Security Directory

1

1&1 Internet Inc

moneyyy.me

56

moneyyy.me is an online platform launched in 2018 that facilitates users in requesting money via multiple popular payment platforms such as Venmo, PayPal, Cash App, Patreon, and OnlyFans through a single aggregated link. The service targets individuals and content creators who receive payments across these platforms, offering convenience and streamlined payment requests. The website is professionally designed with good user experience and mobile optimization, leveraging common web technologies including jQuery, Bootstrap, and FontAwesome, and integrates Google Analytics for user tracking. From a technical perspective, the site is hosted under the registrar IONOS SE (1&1 Internet Inc), with a domain age consistent with the business timeline. The technical stack is modern but lacks advanced security configurations such as DNSSEC and security headers. The site uses HTTPS, but no explicit security headers were detected in the HTML content. Privacy and cookie policies are absent, which impacts compliance and user trust. The registration form collects sensitive user data including email, username, password, and payment platform links, but no visible security or privacy disclosures are provided. Security posture is moderate with room for improvement. The absence of DNSSEC, security headers, and privacy policies are notable gaps. No incident response or vulnerability disclosure information is available. The domain registration is transparent and consistent with the website content, indicating legitimacy. No adult or explicit content is present, making the site safe for general audiences. Overall, moneyyy.me presents a niche financial service with a good user interface and functional design but requires enhancements in privacy compliance, security best practices, and transparency to improve trust and regulatory adherence.

O

OZ Home Hub

ozhomehub.com.au

54

OZ Home Hub is an Australian-based online furniture retailer specializing in affordable and stylish home furnishings with nationwide delivery. The company targets Australian consumers seeking quality furniture with flexible payment options and competitive pricing, positioning itself as a value-driven e-commerce business. The website demonstrates a solid digital presence with a modern tech stack including Bootstrap, jQuery, and multiple marketing and analytics integrations. The infrastructure leverages Cloudflare DNS and includes tracking pixels from major platforms such as Facebook, Pinterest, and Microsoft. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure, though improvements are recommended in security headers and privacy compliance mechanisms. Overall, the site is professional, user-friendly, and trustworthy, with clear contact information and customer testimonials enhancing credibility.

U

updoc

updoc.com.au

60

Updoc is a reputable Australian telehealth platform founded in 2020, providing accessible online medical consultations including medical certificates, prescriptions, and specialist referrals. The platform leverages a network of AHPRA-registered doctors to deliver healthcare services digitally, targeting Australians seeking convenient healthcare solutions. The website demonstrates strong market positioning with over 200,000 users and multiple trust indicators such as ISO 27001 certification and LegitScript approval. Technically, the site is built on Webflow with modern analytics and marketing integrations, delivering a fast, mobile-optimized, and user-friendly experience. Security posture is solid with HTTPS and certifications, though improvements in security headers and vulnerability disclosure are recommended. Overall, Updoc presents a professional, trustworthy, and compliant telehealth service with room for enhanced privacy compliance and security transparency.

S

Seedshirt

seedshirt.de

10

Seedshirt is a German-based e-commerce platform specializing in print-on-demand merchandising solutions. It enables users such as fundraisers, artists, influencers, and groups to create and sell custom apparel and products via crowdfunding campaigns or white-label shops without upfront costs or risks. The platform integrates production, sales, and shipping, positioning itself as a reliable partner with a significant user base. Technically, the website is built on Webflow and leverages modern analytics and marketing tools including Google Analytics, Google Tag Manager, and Facebook Pixel, with Cloudflare providing DNS and likely CDN services. The site demonstrates good GDPR compliance with a comprehensive cookie consent mechanism and privacy policy. Security posture is solid with HTTPS enforced and anonymized analytics, though explicit security policies and incident response contacts are absent. Overall, the site is professional, trustworthy, and well-optimized for user experience and marketing.

The Schweizerische Gemeinnützige Gesellschaft (SGG SSUP) is a Swiss non-profit organization dedicated to promoting social cohesion within Switzerland. The website serves as an informational platform highlighting current topics relevant to their mission. The organization maintains a consistent brand presence across multiple social media channels and employs structured data to enhance search engine visibility. The business model focuses on community engagement and social welfare, targeting the general Swiss public. Technically, the website is built on WordPress, leveraging popular plugins such as Yoast SEO for optimization and Gravity Forms for user interactions. Cookiebot is implemented for cookie consent management, complemented by Google Consent Mode to respect user privacy preferences. The site uses modern technologies including CDN services for images and analytics tools for visitor insights. Performance and mobile optimization are adequate, though accessibility features are basic. From a security perspective, the site enforces HTTPS and employs cookie consent blocking mechanisms, which are positive indicators. However, the absence of explicit privacy policy and terms of service pages, as well as lack of published security policies or incident response contacts, represent compliance and transparency gaps. No critical vulnerabilities or malware were detected, and the domain registration details align well with the organization's profile, supporting legitimacy. Overall, the website presents a professional and trustworthy front for a small non-profit entity. Strategic improvements in privacy documentation, security headers, and contact transparency would enhance compliance and user trust. The current risk level is moderate with no immediate critical issues identified.

OBST&GEMÜSE jam GmbH is a Swiss-based small business specializing in the retail and repair of cargobikes, racing bikes, and related accessories. The company operates both a physical showroom in Basel and an online shop serving customers across Switzerland. Their business model focuses on urban mobility solutions, targeting customers interested in lightweight, high-performance freight and cycling products. The website is professionally designed with clear navigation and good mobile optimization, reflecting a solid digital presence. Technically, the website is built on the Odoo CMS platform, utilizing modern web technologies such as FontAwesome for icons and Pannellum for 360-degree panorama views. The site integrates Google Analytics and various marketing tools, including Facebook Pixel and Hotjar, to monitor user engagement and optimize marketing efforts. Performance is moderate with good SEO practices and basic accessibility features. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, indicating attention to secure data handling. However, no explicit security headers were detected, and there is no published security policy or incident response contact information. Privacy compliance is strong, with a comprehensive privacy policy, cookie consent mechanism, and GDPR-aligned data processing disclosures. Overall, the website presents a trustworthy and professional front for the business with minor areas for security enhancement. The domain registration data aligns well with the business identity, supporting legitimacy. Strategic improvements in security headers and incident response transparency would further strengthen the security posture.

