Security Directory

W

Wirtschaftskammer Oberösterreich

wkooe.at

10

Wirtschaftskammer Oberösterreich (WKOÖ) is the regional chamber of commerce for Upper Austria, providing a wide range of services, information, and consulting to entrepreneurs and business owners in the region. The website serves as an official portal offering news, events, legal and financial guidance, and access to various business support services. It is part of the larger Austrian WKO network, positioning itself as a key regional business support entity. Technically, the website is built on a modern stack with responsive design, accessibility considerations, and uses a CMS likely based on Gentics. It integrates Google Tag Manager and a custom chatbot for enhanced user interaction. The site is well-optimized for SEO and mobile devices, with good performance and structured navigation. From a security perspective, the site enforces HTTPS and includes some security headers, though it lacks explicit published security policies, vulnerability disclosure, or incident response contacts. Privacy compliance is partially implemented with cookie consent mechanisms but lacks a clearly accessible privacy policy page. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the website is professional, trustworthy, and serves its business audience well, but could improve transparency and compliance by publishing detailed privacy, terms, and security-related documents.

A

ActionAid Brasil

actionaid.org.br

10

ActionAid Brasil is a reputable international non-profit organization dedicated to social justice, gender and ethnic-racial equity, and poverty eradication. The website reflects a well-established NGO with a clear mission and target audience including donors and social activists. The technical infrastructure leverages modern JavaScript frameworks such as Svelte, along with Google Tag Manager and Analytics for tracking and consent management via AdOpt, indicating a mature digital presence. Hosting is provided by Locaweb, a known Brazilian hosting provider, consistent with the domain's Brazilian origin. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though explicit security headers could be enhanced. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanisms in place. Overall, the website is professional, trustworthy, and aligned with the organization's mission.

A

ActionAid UK

actionaid.org.uk

66

ActionAid UK is a well-established international charity focused on empowering women and girls living in poverty through humanitarian aid, development programs, and advocacy. The organization operates a comprehensive website built on Drupal 10, integrating modern fundraising and marketing tools such as Fundraise Up and Google Tag Manager. The site demonstrates strong content quality, clear navigation, and mobile optimization, targeting donors, supporters, and activists. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers and a published security policy would enhance protection. WHOIS data retrieval failed due to querying an invalid domain format, but the website's content and charity registration details confirm legitimacy. Overall, the website is professional, trustworthy, and compliant with privacy regulations.

A

ActionAid Nederland

actionaid.nl

57

ActionAid Nederland is a well-established non-profit organization focused on supporting people in the global South through advocacy, humanitarian aid, and women's rights campaigns. The organization operates with a clear mission and has a strong market position supported by reputable partners and donors. The website reflects a professional and consistent brand image with comprehensive content tailored to donors, activists, and partners. Technically, the site is built on WordPress with modern tracking and consent tools, offering good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent, though some security headers could be improved. No critical vulnerabilities or suspicious patterns were detected. Overall, the site demonstrates a mature digital presence aligned with its business goals.

A

Actionaid Italia

actionaid.it

53

ActionAid International Italia ETS is a well-established non-profit organization operating in Italy and globally across 71 countries. The organization focuses on fighting poverty, social injustice, and defending human rights through various programs including rights defense, fighting inequalities, participation rights, and emergency responses. The website reflects a mature digital presence with professional design, clear navigation, and strong calls to action for donations and activism. The organization maintains transparency with accessible privacy and cookie policies and integrates multiple social media channels to engage its audience. Technically, the website is built on WordPress with modern frameworks and analytics tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. Overall, the site is trustworthy, compliant with GDPR, and provides comprehensive information to its stakeholders.

A

ActionAid

actionaid.ie

69

ActionAid Ireland is a well-established international charity focused on empowering women and girls living in poverty, with a strong presence in Ireland. The organization provides humanitarian aid, economic justice advocacy, climate change campaigning, and fundraising programs including child sponsorship. The website reflects a mature digital presence built on WordPress with modern plugins and integrations such as Gravity Forms and Stripe for secure donations. The site is well-branded, professionally designed, and optimized for SEO and mobile devices. Security posture is good with HTTPS and Cloudflare DNS/CDN, though DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the website demonstrates high trustworthiness and professionalism suitable for a non-profit charity.

A

ActionAid France

actionaid.fr

38

ActionAid France is a well-established non-profit organization dedicated to fighting poverty and defending economic, social, and cultural rights since 1983. The organization operates primarily through advocacy, public awareness campaigns, and mobilization efforts, targeting a broad audience including activists, donors, and the general public interested in social justice. Their website reflects a professional and consistent brand image with clear calls to action such as petitions and donation links. Technically, the website is built on a modern React/Next.js framework, leveraging popular analytics and consent management tools like Google Analytics, Google Tag Manager, and Crazy Egg. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. From a security perspective, no critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is not publicly available, likely due to privacy protection, which is common and justified for non-profit organizations. The site maintains GDPR compliance with clear privacy and cookie policies. However, explicit security policies and incident response information are not present. Overall, the website presents a trustworthy and professional front for ActionAid France, with good technical implementation and privacy compliance. The lack of publicly available WHOIS data does not detract from legitimacy given the organization's profile and external trust signals.

