions. The organization appears to be a small non-profit entity dedicated to environmental and cultural preservation. Technically, the website is built on the BLUEPAGE-CMS platform with modern JavaScript libraries such as jQuery and bxSlider, and employs lazy loading for images to optimize performance. The site is mobile responsive and uses HTTPS with a valid SSL configuration. Cookie consent mechanisms are implemented to comply with GDPR requirements, and privacy is respected by using YouTube's nocookie domain for embedded videos. From a security perspective, the website enforces HTTPS and includes a cookie consent banner with granular controls, but lacks explicit security headers and incident response contact information. No vulnerabilities or exposed sensitive data were detected. The WHOIS data indicates consistent domain registration and hosting with no suspicious patterns. Overall, the site demonstrates a good security posture for its size and purpose. The overall risk is low given the nature of the business and the absence of critical security issues. Strategic recommendations include enhancing security headers, publishing a security policy or incident response contact, and maintaining regular audits of third-party scripts to further strengthen security and trust.

D

Domov Sue Ryder, z. ú.

darekprosueryder.cz

0

Dárek pro Sue Ryder is a Czech non-profit organization dedicated to supporting seniors and their families by providing dignified elderly care, including advice, personal assistance, and palliative care. The organization has been active since 1998 and maintains a strong market position as a trusted partner in the Czech Republic, including partnerships with notable events such as the Karlovy Vary International Film Festival. The website serves as a campaign and donation platform, featuring clear calls to action and testimonials to build trust. Technically, the website employs modern web technologies including JavaScript, CSS, lazy loading for images, and Google Tag Manager for analytics and marketing. It uses a consent management platform to comply with cookie regulations. The site is mobile optimized and presents a professional design, though some accessibility and SEO optimizations could be improved. No major CMS is detected, suggesting a custom or proprietary solution. From a security perspective, the site enforces HTTPS and provides a cookie consent mechanism, but lacks explicit security headers and detailed security or privacy policies. No incident response or vulnerability disclosure information is available, which could be improved to enhance trust and compliance. The WHOIS data aligns well with the website's claims, supporting legitimacy. Overall, the site is professional, trustworthy, and serves its non-profit mission effectively. Strategic improvements in privacy policy publication, security headers, and incident response transparency would enhance its security posture and compliance.

A

Asociace společenské odpovědnosti (A-CSR)

spolecenskaodpovednost.cz

0

Asociace společenské odpovědnosti (A-CSR) is the largest sustainability and ESG initiative in the Czech Republic, operating as a non-profit association. It focuses on promoting the UN Sustainable Development Goals (SDGs), organizing events such as the Global Goals Summit and Giving Tuesday, and providing networking opportunities for its members. The association also publishes newsletters and an online magazine to inform and engage its audience. The target audience includes organizations and individuals interested in sustainability and social responsibility within the Czech market. Technically, the website is built on WordPress and leverages modern web technologies including jQuery, Google Tag Manager, Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The site is well-optimized for mobile devices, accessible, and SEO-friendly, with comprehensive metadata and structured data enhancing search engine visibility. Cookie consent and privacy policies are implemented in compliance with GDPR. From a security perspective, the website uses HTTPS with a strong SSL configuration and employs best practices such as cookie consent and nonce usage in scripts. However, security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected and could be improved. No vulnerabilities or exposed sensitive data were found. The absence of WHOIS data is a concern for domain legitimacy, but the professional content and consistent branding support trustworthiness. Overall, the website presents a low risk profile with strong content quality and technical implementation. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and improving incident response contact visibility to further strengthen security posture and trust.

B

BH Securities a.s.

bhs.cz

0

BH Securities a.s. is a well-established Czech financial services company specializing in investment services including stocks, qualified investor funds, asset management, and gold investments. With over 30 years of market presence and as a founding member of the Prague Stock Exchange, it serves individual, municipal, and institutional investors. The website reflects a mature digital presence with comprehensive product information, professional team bios, and clear contact channels. Technically, the site uses modern JavaScript libraries and includes cookie consent management, indicating compliance with privacy regulations. Security posture is solid with HTTPS and secure forms, though explicit security headers and published security policies are absent. WHOIS data is missing, which slightly impacts domain trustworthiness but does not detract from the overall legitimacy suggested by regulatory references and business details.

B

Biedriba "Rezeknes novada partneriba"

rezeknespartneriba.lv

0

Biedriba "Rezeknes novada partneriba" is a Latvian non-profit organization focused on regional partnership and development within the Rezekne municipality. The website serves as an informational platform for local stakeholders and community members. The business model is typical for a small non-profit entity, targeting local audiences with partnership and community engagement activities. The website uses WordPress with the Divi theme, indicating a moderate level of digital maturity with standard web technologies and common libraries such as jQuery and FontAwesome. The site is accessible and mobile-optimized but lacks advanced SEO and accessibility features. Security posture is basic, with no detected security headers or privacy policies, which presents compliance and risk gaps. The WHOIS data is partially consistent with the business identity but lacks registrar and creation date details, limiting full trust assessment. Overall, the site is functional but would benefit from enhanced security, privacy compliance, and richer content to improve trust and professionalism.

