Security Directory

S

SPACEFOOT SAS

nauti-wave.cz

10

Nauti-Wave is an e-commerce retailer specializing in water sports equipment including neoprene suits, swimwear, and accessories. The company operates primarily in the Czech Republic market but is registered in France under SPACEFOOT SAS. The website offers a broad product catalog with secure payment options and customer service support, positioning itself as a trusted retailer in the water sports niche. The business model focuses on online sales with a strong emphasis on customer experience and compliance with European data protection regulations. Technically, the website is built on Magento (OpenMage), leveraging modern web technologies and marketing tools such as Google Analytics and Actito. Security measures include HTTPS, reCAPTCHA, and a consent management platform, though some security headers could be improved. The WHOIS data shows an anomalous future domain creation date, which is a concern but does not currently impact the website's operational legitimacy. Overall, the site demonstrates a good balance of business professionalism, technical maturity, and privacy compliance.

S

SPACEFOOT SAS

slowood-interior.dk

58

Slowood Interior is a Danish e-commerce retailer specializing in modern interior decoration, design furniture, lighting, and lifestyle products. The company operates under the legal entity SPACEFOOT SAS, based in France, with a newly registered domain consistent with a recent business launch in 2024. The website targets consumers interested in trendy and modern home decoration solutions, offering a broad catalog of products through a well-structured online store. The business model is retail-focused, leveraging multiple partner stores and brands to enhance its market presence. Technically, the website is built on the Magento (OpenMage) platform, utilizing modern JavaScript libraries and third-party services such as Google Analytics, Google Ads, reCAPTCHA, and Actito marketing tools. The site demonstrates good mobile optimization and SEO practices, with a moderate performance profile. Privacy compliance is well addressed through a consent management platform and clear privacy and cookie policies, reflecting GDPR adherence. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but lacks some security headers like Content-Security-Policy and X-Frame-Options. DNSSEC is not enabled, representing a minor security gap. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent and transparent, with no privacy protection masking, enhancing trustworthiness. Overall, Slowood Interior presents a professional, secure, and privacy-conscious e-commerce platform with a clear business focus and good technical implementation. Strategic improvements in security headers and DNS security would further strengthen its posture.

S

SPACEFOOT SAS

on-fight.at

63

On-Fight is a specialized e-commerce retailer focused on providing equipment and accessories for combat sports and fitness enthusiasts. The company operates primarily in the European market, with a strong presence in France and German-speaking countries. Their product range includes gloves, protective gear, shoes, textiles, and club materials, targeting athletes and sports clubs. The website demonstrates a solid market position as a niche retailer with fast shipping and customer service based in France. Technically, the site leverages a Magento-based platform with modern marketing and analytics integrations, including Google Analytics, Google Ads, and GDPR-compliant consent management. Security measures such as HTTPS and invisible reCAPTCHA are implemented, reflecting a good security posture. Overall, the website is professional, user-friendly, and trustworthy, with clear business information and compliance with privacy regulations.

S

SPACEFOOT SAS

nauti-wave.at

63

Nauti-Wave is an established e-commerce retailer specializing in watersports apparel and equipment, including wetsuits, swimwear, and accessories. The company operates primarily in France, supported by a professional website that offers a broad product catalog and secure payment options. The business targets watersports enthusiasts and general consumers seeking quality sportswear and equipment. The website demonstrates a solid market position with a focus on customer service and reliable delivery. Technically, the website is built on a Magento (OpenMage) platform, integrating modern marketing and analytics tools such as Google Analytics, Google Tag Manager, and Actito marketing automation. The site employs GDPR-compliant consent management and invisible reCAPTCHA for form security, indicating a mature digital infrastructure. Performance and mobile optimization are good, though some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident, suggesting room for improvement. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear policies and consent mechanisms in place. Overall, Nauti-Wave presents a trustworthy and professional online presence with moderate to high security and privacy standards. Strategic improvements in security headers and incident response documentation would further strengthen its posture.

S

SPACEFOOT SAS

golf-and-co.at

64

Golf and co is a specialized e-commerce retailer focused on golf equipment and accessories, serving golf enthusiasts primarily in Europe with a strong presence in France and Austria. The company offers a wide range of products including clubs, balls, bags, shoes, clothing, gloves, and training equipment from well-known brands such as Taylormade, Callaway, and Srixon. The website is professionally designed with consistent branding and clear navigation, supporting multiple country versions to cater to an international audience. The business model centers on online retail with customer service and secure payment options, positioning itself as a trusted specialist in the golf retail market. Technically, the website is built on the Magento (OpenMage) platform, utilizing modern web technologies including Google Analytics for tracking, Google reCAPTCHA for form security, and a Consent Management Platform to ensure GDPR compliance. The site demonstrates good mobile optimization and moderate performance, with a clean and structured HTML layout. Security best practices are observed with HTTPS enforcement and invisible reCAPTCHA, although some security headers could be improved for enhanced protection. From a security perspective, the site shows a mature posture with no visible vulnerabilities or exposed sensitive data. GDPR compliance is well addressed through privacy and cookie policies, consent mechanisms, and clear contact information. However, explicit security policies and incident response contacts are not found, which could be areas for improvement. The domain registration details align well with the business information, reinforcing the legitimacy and trustworthiness of the site. Overall, Golf and co presents a secure, compliant, and professionally managed e-commerce platform with a clear focus on golf retail. Strategic recommendations include enhancing security headers, publishing explicit security policies, and maintaining regular audits of third-party scripts to sustain a strong security posture.