A

ActionAid India

actionaidindia.org

51

ActionAid India is a well-established non-profit organization operating since 1972, focusing on children’s education, women’s rights, ecological justice, and humanitarian aid across India. The website reflects a mature NGO with a broad presence, multiple partnerships, and a strong social media footprint. Their business model relies on donations, sponsorships, and corporate partnerships. Technically, the website is built on WordPress with WooCommerce and uses modern web technologies including Bootstrap, jQuery, and various analytics and marketing tools. The site is mobile-optimized and provides a good user experience with clear navigation and rich content. Security posture is generally good with HTTPS enabled and secure forms, but lacks some recommended security headers and cookie consent mechanisms. WHOIS data is unavailable, which slightly impacts domain trustworthiness, but the overall legitimacy is supported by content quality and trust indicators. Strategic recommendations include improving security headers, implementing cookie consent for GDPR compliance, and enhancing accessibility.

A

ActionAid Bangladesh

actionaidbd.org

51

ActionAid Bangladesh is a well-established non-profit organization focused on advancing human rights and combating poverty within Bangladesh. The website reflects a mature NGO with a broad range of social programs including women’s rights, climate justice, humanitarian aid, youth engagement, and Rohingya refugee response. Their digital presence is supported by a professional website with clear navigation and comprehensive content targeting donors, activists, and partners. The organization benefits from a consistent brand identity and transparent governance information, reinforcing its credibility in the non-profit sector. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Font Awesome, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site is mobile responsive and optimized for SEO, though performance is moderate. Hosting and domain registration are consistent with a legitimate NGO, though DNSSEC is not enabled, and some security headers are missing. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Security posture is adequate with HTTPS enforced and domain transfer protection, but improvements are recommended in DNS security and HTTP headers. No incident response or vulnerability disclosure policies are visible, which could be enhanced to improve trust and compliance. Overall, the website is professional and trustworthy but could benefit from stronger privacy and security practices to align with international standards.

S

Sharp

sharp.eu

78

Sharp Europe is a well-established technology company specializing in secure, sustainable, and smart workplace technology solutions. Their offerings include multifunction printers, managed IT services, audio visual equipment, and cybersecurity solutions targeted primarily at SMBs and enterprises across Europe. The website demonstrates a strong market position with comprehensive service coverage and a professional digital presence. Technically, the site is built on Drupal CMS with modern web standards, optimized for mobile and SEO, and integrates Google Tag Manager for analytics and marketing. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Overall, the domain is privacy protected but consistent with a legitimate business entity. The site is safe for general audiences and shows high professionalism and trustworthiness.

S

Sharp Consumer DE

sharpconsumer.de

54

Sharp Consumer DE is a professional consumer electronics website focused on selling and promoting Sharp brand products such as TVs, audio equipment, mobility devices, and smart home solutions. The site targets German-speaking consumers interested in high-quality electronics and features award-winning products like the EISA Soundbar-System 2025–2026 winners. The website demonstrates a mature digital presence with a modern WordPress CMS, optimized mobile experience, and structured data for SEO. It uses Google Tag Manager for analytics and marketing, indicating a data-driven approach to user engagement. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security headers and policies are absent. Privacy compliance is basic, with a cookie consent mechanism but no visible privacy or terms of service pages in the provided content. Overall, the site is trustworthy and professionally maintained but could improve transparency around privacy and security policies.

Association «Nature & Loisirs» is a Swiss non-profit organization dedicated to promoting respect for nature and leisure activities, particularly focusing on snow sports and water-based recreation. The website serves as an informational platform providing educational content, awareness campaigns, and partner collaborations to encourage environmentally responsible behavior. The association targets a general audience interested in nature and outdoor activities in Switzerland. Technically, the website is built on the Contao Open Source CMS and utilizes common web technologies such as jQuery and Google Analytics for tracking. The site is mobile optimized with basic accessibility and SEO features. Performance is moderate, and the site includes a cookie consent mechanism to comply with privacy regulations. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible security headers and explicit security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy policy and cookie banner present but no terms of service or detailed security disclosures. Overall, the website presents a moderate risk profile with no major security issues but opportunities exist to enhance security headers, incident response transparency, and privacy compliance. The site is trustworthy and safe for general audiences, with no adult or questionable content detected.

S

SPONSER SPORT FOOD AG

sponser.ch

73

SPONSER SPORT FOOD AG operates a professional e-commerce platform specializing in sports nutrition products, emphasizing Swiss quality. The website targets athletes and health-conscious consumers, leveraging the Shopify platform with a modern Flex theme and multiple marketing and analytics integrations. The technical infrastructure is robust, with HTTPS enforced, security headers present, and a moderate to fast performance profile. However, the site lacks explicit privacy and cookie policies, which impacts privacy compliance scores. Security posture is strong with no visible vulnerabilities, but incident response details are absent. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

T

Tennisverband Mittelrhein e.V.

tvm-tennis.de

64

Tennisverband Mittelrhein e.V. is a regional tennis association in Germany, serving tennis players and clubs in the Mittelrhein region. The website provides basic information about the association but lacks comprehensive business and legal disclosures such as privacy policy and terms of service. The technical infrastructure includes modern JavaScript usage and cookie consent management via Cookiebot, with Cloudflare DNS providing hosting and security benefits. Security posture is moderate with some best practices like consent management but lacks visible security headers and detailed policies. Overall, the website is functional but could improve in transparency, contact availability, and SEO optimization.