R

Rēzeknes novads

rezeknesnovads.lv

0

Rēzeknes novads is the official municipal government website serving the Rēzeknes novads region in Latvia. The site provides comprehensive information about local governance, public services, business support, tourism, and community participation. It targets residents, businesses, and visitors, offering multilingual support in Latvian, English, and Russian. The website is built on WordPress CMS, utilizing common plugins such as Yoast SEO and jQuery, and integrates Google Analytics for visitor tracking. The design is professional and mobile-optimized, with clear navigation and consistent branding. From a technical perspective, the site employs modern web technologies and maintains a moderate performance level. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure; however, it lacks explicit security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism present but no clear privacy policy or terms of service found. The WHOIS data confirms domain legitimacy and consistency with the website's geographic and organizational claims. Overall, the website demonstrates a solid foundation for public service delivery with good user experience and trust indicators. Key areas for improvement include publishing comprehensive privacy and security policies, enhancing security headers, and providing incident response contact information to strengthen compliance and security posture.

B

Beretta Defense Technologies

berettadefensetechnologies.com

0

Beretta Defense Technologies is a specialized defense technology company manufacturing advanced equipment for military and law enforcement sectors. The company operates under the Beretta holding umbrella, leveraging established brand recognition and partnerships with related defense brands. Their website presents a professional image with clear focus on defense technology products and solutions. Technically, the site is built on WordPress with modern SEO and analytics tools, providing a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks some security headers and explicit privacy policies. The absence of WHOIS data introduces some uncertainty regarding domain registration transparency. Overall, the company appears credible and professionally positioned in the defense sector, but could improve compliance and security transparency.

A

AIJ Magazine

aijmagazine.co.uk

0

AIJ Magazine is a specialized media publication serving the Guild of Architectural Ironmongers and related professionals in the UK construction and manufacturing sectors. The website provides industry news, features, opinions, and digital editions, positioning itself as a niche authoritative source within its market. The business operates under the parent company Atom and has been active since 2020, with consistent branding and good content quality tailored to its professional audience. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, WP Rocket, and various JavaScript libraries for enhanced user experience and performance. Hosting is provided by 123-Reg Limited, a reputable registrar and hosting provider. The site demonstrates good mobile optimization, SEO practices, and fast loading times, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and uses some security plugins but lacks explicit security headers and published security policies. No cookie consent mechanism is present, which may impact privacy compliance. No incident response or vulnerability disclosure information is available, indicating room for improvement in security transparency and readiness. Overall, the website is professional, trustworthy, and well-maintained, with moderate security posture and privacy compliance. Strategic enhancements in security headers, privacy mechanisms, and incident response documentation would strengthen its risk profile and compliance standing.

B

Beretta Defense

berettadefense.com

0

Beretta Defense is a defense sector company specializing in manufacturing and supplying a range of firearms and defense equipment including pistols, assault rifles, submachine guns, shotguns, and grenade launchers. They also provide armorer training courses and maintain product documentation to support law enforcement and military clients. The website presents a professional and consistent brand image targeting defense professionals and agencies. Technically, the site is built on WordPress with modern SEO and tracking tools, including Google Analytics and Cookiebot for cookie consent. Security posture is adequate with HTTPS and consent mechanisms but lacks visible security headers and published privacy or terms policies. WHOIS data is unavailable, which reduces transparency and trustworthiness. Overall, the site is functional and professional but would benefit from enhanced privacy disclosures and security practices.

L

LEN - European Aquatics

europeanaquatics.org

0

European Aquatics (LEN) is the official governing body for aquatic sports in Europe, managing disciplines such as swimming, diving, water polo, artistic swimming, open water swimming, and masters. The organization provides comprehensive event calendars, news updates, rules, and development programs to support aquatic sports across Europe. The website serves as a central hub for athletes, federations, and fans, offering structured information and media content. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and optimized for mobile devices. It integrates Google Analytics for user tracking and complies with GDPR through clear privacy and cookie policies. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and additional security headers could be added. Overall, the site is professional, trustworthy, and well-maintained, reflecting the organization's authoritative position in European aquatic sports.