The website represents the Institute Experimental Design and Media Cultures (IXDM), part of the Basel Academy of Art and Design FHNW in Switzerland. It focuses on experimental design, media cultures, and related publishing activities. The site targets students, academics, and professionals interested in media and design culture. The business model is educational and research-oriented, with a niche market position within the academic sector. Technically, the site is built on WordPress 6.8.3 using modern JavaScript and Google Analytics for tracking. The site is moderately performant and mobile-optimized but lacks advanced SEO and accessibility features. Security posture is adequate with HTTPS enabled but lacks security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

S.P.A is a small artisanal wine producer and retailer located in Basel, Switzerland, offering handcrafted wines through an online shop and local presence. The business emphasizes honest and artisanal wine production with a community focus. The website uses modern web technologies including Craft CMS, Snipcart for e-commerce, and Google Tag Manager for analytics. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is moderate with HTTPS enforced and an age verification gate for alcohol sales, but lacks security headers and explicit privacy or cookie policies. No contact emails or phone numbers are explicitly provided, which may impact user trust and compliance. Overall, the website is legitimate and trustworthy but could improve privacy compliance and security practices.

M

Moritz Schermbach

moritzschermbach.ch

42

Moritz Schermbach is a Swiss-based professional photographer specializing in photography and cinematography services including still lifes, portraits, fashion, and landscapes. The website serves as a portfolio showcasing artistic works primarily targeting a general audience interested in visual arts. The business operates on a small scale with a niche local market focus in Basel, Switzerland. Technically, the website employs older versions of jQuery and Bootstrap frameworks, alongside Google Analytics and Tag Manager for visitor tracking. The site is mobile responsive and has a moderate performance profile but lacks modern CMS or advanced frameworks. Security posture is basic with no visible security headers or HTTPS enforcement details in the provided content. Privacy compliance is minimal with no privacy or cookie policies present, and no GDPR compliance indicators. Contact information is limited but present in meta tags. Overall, the site is functional and professional but requires improvements in security, privacy, and technology modernization to enhance trust and compliance.

HUMBUG is a cultural venue based in Basel, Switzerland, focusing on queer, feminist, and alternative cultural events. The website provides a comprehensive program of past and current events, showcasing a vibrant community engagement. Technically, the site uses standard web technologies including Google Analytics and Tag Manager for tracking, but lacks advanced security headers and privacy policies. The absence of WHOIS data limits domain trust assessment, though the content and event listings indicate a legitimate operation. Security posture is moderate with room for improvement in privacy compliance and security best practices.

K

Kunstbulletin

kunstbulletin.ch

52

Kunstbulletin is a leading Swiss art magazine providing comprehensive coverage of contemporary art through print and digital channels. The website supports multiple languages and offers subscription services, event agendas, public art mapping, and video archives. Technically, it is built on Drupal 10 with modern frontend libraries and integrates marketing and analytics tools such as Google Analytics and Mailchimp. The security posture is solid with HTTPS and secure forms, but lacks visible security policies and cookie consent mechanisms, which impacts privacy compliance. Overall, the site is professional, trustworthy, and well-positioned in the Swiss art media market.

S

Stiftung Liste Basel

liste.ch

57

Liste Art Fair Basel is a Swiss-based non-profit foundation organizing a well-established contemporary art fair event in Basel. The website serves as an information portal for visitors, artists, partners, and press, providing event details, application information, and contact channels. The business is positioned as a key cultural event with long-term partnerships, notably with E. Gutzwiller & Cie, Banquiers. Technically, the site is built on Magnolia CMS, uses modern web standards, and integrates Google Analytics and Tag Manager for visitor tracking. The site is mobile-optimized and provides a cookie consent mechanism, indicating a basic level of privacy compliance. Security posture is good with HTTPS enforced, but lacks advanced security headers and dedicated security policy disclosures. Overall, the website is professional, trustworthy, and serves its audience effectively.

Ricola is a well-established global brand specializing in natural herbal drops made from a unique blend of 13 Swiss Alpine herbs. The website presents a professional and comprehensive digital presence, showcasing their product range including herbal drops, drink cubes, and instant teas. The brand targets a general audience interested in natural wellness products and maintains a consistent and trusted market position in the retail sector. Technically, the website leverages modern frameworks such as Astro, integrates Google Tag Manager and Usercentrics for consent management, and employs HTTPS for secure communications. Privacy compliance is well addressed with clear privacy and cookie policies and active consent mechanisms. Security posture is generally strong with no visible vulnerabilities or exposed sensitive data, though the absence of explicit security headers and incident response information suggests room for improvement. The WHOIS data is unavailable or protected, which slightly reduces trust but does not detract significantly from the overall legitimacy given the professional website and brand recognition. Strategic recommendations include enhancing security headers, publishing a security.txt file, and providing explicit incident response contacts to further strengthen trust and compliance.

