Security Directory

L

Liechtenstein Olympic Committee

olympic.li

66

The Liechtenstein Olympic Committee (LOC) operates as the national Olympic authority for Liechtenstein, focusing on athlete support, sports infrastructure development, and promotion of Olympic values. The website serves as an information hub for athletes, sports organizations, volunteers, and the general public interested in sports activities within Liechtenstein. It offers detailed navigation to various services, educational programs, and Olympic mission information, reflecting a well-structured non-profit organization with a clear mission. Technically, the website is built on the Concrete5 CMS platform, utilizing modern web technologies such as jQuery, Font Awesome, and integrates a GDPR-compliant consent management platform (Usercentrics). The site demonstrates good mobile optimization and moderate performance, with appropriate use of security headers and HTTPS encryption ensuring a secure browsing experience. From a security perspective, the site follows best practices including HTTPS enforcement and consent management for cookies. However, it lacks explicit privacy policy and terms of service pages, as well as incident response contact details, which are important for full compliance and transparency. No vulnerabilities or suspicious activities were detected in the content or scripts. Overall, the website presents a trustworthy and professional digital presence for the LOC, with recommendations to enhance privacy disclosures and incident response information to further strengthen compliance and user trust.

L

Liechtensteiner Hotel- und Gastronomieverband

lhgv.li

64

The Liechtensteiner Hotel- und Gastronomieverband (LHGV) is a small but important hospitality industry association in Liechtenstein, providing services such as hotel and bike hotel classification, professional training courses, gift card sales, and industry news. The website is well-structured, professionally designed, and targets hospitality businesses and professionals in Liechtenstein. Technically, the site uses Concrete5 CMS, jQuery, Font Awesome, and Matomo analytics, indicating moderate digital maturity. The site is mobile optimized and SEO friendly but lacks some advanced accessibility features. Security posture is adequate with HTTPS enforced and email obfuscation, but lacks security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professional, with a strong alignment between WHOIS data and business claims.

F

Fürstliche Gerichte

gerichte.li

64

The website www.gerichte.li serves as the official online presence of the Fürstliches Landgericht (Princely Court) in Vaduz, Liechtenstein. It provides comprehensive information about the judicial system, including details on various courts, personnel, services, and public court hearings. The site targets the general public, legal professionals, and parties involved in legal proceedings within Liechtenstein. As an official government portal, it holds a strong market position as the authoritative source for judicial information in the country. Technically, the website is built on the Concrete5 CMS platform and leverages modern frontend technologies such as jQuery, Font Awesome, and the Foundation framework. The site is mobile-optimized with good navigation clarity and moderate performance. However, some accessibility features could be improved. SEO is basic but functional, with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks important security headers and does not provide a cookie consent mechanism, which are areas for improvement. No visible vulnerabilities or malicious content were detected. The WHOIS data aligns well with the official nature of the site, confirming its legitimacy. Overall, the website is professional, trustworthy, and serves its purpose effectively. Strategic improvements in privacy compliance, security headers, and accessibility would enhance its security posture and user trust.

A

A&A KG

ox-linz.at

56

OX Steaks & Grill Linz is a well-established hospitality business located in Pasching, Austria, offering a premium dining experience focused on steaks, grill dishes, sushi, brunch, and breakfast buffet. The website reflects a medium-sized restaurant with a strong local market position and a clear business model centered on dine-in services, online reservations, and gift voucher sales. The company is legally registered as A&A KG with transparent contact and legal information provided. Technically, the website is built on TYPO3 CMS with modern web technologies including jQuery, Google Analytics, and Google Tag Manager, ensuring a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some HTTP security headers could be improved. Privacy compliance is comprehensive with detailed GDPR-aligned policies and cookie management. Overall, the website is professional, trustworthy, and well-maintained, supporting the business's credibility and customer engagement.

D

DATENKNOTEN

datenknoten.at

47

DATENKNOTEN is a small Austrian IT service provider focused on delivering creative IT concepts and remote support services primarily to customers in the Gasteinertal region. The website presents a professional and consistent brand image with clear navigation and German language content. The technical infrastructure relies on common web technologies such as Bootstrap, jQuery, and Google Analytics, indicating a moderate level of digital maturity. Security measures include cookie consent with opt-out for analytics and IP anonymization, but lack explicit security headers and documented security policies. Overall, the website is accessible, functional, and compliant with basic privacy regulations, though it could benefit from enhanced security practices and more transparent contact information.

G

Golfclub Gastein

golfclub-gastein.com

48

Golfclub Gastein is a well-established golf club located in Salzburg, Austria, with a history dating back to 2000. The club offers an 18-hole golf course, golf school, partner hotel bookings, tournaments, and related hospitality services. The website reflects a professional and consistent brand image targeting golf enthusiasts and tourists in the region. Technically, the site uses a modern tech stack including Bootstrap, jQuery, and Google Analytics, with good mobile optimization and SEO practices. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and incident response information. The domain registration is consistent and trustworthy, supporting the legitimacy of the business. Overall, the website is functional, secure, and compliant with GDPR, providing a positive user experience.