S

Sprintty for Sports - Enhance Your Sports Streaming

sprintty.com

0

Sprintty.com is a technology platform specializing in sports streaming services, offering high-quality live sports event streaming with advanced monetization and customization features. The website targets sports content providers and distributors seeking a robust platform to deliver and monetize sports video content. The platform appears to be relatively new, founded in 2022, and uses the Tilda CMS platform with integrations for analytics and marketing tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The technical infrastructure includes Akamai DNS and CDN services, indicating a focus on performance and reliability. Security posture is moderate; while HTTPS is implied and domain registration is secured with EPP status locks, there is no DNSSEC enabled and no security headers detected in the HTML content. The website lacks explicit privacy, cookie, and terms of service policies, which impacts privacy compliance scores. No contact emails or phone numbers are explicitly provided on the site, limiting direct communication channels. Overall, the site is professionally designed with good user experience and content relevance but would benefit from enhanced security and privacy compliance measures.

L

Livesport s.r.o.

flashfutbal.sk

0

FlashFutbal.sk is a Slovak-language sports media website operated by Livesport s.r.o., specializing in live football scores, detailed match statistics, betting tips, and odds comparison. It serves football fans and sports bettors primarily in Slovakia, offering comprehensive real-time sports data and related content. The platform is well-positioned in the Slovak market as a leading source for football results and sports statistics, leveraging partnerships with major bookmakers and live score providers. Technically, the website employs modern web technologies including asynchronous JavaScript, CSS, and cookie consent management via OneTrust, ensuring a fast, mobile-optimized, and SEO-friendly user experience. Security posture is strong with HTTPS enforced and standard security best practices observed, though explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is robust with clear privacy and cookie policies and GDPR consent mechanisms in place. Overall, the site demonstrates high professionalism, trustworthiness, and technical maturity, making it a reliable resource for its target audience.

T

Tribal Football

tribalfootball.com

0

Tribal Football operates as a specialized media platform delivering comprehensive football news, transfer rumors, and updates on teams and players worldwide. The website targets football fans and sports enthusiasts, providing timely and relevant content primarily focused on European football leagues and major competitions. The business model appears to be content publishing supported by advertising and possibly affiliate marketing, positioning Tribal Football as a recognized player in the football news media sector. Technically, the website is built using modern web technologies including React, Google Tag Manager, and performance monitoring tools like Lux. It demonstrates good mobile optimization, SEO practices, and moderate performance. The site uses HTTPS exclusively, ensuring secure data transmission, and integrates standard analytics tools for user behavior tracking. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks explicit security headers and publicly available security policies or incident response information, which are areas for improvement. The absence of WHOIS data raises questions about domain registration legitimacy, though the website content and structure suggest a professional and trustworthy operation. Overall, Tribal Football presents a solid digital presence with good content quality and technical implementation. The main risks relate to domain registration transparency and the lack of detailed security and incident response disclosures. Addressing these gaps would enhance trust and compliance posture.

The website lsid.eu presents a minimal landing page titled 'Lsid' with a brief mention of 'Lsid - API' and branding referencing 'Flashscore'. The content is extremely limited, lacking detailed business descriptions, contact information, or user engagement features. The site appears to serve as a placeholder or a minimal API endpoint reference rather than a full business website. The external links to livesport.cz suggest a possible affiliation or branding relationship with the Livesport group, known for sports data services. Technically, the site lacks modern web features such as security headers, privacy policies, and visible analytics or marketing tools, indicating a low level of digital maturity and limited user-facing functionality. Security posture is weak due to the absence of HTTPS and security best practices, and no compliance documentation is present. Overall, the site carries a low trustworthiness score and minimal business credibility.

T

The Boeing Company

boeing.de

0

The Boeing Company’s German website serves as a regional portal highlighting its significant presence and contributions to the German aerospace industry. The site emphasizes Boeing’s role in supporting over 1,000 direct employees and more than 23,000 jobs in the German supply chain, focusing on sustainable growth and advanced technology partnerships. The website is professionally designed with consistent branding and offers multi-regional language navigation, reflecting Boeing’s global footprint. Technically, the site leverages Adobe Experience Manager as its CMS, integrates Brightcove for video content, and uses Google Tag Manager for analytics, indicating a mature digital infrastructure. Security-wise, the site uses HTTPS and implements cookie consent mechanisms but lacks visible security headers and explicit security policies, suggesting room for improvement in transparency and security posture. Overall, the site is trustworthy and professional but would benefit from enhanced privacy disclosures and security documentation.

T

The Boeing Company

boeing.fr

0

The Boeing France website represents the French presence of The Boeing Company, a leading aerospace and defense manufacturer with a long history dating back to 1916. The site highlights Boeing's partnerships with French airlines and military forces, showcasing its role in both commercial and defense aviation sectors. The website is built on Adobe Experience Manager and integrates multimedia content via Brightcove, reflecting a modern digital infrastructure. Analytics are managed through Google Tag Manager, indicating moderate user tracking. Security posture is moderate with no explicit security headers detected and missing WHOIS data limiting domain trust verification. Privacy compliance is partial with a cookie consent mechanism present but no clear privacy policy found. Overall, the site is professional, well-branded, and safe for general audiences, but could improve transparency and security practices.