S

SPACEFOOT SAS

velo-store.ie

63

Vélo-Store is a specialized e-commerce retailer focused on bicycles, bike parts, and cycling equipment, operating primarily in France and Ireland with multiple country-specific domains. The company, SPACEFOOT SAS, offers a broad catalog of cycling products and emphasizes customer service, secure payment, and easy returns. The website demonstrates a solid digital presence with modern marketing and analytics tools integrated, including Google Analytics, Google Ads, and Actito. The technical infrastructure is based on Magento (OpenMage), hosted by Gandi, and employs HTTPS with reCAPTCHA for form security. Security posture is good but could be enhanced by enabling DNSSEC and adding advanced security headers. Privacy compliance is strong with clear privacy and cookie policies and GDPR consent mechanisms. Overall, the site is professional, trustworthy, and well-positioned in the e-commerce cycling market.

S

SPACEFOOT SAS

nauti-wave.ie

63

Nauti-Wave is a specialized e-commerce retailer focused on water sports equipment and apparel, including wetsuits, swimsuits, and related accessories. The company operates primarily in France and Ireland, targeting water sports enthusiasts and athletes. The website presents a professional and well-structured platform with a broad product catalog and multiple brand partnerships, positioning itself as a competitive player in the niche water sports retail market. The business model is direct online sales with fast delivery and secure payment options, supported by customer service based in France. Technically, the website is built on the Magento (OpenMage) platform, leveraging modern web technologies such as Google Analytics, Google Ads, reCAPTCHA, and marketing automation tools like Actito. The site is mobile-optimized and provides a good user experience with clear navigation and product categorization. Performance is moderate, with room for improvement in accessibility and advanced security headers. From a security perspective, the site enforces HTTPS, uses clientTransferProhibited domain status, and integrates reCAPTCHA for form protection. Consent management is implemented to comply with GDPR, and privacy policies are comprehensive. However, DNSSEC is not enabled, and some recommended security headers are missing. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates a solid security posture and compliance with privacy regulations, supporting a trustworthy online retail environment. The domain registration details align well with the business claims, enhancing legitimacy. Strategic recommendations include enabling DNSSEC, adding security headers, and publishing a security policy to further strengthen trust and security maturity.

O

Out the Box

outtheboxthemes.com

44

Out the Box is a small technology company specializing in the development and sale of WordPress themes. Their website showcases a portfolio of responsive, well-designed themes aimed at WordPress users and developers seeking professional and customizable website solutions. The company emphasizes plugin compatibility, clear coding, and personal support, positioning itself as a niche provider in the WordPress theme market. Technically, the website is built on WordPress with common plugins such as Easy Digital Downloads and uses modern web technologies including jQuery and Google Analytics. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is generally good with HTTPS enabled and no obvious vulnerabilities, but the absence of security headers and privacy policies indicates room for improvement. The lack of WHOIS registration data raises concerns about domain legitimacy, although the active and professional nature of the website mitigates some risk. Overall, the site is trustworthy for its business purpose but would benefit from enhanced transparency and compliance documentation.

Ö

Österreichischer Fußball-Bund

oefb.at

10

The Österreichischer Fußball-Bund (ÖFB) is the official governing body for football in Austria, operating a comprehensive digital presence through oefb.at. The website serves as a central hub for football news, competitions, fan engagement, and partner information, positioning ÖFB as a leading national sports federation with strong market presence and partnerships. The site targets football fans, players, clubs, and partners, offering services such as event organization, media content, and merchandise sales. Technically, the website employs a modern JavaScript stack including jQuery, i18next for localization, Moment.js for date handling, and Swiper.js for UI components, indicating a mature and well-maintained infrastructure. The site is mobile-optimized with good SEO and basic accessibility features. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers and explicit security policies are absent. No critical vulnerabilities or suspicious content were detected. Overall, the website reflects a professional and trustworthy organization with room for improvement in security transparency and accessibility.

O

Ottakringer Brauerei GmbH

ottakringerbrauerei.at

10

Ottakringer Brauerei GmbH is a historic brewery based in Vienna, Austria, established in 1837. The company offers a range of services including beer production, brewery tours, event hosting, and an online shop. The website reflects a mature and professional brand with a strong local market position and a focus on hospitality and beverage sales. Technically, the site is built on WordPress with WooCommerce, integrating modern web technologies such as jQuery, Google Tag Manager, and Cookiebot for privacy compliance. The site is mobile optimized and provides a good user experience with clear navigation and rich content. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and policies could be improved. The absence of WHOIS data limits full domain trust verification, but the website content and business information appear consistent and legitimate. Overall, the site is well maintained, compliant with GDPR, and targets a mature audience due to alcohol-related content and age verification.

W

Wien Holding GmbH

wienholding.at

10

Wien Holding GmbH is a large municipal holding company based in Vienna, Austria, managing a diverse portfolio of subsidiaries and projects in real estate, culture, sports, logistics, and tourism. The website reflects a well-established organization with a strong market position in Vienna's urban development and cultural sectors. The company targets residents, business partners, cultural institutions, and job seekers, providing comprehensive information about its subsidiaries and activities. Technically, the website employs modern JavaScript libraries such as jQuery, Velocity.js, and Leaflet for interactive maps, alongside Matomo for analytics, indicating a mature digital infrastructure. The site is mobile-optimized with good SEO and accessibility features, although some accessibility improvements could be made. Security posture is solid with HTTPS enforced and privacy consent mechanisms in place, but lacks explicit security policy and incident response information. Overall, the website is professional, trustworthy, and content-rich, supporting Wien Holding's role as a key municipal entity.