G

GardeManger

gardemanger.at

59

GardeManger operates a professional e-commerce website specializing in high-quality kitchen clothing and accessories targeted at gastronomy professionals. The website presents a clear market position within Austria's hospitality and retail sectors, offering branded products such as chef jackets, aprons, and kitchen tools. The business model focuses on direct online sales with specialized brand shops integrated into the platform. Technically, the website is built on the Shopware CMS platform, utilizing modern JavaScript libraries and integrations such as Google Tag Manager and Mollie Payments. The site demonstrates good mobile optimization and SEO practices, with structured data and meta tags properly implemented. Performance is moderate, with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS, includes standard security headers, and anonymizes IP addresses in analytics. Cookie consent mechanisms are in place, though explicit privacy and security policies are not found. No vulnerabilities or security blocking mechanisms were detected, indicating a solid security posture for a small to medium-sized e-commerce business. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements in privacy compliance documentation and accessibility would enhance the site's maturity and user trust.

T

Tischlerei Kurz

tischlereikurz.at

47

Tischlerei Kurz is a well-established family-owned carpentry and furniture business located in Elsbethen near Salzburg, Austria, with a history dating back to 1934. The company specializes in traditional and modern woodworking services including windows, doors, furniture, kitchens, floors, and repairs. Their market position is that of a trusted regional master craftsman with a strong reputation for quality and customer satisfaction. The website reflects a professional digital presence built on WordPress with Elementor, integrating modern analytics and marketing tools. Security posture is good with HTTPS and security headers in place, though privacy compliance could be improved by adding cookie consent mechanisms. Overall, the site is accessible, well-structured, and trustworthy, supporting the business's credibility and customer engagement.

B

Borneo Orangutan Survival Deutschland

orangutan.de

65

Borneo Orangutan Survival Deutschland is a reputable non-profit organization dedicated to the conservation and protection of orangutans and their rainforest habitat in Borneo. The organization operates through donations, sponsorships, and awareness campaigns, targeting environmentally conscious individuals and supporters. Their website reflects a mature digital presence with clear navigation, multilingual support, and comprehensive content about their mission and projects. Technically, the site is built on WordPress with WooCommerce and Divi theme, leveraging modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and Mailchimp, while ensuring GDPR compliance through Borlabs Cookie consent management. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although formal security policies and incident response information are absent. Overall, the domain registration data aligns well with the organization's claims, supporting legitimacy and trustworthiness.

L

Lausanne Movement

lausanne.org

60

The Lausanne Movement is a well-established non-profit organization focused on accelerating global Christian mission through collaboration, leadership development, and resource sharing. With a domain age of over 26 years and a consistent brand presence, it holds a strong position in the global mission community. The website offers rich content including articles, podcasts, videos, and event information targeting Christian leaders and influencers worldwide. Technically, the site is built on WordPress with modern SEO and analytics tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS, reCAPTCHA, and domain transfer protections, though DNSSEC and some security headers could be improved. Privacy compliance is adequate with a clear privacy policy but lacks a cookie consent mechanism. Overall, the site is professional, trustworthy, and serves its audience effectively.

D

Decathlon Osterreich

decathlon.at

72

Decathlon Österreich is a prominent branch of the global Decathlon Group, specializing in retail and e-commerce of sporting goods across over 70 sports categories. The company offers a comprehensive range of innovative sports equipment both online and in physical stores, targeting a broad general audience in Austria. The website reflects a mature digital presence with a professional design and consistent branding, supporting a seamless shopping experience. Technically, the site leverages a modern e-commerce platform (PrestaShop) integrated with advanced marketing and analytics tools such as Google Tag Manager, Algolia, and Klarna for payments, alongside GDPR-compliant consent management via Didomi. Security posture is solid with HTTPS enforcement and error logging, though explicit security policies and incident response contacts are not evident in the provided content. Overall, the domain registration and business information align well, indicating a legitimate and trustworthy operation.

C

CHRIS sports AG

chrissports.ch

69

CHRIS sports AG operates a specialized B2B e-commerce platform focused on sports and bike-related products, serving business customers primarily in Switzerland. The website presents a professional design with clear navigation and multiple contact points including phone numbers and an official company email. The technical infrastructure is based on the Shopware CMS platform, enhanced with modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Doofinder search integration. HTTPS is enforced, and the site shows moderate performance and mobile optimization. However, the site lacks visible privacy and cookie policies, as well as security and incident response disclosures, which are critical for compliance and trust. The WHOIS data confirms the legitimacy of the domain registration, matching the business claims and location. Overall, the site is functional and professional but requires improvements in privacy compliance and security transparency to enhance trust and regulatory adherence.

Q

Quickline AG

quickline.ch

62

Quickline AG is a well-established Swiss telecommunications provider offering a comprehensive range of services including Internet, TV, fixed-line telephony, and mobile communications. The company targets both private and business customers across Switzerland, emphasizing simplicity, flexibility, and competitive pricing. Their market position is reinforced by multiple industry awards and a strong customer service reputation. Technically, the website is built on modern frameworks such as Nuxt.js and uses a headless CMS (Storyblok), ensuring a fast, responsive, and accessible user experience. Privacy compliance is robust with clear policies and a consent management platform in place. Security posture is strong with HTTPS enforcement and appropriate security headers, although there is room for improvement in publishing explicit security policies and incident response information. Overall, the website reflects a professional and trustworthy business with a high level of digital maturity.