O

Official FISU TORINO 2025 Product's Store

wugtorino2025.it

0

The website www.wugtorino2025.it/en is the official e-commerce store for the FISU Torino 2025 World University Games, offering official merchandise such as apparel, accessories, and memorabilia. It targets fans, participants, and the general public interested in event-related products. The site is built on the PrestaShop CMS platform and incorporates modern web technologies including Google reCAPTCHA for form security and structured data for SEO enhancement. The design is professional and mobile-optimized, providing a good user experience with clear navigation and consistent branding. From a security perspective, the site enforces HTTPS and includes several security headers, demonstrating a good security posture. The use of Google reCAPTCHA helps mitigate automated abuse on forms. However, the absence of explicit privacy and terms of service pages indicates gaps in compliance and transparency. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's purpose and geographic focus, supporting legitimacy. Overall, the site is a trustworthy and functional e-commerce platform for official event merchandise, but it would benefit from enhanced privacy compliance and clearer legal documentation to improve user trust and regulatory adherence.

M

Microplus Informatica

microplustimingservices.com

0

Microplus Informatica is an established Italian company specializing in sports event timing and results management, with a strong presence in aquatic and multisport events internationally and nationally. The website serves as a portal for event results and related information, targeting sports organizations, athletes, and fans. The company leverages WordPress with Elementor and several specialized plugins to deliver a content-rich and user-friendly experience. The technical infrastructure is modern and well-maintained, hosted likely on SiteGround, with good mobile optimization and SEO practices. Security posture is solid with HTTPS, DNSSEC, and GDPR compliance, though some advanced security headers and policies could be improved. No critical vulnerabilities or suspicious activities were detected. Overall, the website reflects a professional and trustworthy business with a clear market position in sports timing services.

E

ewz - Elektrizitätswerk der Stadt Zürich

ewz.ch

0

ewz - Elektrizitätswerk der Stadt Zürich is a leading energy and telecommunications service provider based in Switzerland, focusing on renewable energy production and intelligent supply systems. The company offers a broad range of services including electricity supply, solar panels, electromobility solutions, district heating, and fibre optic network connectivity, targeting both private and business customers. The website reflects a strong market position with comprehensive service offerings and sustainability commitments. Technically, the website is built on Adobe Experience Manager with modern web components and integrates Adobe Launch for analytics and Usercentrics for consent management, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced, multiple security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-optimized for user experience and mobile devices.

V

Volg Konsumwaren AG

volg.ch

0

Volg Konsumwaren AG operates a well-established Swiss retail grocery chain focused on local convenience stores, offering a broad range of products, online shopping, and community engagement through recipes and magazines. The website reflects a mature digital presence with multilingual support and integration of modern web technologies such as TYPO3 CMS, Google Maps API, and Google Tag Manager. The security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting Volg's strong market position in Switzerland.

T

Triulzi AG

triulzi.ch

0

Triulzi AG is a well-established electrical engineering company operating primarily in the Oberengadin and Albula regions of Switzerland. As a member of the Burkhalter Gruppe, it benefits from access to advanced technologies and a broad service portfolio including installations, automation, telematics, and maintenance. The company positions itself as a leading regional provider with a strong focus on building technology and electrical services. The website reflects a professional and consistent brand image, targeting regional customers and potential apprentices interested in electrical trades. Technically, the site is built on TYPO3 CMS, integrates Google services for analytics and maps, and implements GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS, reCAPTCHA, and controlled script loading, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the website is trustworthy, well-structured, and provides comprehensive contact information across multiple locations.

F

Florinett AG

florinett-holz.ch

0

Florinett AG is a small Swiss company specializing in forestry services and mountain wood products in the Graubünden region. Their website presents a professional image with clear descriptions of their forestry work, timber trade, specialized woodworking, and instrument wood offerings. The company positions itself as a regional expert with a focus on quality and efficiency through skilled staff and mechanization. Technically, the website uses a moderate technology stack including jQuery, Google Analytics, and Fancybox, with basic mobile optimization and SEO practices. Security posture is moderate; HTTPS is assumed but no security headers or explicit security policies are published. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Contact information is not explicitly provided on the homepage, which may impact user trust and compliance. Overall, the website is safe, professional, and trustworthy but could improve in security and privacy transparency.

Biobergün is a small organic farm business located in Bergün, Switzerland, offering bio farm products, holiday apartment rentals, event and catering services, and a small cheese dairy. The website reflects a local, family-run business with a strong emphasis on organic and sustainable farming practices. The business holds a notable local certification, the BioGrischunpreis 2024, enhancing its credibility in the organic sector. Technically, the website uses a mix of legacy and modern web technologies, including jQuery 1.12.4 and CreateJS, and is built on the Contao CMS platform. While the site is functional and moderately optimized for performance and mobile use, there is room for improvement in accessibility and SEO. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and incident response information. Overall, the site is trustworthy, professional, and compliant with GDPR requirements, though it could benefit from modernizing some technical components and enhancing security practices.