11teamsports.ie is a specialized e-commerce retailer focusing on football shoes, apparel, and equipment, serving primarily the Irish and broader European markets. The company offers products from leading sports brands such as Nike, adidas, and PUMA, targeting football players, teams, and fans. The website demonstrates a solid market position as a niche football sportswear provider with a medium-sized business profile founded in 2020. Technically, the site uses a modern tech stack including Bootstrap, jQuery, and integrates advanced marketing and analytics tools like Google Analytics, Google Tag Manager, and Exponea, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced, secure payment indications, and cookie consent mechanisms, though there is room for improvement in DNSSEC adoption and security headers. Overall, the site is professional, trustworthy, and compliant with GDPR, providing clear contact information and policies. No WAF or blocking mechanisms were detected, and the domain registration data aligns well with the business claims, supporting legitimacy.

1

11teamsports

11teamsports.dk

10

11teamsports.dk is a specialized e-commerce retailer focusing on football-related sportswear, footwear, and equipment, primarily serving the Danish and broader European market. The website offers a wide range of products from leading brands such as Nike, adidas, and PUMA, targeting football players, teams, and fans. The business is established with a domain age consistent with its market presence and operates multiple country-specific sites, indicating a regional expansion strategy. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google Analytics, and Klarna for payments, ensuring a responsive and user-friendly experience. The site is mobile-optimized and incorporates consent management tools to comply with GDPR requirements. Performance is moderate with good SEO and accessibility basics in place. From a security perspective, the site uses HTTPS and integrates secure payment methods. However, some security headers are not explicitly detected, and there is no published security policy or incident response information. The domain registration is transparent and consistent with the business, enhancing trustworthiness. Overall, the website presents a professional and trustworthy e-commerce platform with good privacy compliance and a solid technical foundation. Strategic improvements in security policy transparency and enhanced security headers would further strengthen its posture.

11teamsports.fi is an established e-commerce retailer specializing in football-related sportswear, equipment, and fan merchandise, targeting primarily the Finnish market with a broad European presence. The company operates under eleven teamsports GmbH, a German-registered entity, reflecting a professional and consistent business identity. The website offers a comprehensive catalog of products from major brands such as Nike, adidas, and PUMA, catering to football players, teams, and fans. The business model focuses on online retail with additional team sales and customization services, positioning itself as a niche but competitive player in the sports retail sector.

1

11teamsports

11teamsports.se

10

11teamsports.se is a professional e-commerce retailer specializing in football equipment, including shoes, clothing, balls, and accessories. The company targets football players, teams, and fans primarily in Sweden, with multiple country-specific domains indicating a regional presence across Europe. The website offers products from major brands such as Nike, adidas, and PUMA, and supports team sales and customization services. The business is well-established with a history dating back to 2007, although the domain itself was registered in 2020, consistent with market expansion. Technically, the website employs a modern technology stack including jQuery, Bootstrap, and the Nette framework, with integrations for Google Analytics, Google Tag Manager, and marketing tools like Exponea and Luigisbox. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses secure cookie consent mechanisms. However, it lacks DNSSEC, security.txt, and explicit security policies or incident response contacts. Security headers are not fully implemented, representing an area for improvement. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates a solid business and technical foundation with good privacy compliance and trust indicators such as a strong Trustpilot rating and money-back guarantees. Strategic improvements in security posture and transparency would further enhance trust and resilience.

1

11teamsports.bg

11teamsports.bg

10

11teamsports.bg is a professional e-commerce retailer specializing in football-related sportswear, footwear, and equipment targeting the Bulgarian market. The website offers a broad catalog of products from major brands such as Nike, adidas, and PUMA, catering to football players, teams, and fans. The business operates multiple regional sister sites across Central and Eastern Europe, indicating a well-established regional presence. The site demonstrates a good level of digital maturity with modern web technologies, responsive design, and integrated analytics and marketing tools. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. Privacy compliance is well addressed with GDPR-compliant privacy and cookie policies and consent mechanisms. However, direct contact information such as emails or phone numbers is not prominently displayed, relying mostly on contact forms. Overall, the domain registration is privacy protected but consistent with legitimate business practices. The website scores well on content quality, technical implementation, security, privacy, and business credibility, making it a trustworthy and professional online retailer.

1

11teamsports

11teamsports.ro

10

11teamsports.ro is a Romanian e-commerce retailer specializing in football sportswear, equipment, and accessories. The website offers a wide range of products from leading brands such as Nike, adidas, and PUMA, targeting football players, teams, and fans. The business model focuses on online retail with additional services like team sales and loyalty programs, positioning itself as a specialist in the football retail market in Romania. The website demonstrates a professional design with clear navigation and good mobile optimization, supporting a positive user experience. Technically, the site employs modern web technologies including Bootstrap, jQuery, and multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and TikTok Pixel, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS, uses DNSSEC, and implements cookie consent mechanisms, reflecting a good security posture. No critical vulnerabilities or blocking mechanisms were detected, and the WHOIS data confirms domain legitimacy and appropriate domain age. Overall, the site is a trustworthy and professional e-commerce platform with strong business credibility and compliance with privacy regulations.