S

Sharp

sharp.at

66

Sharp is a globally recognized technology manufacturer with a strong presence in Austria and Europe, offering a broad portfolio of business and consumer technology products including multifunction printers, displays, and home electronics. The company targets SMEs, large enterprises, and organizations, positioning itself as a provider of innovative solutions for the future workplace and modern living. The website reflects a mature digital presence with professional design and structured content, supporting both business and consumer audiences. Technically, the site is built on Drupal CMS, employs modern JavaScript libraries, and integrates Google Tag Manager and consent management tools, indicating a good level of digital maturity. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though explicit security headers and policies are not evident. Privacy compliance is partial, with cookie consent mechanisms present but no explicit privacy or terms of service pages found in the provided content. Overall, the site demonstrates high business credibility and trustworthiness, supported by consistent WHOIS data and legitimate domain registration.

T

Tiroler Tageszeitung Online

tt.com

69

Tiroler Tageszeitung Online is a prominent regional news media outlet serving the Tirol region in Austria. The website offers a broad range of news categories including politics, economy, culture, sports, and local news. It operates on a business model combining advertising revenue and digital subscriptions, positioning itself as a leading media provider in its market. The parent company is New Media Online, indicating a structured media business entity. The website is professionally designed with consistent branding and high-quality content tailored to a general audience in the region. Technically, the site leverages modern web technologies such as Angular framework, Google Tag Manager, and multiple analytics and advertising platforms including Piano Analytics and INFOnline. The site is optimized for mobile devices and demonstrates good SEO and accessibility practices. Performance is moderate, with asynchronous loading of scripts and preconnect hints to improve speed. From a security perspective, the website enforces HTTPS and employs consent management for cookies, reflecting GDPR compliance. While explicit security headers are not fully confirmed, best practices such as adblock detection and consent-based tracking are implemented. No vulnerabilities or exposed sensitive data were detected in the analyzed content. However, the absence of a public security policy or incident response page suggests room for improvement in transparency and readiness. Overall, the website presents a low risk profile with strong business credibility and compliance posture. The missing WHOIS data slightly reduces transparency but is not uncommon for media companies. Strategic recommendations include enhancing public security disclosures, confirming security headers, and maintaining vigilance on third-party scripts to sustain trust and security.

The website dolne-rakusko.info serves as an official regional tourism portal for Lower Austria, targeting Slovak-speaking tourists interested in cultural, wine, and travel experiences near Vienna. It offers travel packages, tips, and event information, positioning itself as a trusted source for regional tourism. The site employs modern web technologies including Cookiebot for cookie consent management, Matomo and Google Tag Manager for analytics, and Cloudflare for hosting and security. The technical infrastructure is moderately performant and mobile-optimized, with good SEO and accessibility basics. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are absent. WHOIS data is privacy protected, which is typical for such portals, and no suspicious patterns were detected. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, though it could improve transparency by publishing terms of service and security policies.

Wirtshauskultur Niederösterreich is a regional cultural organization promoting approximately 200 inns and traditional restaurants in Lower Austria. The website serves as a comprehensive portal for visitors and locals interested in regional cuisine, offering listings, guides, recipes, and voucher sales. The organization positions itself as a key promoter of local gastronomy culture with a strong regional identity and consistent branding. Technically, the website employs modern JavaScript frameworks, SVG maps, and integrates privacy-respecting analytics tools such as Matomo and Google Tag Manager with DoNotTrack compliance. Cookie consent is managed via Cookiebot, ensuring GDPR compliance. Security posture is good with HTTPS enforced and privacy best practices observed, though some security headers could be improved. Contact information is clearly provided, enhancing trust and credibility. No adult or questionable content is present, making the site safe for general audiences.

M

Molten Ventures

moltenventures.com

71

Molten Ventures is a prominent European venture capital firm specializing in technology investments at Series A and beyond. The company positions itself as a forward-thinking investor backing visionary teams with global ambitions, focusing on sectors such as deeptech, consumer tech, healthtech, SaaS, and enterprise software. Their business model revolves around active portfolio development and long-term value creation, supported by a professional and content-rich website that targets startups and investors alike. The firm maintains a strong market position as a leading tech-focused VC in Europe, with a clear emphasis on innovation and growth. Technically, the website demonstrates a mature digital infrastructure utilizing modern JavaScript libraries, analytics tools including Google Analytics, Google Tag Manager, and Plausible Analytics, and a cookie consent mechanism ensuring compliance with privacy regulations. The site is well-optimized for mobile devices, offers fast performance, and includes SEO best practices. However, explicit security headers are not detected, and no CMS or hosting provider details are evident from the source. From a security perspective, the site enforces HTTPS and integrates reCAPTCHA on forms, indicating a baseline security posture. Privacy and cookie policies are comprehensive and GDPR compliant. The absence of a published security policy, incident response information, or vulnerability disclosure reduces transparency. The WHOIS data is notably missing, which is unusual for a professional entity and slightly impacts trustworthiness. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, Molten Ventures' website is professional, secure, and compliant with privacy standards, serving its business and investor audiences effectively. The primary risk lies in the lack of WHOIS transparency and some missing security best practices, which should be addressed to enhance trust and security posture.

