Security Directory

P

Plachutta

plachutta-gruenspan.at

59

Plachutta's Grünspan is a traditional Austrian tavern located in Vienna’s historic beer district, offering classic Austrian pub fare and specialties in a beer garden setting. The business targets both local diners and tourists seeking authentic culinary experiences. The website reflects a medium-sized hospitality business with a consistent brand presence and professional design. Technically, the site uses modern web technologies including JavaScript, CSS3, and integrates Google services such as Tag Manager and reCAPTCHA, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and cookie consent implemented; however, the absence of explicit privacy policies, terms of service, and security headers suggests room for improvement. No WAF or content blocking was detected, and the site contains no adult or explicit content, making it safe for general audiences. WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the site is functional, professional, and trustworthy but would benefit from enhanced privacy and security disclosures.

P

Plachutta

plachutta-neuermarkt.at

54

Plachutta's Neuer Markt is a well-established restaurant located in Vienna, specializing in traditional Viennese cuisine with a modern presentation. The website reflects a strong market position with clear branding, comprehensive menu offerings, and services including dine-in, takeaway, and reservations. The target audience includes locals and tourists seeking authentic Viennese dining experiences. Technically, the site uses modern web technologies such as Bootstrap, Google Tag Manager, and Photoswipe for image galleries, ensuring a responsive and user-friendly experience. Security measures include HTTPS enforcement, cookie consent management, and use of Google reCAPTCHA, indicating a mature security posture. No critical vulnerabilities or compliance gaps were detected, though explicit security policies and incident response contacts could be improved. Overall, the website is professional, trustworthy, and compliant with GDPR, supporting the business's credibility and customer engagement.

P

Plachutta

plachutta-oper.at

64

Plachutta's Gasthaus zur Oper is a well-established hospitality business located in Vienna, Austria, specializing in traditional Viennese cuisine such as Wiener Schnitzel and Tafelspitz. The website showcases a blend of modern design and tradition, offering dine-in, takeaway, and retail services including cookbooks. The business enjoys a strong market position with recognized culinary awards and active social media presence. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript libraries like Slick Slider and Photoswipe, and integrates Google Tag Manager and reCAPTCHA for analytics and security. The site is mobile-optimized and provides a good user experience with rich multimedia content. Security posture is solid with HTTPS enforced and cookie consent implemented, though it lacks explicit security headers and published privacy or terms of service documents. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

S

standard404

standard404.com

47

The website standard404.com is a minimal portfolio or personal site hosted on the Cargo Collective platform. It contains very limited content, primarily navigation links labeled 'WORK' and 'ABOUT', with no detailed business description, contact information, or legal policies. The technical infrastructure is based on Cargo Collective's CMS and hosting, utilizing standard web technologies such as HTML5, CSS3, JavaScript, and jQuery. The site is served over HTTPS with a clientTransferProhibited domain status, but lacks DNSSEC and security headers, indicating room for improvement in security posture. No privacy or cookie policies are present, and no contact or incident response information is provided, which impacts compliance and trust. Overall, the site is safe for general audiences but lacks comprehensive business and security information, resulting in a moderate risk profile.

P

Phedre Barbas

phedrebarbas.com

49

The website phedrebarbas.com serves as an online portfolio for a French-Greek artist and designer based in Paris, showcasing various artistic installations and design projects. The content is rich with images and descriptions of art pieces spanning from 2021 to 2024, targeting a general audience interested in contemporary art and design. The business model is primarily a portfolio presentation without e-commerce or direct sales functionalities, positioning itself within a niche artistic community. Technically, the site is built on the Cargo Collective platform, utilizing standard web technologies such as HTML5, CSS3, JavaScript, and jQuery. The site demonstrates moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. Hosting and domain registration are managed via eNom and Cargo Collective, with HTTPS enabled but missing DNSSEC and security headers. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks DNSSEC and critical security headers, which could expose it to certain risks. No privacy, cookie, or terms of service policies are present, indicating compliance gaps. The WHOIS data is suspicious due to a future domain creation date, which undermines trust in the domain registration legitimacy. Overall, the website is a well-designed artist portfolio with good content quality but has notable deficiencies in privacy, security policies, and domain registration transparency. Strategic improvements in security headers, privacy compliance, and domain registration accuracy are recommended to enhance trust and security posture.

P

PANORAMMMA

panorammma.com

49

PANORAMMMA is an artistic and design-focused website showcasing collections, exhibitions, and interiors. The site targets art and design enthusiasts and potential buyers, offering a portfolio-style presentation with image galleries and a shop feature, although e-commerce functionality appears limited. The business is relatively new, with domain registration dating back to 2021, and operates on the Cargo Collective platform. Technically, the site uses modern web technologies including Google Tag Manager and Google Analytics for tracking, but lacks advanced security headers and privacy policies. Security posture is moderate with HTTPS enabled and domain transfer protections in place, but improvements are needed in DNS security and compliance documentation. Overall, the website is professional and functional but would benefit from enhanced privacy, security, and contact transparency to improve trust and compliance.