A

ARO Treuhand GmbH

aro-treuhand.ch

0

ARO Treuhand GmbH is a Swiss fiduciary services company providing comprehensive accounting, tax, payroll, and business consulting services primarily to small and medium-sized enterprises across Switzerland. The company emphasizes a constructive and transparent partnership with clients, leveraging modern technologies and automated processes to deliver efficient and reliable solutions. Their market position is that of a trusted regional player with a focus on personalized service and professional expertise. Technically, the website is built on WordPress using the Themify Ultra theme and several professional plugins including Builder Slider Pro, Contact Form 7, and Complianz GDPR for cookie management. The site is well-optimized for mobile devices and includes modern security features such as HTTPS and Google reCAPTCHA v3 on forms. Performance is moderate with good SEO and accessibility basics in place. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, it lacks some advanced security headers and a dedicated security policy or vulnerability disclosure page. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business claims, enhancing trustworthiness. Overall, the website presents a professional and trustworthy digital presence with good compliance and security posture. Strategic improvements could include adding security headers, publishing a security policy, and implementing a security.txt file to further enhance transparency and security readiness.

A

Allegra Passugger Mineralquellen AG

passugger.ch

0

Allegra Passugger Mineralquellen AG is a well-established Swiss mineral water producer, operating since 1896. The company positions itself as an independent and traditional mineral water brand from Graubünden, emphasizing natural purity, sustainability, and strong partner relationships. Their product portfolio includes private label offerings and special editions such as the Crystal Edition. The website reflects a mature digital presence built on WordPress with modern technologies like Bootstrap and jQuery, enhanced by SEO tools such as Yoast. It features a cookie consent mechanism compliant with GDPR, and clear contact information, supporting transparency and user trust. Security posture is solid with HTTPS and cookie consent, though lacking explicit security policies or incident response contacts. Overall, the site is professional, user-friendly, and trustworthy, with moderate tracking via Google Analytics and no suspicious content or blocking mechanisms detected.

V

Verein Auswärtige Liegenschaftsbesitzer Bergün Filisur (ALB)

alb-berguen.ch

0

The website represents the Verein Auswärtige Liegenschaftsbesitzer Bergün Filisur (ALB), a small non-profit association founded in 2015 in Switzerland. It advocates for the interests of second-home owners and long-term tenants in the Bergün-Filisur region, fostering collaboration between local residents and external property owners. The site provides organizational information, event announcements, and contact details, targeting property owners and local stakeholders. Technically, the site is built on Drupal 10 with modern web technologies and includes Google Analytics for visitor tracking. The design is professional, mobile-optimized, and accessible, offering a good user experience. Security posture is adequate with HTTPS enforced but lacks security headers and formal privacy or cookie policies, indicating room for compliance improvement. Overall, the site is legitimate, trustworthy, and safe for general audiences.

G

Graubündner Kantonalbank

gkb.ch

0

Graubündner Kantonalbank is a well-established regional cantonal bank in Switzerland, offering a broad range of financial services including retail banking, private banking, mortgages, and digital banking solutions. The bank holds a strong market position in the Graubünden region, supported by a state guarantee and a history dating back to 1870. The website reflects a mature digital presence with comprehensive service information and customer engagement channels.

B

Beyond Foundation

beyond-foundation.org

0

Beyond Foundation is a German non-profit organization established in 2013, focusing on cultural and therapeutic projects that connect people through music and promote intercultural understanding, awareness, dialogue, and respect. The website presents a professional and consistent brand image with good content quality and user experience, targeting a general audience interested in cultural and therapeutic arts. Technically, the site uses modern JavaScript libraries such as Flickity for carousels and integrates Cookiebot for GDPR-compliant cookie consent management, indicating a moderate level of digital maturity. Security posture is adequate with domain registration protections and cookie consent mechanisms, but lacks visible advanced security headers and explicit security policies. Overall, the site is safe, trustworthy, and compliant with privacy regulations, though it would benefit from publishing privacy and terms of service documents and enhancing security headers.

H

403 - Forbidden: Access is denied.

hohenberg.ch

0

The website hohenberg.ch is currently inaccessible, returning a 403 Forbidden error page that blocks all content. Due to this, no business information, contact details, or policies are available for review. The domain uses privacy protection in its WHOIS data, which limits transparency about the registrant. The lack of accessible content and metadata prevents a thorough assessment of the company's market position, services, or technical infrastructure. From a security perspective, the absence of visible security headers, SSL information, or compliance policies indicates a low security posture. Overall, the site appears to be either restricted intentionally or misconfigured, resulting in a poor digital presence and low trustworthiness.