1

11teamsports

11teamsports.gr

10

11teamsports.gr is a specialized e-commerce platform focused on football sportswear, footwear, and equipment, serving the Greek market with a strong presence since 2007. The website offers products from leading brands such as Nike, adidas, and PUMA, targeting football players, teams, and enthusiasts. The business operates multiple country-specific sister sites, indicating a regional market strategy. Technically, the site employs modern web technologies including Bootstrap, jQuery, Google Analytics, and tag management tools, ensuring a responsive and user-friendly experience. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not published. Overall, the site demonstrates good digital maturity and business credibility with clear contact information and trust signals like Trustpilot ratings.

1

11teamsports

11teamsports.hr

10

11teamsports.hr is a professional e-commerce platform specializing in football sportswear, footwear, and equipment, targeting football players, teams, and fans primarily in Croatia. The website is part of a regional network of 11teamsports sites serving multiple European countries. The business operates with a clear focus on retail and team outfitting services, supported by loyalty and ambassador programs. Technically, the site employs modern web technologies including jQuery, Bootstrap, and the Nette framework, with integrations for analytics and marketing tools such as Google Analytics, Google Tag Manager, and Exponea. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not found. The domain registration is transparent and consistent with the business profile, supporting legitimacy. Overall, the website demonstrates a mature digital presence suitable for a medium-sized e-commerce retailer in the sports sector.

1

11teamsports

11teamsports.pt

10

11teamsports.pt is a specialized e-commerce retailer focused on football sportswear, footwear, and equipment, serving primarily the Portuguese market with a broad European footprint through multiple localized domains. The company offers a wide range of products from leading brands such as Nike, adidas, and PUMA, targeting football players, teams, and fans. The website demonstrates a professional design with clear navigation and a comprehensive product catalog, supporting a positive user experience. Technically, the site employs modern web technologies including Bootstrap, jQuery, and integrates multiple marketing and analytics tools such as Google Analytics, Bing Ads, and Exponea, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS, implements standard security headers, and integrates secure payment methods like Klarna, reflecting a strong security posture. Privacy compliance is evident through the presence of privacy and cookie policies with consent mechanisms, aligning with GDPR requirements. However, the absence of a dedicated security policy or incident response page suggests areas for improvement. Overall, the site is trustworthy, well-maintained, and positioned as a reputable player in the football retail sector.

1

11teamsports

11teamsports.es

10

11teamsports.es is a specialized e-commerce platform focused on football-related products including boots, apparel, balls, and accessories. The company targets football players, fans, and teams primarily in Spain and Spanish-speaking markets. Established in 2007, it has built a solid market position with partnerships with major sports brands such as Nike, Adidas, and Puma. The website offers loyalty programs and ambassador initiatives to engage customers. Technically, the site uses a modern tech stack including Bootstrap, jQuery, and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, TikTok Pixel, and Klarna for payments. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is good with HTTPS enforced and secure payment options, though some security headers could be improved. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. WHOIS data is unavailable due to access restrictions, limiting domain registration verification, but the website content and business presence appear legitimate and professional.

1

11teamsports

11teamsports.pl

11

11teamsports.pl is a well-established e-commerce retailer specializing in football shoes, apparel, and equipment, primarily serving the Polish market and Central Europe. The company operates under Gransy s.r.o., with a domain age dating back to 2011, indicating a mature and stable business presence. The website offers a comprehensive catalog of products from major brands such as Nike, adidas, and PUMA, targeting football players, teams, and fans. The business model focuses on direct online sales with additional team sales and loyalty programs.

W

Weinbau Mayer

weinbau-mayer.at

55

Weinbau Mayer is a small, family-owned winery and Heuriger located in Perchtoldsdorf, Austria, specializing in producing high-quality white and red wines, including rare varieties. The business combines traditional wine production with hospitality services and an online wine shop, targeting wine enthusiasts and local visitors. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content including downloadable price lists and menus. Technically, the site uses modern web technologies and privacy-conscious analytics (Matomo), with HTTPS enforced and secure form handling. However, it lacks explicit security policies and incident response information. Overall, the security posture is good but could be improved by adding security headers and vulnerability disclosure mechanisms. The site complies with GDPR, featuring privacy and cookie policies with consent mechanisms. No suspicious or malicious elements were detected, and the WHOIS data confirms the legitimacy and consistency of the domain registration. The site is suitable for mature audiences due to its alcohol-related content but contains no explicit adult material.

T

Tierklinik Perchtoldsdorf Ost

tierklinik-perchtoldsdorf-ost.at

47

Tierklinik Perchtoldsdorf Ost is a veterinary clinic located in Perchtoldsdorf, Austria, serving the Vienna surrounding area with a comprehensive range of animal healthcare services. The clinic offers 24/7 emergency services, advanced diagnostic imaging such as CT and MRI, and specialized treatments including orthopedics, dermatology, cardiology, and physiotherapy. The website reflects a well-established regional veterinary provider with clear contact information and active engagement through social media and blog content. Technically, the site uses modern JavaScript libraries and analytics tools, is mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS and secure forms, though it lacks explicit security policies or vulnerability disclosure mechanisms. Privacy compliance is well addressed with a GDPR-compliant privacy policy and cookie consent banner. Overall, the website and business present a trustworthy and professional image suitable for their target audience of pet owners in the region.