N

Niki Danai

nikidanai.com

44

Niki Danai's website serves as a professional portfolio showcasing a multidisciplinary artist's work in sculpture, ceramics, product design, and multimedia installations. The site targets art enthusiasts and cultural institutions, emphasizing recent and upcoming exhibitions primarily in Europe. The business model is centered on personal branding and exhibition promotion, with a small-scale operation reflected in the site's content and domain age. Technically, the website employs standard web technologies including HTML5, CSS3, and JavaScript, with Google Fonts integration. Hosting is provided by Contabo, a reputable provider. The site is mobile-optimized with moderate performance and basic SEO and accessibility features. However, there is no CMS detected, and the technical stack is relatively simple. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but lacks DNSSEC and security headers, which are recommended for enhanced security. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. Contact information is limited to a contact form, with no direct emails or phone numbers provided. Overall, the website is functional and professional but would benefit from improved security practices, privacy compliance, and enhanced contact transparency to increase trustworthiness and reduce risk.

N

Natalia Triantafylli

nataliatriantafylli.com

51

The website nataliatriantafylli.com serves as a personal portfolio for artist and photographer Natalia Triantafylli, showcasing her visual artwork and photography. The site is built on the Cargo Collective platform, featuring a clean and consistent design optimized for mobile devices. It targets art enthusiasts and potential collaborators, focusing on artistic exposure rather than commercial transactions. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript, and jQuery, with web fonts for typography. Hosting and domain registration are consistent and reputable, with HTTPS enabled ensuring secure connections. However, the site lacks privacy and cookie policies, contact information, and security incident response details, which are important for compliance and trust. No advanced security headers or analytics tools are detected, indicating a basic security posture. Overall, the site is functional and professional but could improve in privacy compliance and security best practices.

M

WORK | Astronauts

madebyastronauts.com

57

The website www.madebyastronauts.com appears to be a minimal Wix-built site with very limited content and no visible business or contact information. The domain WHOIS data is unavailable, indicating the domain may not be registered or the data is withheld, which raises concerns about legitimacy. Technically, the site uses standard Wix platform technologies and includes some security hardening scripts, but lacks essential security headers and privacy compliance mechanisms. There are no forms or data collection points detected, and no privacy or cookie policies are present. Overall, the site has a low trustworthiness score and minimal business credibility.

L

Lucas Muñoz Muñoz

lucasmunoz.com

47

Lucas Muñoz Muñoz is a designer and artist specializing in sustainable, experimental, and upcycled furniture and installations. The website serves as a comprehensive portfolio showcasing a wide range of projects from 2006 through 2025, including collaborations with galleries and participation in international design festivals. The target audience includes design enthusiasts, galleries, and cultural institutions interested in innovative and sustainable design. Technically, the website uses modern JavaScript libraries such as jQuery, Masonry, and Vimeo API for dynamic content presentation, with a responsive design suitable for mobile devices. However, there is no evidence of HTTPS or security headers, and no privacy or cookie policies are present, indicating compliance and security gaps. The WHOIS data is missing, raising concerns about domain legitimacy, though the website content is professional and active. Overall, the site demonstrates good content quality and technical implementation but requires improvements in security, privacy compliance, and domain legitimacy verification.

J

Jean-Baptiste Durand

jeanbaptistedurand.com

9

Jean-Baptiste Durand's website is a personal portfolio showcasing artistic works, hosted on the Cargo Collective platform. The site is professionally designed with good navigation and mobile optimization, serving a general audience interested in art. The technical infrastructure leverages modern web technologies and integrates Stripe for e-commerce, indicating readiness for online sales of artworks. Security posture is adequate with HTTPS enabled and domain registration transparency, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is minimal, with no visible privacy or cookie policies, which could expose the site to regulatory risks. Overall, the site is legitimate and functional but would benefit from improved security and privacy practices.

E

Emilio Ferro

emilioferro.it

51

The website www.emilioferro.it serves as the official online presence for contemporary artist Emilio Ferro, showcasing his artwork and providing information about the artist. The site targets art enthusiasts and potential collectors within a niche contemporary art market. The business model is primarily promotional, focusing on portfolio display rather than direct e-commerce or service transactions. The website is built on the Wix platform, leveraging Wix's hosting and content management capabilities. It uses standard Wix scripts and Google Analytics for visitor tracking. The technical infrastructure is modern but basic, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and incident response contact information. Privacy and cookie policies are absent, indicating gaps in compliance with data protection regulations. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security measures to improve compliance and user trust.

C

Clara Schweers

claraschweers.com

56

Clara Schweers is a contemporary artist specializing in glass and mixed media artworks, presenting a professional portfolio website that showcases her artistic creations and collaborations. The website serves as a platform for exhibiting her work and facilitating contact for potential sales or exhibitions. The site is hosted on DreamHost and built using the Cargo CMS platform, featuring a modern and visually appealing design optimized for desktop and mobile users. However, the site lacks explicit privacy and cookie policies, which are important for GDPR compliance and user trust. Security-wise, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and security headers, which could be improved to enhance security posture. Overall, the website is credible and professional but would benefit from enhanced privacy compliance and security best practices.