A

Austrian Exhibition Experts GmbH

immobilien-messe.at

52

The website 'immobilien-messe.at' represents the Wiener Immobilien Messe (WIM), Austria's largest real estate exhibition focused on residential properties. Organized by Austrian Exhibition Experts GmbH, the site offers detailed information about the event scheduled for March 14-15, 2026, including exhibitor details, visitor guidance, and related services such as financing and legal advice. The platform targets prospective property buyers, investors, and industry professionals, positioning itself as a key marketplace in the Austrian real estate sector. Technically, the website is built on WordPress using modern plugins like Yoast SEO, Complianz GDPR Cookie Consent, and Google Tag Manager for analytics and compliance. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. Security measures include HTTPS enforcement, email obfuscation, and use of security-related plugins, although some security headers could be improved. From a security and compliance perspective, the site is GDPR compliant with a clear cookie consent mechanism and privacy policy. Contact information is transparent and professionally presented. No critical vulnerabilities or suspicious indicators were found. However, the absence of a security policy or incident response contact is noted. Overall, the website is professional, trustworthy, and well-aligned with its business purpose. Strategic recommendations include enhancing security headers, publishing a security policy, and considering a vulnerability disclosure mechanism to further strengthen trust and security posture.

F

Feel Good Festival

feelgood-festival.at

49

Feel Good Festival is a well-established wellness and fitness event based in Vienna, Austria, focusing on yoga, fitness, workshops, and community engagement. Since its inception in 2017, it has attracted over 10,000 participants, positioning itself as a notable regional event in the wellness sector. The website reflects a professional and consistent brand image, targeting fitness and wellness enthusiasts with a clear business model centered on event organization and ticket sales. Technically, the site is built on WordPress with Elementor and integrates modern marketing and analytics tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The presence of a cookie consent mechanism demonstrates attention to privacy compliance, although explicit privacy and terms of service pages were not detected in the main content. Security posture is good with HTTPS enforced and no obvious vulnerabilities, but could be improved by adding standard security headers. WHOIS data is unavailable, likely due to privacy protection, which is common for event businesses but reduces transparency. Overall, the site is trustworthy and professionally maintained with moderate technical sophistication.

C

Cosmo Kitchen | fine dining wien | Bauernmarkt 1, Vienna, Austria

cosmokitchen.at

61

Cosmo Kitchen is a small business website hosted on the Wix platform, targeting a German-speaking Austrian audience. The site appears professionally designed with consistent branding and a focus on presenting their business online. The technical infrastructure leverages Wix's hosting and content management system, integrating Google Analytics and Google Tag Manager for visitor tracking and marketing purposes. The website is mobile-optimized and uses HTTPS to secure communications. However, the absence of explicit privacy policies, terms of service, and contact information limits transparency and user trust. Security measures include standard HTTPS and cookie consent mechanisms, but lack advanced security headers and vulnerability disclosure information. Overall, the site is functional and moderately secure but would benefit from enhanced privacy and security disclosures to improve compliance and trustworthiness.

F

Falkensteiner Group

falkensteiner.com

69

Falkensteiner Group operates a well-established hospitality business with a portfolio of hotels, residences, and premium camping sites across several European countries, primarily Austria and Italy. Their website is professionally designed, multilingual, and integrates a sophisticated booking engine powered by TravelClick, indicating a mature digital infrastructure. The company targets a broad audience including families, wellness seekers, and adults-only travelers, offering diverse accommodation and leisure services. Despite the professional front-end and marketing sophistication, the absence of WHOIS registration data raises concerns about domain legitimacy or data availability issues. The website employs multiple analytics and marketing tools, reflecting a strong digital marketing strategy. However, the lack of visible privacy policy and security incident response information suggests areas for compliance and security improvement.

D

Deutsche Bildung

deutsche-bildung.de

48

Deutsche Bildung AG operates a specialized education financing platform focused on providing study and living cost financing for students in Germany. The company offers flexible payout options, an integrated academy for educational success, income-dependent repayment models, and support for financing foreign studies. Positioned as a reputable and established player since 2020, Deutsche Bildung targets students seeking alternative financing solutions beyond traditional loans or scholarships. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its audience. Technically, the site is built on WordPress with modern plugins and frameworks, hosted on Cloudpit infrastructure, and incorporates advanced SEO and consent management tools. Security posture is strong with HTTPS, security headers, and secure login portals, though explicit security policies and vulnerability disclosures are not publicly detailed. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR and cookie regulations.

Osiander operates a professional e-commerce platform specializing in books, eBooks, audiobooks, and related retail products targeting general consumers in Germany. The website demonstrates a mature digital infrastructure with modern JavaScript frameworks, consent management via Usercentrics, and integration of Google Analytics and Tag Manager for marketing and analytics. Security posture is strong with HTTPS enforcement, Cloudflare DNS and security services, and secure login forms featuring CSRF tokens and CAPTCHA. However, the absence of explicit privacy policy and terms of service pages, as well as lack of visible contact information, limits full compliance and user trust. The domain WHOIS data is minimal and uses Cloudflare name servers, which is common but reduces transparency. Overall, the site is well-designed, accessible, and safe for general audiences.

P

Produktgenuss GmbH

letscast.fm

69

LetsCast.fm is a German-based podcast hosting service operated by Produktgenuss GmbH, founded in 2020. The company provides a comprehensive platform for podcasters of all levels to host, publish, and monetize their podcasts across major platforms such as Spotify, Apple Podcasts, and YouTube. The service emphasizes ease of use, unlimited podcast and episode uploads, and extensive analytics. The website is professionally designed, mobile-optimized, and offers clear pricing tiers with transparent features. Social media and community engagement are active, enhancing brand trust and user support. Technically, LetsCast.fm employs modern web technologies including JavaScript frameworks, Tailwind CSS, and Podlove Web Player integration. Hosting appears to be on AWS infrastructure, with DNS managed via AWS nameservers. Analytics are implemented using Google Tag Manager and Plausible Analytics, balancing tracking needs with privacy considerations. The site enforces HTTPS and includes CSRF protection tokens, indicating good security hygiene. Security posture is solid with HTTPS, clientTransferProhibited domain status, and cookie consent mechanisms. However, DNSSEC is not enabled, and explicit security policies or incident response contacts are not publicly documented. No critical vulnerabilities or suspicious activities were detected. Privacy compliance is strong with comprehensive privacy and cookie policies, and GDPR adherence is evident. Overall, LetsCast.fm presents a trustworthy, professional, and user-friendly podcast hosting platform with a strong market position in the German-speaking podcast ecosystem. Strategic improvements in DNS security and published security policies could further enhance trust and compliance.