A

Anny Casty-Sprecher Stiftung

acs-stiftung.ch

0

The Anny Casty-Sprecher Stiftung is a Swiss non-profit cultural foundation established in 1992, dedicated to promoting cultural and artistic activities in the Prättigau region. The website reflects a focused mission on cultural support and awards, targeting local artists and cultural enthusiasts. The site is professionally designed with responsive features and clear navigation, though it lacks some modern compliance elements such as cookie consent and detailed security policies. Technically, the site uses standard web technologies including HTML5, CSS3, and JavaScript with some third-party libraries like Flickity for UI components. Security posture is adequate with HTTPS enforced but could be improved by adding security headers and incident response information. Overall, the website is legitimate, consistent with its WHOIS registration, and presents a trustworthy image for a small regional foundation.

C

Canton of Graubünden

gr.ch

0

The website www.gr.ch is the official online portal for the Canton of Graubünden, Switzerland, serving as a multilingual government platform providing information on politics, public services, and administration. It targets residents and visitors of the canton, offering diverse content in German, Romansh, and Italian. The site reflects a medium-sized government entity with a consistent and professional brand presence. Technically, the site employs modern web technologies including Font Awesome 6 Pro icons and JavaScript analytics, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of visible privacy and cookie policies. Overall, the site is trustworthy and safe, with no adult or questionable content detected.

W

Walservereinigung Graubünden

walserverein-gr.ch

0

Walservereinigung Graubünden is a well-established non-profit cultural association founded in 1960, dedicated to preserving and promoting the Walser language and alpine culture in the Graubünden region of Switzerland. The organization serves a membership base of approximately 2000 individuals and several municipalities, offering cultural events, publications, and a dedicated online shop. The website reflects a consistent brand identity and provides clear contact information and social media presence, supporting community engagement and cultural education. Technically, the site is built on the Contao CMS platform, utilizing modern JavaScript libraries for interactive features and responsive design, ensuring a good user experience across devices. Security posture is adequate with HTTPS enforced and secure login forms, but lacks explicit cookie consent and security headers, which are recommended for compliance and enhanced protection. Overall, the domain registration and WHOIS data align well with the organization's claims, indicating legitimacy and trustworthiness.

L

Lia Rumantscha

liarumantscha.ch

0

Lia Rumantscha is a well-established Swiss public institution dedicated to the promotion and preservation of the Rumantsch language and culture. Founded in 1919, it offers a variety of services including language courses, cultural projects, financial support for initiatives, and translation services. The website reflects a strong cultural mission with clear communication and engagement with its target audience, including families, youth, and the Rumantsch-speaking community. Technically, the site is built on Drupal CMS with modern libraries such as Bootstrap and Swiper.js, and it employs Matomo for privacy-conscious analytics. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers could enhance protection. Overall, the website is professional, trustworthy, and compliant with privacy regulations.

I

Institut für Kulturforschung Graubünden

kulturforschung.ch

0

The Institut für Kulturforschung Graubünden (ikg) is an independent research institution based in Chur, Switzerland, focusing on humanities, social sciences, and cultural studies related to the Alpine region, especially Graubünden. The website serves as a platform for disseminating research projects, publications, events, and membership information, targeting academics, researchers, and culturally interested audiences. The business model revolves around research, publication, and community engagement through events and memberships. Technically, the website employs modern web technologies including Google Analytics with IP anonymization, Google Tag Manager, Typekit fonts, and Swiper.js for interactive content sliders. The site is mobile-optimized, accessible, and SEO-friendly, though it lacks some advanced security headers. Performance is moderate, with a professional and consistent design. From a security perspective, the site uses HTTPS with good SSL configuration and respects user privacy with cookie consent mechanisms. However, it lacks explicit security headers and does not provide a public incident response or vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR principles. It effectively supports the institute's mission and audience engagement. Strategic improvements in security headers and transparency around incident response could further enhance its security posture and user trust.

H

Hutschn GbR

creativealps.org

0

creativeALPS is a small, specialized consultancy and research organization focused on sustainable economic and societal development in the Alpine region. They serve private, public, and social sector clients by providing research, advisory, and project implementation support. The website is professionally designed using modern web technologies such as Webflow and integrates security features like Google reCAPTCHA and GDPR-compliant cookie consent mechanisms. While the website demonstrates good security practices including HTTPS and form protection, it lacks explicit security headers and publicly available WHOIS domain registration data, which slightly reduces trustworthiness. Overall, the site is accessible, well-structured, and provides clear contact information, supporting a positive business credibility profile.