F

FALTER.at

complete-magazin.at

63

FALTER.at is a well-established Austrian media company focusing on news, cultural content, events, and local guides primarily for Vienna. The website offers a broad range of services including news articles, event listings, podcasts, ePaper, and video content, targeting a general audience interested in regional information. The business model is primarily advertising-supported with subscription options, positioning FALTER.at as a key regional media player with a consistent and professional brand presence. Technically, the website employs modern web technologies including JavaScript frameworks like Livewire, and integrates multiple third-party services for advertising, analytics, and consent management. The infrastructure appears robust with good mobile optimization, accessibility, and SEO practices. The use of asynchronous script loading and reputable analytics platforms indicates a mature digital setup. From a security perspective, the site enforces HTTPS and uses a consent management platform compliant with GDPR. While explicit security headers are not fully visible in the provided data, best practices are generally followed, and no vulnerabilities or exposed sensitive data were detected. The absence of a public security policy or incident response contact is noted but does not detract significantly from the overall posture. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. The risk profile is low, with recommendations focusing on enhancing security header implementation and publishing vulnerability disclosure information to further strengthen trust.

B

Balmer Bücherdienst AG

balmer-bd.ch

55

Balmer Bücherdienst AG is a Swiss-based classical publishing distribution company serving the book trade and resellers with products from domestic and international partner publishers. The company operates a B2B webshop and reporting portals to facilitate order placement and business analytics. Their market position is that of an established regional distributor with a focus on the Swiss book market. Technically, the website is built on Shopware CMS, uses modern web technologies, and integrates third-party search services. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and standard security headers present, though explicit security policies and incident response information are not published. Privacy and cookie policies exist and indicate GDPR compliance. Overall, the website and domain registration data align well, indicating a legitimate and trustworthy business presence online.

L

Landis & Gyr Foundation

lg-stiftung.ch

55

The Landis & Gyr Foundation is a Swiss non-profit organization dedicated to supporting artistic and cultural projects, primarily focusing on professional and contemporary creative work by artists and writers within Switzerland. The foundation emphasizes collaboration with recognized organizations and has a regional interest in Zug and central Switzerland, while also supporting projects from non-urban areas across the country. The website reflects a niche cultural foundation with a clear mission and professional presentation, targeting artists and cultural entities. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript libraries such as Swiper.js and Leaflet.js, and uses Matomo for analytics, indicating a moderate level of digital maturity. Hosting and resources are served from computedby.com domains, suggesting a specialized hosting or development provider. The site is mobile-optimized and has good design quality, though accessibility and SEO optimizations are basic. From a security perspective, the site uses HTTPS and defers scripts for performance, but lacks visible security headers and does not provide privacy or cookie policies, which are compliance gaps. No contact information or incident response channels are explicitly provided, limiting transparency. The use of Matomo analytics suggests some privacy awareness, but absence of consent mechanisms reduces privacy compliance. Overall, the website is professional and trustworthy for its purpose but would benefit from enhanced privacy compliance, security headers, and clearer contact information to improve user trust and regulatory adherence.

M

mfsystem

mfsystem.ch

46

mfsystem is a Swiss-based manufacturer specializing in modular furniture systems including shelves, sideboards, wardrobes, and office furniture. The company emphasizes sustainability and customization, offering an online configurator for customers to design their own furniture. Their market position is that of a niche player focusing on quality and flexibility for both residential and commercial clients. Technically, the website is well-structured with modern web standards, mobile optimization, and HTTPS security. However, it lacks some advanced security headers and explicit privacy consent mechanisms. The security posture is solid but could be improved with better transparency on incident response and vulnerability disclosures. Overall, the website presents a professional and trustworthy image with good user experience and clear business focus.

The website anneschwalbe.shop is a small-scale e-commerce platform specializing in the sale of art prints, posters, books, and clothing related to the photography and art of Anne Schwalbe. The business operates primarily in Germany and targets art collectors and enthusiasts. The site is built on the Shopify platform, leveraging its infrastructure and security features. The technical infrastructure is modern and well-optimized for mobile and desktop users, with good SEO and accessibility basics. Security posture is solid with HTTPS enforced and domain locking enabled, though DNSSEC is not enabled and some HTTP security headers could be improved. Privacy compliance is addressed with a cookie consent banner and a privacy policy, but lacks explicit GDPR or incident response details. Overall, the site presents a professional and trustworthy e-commerce experience with room for enhanced security and compliance documentation.

A

Alcova

vocla.xyz

58

Vocla.xyz is a professionally designed website serving as a platform for design experimentation and social gatherings during Milan Design Week. The site showcases curated exhibitions and pop-up dining experiences, collaborating with notable design houses and restaurants. The technical infrastructure is modern, leveraging Nuxt.js and Cloudflare DNS, ensuring good performance and mobile optimization. However, the site lacks critical privacy and cookie policies, which impacts compliance. Security posture is adequate with HTTPS and domain transfer protection, but could be improved by enabling DNSSEC and security headers. Overall, the website is trustworthy and well-positioned within its niche event market, though it should address compliance and security best practices to enhance user trust and regulatory adherence.