S

Saarländische Nahverkehrs-Service GmbH

saarvv.de

61

The website saarvv.de represents the Saarländische Nahverkehrs-Service GmbH, the regional public transportation authority for Saarland, Germany. It provides information and services related to public transport, including ticketing and schedules, targeting commuters and travelers within the Saarland region. The site is professionally designed with consistent branding and clear navigation, optimized for mobile devices. The business model focuses on public transport coordination and customer service within the transportation sector.

P

ProductReview.com.au Pty. Ltd.

productreview.com.au

65

ProductReview.com.au Pty. Ltd. operates a leading Australian consumer review platform that provides user-generated opinions on a wide range of products, services, and businesses. The website targets Australian consumers seeking trustworthy reviews to inform purchasing decisions. It maintains a strong market position as a comprehensive and popular review site with a large volume of user content and active community engagement. The business model relies on advertising and sponsored content, supported by partnerships with various brands and service providers. Technically, the website is built on a modern React framework with extensive use of third-party services including Google Analytics, DoubleClick, and various ad networks. The site demonstrates high digital maturity with excellent mobile optimization, fast performance, and good SEO practices. Privacy compliance is robust, featuring a comprehensive consent management platform aligned with GDPR requirements. From a security perspective, the site enforces HTTPS, implements multiple security headers, and avoids exposing sensitive data. While no explicit security policies or incident response contacts are published, the overall security posture is strong. The integration of numerous advertising and tracking services is transparent and managed via user consent. Overall, ProductReview.com.au presents a low-risk profile with a professional and trustworthy online presence. Strategic recommendations include publishing explicit security and incident response policies, enhancing transparency around vulnerability disclosures, and maintaining ongoing audits of third-party integrations to mitigate emerging risks.

V

VentraIP Australia

ventraip.com.au

72

VentraIP Australia is a leading Australian digital service provider specializing in domain registration, web hosting, email hosting, SSL certificates, and website building solutions. Positioned as Australia's largest independent accredited registrar, VentraIP serves a broad audience ranging from individuals and small businesses to professional web developers and enterprises. The company emphasizes local Australian ownership and support, which is a key differentiator in the market. Their website reflects a professional and trustworthy brand with strong customer satisfaction evidenced by high ratings on multiple review platforms. Technically, the website leverages modern web technologies including Next.js and React, supported by a suite of analytics and marketing tools such as Google Analytics, TikTok Pixel, Facebook Pixel, and ContentSquare. The site is well-optimized for performance, mobile responsiveness, and SEO, providing a seamless user experience. Hosting details are not explicitly disclosed but are likely managed by their parent company Nexigen Digital. From a security perspective, VentraIP employs HTTPS with valid SSL certificates and demonstrates good security practices such as domain status protections in WHOIS data. However, there is room for improvement in explicitly publishing security policies, enabling DNSSEC, and implementing cookie consent mechanisms to enhance privacy compliance. No critical vulnerabilities or exposed sensitive data were detected. Overall, VentraIP presents a low-risk profile with a strong market position, credible business operations, and a secure, well-maintained digital presence. Strategic recommendations include enhancing privacy compliance with cookie consent, publishing security and incident response policies, and enabling DNSSEC to further strengthen domain security.

B

Bundesministerium für Bildung, Wissenschaft und Forschung

erwachsenenbildung.at

62

erwachsenenbildung.at is an official Austrian government portal dedicated to adult education, providing comprehensive information, services, and learning opportunities for trainers, coaches, and educational managers. The site is managed by the Bundesministerium für Bildung, Wissenschaft und Forschung and supported by partners such as CONEDU and the Bundesinstitut für Erwachsenenbildung. It serves as a national and international hub for networking and professional development in the adult education sector. Technically, the website employs modern web standards, including HTML5, CSS3, JavaScript, and integrates Cookiebot for consent management and Google Tag Manager for analytics. The site is well-optimized for mobile devices and accessibility, with good SEO practices in place. Security-wise, the site enforces HTTPS, uses appropriate security headers, and provides a robust cookie consent mechanism, although explicit security and incident response policies are not publicly available. Overall, the domain registration aligns perfectly with the official government entity, reinforcing the site's legitimacy and trustworthiness.

The website partytimer.at is a professionally maintained event listing platform focused on party and nightlife events in Vienna, Austria. It is operated by Falter Verlagsgesellschaft m.b.H., a reputable media company. The platform offers curated event information sourced from Falter:WOCHE, targeting residents and visitors interested in local nightlife. The business model appears to be media and advertising-driven, leveraging partnerships and event promotions. The website demonstrates a good level of digital maturity, employing modern technologies such as Laravel Livewire, Alpine.js, and integrating consent management via Didomi. It uses Google Tag Manager and ad networks like Adition for analytics and advertising purposes. Security-wise, the site enforces HTTPS, implements cookie consent mechanisms, and includes standard security headers, reflecting a solid security posture with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent banner, aligning with GDPR requirements. However, the site lacks explicit terms of service, security policy, and incident response contact information, which are recommended for enhanced trust and compliance. Overall, the website is trustworthy, professionally designed, and serves its niche audience effectively.