Ö

Österreichische Bergbahnen GmbH

raxalpe.com

54

Österreichische Bergbahnen GmbH operates the Rax-Seilbahn, a cable car service providing access to hiking trails, snowshoe hiking, climbing tours, and mountain huts on the Raxalpe mountain in Austria. The company targets tourists, families, and outdoor enthusiasts, offering transportation, hospitality, and recreational services. The website is professionally designed with rich multimedia content and clear navigation, supporting a positive user experience and strong brand presence. Technically, the website employs modern analytics tools including Google Analytics, Matomo, and Facebook Pixel, alongside Google Tag Manager for marketing. The site is mobile optimized and accessible, with good SEO practices. However, some privacy compliance gaps exist, notably the absence of a cookie consent mechanism and terms of service page. Security posture is solid with HTTPS enforced, but security headers are missing, and no explicit incident response or vulnerability disclosure policies are published. The WHOIS data is unavailable, indicating possible recent registration or privacy protection, which slightly reduces trustworthiness. Nonetheless, the website's professional content, valid contact information, and certifications support its legitimacy. Overall, the site scores well in content quality, business credibility, and technical implementation, with room for improvement in privacy compliance and security best practices.

E

Eglise des Uttins

eglise-uttins-yverdon.ch

50

Eglise Evangélique des Uttins is a small, community-focused evangelical church based in Yverdon-les-Bains, Switzerland. The organization emphasizes proximity, diversity, and conviviality, offering public worship services, youth activities, and community events. The website reflects a well-maintained digital presence using WordPress with the Avada theme and several plugins to manage events, membership, and contact forms. Social media integration and structured data for events enhance community engagement and search visibility. Technically, the site uses modern web technologies and APIs, including Google Maps and reCAPTCHA for spam protection. However, the absence of explicit privacy and cookie policies indicates a compliance gap with GDPR and related regulations. Security posture is generally good with HTTPS and some security best practices, but could be improved by adding explicit security headers and publishing incident response information. Overall, the website is professional, trustworthy, and serves its target audience effectively, though it should address privacy compliance to reduce risk.

M

move

move19.ch

10

move is a Swiss-based non-profit organization focused on Christian youth engagement through events, outreaches, and leadership training. Their flagship event is scheduled for December 6, 2025, in Aarau, targeting young people aged 15 to 25 and above. The organization collaborates with several partner entities such as ISTL, AVC, &acts, CfC, and msd, enhancing its community reach and credibility. The website serves as an information and registration portal, featuring detailed event descriptions, team member profiles, and integrated social media feeds.

S

Stiftung Zewo

zewo.ch

11

Stiftung Zewo operates as a Swiss non-profit foundation providing certification and trust assurance services to charitable organizations through the Zewo-Gütesiegel. The website serves donors and NPOs by offering verified information about certified organizations, ensuring transparency and confidence in charitable giving. It holds a strong market position as a leading certification body in Switzerland, offering key services such as NPO certification, donor guidance, and coordination of national fundraising efforts. The digital infrastructure is built on WordPress with modern technologies including Algolia search, Foundation framework, and various analytics and marketing tools, reflecting a mature and well-maintained technical environment. Security posture is robust with HTTPS enforcement, security headers, and no visible vulnerabilities, although formal security policies and incident response information are not publicly detailed. Overall, the website demonstrates high professionalism, excellent content quality, and strong trust indicators, making it a reliable resource for its target audience.

A

AmericaTVListings.com

americatvlistings.com

53

AmericaTVListings.com is a niche media website providing comprehensive TV schedule listings for the United States and other countries. The site offers multi-language support and covers a wide range of TV categories including American, local, Spanish, movies, sports, music, documentaries, news, and children's programming. The business model appears to be advertising-supported, leveraging Google Adsense and other marketing tools. The domain is relatively new, registered in 2022, and uses GoDaddy as registrar with Cloudflare DNS services. The website is built on modern frontend technologies including Bootstrap 5 and integrates Google Analytics and Facebook SDK for tracking and analytics. Security posture is moderate with HTTPS enabled and domain locks in place, but lacks DNSSEC and some recommended security headers. Privacy compliance is minimal with no explicit privacy or cookie policies found, though a cookie consent mechanism is present. Contact and incident response information are not clearly provided, which may impact user trust and compliance. Overall, the site is functional, well-branded, and serves its target audience effectively but could improve in security and privacy transparency.

C

Connox AG

connox.ch

11

Connox AG operates a well-established e-commerce platform specializing in design furniture, accessories, and lighting products primarily targeting consumers in Switzerland and German-speaking Europe. The company maintains a strong market position with multiple regional sister sites and a broad product catalog exceeding 29,000 items. The website demonstrates a mature digital infrastructure leveraging modern web technologies such as React, PayPal SDK, and advanced consent management tools like Usercentrics, ensuring compliance with GDPR and cookie regulations. Security posture is robust with HTTPS enforcement, comprehensive security headers, and secure payment integrations. Privacy policies and contact information are clearly presented, supporting trust and transparency. Overall, Connox AG presents a professional, secure, and user-friendly online retail experience.

S

Streamster GmbH

streamster.tv

37

Streamster GmbH operates a specialized streaming platform focused on niche and regional sports in Austria, providing live and on-demand content primarily free to users. The company positions itself as a leading provider in this market segment, offering comprehensive broadcasting services and advertising opportunities to sports associations and brands. Technically, the website is built on WordPress with modern plugins and libraries, delivering a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC and security headers could be improved. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the site is professional, trustworthy, and safe for general audiences.