The Bibliotheksverbund Graubünden website serves as a centralized catalog portal for 37 school and community libraries within the canton of Graubünden, Switzerland. It provides users with the ability to search media collections, make reservations, and renew loans. The site supports multiple regional languages (German, Italian, Romansh) reflecting its target audience. The business model is a public service facilitating shared library resources, positioning it as a key regional educational infrastructure.

BergBuchBrig is a Swiss-based multimedia festival focused on nature, culture, leisure, and mountain adventures. Established in 2006, it has grown into a recognized cultural event with a diverse program including book presentations, exhibitions, film screenings, concerts, and excursions. The website serves as an information portal for the festival, providing event dates, program details, and organizational information. The target audience includes culture and nature enthusiasts primarily in Switzerland and neighboring regions. Technically, the website is built on WordPress using a professional theme and plugins such as Essential Grid and All in One SEO Pro, indicating a moderate level of digital maturity. The site is mobile-optimized and includes structured data for SEO benefits. However, there is room for improvement in performance optimization and accessibility. From a security perspective, the site uses HTTPS and employs some email cloaking to protect contact information. However, it lacks visible security headers and formal security policies such as a security.txt or incident response contacts. Privacy compliance is weak due to the absence of privacy and cookie policies, which could pose regulatory risks. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices to reduce risk and improve user trust.

A

Alpines Museum der Schweiz

alpinesmuseum.ch

0

ALPS Alpines Museum der Schweiz is a recently established (2023) cultural institution focused on alpine themes, including human interaction with mountains, environment, and culture. It operates as a non-profit museum located in Bern, Switzerland, and offers exhibitions, events, educational programs, and a restaurant. The museum is part of the Museumsquartier Bern, enhancing its cultural significance and partnerships. The website is professionally designed with good content quality, clear navigation, and multilingual support, targeting a broad audience interested in alpine culture and environment. Technically, the website uses modern web technologies including Google Tag Manager, reCAPTCHA v3 for form security, and is likely built on Craft CMS. Hosting is provided by Hostpoint AG, a reputable Swiss hosting provider. The site is mobile optimized and performs moderately well. SEO and accessibility are adequately addressed, though some improvements could be made. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. However, DNSSEC is not enabled and no explicit security headers were detected, which are areas for improvement. Privacy and cookie policies are present and GDPR compliance is indicated, but no detailed security or incident response policies are published. WHOIS data is consistent with the museum's identity, with privacy protection justified for this type of entity. Overall, the website presents a trustworthy and professional digital presence for the ALPS museum, with moderate technical maturity and a good security baseline. Strategic enhancements in security headers, DNSSEC, and published policies would further strengthen its posture.

V

Verein Parc Ela

parc-ela.ch

0

Verein Parc Ela operates the Parc Ela nature park located in the heart of Graubünden, Switzerland, uniting the three linguistic cultures of Romansh, German, and Italian. The organization focuses on preserving valuable landscapes, promoting cultural heritage, and fostering innovative projects and products through a network of engaged individuals. The website reflects a well-structured, professionally designed platform built on Drupal 10, with good mobile optimization and accessibility features. It employs Google Tag Manager for analytics and tracking, alongside a cookie consent mechanism, indicating a moderate level of privacy compliance. Security posture is strong with HTTPS and inferred security headers, though explicit security policies and incident response information are absent. Overall, the site presents a trustworthy and credible non-profit entity with a clear mission and community focus.

K

Kurhaus Bergün

kurhausberguen.ch

0

Kurhaus Bergün is a small hospitality business located in Switzerland, offering a range of services including hotel rooms, holiday apartments, dining, wellness treatments, and event hosting. The website reflects a well-established regional business with a focus on cultural heritage and sustainable tourism. The digital infrastructure is built on WordPress with WooCommerce, enhanced by SEO and multilingual plugins, indicating a mature and modern online presence. Security posture is strong with HTTPS, security headers, and GDPR-compliant cookie consent mechanisms in place. No critical vulnerabilities or blocking mechanisms were detected, and the website maintains a professional and trustworthy appearance.

W

Weisses Kreuz Bergün

weisseskreuz-berguen.ch

0

Weisses Kreuz Bergün is a small hospitality business located in Bergün, Switzerland, offering hotel accommodation and restaurant services primarily targeting tourists and travelers in the region. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard web technologies such as JavaScript and CSS. The site demonstrates moderate technical maturity with good mobile optimization and basic SEO features. Security posture is solid with HTTPS enforced and standard security headers present, although there is a lack of explicit privacy and cookie policies, as well as incident response information. Overall, the website is professional and trustworthy but could improve in privacy compliance and transparency aspects.