F

Falter Verlagsgesellschaft m.b.H.

wuchtelwette.at

62

The website wuchtelwette.falter.at is operated by Falter Verlagsgesellschaft m.b.H., a media company based in Austria. It hosts an online football betting contest related to the UEFA European Football Championship 2024, targeting general football fans and contest participants. The site is well-branded, with sponsor logos and a clear contest focus, serving as a promotional and engagement platform within the media sector. The business model revolves around media engagement, sponsorship, and audience interaction through contests. Technically, the website uses a moderate technology stack including Bootstrap 3, jQuery, Google Tag Manager, and third-party ad and consent management services such as Adition and Didomi. The site is hosted on falter.at infrastructure and implements GDPR-compliant cookie consent mechanisms. Performance and mobile optimization are basic but functional, with room for improvement in accessibility and SEO. From a security perspective, the site enforces HTTPS and uses consent management for privacy compliance. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, and no formal security policy or incident response contacts are published. No vulnerabilities or exposed sensitive data were found in the HTML content. The domain registration data is consistent with the company and business purpose, indicating legitimacy. Overall, the website presents a trustworthy and professional media contest platform with good privacy compliance and moderate technical maturity. Strategic improvements in security headers, mobile accessibility, and incident response transparency would enhance its security posture and user trust.

H

Homedoc

homedoc.at

53

Homedoc is a healthcare service platform based in Austria that facilitates medical home visits and office visits primarily in Vienna and its surroundings. The company targets private and elective doctors as well as patients with limited mobility or time constraints, offering an easy-to-use online booking system for home doctor visits. Homedoc manages appointment scheduling, route optimization, patient communication, and payment processing, positioning itself as a leading provider in the home healthcare coordination market in the region. The website is professionally designed, mobile-optimized, and provides comprehensive legal and privacy information, reflecting a mature digital presence. Technically, the website is built on WordPress using the Enfold theme and integrates modern tools such as Yoast SEO, Google Tag Manager, Hotjar, and CookieYes for consent management. The site demonstrates good SEO and accessibility practices, although some security headers could be improved. HTTPS is enforced, and no critical vulnerabilities are evident from the content analysis. Privacy compliance is strong, with detailed cookie consent and GDPR-aligned policies. Security posture is solid with HTTPS and consent mechanisms, but the absence of explicit security policies and incident response contacts suggests room for improvement. No suspicious or malicious content was detected, and the domain registration data aligns well with the business claims, supporting legitimacy. Overall, Homedoc presents a trustworthy and professional online presence suitable for its healthcare service model. Strategic recommendations include enhancing security headers, publishing a formal security policy, conducting regular security audits, and improving accessibility features to further strengthen compliance and user trust.

G

GoAesthetic by Dr. Herndlhofer

goaesthetic.at

62

GoAesthetic by Dr. Herndlhofer is a specialized medical aesthetic practice based in Vienna, Austria, offering a range of cosmetic treatments including Botox, hyaluronic acid injections, HIFU, and laser hair removal. The business targets adults seeking natural and harmonious anti-aging solutions, positioning itself as a trusted local provider with a strong reputation evidenced by numerous positive customer reviews. The website is professionally designed, multilingual, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, the site runs on WordPress with modern plugins and frameworks, ensuring good performance and accessibility. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms in place, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the domain registration data aligns well with the business claims, supporting high legitimacy and trustworthiness.

I

Initiative Therme Plus

thermeplus.at

48

Initiative Therme Plus is a promotional platform representing 38 popular thermal spas across Austria, focusing on wellness, spa, family activities, and relaxation. The website serves as an information hub and marketing channel, offering a loyalty program to encourage repeat visits. Technically, the site is built on WordPress with modern libraries and frameworks, including jQuery and Usercentrics for consent management. The security posture is solid with HTTPS and privacy compliance, though some security headers could be improved. Overall, the site is professional, user-friendly, and trustworthy, targeting a broad audience interested in Austrian thermal spa experiences.

A

ApoScout

aposcout.at

45

ApoScout is a healthcare-focused digital service providing Austrian consumers with real-time information on medication availability across local pharmacies. The platform offers a mobile app that enables users to search for pharmacies, check medication stock, view night and emergency service schedules, and reserve medications at participating pharmacies. The website is professionally designed, mobile-optimized, and compliant with GDPR regulations, targeting primarily Austrian users seeking efficient pharmacy services. Technically, the website is built on WordPress using the Enfold theme and integrates several plugins including Contact Form 7 for user communication and Complianz for cookie and privacy management. The site employs modern web technologies such as jQuery and Google Tag Manager for analytics and marketing. Performance is moderate with good mobile responsiveness and basic accessibility features. From a security perspective, the site enforces HTTPS and uses security plugins to mitigate spam and attacks. However, explicit security headers are not detected, and there is no dedicated security policy or incident response information publicly available. The privacy and cookie policies are comprehensive and clearly presented, reflecting good compliance with EU data protection laws. Overall, ApoScout presents a trustworthy and professional digital presence with a clear business focus in healthcare. The site is secure and compliant, though improvements in security headers and incident response transparency could enhance its security posture further.

L

Loxone Lighthouse

loxone-lighthouse.com

52

Loxone Lighthouse is a specialized participation company focused on corporate succession, offering responsible and sustainable business handover services primarily targeting entrepreneurs and business owners in Germany. The website presents a professional and consistent brand image, emphasizing trust and long-term development of acquired companies. Technically, the site is built on WordPress with modern plugins and tracking tools, providing a good user experience with mobile optimization and GDPR-compliant cookie management. Security posture is adequate with HTTPS and consent mechanisms, though lacking some advanced security headers and explicit incident response information. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy, warranting further verification. Overall, the site is functional, trustworthy, and business-oriented but could improve transparency and security practices.

H

Höllinger

hoellinger-juice.at

57

Höllinger Juice is a small Austrian retail company specializing in organic syrups, fruit juices, energy drinks, and related beverages. Established in 1998, the company emphasizes natural ingredients and regional sourcing, targeting health-conscious consumers seeking high-quality organic products. The website serves as an e-commerce platform showcasing their product range and brand philosophy. Technically, the site is built on WordPress with WooCommerce, enhanced by modern JavaScript libraries and marketing integrations such as Google Analytics and Facebook Pixel. The site demonstrates good SEO and mobile optimization but lacks explicit privacy and terms of service pages, which are critical for compliance and user trust. Security posture is adequate with HTTPS and privacy plugins but could be improved by adding security headers and incident response information. Overall, the site is professional and trustworthy but would benefit from enhanced privacy disclosures and security hardening.