S

skills.lab

skills-lab.com

74

skills.lab is a specialized company offering high-tech football training systems that combine digital gamification with objective measurement and talent development. Positioned as a world market leader, the company serves football players, coaches, and clubs with innovative products such as the skills.lab Arena, Studio, and Cube. The website is professionally designed, mobile-optimized, and provides comprehensive content about their offerings and partnerships with notable football clubs. Technically, the site is built on WordPress with modern JavaScript libraries and integrates video content and analytics tools. Security posture is good with HTTPS and cookie consent mechanisms, though additional security headers and explicit security policies could enhance trust. Overall, the domain registration is consistent and legitimate, supporting the company's credibility.

Grazer Athletiksport Klub 1902 is a historic football club based in Graz, Austria, with a strong local presence and a dedicated fan base. The website serves as a comprehensive portal for club news, team information, ticket sales, merchandise, and youth academy details. It effectively targets football fans and club members, providing relevant content and engagement opportunities. Technically, the site employs modern web technologies including Vue.js and Laravel, integrates Google Analytics for tracking, and uses Mailchimp for newsletter subscriptions. The site is mobile-optimized and features a clear navigation structure, contributing to a positive user experience. Security-wise, the website enforces HTTPS and implements a cookie consent mechanism, though it lacks advanced security headers and explicit incident response policies. Overall, the domain registration details align well with the club's identity, supporting legitimacy and trustworthiness.

1

11teamsports Vereinsshop

houseofclubs.at

50

The website houseofclubs.at operates as an e-commerce platform specializing in football-related sportswear and equipment under the brand 11teamsports Vereinsshop. It targets football clubs, teams, and sports enthusiasts primarily in Austria and German-speaking regions. The business model focuses on online retail sales of football shoes, clothing, and fan merchandise, positioning itself as a niche supplier within the sports retail market. The site integrates Amazon Pay for streamlined payment processing, enhancing user convenience. Technically, the website is built on the OXID eShop Community Edition platform, utilizing modern JavaScript libraries such as jQuery and Amazon Pay widgets. The site demonstrates moderate performance with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and Open Graph data. However, some security headers are missing, and no explicit incident response or security policy pages are published. From a security perspective, the site enforces HTTPS and employs secure login forms with anti-CSRF tokens. Cookie consent mechanisms are in place, indicating GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data aligns well with the website's business claims, showing consistent registrant information and domain age appropriate for the business. Overall, the website presents a professional and trustworthy e-commerce presence with good content quality and privacy compliance. Security posture is adequate but could be improved by adding security headers and explicit security policies. The absence of direct contact emails or phone numbers slightly limits business credibility but is mitigated by a contact form and clear privacy documentation.

A

ABVV

denieuwewerker.be

52

De Nieuwe Werker is a Dutch-language media platform affiliated with the Belgian trade union ABVV, providing news, opinions, and information focused on labor rights, social issues, and union activities. The website serves a niche audience of workers and union members in Belgium, operating as a non-profit media outlet. The platform is built on WordPress, leveraging modern web technologies and plugins to deliver a responsive and content-rich experience. Structured data and SEO best practices are implemented to enhance discoverability. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is good, with clear links to privacy and cookie policies. Contact is primarily via a contact form and social media channels, with no direct emails or phone numbers publicly listed. Overall, the website is professional, trustworthy, and aligned with its business purpose.

S

Sepia GmbH & Co. KG

sepia.de

48

Sepia GmbH & Co. KG is a German technology company specializing in Product Information Management (PIM) software and related enterprise solutions such as Product Configuration Management, Digital Asset Management, and Web2Print. Their flagship product, Alterra®, supports businesses in managing complex product data across multiple channels and languages, enabling faster product launches and omni-channel commerce. The company targets B2B clients requiring advanced product data management and integration with ERP and eCommerce platforms. The website demonstrates a solid market position with notable client references and comprehensive service offerings. Technically, the website employs modern web technologies including the Foundation framework and jQuery, hosted on PlusServer infrastructure. The site is mobile-optimized with good SEO practices and clear navigation, though performance is moderate. No advanced analytics or tracking scripts were detected, indicating a privacy-conscious approach. However, the absence of cookie consent mechanisms and security headers suggests room for improvement in compliance and security hardening. From a security perspective, the site uses HTTPS and does not expose sensitive data in the HTML. WHOIS data aligns well with the business identity, showing no privacy protection and consistent registration details. No WAF or blocking mechanisms were detected, allowing full content access. The lack of explicit security policies and incident response contacts is a gap that could be addressed to enhance trust and readiness. Overall, Sepia's website is professional, trustworthy, and well-aligned with its business goals. Strategic enhancements in security headers, cookie consent, and public security policies would further strengthen its posture and compliance standing.

P

Poptin

poptin.com

61

Poptin is a technology company specializing in website conversion optimization tools, offering smart popups, embedded forms, and autoresponder email services primarily targeting digital agencies, marketers, bloggers, and eCommerce businesses. The company operates a SaaS business model with a free trial and subscription plans, positioning itself as a competitive player in the lead capture and customer engagement market. The website is built on WordPress using the Divi theme and integrates multiple modern marketing and analytics technologies such as Google Analytics, Facebook Pixel, and Crisp Chat, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and security headers implemented, though the absence of a published security policy and incident response information suggests room for improvement. Overall, the website is professional, well-branded, and trustworthy, but the lack of WHOIS transparency and direct contact details slightly reduce business credibility.