M

My AskAI

myaskai.com

62

My AskAI is a technology startup founded in 2023 that provides AI-powered customer service agents designed to automate and deflect over 75% of support tickets. The company targets businesses that use live chat providers such as Intercom, Zendesk, and Freshdesk, offering seamless integration to improve customer support efficiency. The website reflects a focused business model centered on AI SaaS solutions for customer support automation. Technically, the website is built on the Bubble.io no-code platform, hosted via Cloudflare DNS and Amazon CloudFront CDN, and incorporates a modern tech stack including Google Tag Manager, Amplitude Analytics, Microsoft Clarity, and various marketing and tracking tools. The site demonstrates good design quality, mobile optimization, and SEO practices, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses Cloudflare DNS with domain transfer protection. However, it lacks DNSSEC, security headers, and published security or privacy policies, which are areas for improvement. Extensive third-party tracking scripts indicate a high level of user data collection, but no explicit privacy or cookie consent mechanisms are present, raising compliance concerns. Overall, the website is professional and trustworthy with moderate security posture and good business credibility. The absence of privacy and cookie policies and security headers lowers the privacy compliance and security scores. Strategic improvements in these areas would enhance trust and regulatory compliance.

P

Paddle

paddle.be

45

Paddle is a well-established CMS platform provider founded in 2003, specializing in flexible and secure content management solutions primarily for governments, public sector organizations, hospitals, and non-profits. The company offers its CMS as both Platform-as-a-Service and Software-as-a-Service, with a strong emphasis on accessibility, security, and ease of use. Their market position is supported by a significant user base and numerous modules and integrations, reflecting a mature and scalable product offering. The website content is professionally crafted, multilingual, and includes customer testimonials and support options, enhancing trust and credibility. Technically, the website leverages Drupal CMS and integrates multiple modern analytics and marketing tools such as Google Analytics, Matomo, Hotjar, and Facebook Pixel, all implemented with asynchronous loading and consent mechanisms to respect user privacy. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some security headers are not explicitly detected. The SSL configuration is good, ensuring secure communications. From a security perspective, the site enforces HTTPS and implements cookie consent, but lacks publicly visible security policies, incident response contacts, or vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms a consistent and legitimate domain registration dating back to 2003, reinforcing the trustworthiness of the business. Overall, Paddle's website reflects a professional, secure, and privacy-conscious digital presence suitable for its target sectors. Strategic improvements could include publishing explicit security policies, incident response contacts, and vulnerability disclosure information to further enhance security posture and compliance.

H

HNI Corporation

hnicorp.com

9

HNI Corporation is an established enterprise manufacturing workplace furnishings and residential building products since 1947. The company positions itself as a leading provider in its sector, offering a broad range of products for various work environments. The website is built on Drupal 10, uses modern web technologies including Bootstrap and FontAwesome, and integrates third-party services such as OneTrust for cookie consent and Google Tag Manager for analytics. While the website is professionally designed and content-rich, there is a lack of visible privacy policy, terms of service, and contact information, which are important for user trust and compliance. The absence of WHOIS data raises concerns about domain registration legitimacy, although the website content and branding appear consistent with a legitimate business. Security posture is moderate with no detected security headers and no visible incident response or vulnerability disclosure information.

W

Woody Official

woodyworld.com

10

Woody Official operates a professional e-commerce website specializing in sleepwear, nightwear, and homewear for babies, children, and adults. The brand offers a wide range of products categorized by age, size, and collection themes, targeting Dutch-speaking customers primarily. The website demonstrates a mature market position with a consistent brand presence and active social media engagement. Technically, the site uses modern JavaScript frameworks such as Alpine.js, integrates multiple marketing and analytics tools including TikTok Pixel, Facebook Pixel, Google Tag Manager, and Klaviyo, and is hosted behind Cloudflare DNS services. The site is mobile-optimized and provides a good user experience with clear navigation and structured content. Security-wise, the site enforces HTTPS and uses clientTransferProhibited domain status, but lacks DNSSEC and explicit security headers. Privacy compliance is basic with a cookie consent mechanism but no visible privacy or terms of service pages in the provided content. Overall, the website is functional and professional but could improve transparency and security posture.

S

S.M.A.K.

smak.be

11

S.M.A.K. is a well-established contemporary art museum located in Ghent, Belgium, with a domain age dating back to 1999, reflecting its long-standing presence in the cultural sector. The website effectively showcases exhibitions, collections, events, and membership programs, targeting a diverse audience of art enthusiasts and the general public. The business model is non-profit and focused on cultural enrichment and accessibility. Technically, the site employs modern JavaScript frameworks and integrates multiple analytics and marketing tools, supported by a reputable hosting provider. The site is mobile-optimized, fast, and SEO-friendly, providing an excellent user experience. Security posture is strong with HTTPS and consent management, though there is room for improvement in publishing explicit security policies and incident response details. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, making it a reliable digital presence for the museum.

D

Dewaele Vastgoeddiensten

dewaele.com

9

Dewaele Vastgoeddiensten is a prominent Belgian real estate company specializing in residential, luxury, and commercial properties. The company offers a comprehensive range of services including buying, selling, renting, investing, property management, and advisory services. The website is multilingual, targeting Dutch, French, and English-speaking audiences, reflecting a broad market reach within Belgium. The presence of multiple subsidiary brands under the Dewaele umbrella indicates a diversified and well-established market position. Technically, the website employs modern web technologies such as JavaScript frameworks (likely Alpine.js), Google Tag Manager for analytics, and Imgix for image delivery. The site is mobile-optimized and features a professional design with clear navigation, enhancing user experience. However, some technical improvements could be made, such as adding explicit security headers and improving accessibility features. From a security perspective, the website uses HTTPS and implements cookie consent mechanisms, indicating a baseline security posture and some privacy compliance. However, the absence of a visible privacy policy, terms of service, and WHOIS data raises concerns about transparency and domain legitimacy. No critical vulnerabilities were detected in the provided content, but the lack of security headers and incident response information suggests room for improvement. Overall, the website presents a professional and trustworthy front for a large real estate business, but the missing WHOIS data and privacy documentation reduce the confidence level. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and verifying domain registration details to improve trust and compliance.