A

Austrian Exhibition Experts GmbH

ferien-messe.at

51

Ferien-Messe Wien is Austria's largest trade fair dedicated to holidays, travel, and leisure, organized by Austrian Exhibition Experts GmbH. The event is held at Messe Wien and includes a mobility exhibition called Vienna Drive. The website presents a professional and well-structured digital presence, targeting travelers, exhibitors, and visitors interested in travel and mobility. It offers online ticketing, exhibitor information, and visitor guidance, supported by active social media channels and partner collaborations. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Complianz GDPR for SEO and privacy compliance. It uses Google Tag Manager for analytics and GTranslate for multilingual support. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and security headers. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and obfuscated emails to reduce spam. However, explicit security headers are not detected, and no dedicated security or incident response policies are published. The domain registration is consistent with the business entity, enhancing trustworthiness. Overall, Ferien-Messe Wien's website is a credible, secure, and privacy-compliant platform supporting a major event in Austria's hospitality and transportation sectors. Strategic improvements in security headers and incident response transparency would further strengthen its posture.

L

Loxone International

loxone.com

72

Loxone International operates as a provider of comprehensive home and building automation solutions, targeting both residential and commercial markets. The company offers a range of products and services designed to enable intuitive control and automation for smart homes, offices, hospitality, and specialized applications. Their market position is that of an established international player with a medium-sized footprint and a focus on technology innovation in automation. Technically, the website is built on WordPress using the Divi theme, enhanced with modern JavaScript libraries such as jQuery and Lottie Player, and integrates Google Tag Manager and Zoho SalesIQ for analytics and customer engagement. The site demonstrates good mobile optimization, SEO practices, and moderate performance, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. It employs a GDPR-compliant cookie consent mechanism and maintains a comprehensive privacy policy. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with no indications of security or content safety concerns. Strategic recommendations include enhancing transparency around security policies and incident response, adding vulnerability disclosure information, and improving accessibility features to further strengthen the security posture and user trust.

A

Austrian Exhibition Experts GmbH

wohnen-interieur.at

50

The website www.wohnen-interieur.at represents Austrian Exhibition Experts GmbH, organizing Austria's largest exhibition for home living, furniture, garden, and design, scheduled for March 2026 in Vienna. It targets both exhibitors and visitors interested in interior design, renovation, and sustainable living. The site is professionally designed with comprehensive content, clear navigation, and strong branding consistency. It integrates modern web technologies including WordPress CMS, Yoast SEO, and GDPR-compliant cookie management, reflecting a mature digital infrastructure. Security posture is solid with HTTPS, obfuscated emails, and security plugins, though some security headers could be improved. Privacy compliance is well addressed with explicit policies and consent mechanisms. Overall, the site is trustworthy, user-friendly, and well-positioned in its market segment.

G

GAIL's

gailsbread.co.uk

69

GAIL's is an established bakery business based in the United Kingdom, specializing in fresh handmade bread, pastries, sandwiches, and specialty coffee with delivery services in London. The website is built on the Shopify platform, leveraging modern e-commerce technologies and integrations such as Google Tag Manager, Bing Clarity, and Freshchat for customer engagement and analytics. The domain is long-standing, created in 2001, and shows consistent registration details with no privacy protection, indicating transparency and legitimacy. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. However, explicit terms of service and security policies are not evident in the provided content. The website demonstrates good design quality, mobile optimization, and SEO practices, providing a professional user experience.

D

German TV in Thailand - streaming, download, Apps

deutsches-fernsehen-weltweit.de

49

The website deutsches-fernsehen-weltweit.de offers a subscription-based streaming and cloud DVR service providing access to 44 German TV channels worldwide, targeting German expatriates and German-speaking audiences, especially in Thailand. The business model centers on providing easy access to German TV content without hardware requirements, leveraging cloud recording technology. The site is well-branded and consistent, with clear service descriptions and pricing, positioning itself as a niche media provider in the German expatriate market. Technically, the site uses modern web technologies including Google Analytics, Google Tag Manager, and Google Fonts, hosted on AWS infrastructure. The site is mobile-optimized and SEO-friendly, with moderate performance and basic accessibility features. However, no CMS or advanced frameworks are detected. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks important security headers and does not publish privacy, cookie, or security policies, which reduces its privacy compliance posture. No incident response or vulnerability disclosure information is provided, limiting transparency. The WHOIS data aligns with the website content and hosting, indicating a legitimate domain. Overall, the website is functional and professional but would benefit from enhanced privacy and security disclosures to improve trust and compliance. There are no indications of malicious or adult content, making it safe for general audiences.

M

Marketing Mavens

marketingmavens.com

52

Marketing Mavens is a small, established digital marketing agency founded in 2009, specializing in delivering comprehensive sales and marketing strategies including branding, audience targeting, offer crafting, traffic generation, conversion optimization, and automation. The company positions itself as an experienced boutique agency with over 12 years of experience and more than 1,000 client projects, targeting businesses seeking predictable and profitable marketing results. Technically, the website is built on WordPress using the GeneratePress theme, integrating modern marketing and analytics tools such as Google Analytics, Facebook Pixel, LinkedIn Insight Tag, and Inspectlet. The site is mobile optimized and demonstrates good SEO and accessibility basics. Security posture is adequate with HTTPS enforced and use of reCAPTCHA on forms, but lacks advanced security headers and published security policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism despite tracking scripts. Overall, the domain registration data is consistent and transparent, supporting the legitimacy of the business.