S

Stadt Illnau-Effretikon Abteilung Bildung

schule-ilef.ch

64

Schule Illnau-Effretikon is a public educational institution serving the Illnau-Effretikon region in Switzerland. The website provides detailed information about various school levels including kindergarten, primary, secondary, and vocational preparatory year programs. It targets parents, students, and educational stakeholders in the local community, offering services such as school information, supplementary care, online forms, news, and event agendas. The institution is positioned as a regional education provider under the city administration of Illnau-Effretikon. Technically, the website is built on the ICMS platform by i-web.ch, utilizing modern web technologies including JavaScript and Matomo analytics for user tracking with consent. The site is mobile-optimized and accessible, with a clear navigation structure and good SEO practices. Hosting appears to be Swiss-based, supporting performance and data privacy compliance. From a security perspective, the site enforces HTTPS and uses secure login forms. However, it lacks published formal security policies and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is supported by a visible privacy policy and cookie consent mechanism, aligning with GDPR requirements. Overall, the website demonstrates a solid digital presence with good content quality, technical implementation, and business credibility. Strategic improvements could focus on enhancing security transparency and incident response readiness to further strengthen trust and compliance.

B

Bildungszentrum Limmattal

bzlt.ch

47

Bildungszentrum Limmattal is a vocational education center based in Zürich, Switzerland, specializing in logistics, recycling, and technology training. The institution offers foundational and continuing education programs targeting learners, students, and professionals in related sectors. The website reflects a well-structured educational service provider with clear contact information and a consistent brand presence. Technically, the site uses modern web technologies including Craft CMS, jQuery, and integrates Google Analytics and Tag Manager for user insights. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and incident response information suggests room for improvement. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the domain registration aligns with the business identity, supporting legitimacy and trustworthiness.

R

Region Rapperswil-Jona Tourismus

rapperswil-zuerichsee.ch

60

The website rapperswil-zuerichsee.ch serves as the official travel guide for the Rapperswil and Zurichsee region in Switzerland, providing comprehensive tourism information including events, accommodations, and local attractions. It targets tourists and visitors seeking regional insights and services, positioning itself as a key regional tourism portal. The business model focuses on tourism promotion and visitor engagement, supported by clear contact information and official branding. Technically, the site is built using modern web technologies including Nuxt.js and Tailwind CSS, with integrations for Google Tag Manager, Facebook Pixel, and a consent management platform ensuring GDPR compliance. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the website enforces HTTPS, employs standard security headers, and integrates cookie consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks a dedicated security policy or incident response page, and no vulnerability disclosure mechanism is present, which could be areas for improvement. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include publishing a formal security policy, establishing an incident response contact, and considering a vulnerability disclosure page to enhance transparency and trust.

I

Indo-German Center For Higher Education

igche.de

48

The Indo-German Center For Higher Education (IGCHE) operates as a consortium of German universities offering bilingual engineering degree programmes that facilitate student exchange and cultural integration between India and Germany. The website clearly communicates its educational mission, target audience of prospective engineering students, and key services including German language training and internships. Technically, the site is built on RapidWeaver CMS with Stacks, uses Matomo for privacy-conscious analytics, and demonstrates good mobile responsiveness and navigation clarity. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers and incident response policies are absent. Overall, the site is professional, trustworthy, and well-aligned with its educational objectives.

A

Am Hof 8 Betriebs GmbH

amhof8.com

60

Am Hof 8 Betriebs GmbH operates Vienna's first private members club, offering exclusive access to a private house, curated events, and partner benefits. The business targets affluent individuals seeking a discreet and refined social environment in a central Vienna location. The website reflects a professional and consistent brand image, emphasizing exclusivity and community. Technically, the site uses modern web technologies including Livewire and Alpine.js, with a CMS likely based on Strapi. The site is mobile-optimized and performs moderately well, though some security enhancements are recommended. Security posture is solid with HTTPS and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Contact information is transparent and includes phone, email, and physical address. Overall, the domain registration is consistent with the business claims, supporting legitimacy. Strategic improvements in security headers and privacy mechanisms would enhance trust and compliance.

I

In-Dish Wien

in-dish.at

59

In-Dish Wien is a small hospitality business operating an Indian fusion restaurant located in Vienna, Austria. The website presents a professional and visually appealing design built on the Framer platform, targeting general audiences interested in creative Indian cuisine. The business appears to be locally focused with a niche market position. Technically, the website uses modern web technologies but lacks advanced security configurations and privacy compliance features. No privacy or cookie policies are present, and no contact information is explicitly provided in the analyzed content. Security posture is minimal with no detected security headers or incident response contacts. Overall, the site is safe and appropriate for general users but would benefit from enhanced security and compliance measures.

S

Restaurant und Bar | Spelunke

spelunke.at

60

The website www.spelunke.at appears to be a small hospitality or restaurant business based in Austria, utilizing the Wix platform for its online presence. The site integrates a Molzait reservation system, indicating a focus on customer bookings. The technical infrastructure is standard for Wix-hosted sites, leveraging Wix Thunderbolt framework and common web technologies such as JavaScript, HTML5, and CSS3. Mobile optimization is good, but content quality and SEO are basic, with limited business information visible in the provided HTML content. Security posture is moderate with HTTPS enabled but lacking security headers and privacy compliance documentation. Overall, the site is functional but lacks comprehensive privacy, security, and contact information, which could impact user trust and regulatory compliance.