H

Hotel/Restaurant Piz Ela

pizela.ch

0

Hotel/Restaurant Piz Ela is a small hospitality business located in Bergün/Bravuogn, Switzerland, offering hotel accommodations and restaurant/pizzeria services. The website presents a professional and consistent brand image with clear contact information and environmental commitment messaging. The business targets tourists and visitors to the region seeking historic charm and local hospitality. Technically, the site is built on WordPress using the Bridge theme and WPBakery Page Builder, with modern libraries such as jQuery and Google reCAPTCHA integrated for form security. Performance and mobile optimization are good, though accessibility and SEO could be improved. Security posture is moderate with HTTPS enforced and reCAPTCHA implemented, but lacks explicit security headers and published security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism detected. Overall, the website is trustworthy and functional with room for security and compliance enhancements.

G

Gemeinde Surses

surses.ch

0

The website for Gemeinde Surses serves as the official municipal portal providing residents and visitors with comprehensive information about local government services, news, tourism, and public administration. It is well-positioned as a local government authority site in Switzerland, targeting the local community and tourists. The site offers key services such as administrative contacts, news updates, local maps, and tourism information. Technically, the site uses a mix of Google Analytics, Google Maps API, and jQuery 1.12.0, with a custom or proprietary CMS. The site is mobile-optimized and has good SEO practices but could improve accessibility and update some libraries. Security-wise, the site enforces HTTPS and anonymizes IPs in analytics but lacks explicit security headers and incident response information. Overall, the site is trustworthy, professional, and compliant with basic privacy and cookie regulations, suitable for its government function.

G

Gemeinde Lantsch/Lenz Graubünden

lantsch-lenz.ch

0

The website www.lantsch-lenz.ch serves as the official online presence of the Gemeinde Lantsch/Lenz, a political municipality in the Albula region of the canton of Graubünden, Switzerland. It provides comprehensive information and services relevant to local residents and visitors, including municipal news, political governance, administrative services, tourism, and community events. The site is well-branded and structured to serve its target audience effectively. Technically, the website is built on the Joomla CMS platform with the Yootheme theme and utilizes modern web technologies such as jQuery, UIkit, and Font Awesome. It is mobile-optimized and includes accessibility features, providing a good user experience. Google Analytics is used for visitor tracking, indicating moderate user tracking practices. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, which are positive indicators. However, it lacks several important security headers and explicit privacy or cookie policies, which are compliance gaps. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is a trustworthy and professional municipal portal with good content quality and technical implementation. The main areas for improvement include adding privacy and cookie policies to enhance GDPR compliance and implementing additional security headers to strengthen the security posture.

G

Gemeinde Albula/Alvra

albula-alvra.ch

0

The website www.albula-alvra.ch serves as the official online presence of the municipality of Albula/Alvra in Switzerland. It provides residents and visitors with comprehensive information about the community, including local news, events, administrative services, and online service portals. The site targets local citizens and stakeholders interested in municipal affairs and public services. The business model is that of a government entity focused on public administration and community engagement. Technically, the website is built on a CMS platform likely provided by i-web.ch, utilizing modern web technologies such as HTML5, CSS, JavaScript, and responsive design frameworks like Bootstrap. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. It employs HTTPS for secure communication and includes a user consent mechanism for anonymized web analytics. From a security perspective, the site benefits from HTTPS encryption and anonymized data collection with user consent, indicating a privacy-conscious approach. However, it lacks explicit security headers and does not publish incident response or vulnerability disclosure policies, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the website is a trustworthy and professional municipal portal with a strong focus on user information and service delivery. Strategic recommendations include enhancing security headers, publishing incident response contacts, and formalizing vulnerability disclosure to strengthen security posture and trustworthiness.

B

Bahnmuseum Albula AG

bahnmuseum-albula.ch

0

Bahnmuseum Albula AG operates a specialized railway museum in Bergün/Bravuogn, Switzerland, focusing on the heritage of the Rhätische Bahn. The museum offers exhibitions, special events, a shop, and a buffet, targeting tourists, railway enthusiasts, and local visitors. The website is built on Drupal 10 and integrates modern web technologies such as Vue.js and Google Tag Manager for analytics. The site is well-designed, mobile-optimized, and accessible, providing a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS and cookie consent mechanisms, though explicit security headers and privacy policies are lacking. Contact information is clearly presented, and the WHOIS data confirms the legitimacy and consistency of the domain registration. Overall, the website reflects a professional and trustworthy institution with room for improvement in privacy and security disclosures.

L

Lesestoff

lesestoff.ch

0

Lesestoff.ch is a Swiss online bookstore offering a wide range of books, eBooks, audiobooks, and related products. It operates both online and through physical stores in multiple Swiss cities, targeting book buyers primarily in Switzerland and German/English speaking customers. The website is professionally designed with good content quality, clear navigation, and multilingual support. The technical infrastructure uses modern JavaScript libraries and APIs, ensuring a moderate performance and good mobile optimization. Security posture is adequate with HTTPS and secure login forms, but lacks explicit security headers and incident response information. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and credible but could improve in privacy and security transparency.