F

FeedBear

feedbear.com

69

FeedBear is a SaaS platform specializing in customer feedback management, enabling app developers and product teams to collect, organize, and act on user feedback efficiently. The company positions itself as an affordable, customizable solution with a strong focus on user engagement through feature request boards, public roadmaps, and changelog announcements. The website demonstrates a professional and consistent brand presence, supported by multiple customer testimonials and reputable third-party review badges, indicating a solid market position within the technology sector. Technically, the website is built on Webflow with integrations including Google Tag Manager, LoopBear analytics, and HelpScout Beacon for customer support. The site is well-optimized for mobile devices, loads quickly, and employs modern web technologies. However, some security headers are not explicitly present, and there is no visible cookie consent mechanism, which could be improved to enhance privacy compliance. Security posture is generally good with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data due to privacy protection or domain registration issues slightly reduces transparency but is common for SaaS businesses. Overall, the site maintains a high level of professionalism and trustworthiness, though improvements in privacy and security disclosures are recommended. Strategically, FeedBear should focus on enhancing privacy compliance by implementing cookie consent and publishing detailed security and incident response policies. These steps will strengthen user trust and align with regulatory requirements. The technical infrastructure is robust but could benefit from additional security headers to mitigate potential risks.

Z

Zisterzienserabtei Wettingen-Mehrerau

mehrerau.at

66

Kloster Mehrerau is a religious institution operating as the Zisterzienserabtei Wettingen-Mehrerau located in Bregenz, Austria. The website serves as a comprehensive portal for visitors and community members, offering information about monastic life, guest accommodations, events, and spiritual services. The institution positions itself as a vibrant community hub with a focus on faith, hospitality, and cultural engagement. The site features detailed event calendars, news updates, and opportunities for donations, reflecting an active and engaged organization. Technically, the website employs modern web technologies including Google Analytics, Facebook Pixel, Google Tag Manager, and CookieHub for privacy compliance. The site is served over HTTPS with good security practices such as IP anonymization in analytics and a cookie consent mechanism. The design is professional, mobile-optimized, and accessible, providing a positive user experience. However, some security headers are not explicitly detected, and no dedicated security policy or incident response information is published. From a security perspective, the site demonstrates a solid baseline with HTTPS and privacy compliance but could improve by publishing explicit security policies and vulnerability disclosure information. No vulnerabilities or suspicious content were detected. The WHOIS data is unavailable due to quota limits, but the website content and contact details strongly support legitimacy and trustworthiness. Overall, Kloster Mehrerau presents a trustworthy, well-maintained online presence suitable for its non-profit religious mission. Strategic recommendations include enhancing security header implementation, publishing security and incident response policies, and continuing to maintain privacy compliance and transparency.

M

MediaMath

mediamath.com

62

MediaMath is a well-established digital advertising technology company specializing in providing an omnichannel demand-side platform (DSP) for brands and agencies. Recently acquired by Infillion, MediaMath leverages cutting-edge programmatic buying technology to deliver responsive and accountable advertising solutions across multiple channels including CTV and identity management. The company positions itself as a future-proofed DSP with a strong focus on transparency, data-driven targeting, and partnership ecosystems. The website reflects a professional and consistent brand image with comprehensive content aimed at marketing professionals and advertisers. Technically, the website is built on WordPress with modern plugins such as WPBakery Page Builder and Smart Slider 3, integrating marketing and analytics tools like Marketo Munchkin and Google Tag Manager. The site is mobile optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be enhanced. Performance is moderate, with a clean and structured layout supporting user engagement. From a security perspective, the site uses HTTPS and implements privacy and cookie policies compliant with GDPR. However, explicit security policies, incident response details, and vulnerability disclosure mechanisms are not publicly available, which could be improved to enhance trust and transparency. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data is noted but likely due to privacy or registry restrictions rather than malicious intent. Overall, MediaMath presents a low-risk profile with strong business credibility and a mature digital presence. Strategic recommendations include publishing detailed security policies, adding vulnerability disclosure information, and improving accessibility and contact transparency to further strengthen security posture and user trust.

S

Solute GmbH

billiger.de

10

billiger.de is a well-established German price comparison platform operated by Solute GmbH, offering consumers a comprehensive service to find the best prices and deals across various product categories. The website is professionally designed with a focus on usability, mobile optimization, and accessibility, leveraging modern JavaScript technologies and Cloudflare infrastructure for performance and security. While the site employs standard security best practices such as HTTPS and secure login forms, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. No contact information for security incidents or data protection officers is provided, indicating room for improvement in transparency and compliance. Overall, the website is trustworthy and safe for general audiences, with a strong market position in the German e-commerce sector.

Akademie der Gesundheit Berlin/Brandenburg e.V. operates a professional educational website focused on health sector vocational training and education. The website positions itself as a regional leader in health education within Berlin and Brandenburg, targeting students and professionals seeking career development in healthcare. The business model is that of a non-profit educational institution offering structured courses and training programs. The site content is well-organized, professionally designed, and consistent with the brand identity. Technically, the website is built on WordPress 6.7.4 using the Avada theme and integrates several modern plugins including Yoast SEO for search optimization, Real Cookie Banner Pro for GDPR-compliant cookie management, and Google Tag Manager for analytics and marketing tags. The site demonstrates good mobile optimization and moderate performance. Hosting is managed via domaincontrol.com name servers, indicating a standard commercial hosting environment. From a security perspective, the site enforces HTTPS and employs a comprehensive cookie consent mechanism with granular user controls. While explicit security headers like Content-Security-Policy or X-Frame-Options are not clearly detected, no critical vulnerabilities or exposed sensitive data were found. The privacy policy is comprehensive and GDPR compliant, and contact information is clearly provided. However, the site lacks publicly available incident response or security policies, which could be improved. Overall, the website presents a low-risk profile with good privacy compliance and a solid technical foundation. Strategic recommendations include enhancing security headers, publishing incident response policies, and continuous monitoring of third-party scripts to maintain security posture.