D

Das Bootshaus Alte Donau

dasbootshaus.at

76

Das Bootshaus Alte Donau is a small hospitality business located in Vienna, Austria, combining rowing culture with gastronomy. The website presents a professional and well-structured digital presence featuring online reservations, event promotions, and a strong social media footprint. Technically, the site uses modern web technologies including JavaScript libraries, lazy loading, and integrates third-party reservation widgets. Security posture is adequate with HTTPS enforced but lacks explicit security headers and published security policies. Privacy compliance is partial with cookie consent but missing explicit privacy and terms of service pages. Overall, the website is trustworthy and well-positioned in its local market niche.

P

Plachutta

plachutta.at

60

Plachutta is a well-established family-owned hospitality business operating multiple restaurant locations in Vienna, Austria, specializing in traditional Viennese cuisine such as Tafelspitz and Wiener Schnitzel. The website reflects a professional and consistent brand presence targeting tourists and locals interested in authentic Austrian culinary experiences. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript libraries like Slick Slider, and integrates Google services such as Tag Manager, Maps, and reCAPTCHA. The site is mobile-optimized and performs moderately well with good SEO practices. Security posture is strong with HTTPS enforced and multiple security headers present, alongside a cookie consent mechanism indicating GDPR awareness. However, the absence of explicit privacy policy and terms of service pages represents a compliance gap. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

B

Bosch Climate Solutions

bosch-climate-solutions.com

59

Bosch Climate Solutions is a sustainability consultancy focused on helping SMEs and industrial companies achieve sustainability goals and comply with European sustainability reporting requirements such as CSRD. The company leverages Bosch's industrial heritage and expertise to provide customized climate protection and energy efficiency consulting services. The website is built on the HubSpot CMS platform, incorporating modern JavaScript libraries and marketing tools such as Google Tag Manager and HubSpot Analytics. While the site is professionally designed and mobile optimized, it lacks visible privacy and cookie policies despite using tracking technologies, which is a compliance gap. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. The domain registration is consistent and legitimate, supporting the business claims. Overall, the website presents a trustworthy and professional image but should improve privacy compliance and security best practices.

The website tickethead.io is currently inaccessible due to a Cloudflare security challenge page that blocks direct content access. The page presented is a robot challenge screen implementing a JavaScript-based proof-of-work captcha, indicating the presence of a Web Application Firewall (WAF) protecting the site. Due to this, no business-related content, contact information, or policies are publicly available for analysis. The domain is recently registered in 2023 and uses privacy protection services, which limits transparency and trust signals. Technically, the site uses Cloudflare DNS and Cloudfront CDN for hosting and content delivery, but no CMS or frameworks are identifiable from the blocked content. Security headers and SSL configuration details are not available from the provided data. Overall, the site’s security posture cannot be fully assessed due to access restrictions, and the lack of visible privacy and cookie policies indicates poor compliance readiness.

F

Fab Fox Shop

fabfox.shop

61

Fab Fox Shop is a small e-commerce business specializing in official merchandise for the Fab Fox Fabulous Tour, targeting fans primarily in Austria. The website is professionally designed using the Shopify platform, featuring a consistent brand presence and clear navigation. The business model focuses on direct online retail of branded merchandise, positioning itself as a niche player in the fan merchandise market. Technical infrastructure leverages Shopify's robust hosting and commerce capabilities, including integration with Facebook Pixel and Shopify Analytics for marketing and user tracking. The site is mobile-optimized and performs well with fast loading times and good accessibility features. Security posture is solid with HTTPS enforced and domain transfer protections in place, though improvements can be made by enabling DNSSEC and adding explicit security headers. Privacy compliance is currently basic, lacking explicit privacy and cookie policies, which should be addressed to meet GDPR standards fully. Overall, the site is trustworthy and functional but would benefit from enhanced transparency and security practices.

T

Teta drogérie

tetadrogerie.sk

68

Teta drogérie is a well-established Slovak retail company specializing in drogery, cosmetics, and baby care products, operating a professional e-commerce platform. The website demonstrates a mature digital infrastructure with modern technologies including ASP.NET, advanced analytics tools like Google Analytics and Matomo, and comprehensive cookie consent management via Cookiebot, ensuring GDPR compliance. Security posture is solid with HTTPS enforced and standard security practices observed, though explicit security policies and incident response information are not publicly evident. Overall, the site presents a trustworthy and professional online presence suitable for its market segment.