F

Flamant

flamant.com

39

Flamant is a well-established retail and e-commerce business specializing in luxury home furniture, décor, textiles, paint, and gifts. With a history spanning approximately 45 years, the company targets consumers seeking high-quality and elegant home living solutions. The website reflects a professional and consistent brand image, supporting multiple languages and offering a rich catalog of products and inspiration content. Technically, the site employs modern JavaScript frameworks, tracking tools, and content delivery networks, indicating a mature digital infrastructure. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit privacy policies are missing. The absence of WHOIS data for the domain raises concerns about domain registration transparency, which slightly impacts trustworthiness. Overall, Flamant presents a credible and professional online presence with room for improvement in privacy and security disclosures.

H

HBF Textiles

hbftextiles.com

50

HBF Textiles is a professional textile manufacturing company specializing in woven upholstery, wrapped panels, wallcoverings, coated fabrics, leather, and drapery products. The company targets designers, furniture manufacturers, and commercial and residential clients, positioning itself as a medium-sized player in the manufacturing sector. The website is built on a modern Drupal 10 CMS with e-commerce capabilities, integrating advanced technologies such as Google Tag Manager and Adobe DTM for analytics and marketing. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature approach to data protection. Security posture is strong with HTTPS enforcement and security headers, though the absence of a published security policy and incident response information suggests room for improvement. The lack of WHOIS registration data is a notable concern, potentially indicating privacy protection or domain registration issues, which should be further investigated. Overall, the website is professional, well-structured, and trustworthy, with a good balance of business and technical maturity.

R

RBA Grupo

revistainteriores.es

62

Revista Interiores is a Spanish online magazine specializing in interior design, decoration, architecture, and lifestyle content. It operates under the RBA Grupo, a recognized Spanish publishing group. The website offers rich editorial content, subscription services, and advertising opportunities, targeting a general audience interested in home and design trends. Technically, the site uses a modern JavaScript stack with consent management and multiple ad networks integrated, ensuring monetization and compliance with privacy regulations. Security posture is solid with HTTPS and security headers, though some improvements in incident response transparency are recommended. Overall, the site is professional, trustworthy, and compliant with GDPR, but WHOIS data is unavailable due to query restrictions, limiting domain legitimacy assessment.

B

BITel Gesellschaft für Telekommunikation mbH

bitel.de

51

BITel Gesellschaft für Telekommunikation mbH is a regional telecommunications provider operating primarily in Germany, focusing on delivering fiber optic internet, telephone, and TV services to private customers in areas such as Bielefeld and Gütersloh. The company is backed by parent entities Stadtwerke Bielefeld and Stadtwerke Gütersloh, indicating strong regional infrastructure support. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive service offerings tailored to local customers. Technically, the site is built on TYPO3 CMS and integrates modern marketing and analytics tools while maintaining GDPR compliance through explicit privacy and cookie policies. Security posture is solid with HTTPS enforcement and consent management, though some security headers could be more explicitly declared. Overall, the website and domain registration data align well, supporting the legitimacy and trustworthiness of the business.

B

BAQUE-Internetservice

baque-internetservice.de

45

BAQUE-Internetservice is a small, established web agency based in Kaiserslautern, Germany, with over 20 years of experience in professional web design, webshops, SEO, and website maintenance. The company targets local businesses and organizations seeking effective and user-friendly websites optimized for search engines. Their business model focuses on providing tailored web solutions using popular CMS and shop systems such as WordPress, Typo3, Joomla, and Shopware. The website reflects a consistent brand image and professional content that supports their market position as a reliable local web agency. Technically, the website is built on WordPress with modern plugins including Yoast SEO and Complianz GDPR for compliance. It uses Google Tag Manager for analytics and tracking. Hosting is provided by kasserver.com, indicated by the nameservers. The site is mobile-optimized and performs moderately well, with good SEO practices in place. However, some security headers are missing, which could be improved to enhance security posture. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected. The absence of a dedicated security policy or incident response contact is noted but not uncommon for small businesses. Overall, the security posture is solid but could benefit from additional headers and explicit security documentation. The domain WHOIS data is consistent with the website's claims, showing no privacy protection and a domain age that matches the company's stated history. Contact information is clear and verified, including email, phone, and physical address. The site contains no adult or questionable content, making it safe for general audiences. The AI overall score reflects a well-maintained, professional, and trustworthy website with minor areas for improvement.

V

VNR Verlag für die Deutsche Wirtschaft AG

vnrgroup.com

47

VNR Group is a family-run German publishing and media company offering publishing, consulting, SaaS, and full-service platform solutions aimed at helping individuals and professionals succeed. The website is well-structured, professionally designed, and multilingual, targeting German and English-speaking audiences. Technically, it is built on WordPress with the Divi theme and uses modern plugins and services such as Google Tag Manager and Friendly Captcha. Security posture is adequate with HTTPS and captcha protections, but lacks some security headers and explicit incident response information. Privacy compliance is strong with comprehensive cookie consent and GDPR-aligned privacy policies. However, WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency. Overall, the site is trustworthy and professional but could improve security and transparency aspects.