A

ASKÖ Landesverband Steiermark

draussen-aktiv-gesund.at

66

Draussen Aktiv Gesund is a regional outdoor activity organization based in Austria, affiliated with ASKÖ Landesverband Steiermark. The website promotes outdoor sports such as ski touring, freeriding, mountain biking, and hiking, targeting nature and sports enthusiasts in the Steiermark region. The business model appears community-focused, offering workshops, events, and seasonal programs. Technically, the site is built on the Jimdo CMS platform, leveraging modern web technologies and providing a responsive, user-friendly experience. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security policies or incident response information. Overall, the site is trustworthy, professionally maintained, and compliant with GDPR requirements.

B

Bewegungsland Steiermark

bewegungslandsteiermark.at

58

Bewegungsland Steiermark is a well-established non-profit program focused on promoting sports and physical activity within the Austrian region of Styria. Supported by the state government and major sports umbrella organizations, it serves educational institutions, municipalities, and sports clubs to foster community engagement and sports participation. The website reflects this mission with clear content, consistent branding, and a user-friendly design targeting a German-speaking audience. Technically, the site is built on WordPress with common plugins such as WPBakery Page Builder, Slider Revolution, and Borlabs Cookie for privacy compliance. The infrastructure is modern and mobile-optimized, though performance is moderate and accessibility could be improved. Security posture is solid with HTTPS enforced and cookie consent implemented, but additional security headers and policies could enhance protection. Privacy compliance is strong with comprehensive policies and consent mechanisms in place. Overall, the site demonstrates high trustworthiness and professionalism, with no critical vulnerabilities or suspicious indicators detected.

A

ASKÖ Steiermark

aktiv-gesund-steiermark.at

66

AKTIV GESUND STEIERMARK operates as the movement and education competence center under the umbrella of ASKÖ Steiermark, providing a broad range of health and fitness courses targeted at all age groups in the Steiermark region of Austria. The organization emphasizes quality in both offerings and execution, supported by a team of trainers and movement experts. Their business model is non-profit and educational, focusing on community health and fitness engagement. The website is professionally designed using the Jimdo CMS platform, featuring clear navigation, mobile responsiveness, and compliance with GDPR through comprehensive cookie and privacy policies. Technically, the site leverages modern web technologies including jQuery, Google Maps, and embedded YouTube videos, hosted by Jimdo GmbH. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though improvements in HTTP security headers are recommended. No critical vulnerabilities or suspicious domains were detected. Overall, the site presents a trustworthy and professional digital presence aligned with its mission and regional focus.

S

Students Go West

studentsgowest.com

65

Students Go West is an Austrian agency specializing in securing sports scholarships for athletes at US universities. Established in 2018, it holds a leading market position in Austria for this niche. The website is built on WordPress with Elementor and integrates modern technologies such as CookieYes for consent management and analytics tools like Google Analytics and Hotjar. The site is well-designed, mobile-optimized, and provides clear navigation and relevant content for its target audience of student-athletes. Security posture is good with HTTPS enabled and cookie consent implemented, though some security headers could be improved. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, but the professional presentation and consistent branding support business credibility. Privacy policy and terms of service pages are not clearly found, indicating room for compliance improvement.

R

Reisedienst Hamburg-Nord Bossel GmbH & Co. KG

reisedienst-hamburg-nord.de

62

Reisedienst Hamburg-Nord Bossel GmbH & Co. KG is a well-established bus travel and rental company based in Hamburg, Germany, founded in 1974. The company offers a range of services including busreisen (bus trips), klassenreisen (class trips), stadtrundfahrten (city tours), transfers, and various group travel options. Their market position is that of a trusted local transportation provider with a focus on comfort and reliability. The website reflects a professional business model targeting group travel customers such as schools, clubs, and companies in Hamburg and surrounding areas. Technically, the website is built on a modern stack including jQuery, Cookiebot for consent management, and lazy loading for performance optimization. The site uses structured data (JSON-LD) to enhance SEO and provide clear business information. Hosting and CDN services are leveraged for asset delivery. The site is mobile optimized and has good SEO and accessibility basics, though some accessibility improvements could be made. From a security perspective, the website enforces HTTPS and uses Cookiebot to comply with GDPR cookie consent requirements. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not clearly present. No incident response or security policy pages are found, and no vulnerability disclosure mechanisms are in place. No suspicious or malicious content is detected, and the site appears safe for general audiences. Overall, the website scores well on content quality, technical implementation, privacy compliance, and business credibility, with room for improvement in security best practices and incident response transparency. The domain registration is consistent with the business profile, showing no privacy protection or suspicious patterns. The company provides clear contact information including a phone number and physical address, though no direct email addresses are publicly listed. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, improving accessibility features, and maintaining up-to-date third-party libraries to ensure ongoing security and compliance.