B

Bureau of Middle East Recycling

bmr.ae

31

The Bureau of Middle East Recycling (BMR) is a small, non-profit organization serving as the regional forum and voice for the recycling industry in the Middle East, particularly focusing on metal recycling. The organization promotes recycling awareness, supports free trade of secondary raw materials, and provides networking and policy updates to its members. The website reflects this mission with professional design, multimedia content, and clear contact information, targeting industry stakeholders in the region. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and various JavaScript libraries, with integration of Google Analytics and Tag Manager for tracking. The site is moderately optimized for performance and mobile devices, though some accessibility and SEO features could be improved. The hosting and domain registration align with the UAE location, supporting the business's regional focus. From a security perspective, the site uses HTTPS (implied by canonical URL), but lacks visible security headers and formal security policies. No privacy or cookie policies are present, indicating compliance gaps especially regarding GDPR. The contact form collects user data but lacks visible consent mechanisms. No WAF or blocking mechanisms are detected, and no suspicious or vulnerable elements are found in the HTML content. Overall, the website is professional and trustworthy but would benefit from enhanced security practices, privacy compliance, and clearer policy disclosures to improve user trust and regulatory adherence.

The website bir.org currently serves a robot challenge screen implementing a client-side proof-of-work CAPTCHA mechanism to mitigate automated access. This indicates the presence of a Web Application Firewall (WAF) or similar security control actively blocking direct content access. Due to this, the actual business content is inaccessible, limiting the ability to analyze the company's services, policies, or contact information. The domain is long-established, registered since 1996 with Gandi SAS, which suggests legitimacy, but the lack of DNSSEC and visible security headers indicates room for improvement in domain and site security. Technically, the site uses advanced JavaScript cryptographic functions and Web Workers to perform the CAPTCHA challenge, demonstrating a modern approach to bot mitigation. However, the page lacks SEO optimization, accessibility features, and any visible business or compliance documentation. No privacy, cookie, or terms of service policies are present, and no contact or incident response information is available. Security posture is moderate due to the presence of the CAPTCHA challenge but is weakened by missing security headers and lack of visible SSL configuration details. The absence of privacy and cookie policies and contact information reduces compliance and trustworthiness. Overall, the site is currently inaccessible for normal users without passing the challenge, which significantly impacts user experience and trust. Strategic recommendations include enabling DNSSEC, publishing privacy and cookie policies, adding contact and incident response information, implementing security headers, and ensuring HTTPS enforcement. These steps will improve compliance, security posture, and user trust.

B

Brain City Berlin

braincity.berlin

53

Brain City Berlin is an information and networking platform dedicated to promoting Berlin as a leading science metropolis in Europe. The website provides comprehensive content about research developments, funding opportunities, events, and a vibrant ambassador program featuring prominent figures from Berlin's scientific community. The platform targets researchers, academics, students, and stakeholders interested in Berlin's science ecosystem. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and integrates consent management for GDPR compliance. Security posture is solid with HTTPS and consent mechanisms, though explicit security headers and policies are not evident. Overall, the site is professional, content-rich, and trustworthy, with good user experience and mobile optimization.

Zahlenzorro is an educational online platform operated by the Westermann Gruppe, offering interactive math exercises targeted at primary school students (grades 1-4) in Germany. The platform provides engaging math stories, training apps, and classroom management tools with a subscription-based licensing model for individuals, classes, schools, and school districts. The website is professionally designed with consistent branding and clear navigation, supporting both desktop and mobile devices. It integrates Piwik analytics with privacy-conscious settings and links to reputable educational partners. Security posture is moderate with HTTPS usage and some privacy considerations, but lacks explicit security headers and published security policies. Contact information and trust signals such as awards and partner logos enhance credibility. Overall, the site is safe, compliant with GDPR, and well-positioned in the German educational market.

W

Westermann Gruppe

westermann.de

72

Westermann Gruppe operates a comprehensive educational media and services platform primarily targeting teachers, parents, students, and educational professionals in German-speaking countries. The website offers a broad range of services including educational books, digital learning platforms like BiBox, teacher training webinars, school consulting, and an online shop. The company is positioned as a large, established player in the education sector with consistent branding and a professional online presence. Technically, the website employs modern web technologies, including JavaScript frameworks, responsive design, and lazy loading for images, ensuring a good user experience across devices. The site is well-optimized for SEO and accessibility, with clear navigation and rich content. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms compliant with GDPR. However, it lacks explicit security headers and a published security policy or incident response contact, which are areas for improvement. Overall, the website is safe, trustworthy, and professionally maintained, with no signs of adult or questionable content. The domain registration appears legitimate though limited WHOIS data restricts full verification. Strategic recommendations include enhancing security headers, publishing a security policy, and establishing a vulnerability disclosure process to further strengthen trust and compliance.

P

Präsenzstelle O-H-V | Velten

praesenzstelle-velten.de

59

The Präsenzstelle O-H-V | Velten website serves as a regional hub connecting higher education institutions in Brandenburg with local communities, students, and businesses. It provides access to teaching and research, facilitates networking, and offers consultation services. The site is positioned as a non-profit educational and research facilitation center with strong partnerships including Technische Hochschule Brandenburg, Universität Potsdam, and regional economic development entities. The content is well-structured, professionally presented, and targets a broad audience including students, citizens, and companies in the region. Technically, the website is built on TYPO3 CMS, employs modern web standards, and is mobile-optimized with good accessibility and SEO practices. The site uses HTTPS exclusively and implements a GDPR-compliant cookie consent mechanism. However, it lacks visible security headers and explicit security or incident response policies. Analytics usage is minimal and privacy-conscious, relying on Matomo. From a security perspective, the site demonstrates a solid baseline with HTTPS and cookie consent but could improve by adding security headers and publishing security policies or vulnerability disclosure information. No critical vulnerabilities or suspicious patterns were detected. The domain registration data aligns well with the website's claims, supporting legitimacy and trustworthiness. Overall, the website is a credible, well-maintained regional educational platform with good content quality and technical implementation. Strategic improvements in security policy transparency and header implementation would enhance its security posture and trust further.