B

BGO

findalternative.co.uk

43

Findalternative.co.uk is a website promoting a real estate development project named '105 Victoria Street' in London, managed by the developer BGO. The site focuses on showcasing the workspace and commercial property offerings with a target completion date in Q3 2026. The business model centers on real estate development and leasing, targeting commercial tenants and businesses seeking workspace in a prime London location. The website is professionally designed with modern web technologies, including SVG graphics and Google Analytics integration, indicating a moderate level of digital maturity. However, the site lacks critical compliance elements such as privacy and cookie policies, and no forms or extensive contact details are provided, limiting user engagement and transparency. Security posture is moderate with HTTPS usage but no visible security headers or explicit security policies. The domain registration is consistent with the business timeline and registered through a reputable registrar, supporting legitimacy. Overall, the site presents a professional front for a niche real estate project but requires improvements in privacy compliance, security best practices, and richer contact information to enhance trust and regulatory adherence.

M

Meine Kirchenzeitung

meinekirchenzeitung.at

65

MeineKirchenzeitung.at is a German-language online media portal aggregating regional and local news from various Austrian church newspapers. It serves as a centralized hub linking to multiple diocesan publications, offering news, reports, opinions, event listings, and ePaper access primarily targeting German-speaking audiences interested in church and regional topics in Austria. The website demonstrates a consistent and professional brand presence with good content quality and clear navigation. Technically, it employs modern web technologies including Google Analytics, Google Tag Manager, Swiper.js, and Foundation CSS framework, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy and cookie banner aligned with GDPR requirements. However, WHOIS data is unavailable due to quota limits, limiting domain registration trust verification. Overall, the site is trustworthy, safe, and professionally managed, with room for technical and security enhancements.

M

Manual Moderno

manualmoderno.com

63

Manual Moderno is a well-established Mexican publishing company specializing in educational and professional books, particularly in health sciences, psychology, and nutrition. The company operates a Magento-based eCommerce platform offering physical books, e-books, exclusive distributions, and evaluation instruments. Their market position is strong within Mexico and Latin America, targeting educational institutions, professionals, and the general public interested in health-related literature. The website demonstrates consistent branding and good content quality, supported by a long-standing domain registration since 2001. Technically, the website leverages Magento with modern JavaScript libraries such as RequireJS and jQuery, and integrates Google Analytics and Facebook Pixel for marketing and analytics. The site is mobile-optimized and has good SEO practices. However, some security enhancements are recommended, including enabling DNSSEC, adding security headers, and implementing a cookie consent mechanism to improve privacy compliance. From a security perspective, the site uses HTTPS and has domain transfer protections, but lacks published security policies or incident response contacts. No WAF or blocking mechanisms are detected, and the content is safe for general audiences. Overall, the website presents a moderate to good security posture but could improve privacy compliance and technical security hardening. The domain WHOIS data aligns well with the business profile, showing legitimacy and consistency. The company maintains active social media channels and provides clear contact information, enhancing trustworthiness.

T

Testzentrale

testzentrale.de

61

Testzentrale is a specialized platform offering psychological test procedures, books, journals, and educational services primarily targeting psychologists, researchers, and healthcare professionals. It operates under the Hogrefe Verlagsgruppe umbrella, a reputable publisher in the psychology domain, which strengthens its market position and trustworthiness. The website provides a comprehensive catalog of products and services including eTesting platforms, seminars, webinars, and consulting, catering to a professional audience in Germany and internationally. Technically, the site is built on TYPO3 CMS with modern styling frameworks like Tailwind CSS and integrates Google Tag Manager for analytics. Privacy and cookie policies are well implemented with consent management, reflecting good GDPR compliance. Security posture is strong with HTTPS enforcement, secure login forms, and standard security headers, although explicit incident response and vulnerability disclosure mechanisms are not publicly detailed. Overall, the site demonstrates a mature digital presence with good usability, security, and compliance practices.

E

ETHENEA Independent Investors S.A.

ethenea.com

66

ETHENEA Independent Investors S.A. operates as an independent asset management company specializing in multi-asset investment funds, targeting investors with various risk profiles. The company offers a range of funds including Ethna Funds, HESPER FUND, and other third-party funds, positioning itself as a strong and independent partner in the finance sector primarily serving the German market. The website content is professionally presented in German, with clear navigation and relevant investment information. Technically, the site uses modern JavaScript libraries, Umbraco CMS, and integrates cookie consent mechanisms compliant with GDPR. Security posture is moderate with HTTPS implied but lacks visible security headers and explicit incident response contacts. WHOIS data is unavailable, which raises some legitimacy concerns, but the website branding and content quality suggest a professional operation. Overall, the site is well-structured, privacy compliant, and trustworthy from a user perspective, though domain registration transparency is lacking.

S

SAUREN Financial Group

sauren.de

48

SAUREN Financial Group is a well-established German investment firm specializing in qualitative fund analysis and asset management with over 30 years of experience. The company focuses on investing in fund managers rather than funds themselves, offering a range of Dachfonds including multi-asset, absolute return, and responsible investment funds. Their market position is strong within Germany, supported by multiple industry awards and a clear business model targeting both private investors and distribution partners in approved jurisdictions. The website reflects a professional and trustworthy brand with comprehensive legal and compliance disclosures.

O

Osservatorio sui Diritti Umani ETS

osservatoriodiritti.it

66

Osservatorio Diritti is an independent Italian media outlet specializing in investigative journalism and analysis on human rights and defenders of rights both in Italy and globally. Established in 2017, it operates as a non-profit entity focused on social justice, advocacy, and raising awareness through various content formats including articles, podcasts, and campaigns. The website demonstrates a solid market position as a trusted source for human rights information in Italy, supported by consistent branding and a strong social media presence. Technically, the site is built on WordPress with modern plugins for SEO and GDPR compliance, showing good digital maturity and mobile optimization. Security posture is sound with HTTPS enforced and consent management implemented, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with privacy regulations, making it a reliable platform for its audience.