I

Instituto de Turismo de la Región de Murcia

turismoregiondemurcia.es

62

The website www.turismoregiondemurcia.es serves as the official tourism portal for the Costa Cálida region in Murcia, Spain. Operated by the Instituto de Turismo de la Región de Murcia, it provides comprehensive travel information, event listings, activity bookings, accommodation search, and cultural insights aimed at tourists and visitors. The site is well-positioned as a government-backed tourism authority, offering a broad range of services to facilitate travel planning and regional exploration. Technically, the site employs modern web technologies including Bootstrap, jQuery, Swiper.js, and integrates multiple analytics and advertising tools such as Google Analytics, Facebook Pixel, and Adform. The site is mobile-optimized, accessible, and SEO-friendly, with consistent branding and professional design. Structured data (JSON-LD) is used to enhance search engine understanding. From a security perspective, the site uses HTTPS and includes several security best practices, though explicit security headers like CSP or X-Frame-Options were not confirmed in the provided data. No vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are present and include consent mechanisms, indicating good compliance with GDPR requirements. Overall, the website demonstrates a strong security posture, high content quality, and trustworthy business credibility. It effectively supports its mission as a regional tourism promotion platform. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining regular audits of third-party scripts to sustain security and compliance.

U

Up Romania

upromania.ro

10

Up Romania is a well-established financial services company specializing in employee motivation solutions such as meal vouchers, gift cards, and social benefits. The company serves a broad audience including companies, public institutions, affiliated partners, and end users, positioning itself as a key player in the Romanian employee benefits market. With over 25,000 companies and 1.2 million beneficiaries, Up Romania demonstrates significant market penetration and brand recognition. The website reflects a professional and consistent brand image, supported by comprehensive legal and privacy documentation.

U

Up maroc: Cadhoc

up-maroc.ma

41

Up Maroc: Cadhoc is a Moroccan company specializing in providing payment and social benefit solutions to enterprises and employees. Their offerings include various voucher and card-based solutions such as Chèque Déjeuner, UpDéjeuner, and Cadhoc products, aimed at enhancing employee welfare and purchasing power. The company operates under the umbrella of the Upcoop Group, with a solid market presence in Morocco since 2007. The website reflects a professional and consistent brand image targeting businesses and individuals in Morocco.

Up Spain is a business-oriented company specializing in solutions to motivate, reward, and connect employees, targeting businesses in Spain. The website presents a professional image with a clear focus on employee engagement services. Technically, the site is built on WordPress using Elementor and WP Rocket, with Google Tag Manager implemented for analytics and marketing, though privacy settings restrict ad personalization. Security posture is moderate with room for improvement, notably the absence of security headers and lack of visible privacy and cookie policies. The domain's WHOIS data is unavailable, raising concerns about registration legitimacy. Overall, the website is functional and business-focused but would benefit from enhanced security and compliance transparency.

M

Mainstream Public Cloud Services d.o.o.

fitpass.rs

58

Fitpass.rs is a Serbian-based fitness membership platform offering access to a wide range of gyms, fitness studios, pools, and sports centers across Serbia. The business targets both individual consumers and corporate clients seeking wellness benefits for employees. The company appears to be a small-sized entity founded in 2014, with domain registration consistent with its business operations and location. The website is professionally designed with good content relevance and user experience, leveraging modern frontend technologies and multiple analytics tools to monitor user engagement. However, the site lacks visible privacy and cookie policies, which impacts its privacy compliance score. Security posture is moderate with HTTPS enabled but missing advanced security headers and explicit incident response contacts. Overall, the website is functional and trustworthy but would benefit from enhanced privacy and security practices to improve compliance and user trust.

A

Awaze Vacation Rentals Ltd

awaze.com

60

Awaze Vacation Rentals Ltd operates as the largest managed vacation rentals and holiday resorts business in Europe, aggregating multiple trusted travel brands such as cottages.com, Hoseasons, and NOVASOL. The company targets holidaymakers and property owners across Europe, offering a wide range of self-catering accommodations and villas. Their market position is strong as a leading group in the European hospitality sector, with a large employee base and extensive property portfolio. The website reflects a professional and consistent brand image with comprehensive business information and regulatory compliance references. Technically, the website is built on WordPress and leverages modern JavaScript libraries and analytics tools including Google Analytics and CookieScript for cookie consent management. The site is mobile optimized, accessible, and SEO friendly, with good performance metrics. However, some security headers are missing, and no explicit security or incident response policies are published, which could be improved. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR consent mechanisms. The absence of WHOIS domain registration data is a concern, potentially indicating privacy protection or query limitations, which slightly impacts trustworthiness. Overall, Awaze presents a credible and professional online presence with strong business and technical foundations. Strategic improvements in security transparency and domain registration clarity would enhance trust and compliance further.

S

Sportbund Pfalz

sportbund-pfalz.de

64

Sportbund Pfalz is a regional sports association based in the Pfalz region of Germany, focusing on supporting sports clubs, providing training, and managing licensing activities. The website serves as an informational portal for sports enthusiasts, clubs, and trainers in the region. The organization operates as a medium-sized entity within the non-profit sports sector, targeting local sports communities. The technical infrastructure is built on WordPress CMS using the Divi theme, supplemented by plugins such as Modern Events Calendar and social media feed integrations. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO optimizations are basic. Cookie consent is implemented, reflecting some privacy compliance efforts. From a security perspective, the website uses HTTPS with a good SSL configuration but lacks advanced security headers and formal security policies such as a vulnerability disclosure or incident response information. No critical vulnerabilities or suspicious elements were detected, but improvements in security best practices and transparency are recommended. Overall, the website is functional and professional with moderate trustworthiness. Strategic enhancements in privacy policy publication, security headers, and contact transparency would improve compliance and user trust.