W

wedooper

karriere-hennigsdorf.de

37

The Karriereportal Hennigsdorf is a regional career portal focused on connecting companies in Hennigsdorf with young talents seeking internships, apprenticeships, study opportunities, and jobs. The platform is operated by wedooper in collaboration with the city's economic development office, positioning itself as a niche regional service provider in the education sector. The website is well-structured, with clear navigation and relevant content tailored to its target audience of local companies and job seekers. Technically, the site uses modern web technologies including jQuery, Swiper.js, and Modernizr, and is served over HTTPS with a cookie consent mechanism in place, though it lacks advanced security headers and analytics integration. Security posture is moderate with no critical vulnerabilities detected, but improvements are recommended in security headers and incident response transparency. Overall, the site is safe, professional, and trustworthy with a good balance of privacy compliance and user experience.

U

UNICMI

unicmi.it

43

UNICMI is a well-established Italian industry association founded in 2013, representing companies in the metal construction and building envelope sectors. The website serves as a comprehensive portal offering technical training, consultancy, market data, and industry news to its members and stakeholders. It maintains a consistent brand presence and provides useful resources tailored to industry professionals. Technically, the site is built on Joomla CMS with standard JavaScript libraries and tracking tools such as Google Analytics and Facebook Pixel. While the site is functional and professionally designed, there is room for improvement in mobile optimization and accessibility. Security posture is moderate with HTTPS enabled and basic privacy compliance, but lacks advanced security headers and DNSSEC. The WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the site is trustworthy and serves its target audience effectively.

H

Hochschulallianz für Angewandte Wissenschaften (HAWtech)

hawtech.de

46

HAWtech is a German university alliance focused on applied sciences and engineering education, uniting six leading universities of applied sciences. The website serves as an information portal for students, researchers, and industry partners, emphasizing collaboration in teaching, research, and innovation. Technically, the site is built on TYPO3 CMS with modern JavaScript frameworks and includes privacy-compliant cookie consent and analytics via Matomo. Security posture is solid with HTTPS and no visible vulnerabilities, though formal security policies and incident response contacts are absent. Overall, the site is professional, trustworthy, and well-maintained, supporting the alliance's mission effectively.

The domain landratsamt-ostalbkreis.de currently serves a minimal redirect page managed by Parklogic, a domain parking and monetization service. No official website content, business information, or contact details are present, indicating the domain is not actively used for its purported purpose. The technical infrastructure is limited to basic JavaScript redirection and ad overlays, with no visible security or privacy policies. This results in a low digital maturity and poor user experience. Security posture is weak due to lack of HTTPS confirmation and absence of security headers. Overall, the site poses a low trust level and is not suitable for business or public use in its current state.

S

Viele Hochschulen. Ein Ziel. Ihr Weiterkommen.

suedwissen.de

57

The website www.suedwissen.de serves as an educational platform focused on providing information about multiple universities and supporting educational advancement, primarily targeting students and prospective university attendees in Germany. The site features a modern technical infrastructure utilizing JavaScript frameworks such as Vue.js, with Cookiebot managing cookie consent and Matomo for analytics, hosted on bunny.net's infrastructure. While the site demonstrates good design quality and user experience with mobile optimization, it lacks explicit privacy policies, terms of service, and contact information, which are critical for compliance and user trust. Security posture is moderate, with no detected security headers or incident response policies, indicating room for improvement in security best practices. Overall, the site is safe for general audiences and does not contain adult or questionable content.

W

WInTO GmbH – Wirtschafts-, Innovations- und Tourismusförderung Oberhavel GmbH

youlab.de

51

youlab.de is the official website for the youlab career and educational fair organized by WInTO GmbH, serving the Oberhavel region in Germany. The site provides comprehensive information about the event, including exhibitor registration, apprenticeship opportunities, and media impressions. It targets students, young job seekers, and local companies, positioning itself as the largest career orientation fair in the region. The business model focuses on event organization and promotion, supported by local government and industry partners. Technically, the website is built on a modern stack including HTML5, CSS3, JavaScript, and uses Cookiebot for consent management and Matomo for analytics. The CMS appears to be Redaxo, inferred from media URL patterns. The site is hosted on servers indicated by the nameservers your-server.de and second-ns.de. Performance and mobile optimization are good, with basic accessibility and SEO features implemented. From a security perspective, the site enforces HTTPS and uses a cookie consent mechanism with blocking mode. No critical vulnerabilities or exposed sensitive data were detected. However, security headers are not explicitly observed in the provided data, and no published security or incident response policies were found. Privacy compliance is strong, with a clear privacy policy and cookie management aligned with GDPR requirements. Overall, the website is professional, trustworthy, and well-suited for its educational purpose. Recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and continuing to monitor third-party scripts for security risks.