C

Cottages.com

cottages.com

70

Cottages.com is a well-established UK-based online platform specializing in self-catering holiday cottage bookings. With over 45 years of experience and a portfolio exceeding 18,000 properties, it serves a broad audience including families, couples, and pet owners. The company emphasizes customer satisfaction, demonstrated by its adherence to ABTA's Code of Conduct and excellent Trustpilot ratings. Technically, the website leverages modern frameworks such as Next.js and integrates advanced analytics and consent management tools, ensuring a robust digital presence. Security measures include HTTPS enforcement, reCAPTCHA Enterprise, and comprehensive privacy controls, although a dedicated security policy page is absent. Overall, cottages.com presents a professional, trustworthy, and user-friendly platform with strong market positioning in the UK holiday accommodation sector.

E

EKO-PUNKT

eko-punkt.de

65

EKO-PUNKT is a German-based competence center specializing in sustainable packaging management, including packaging licensing, circular contracting, ecodesign, and recycled material delivery. The company operates under the REMONDIS Group umbrella, a well-established waste management conglomerate. Their website reflects a professional and business-focused approach, targeting companies needing compliance and sustainability solutions in packaging. The digital infrastructure is built on TYPO3 CMS, integrating modern tools like Cookiebot for consent management and Google Tag Manager for analytics. The site is well-structured, mobile-optimized, and provides clear navigation, although explicit contact details like emails and phone numbers are not directly visible, relying instead on contact forms.

R

Rhenus

aktenvernichtung.de

72

Rhenus operates a professional German-language website focused on secure destruction and disposal services for documents, data carriers, and hard drives. The company positions itself as a leading provider in Germany with over 40 years of experience and multiple security locations. The website is built on TYPO3 CMS and integrates modern technologies including Google Tag Manager and Usercentrics for consent management. The site is well-structured, mobile-optimized, and SEO-friendly, targeting both business and private customers. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and published policies are lacking. Contact is primarily via a contact form with no direct emails or phone numbers visible. Overall, the domain and website appear legitimate and consistent with the Rhenus Group brand.

C

Computer-L.A.N. GmbH

lansoftware.de

51

Computer-L.A.N. GmbH operates LAN Software, a specialized software house based in Fulda, Germany, focusing on software solutions for education institutions, seminar houses, authorities, and group accommodations. Their offerings include cloud-based seminar management (LANcloud), house and academy management (AkademieManager), group house management (HausManager), and ERP and HCM solutions via Sage partnerships. The company positions itself as an experienced, regional provider with a strong focus on tailored business software and customer support including workshops and training. Technically, the website is built on WordPress with modern plugins and frameworks, including Yoast SEO, Bootstrap, and Borlabs Cookie for privacy compliance. The site is well-optimized for SEO and mobile devices, with moderate performance and good accessibility. Security posture is solid with HTTPS, cookie consent, and no visible vulnerabilities, though some HTTP security headers could be improved. Privacy compliance is robust with clear policies and consent mechanisms. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and trustworthiness.

K

KnowS

knows.ch

52

KnowS is a Swiss-based online platform that connects individuals seeking support with verified local service providers, enabling users to find help or earn money flexibly and securely. The platform emphasizes community trust through verified profiles, user reviews, and insurance coverage via Zurich, positioning itself as a reliable marketplace for various service categories. The website is built on TYPO3 CMS and integrates modern technologies including Google Tag Manager, LiveChat, and Stripe for payments, reflecting a mature digital infrastructure. Security practices include HTTPS enforcement and security headers, though there is room for improvement in publishing formal security policies and incident response information. The absence of WHOIS registration data raises concerns about domain legitimacy, but the professional presentation and active user engagement mitigate some risk. Overall, KnowS demonstrates a solid business and technical foundation with moderate privacy compliance and good security posture.

L

laSuite fitnessclub AG

lasuite-fit.ch

61

laSuite fitnessclub AG operates a fitness club located in Luzern, Switzerland, offering 24/7 access to members along with professional personal training, physiotherapy services through a partnership with MoveSphere, and a retail shop for health and fitness products. The company positions itself as a local premium fitness provider with a focus on holistic training including strength, endurance, coordination, and nutrition support. The website is built on TYPO3 CMS and integrates modern web technologies such as HTML5 video and Google Tag Manager for analytics. The site is well-designed, mobile-optimized, and provides clear navigation and contact information, enhancing user experience and trust. Security posture is good with HTTPS enforced, though improvements are recommended in security headers and cookie consent mechanisms to enhance compliance and protection. WHOIS data confirms the legitimacy of the domain registration consistent with the business location and identity. Overall, the website reflects a professional and credible fitness business with room for technical and compliance enhancements.

G

Gstaad Saanenland Tourismus

gstaad.ch

55

The website www.gstaad.ch/sommer serves as the official tourism portal for the Gstaad holiday region in Switzerland, focusing on promoting summer activities, events, and travel planning. It targets tourists and visitors seeking comprehensive information about the region's offerings, including hiking, biking, cultural events, and accommodation options. The site is positioned as a regional destination marketing organization with a medium-sized operational scope. Technically, the website is built on TYPO3 CMS and leverages modern JavaScript modules, intersection observers, and font loading APIs to deliver a responsive and accessible user experience. It integrates analytics tools such as Matomo and Google Tag Manager with GDPR-compliant mechanisms and includes a chatbot for user engagement. Performance and mobile optimization are good, with clear navigation and SEO-friendly metadata. From a security perspective, the site enforces HTTPS and uses tracking scripts responsibly with consent mechanisms. However, it lacks explicit security headers and publicly available security policies or incident response contacts. No vulnerabilities or suspicious content were detected, and the domain registration data aligns well with the business purpose, indicating legitimacy. Overall, the website presents a professional and trustworthy tourism platform with room for improvement in privacy transparency and security documentation. Strategic recommendations include publishing comprehensive privacy and cookie policies, adding terms of service, and providing clear contact channels for security incidents to enhance user trust and compliance.