W

WInTO GmbH

gruenderservice-oberhavel.de

47

WInTO GmbH operates the Gründerservice Oberhavel website, providing comprehensive support and consulting services for business founders in the Oberhavel region of Germany. The company focuses on guiding entrepreneurs through orientation, planning, implementation, and consolidation phases of business establishment. The website serves as a regional government-related platform to foster a startup-friendly environment with clear contact points and event information. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, Font Awesome icons, and Swiper.js for UI components. Cookie consent is managed via Cookiebot, ensuring GDPR compliance, and user analytics are handled through Matomo with cookies disabled to enhance privacy. The site is mobile-optimized and presents a professional design with good navigation clarity. From a security perspective, the site uses HTTPS and integrates cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response information. No vulnerabilities or suspicious elements were detected in the content or WHOIS data. The domain registration information is minimal but consistent with the business claims. Overall, the website is a trustworthy, professional resource for its target audience, with moderate technical sophistication and good privacy compliance. Strategic improvements in security headers, incident response transparency, and SEO could further enhance its posture and user trust.

fairplaid.org is a German crowdfunding platform specializing in sports projects, enabling sports clubs and athletes to raise funds for their initiatives. The platform has been operational since 2012, indicating a mature presence in its niche market. The website is well designed with good content relevance and user experience, targeting sports organizations and individuals in Germany. The technical infrastructure leverages modern JavaScript frameworks and integrates multiple analytics and marketing tools while maintaining user privacy through cookie consent and IP anonymization. Security posture is solid with HTTPS enforced and domain registration protections in place, though improvements such as enabling DNSSEC and adding security headers could enhance resilience. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism, but the absence of terms of service and explicit security policies is noted. Overall, the site demonstrates a professional and trustworthy online presence with moderate to good technical and security maturity.

T

TARGOBANK

targobank.de

66

TARGOBANK is a well-established German financial institution offering a broad range of banking products including loans, accounts, cards, savings, investments, and insurance. The website targets private, business, and corporate customers with a strong emphasis on flexible, customer-centric financial solutions. The bank maintains a significant physical presence with approximately 340 branches and complements this with a robust digital platform featuring online banking and mobile apps. The site content is professional, comprehensive, and well-structured, reflecting a mature business model in the banking sector. Technically, the website employs modern web technologies including asynchronous JavaScript, CSS, and uses third-party services such as Google Tag Manager and TagCommander for analytics and consent management. The site is hosted on a CDN, ensuring moderate to good performance and excellent mobile optimization. Accessibility features and SEO best practices are well implemented. From a security perspective, the site enforces HTTPS, includes multiple security headers, and integrates a consent management platform to comply with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, explicit incident response contacts and vulnerability disclosure mechanisms like security.txt are not found, representing an area for improvement. Overall, the website demonstrates a high level of professionalism, security, and compliance suitable for a large financial institution. Strategic recommendations include enhancing transparency around security incident response and vulnerability disclosure to further strengthen trust and security posture.

C

CELLEHEUTE.DE | Nachrichten für Stadt und Landkreis Celle

celleheute.de

54

The website www.celleheute.de appears to be a small-scale local news or information portal based in Germany, built using the Wix platform. The site uses standard Wix hosting and scripts, including Google Tag Manager and Facebook Pixel for analytics and tracking. However, the website lacks critical privacy and cookie policies, contact information, and security policies, which impacts its overall trustworthiness and compliance posture. The content quality is minimal based on the provided HTML snapshot, and no structured data or Open Graph metadata is present to enhance SEO or social sharing. Technically, the site benefits from HTTPS and Wix's hosting infrastructure but lacks advanced security headers and accessibility features.

B

Boch & Fernsh

bochfernsh.com

46

Boch & Fernsh is a well-established creative advertising agency based in Mumbai, India, with over two decades of experience. The company offers a comprehensive suite of services including branding, advertising campaigns, video production, digital marketing, social media management, and web design. Their market position is strong, supported by multiple industry awards and a reputable client portfolio. Technically, the website employs modern web technologies and integrates various analytics and marketing tools, hosted on DreamHost. The site is mobile-optimized and professionally designed, providing an excellent user experience. Security posture is good with HTTPS enforced, but lacks some advanced security headers and explicit privacy compliance mechanisms. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and trustworthiness.

P

Prosegur Deutschland

prosegur.de

72

Prosegur Deutschland is a leading security and cash management service provider in Germany, specializing in secure transportation and handling of physical and digital assets. The company positions itself as the market leader in Germany, serving B2B clients including banks, public institutions, and enterprises. Their comprehensive service portfolio includes cash management outsourcing, cash deposit solutions, technical services, and high-security storage. Technically, the website employs modern tracking and consent management tools, hosted on a reputable CDN provider (Akamai), and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, supporting Prosegur's strong market presence.