황

황동산업(주)

themetal.kr

66

THE METAL (황동몰) is a South Korean e-commerce business specializing in metal products and DIY hardware, including handles, locks, decorative items, and custom manufacturing services. The company operates a well-established online retail platform using the Cafe24 e-commerce system, targeting DIY enthusiasts and professional customers in the metal hardware sector. The website is professionally designed with consistent branding and a clear focus on its niche market. The domain registration data aligns well with the business identity, showing a legitimate and stable presence since 2013. Technically, the website leverages modern JavaScript libraries and integrates Google Analytics and Tag Manager for marketing and analytics purposes. Hosting and platform services are provided by Cafe24, a reputable Korean e-commerce provider. While the site is functional and moderately optimized for performance, mobile optimization and accessibility features are basic and could be improved. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and DNSSEC implementation. From a security and compliance perspective, the site does not prominently display privacy, cookie, or terms of service policies, which may impact GDPR and other regulatory compliance. No incident response or vulnerability disclosure information is found. The site content is safe for general audiences with no adult or explicit material. Overall, the business appears credible and trustworthy, but could enhance its security and privacy practices to improve compliance and user trust.

A

ACTS

andacts.ch

51

ACTS is a Swiss-based educational organization specializing in leadership and vocation training with a Christian focus. Their website offers detailed information about their training modules, intensive programs, cultural training, and community living options. The organization targets individuals seeking to deepen their calling and leadership skills through biblical study and practical training. The website is professionally designed, mobile-optimized, and integrates modern WordPress technologies and plugins, including WPBakery, Slider Revolution, and Everest Forms. Social media presence on Facebook, Instagram, and YouTube supports their outreach efforts. Technically, the site uses HTTPS with good SSL configuration and integrates Google Analytics and Tag Manager with consent mode configured to deny personalization and ad storage in the EU/CH region, reflecting some privacy awareness. However, the absence of explicit privacy and cookie policies is a compliance gap. Security headers are not detected, and no published security or incident response policies exist, indicating room for improvement in security posture. Overall, the website is trustworthy and credible, with consistent WHOIS data supporting legitimacy. The site is safe for general audiences, with no adult or explicit content. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, and establishing incident response documentation to enhance compliance and security maturity.

I

ISTL

istl.ch

58

ISTL is an educational institution specializing in dual theological studies offering Bachelor and Master degree programs as well as Bible school education. The website targets individuals interested in theological education primarily in Switzerland and Germany. The institution maintains a professional online presence with comprehensive privacy and cookie policies, and active social media engagement. Technically, the website is built on WordPress using the Astra theme and integrates modern analytics and marketing tools such as Google Analytics 4, Google Ads, and Meta Pixel, all managed with user consent via a cookie banner. Security posture is good with HTTPS enforced and no obvious vulnerabilities detected, though some security headers could be improved. The lack of WHOIS data for the domain introduces uncertainty about domain registration legitimacy, which should be further investigated. Overall, the website is professional, user-friendly, and compliant with GDPR requirements.

S

Skio

skio.com

60

Skio is a subscription platform designed to serve Shopify brands that have outgrown their existing subscription solutions. The company focuses on reducing churn, increasing customer lifetime value, and delivering engaging subscriber experiences. With over 1,000 Shopify brands as clients, including notable names like Grüns, Supergoop, and Dog is Human, Skio positions itself as a specialized SaaS provider in the e-commerce subscription space. The website is built using Framer CMS and integrates modern analytics and tracking tools such as Google Analytics, Microsoft Clarity, and LinkedIn Insight, indicating a mature digital infrastructure. However, the absence of explicit privacy and cookie policies, as well as contact information, suggests areas for compliance and trust improvement. Security measures include HTTPS and domain registration protections, but lack DNSSEC and security headers, which could enhance overall security posture. Overall, Skio presents a professional and focused business with moderate technical and security maturity, suitable for its target market but with room for compliance and security enhancements.

E

eEnergy

eenergy.com

61

eEnergy is a UK-based digital energy services provider specializing in energy efficiency, decarbonisation, and sustainability solutions for sectors including education, healthcare, public, and commercial industries. The company offers a range of services such as LED lighting upgrades, solar PV generation, EV charging infrastructure, energy analytics, and compliant financing options with no upfront costs. Their market position is supported by over 1,200 successful projects and significant investment in energy efficiency initiatives. Technically, the website is built on WordPress with modern SEO and analytics tools, optimized for performance and accessibility. Security posture is strong with HTTPS, security headers, and bot management, though explicit security policies and incident response information are not published. Privacy compliance is well addressed with comprehensive policies and cookie consent mechanisms. However, the WHOIS data is missing, which raises some concerns about domain registration transparency. Overall, the website is professional, trustworthy, and well-positioned in its market niche.