A

ActionAid Bangladesh

actionaidbd.org

51

ActionAid Bangladesh is a well-established non-profit organization focused on advancing human rights and combating poverty within Bangladesh. The website reflects a mature NGO with a broad range of social programs including women’s rights, climate justice, humanitarian aid, youth engagement, and Rohingya refugee response. Their digital presence is supported by a professional website with clear navigation and comprehensive content targeting donors, activists, and partners. The organization benefits from a consistent brand identity and transparent governance information, reinforcing its credibility in the non-profit sector. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Font Awesome, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site is mobile responsive and optimized for SEO, though performance is moderate. Hosting and domain registration are consistent with a legitimate NGO, though DNSSEC is not enabled, and some security headers are missing. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Security posture is adequate with HTTPS enforced and domain transfer protection, but improvements are recommended in DNS security and HTTP headers. No incident response or vulnerability disclosure policies are visible, which could be enhanced to improve trust and compliance. Overall, the website is professional and trustworthy but could benefit from stronger privacy and security practices to align with international standards.

T

Tennis-Verband Berlin-Brandenburg e.V.

tvbb.de

58

The Tennis-Verband Berlin-Brandenburg e.V. website serves as the official online presence of the regional tennis association for Berlin and Brandenburg, Germany. It provides information and services related to tennis events, membership, and regional tennis activities. The site is built on Joomla CMS and incorporates modern web technologies such as Bootstrap and jQuery, with analytics powered by Matomo and GDPR-compliant cookie consent managed by Usercentrics. The website is accessible without any WAF or security blocking mechanisms, indicating good availability and user access. However, the absence of explicit privacy policy and terms of service pages suggests room for improvement in compliance documentation. Security posture is moderate with HTTPS enforced and CSRF tokens present, but lacks explicit security headers and incident response information. Overall, the site is professional and functional, targeting tennis players and clubs in the region.

F

Ferienhof Gassner

ferienhof-gassner.at

37

Ferienhof Gassner is a small family-run organic farm located in Mondsee, Austria, offering modern holiday apartments with scenic lake views and recreational amenities such as a heated pool and playground. The website targets families, singles, and seniors seeking a nature-oriented vacation in the Salzkammergut region. Technically, the site is built on WordPress with popular plugins like WPBakery and Slider Revolution, and it supports multiple languages via Google Translate. The site is moderately optimized for performance and mobile devices, with good SEO practices. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and formal security policies. Contact information is clearly presented, enhancing business credibility. Overall, the website is professional, trustworthy, and suitable for its hospitality business purpose.

H

HBF Textiles

hbftextiles.com

50

HBF Textiles is a professional textile manufacturing company specializing in woven upholstery, wrapped panels, wallcoverings, coated fabrics, leather, and drapery products. The company targets designers, furniture manufacturers, and commercial and residential clients, positioning itself as a medium-sized player in the manufacturing sector. The website is built on a modern Drupal 10 CMS with e-commerce capabilities, integrating advanced technologies such as Google Tag Manager and Adobe DTM for analytics and marketing. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature approach to data protection. Security posture is strong with HTTPS enforcement and security headers, though the absence of a published security policy and incident response information suggests room for improvement. The lack of WHOIS registration data is a notable concern, potentially indicating privacy protection or domain registration issues, which should be further investigated. Overall, the website is professional, well-structured, and trustworthy, with a good balance of business and technical maturity.

L

laSuite fitnessclub AG

lasuite-fit.ch

61

laSuite fitnessclub AG operates a fitness club located in Luzern, Switzerland, offering 24/7 access to members along with professional personal training, physiotherapy services through a partnership with MoveSphere, and a retail shop for health and fitness products. The company positions itself as a local premium fitness provider with a focus on holistic training including strength, endurance, coordination, and nutrition support. The website is built on TYPO3 CMS and integrates modern web technologies such as HTML5 video and Google Tag Manager for analytics. The site is well-designed, mobile-optimized, and provides clear navigation and contact information, enhancing user experience and trust. Security posture is good with HTTPS enforced, though improvements are recommended in security headers and cookie consent mechanisms to enhance compliance and protection. WHOIS data confirms the legitimacy of the domain registration consistent with the business location and identity. Overall, the website reflects a professional and credible fitness business with room for technical and compliance enhancements.

G

Gebärdenwelt.TV

gebaerdenwelt.tv

48

Gebärdenwelt.TV is an Austrian online news portal specializing in content presented in Austrian Sign Language (ÖGS), serving primarily the deaf and hard-of-hearing community in Austria. The website offers news, community stories, educational content, and event coverage, positioning itself as a niche media outlet with a focus on accessibility and inclusion. Founded around 2019, it maintains a professional and consistent brand presence with a clear mission to provide accessible news content. Technically, the site is built on WordPress with Elementor and uses modern plugins and caching mechanisms to deliver a moderate performance experience optimized for mobile and accessibility. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers are missing and no vulnerability disclosure or security policy pages are present. The absence of WHOIS data reduces domain registration transparency, which impacts trustworthiness, but the website content and structure support legitimacy. Contact information is limited to a contact form without direct emails or phone numbers. Overall, the site is a valuable resource for its target audience but could improve transparency and security practices.

R

RaiseNow

raisenow.com

74

RaiseNow is a professional fundraising and payment platform targeting nonprofits, clubs, and changemakers globally. The company offers a SaaS model with tools for donation collection, payment processing, community engagement, CRM integration, and campaign management. The website is well-designed, mobile-optimized, and uses modern technologies such as HubSpot CMS and Google Analytics. Privacy and cookie compliance are well addressed with visible policies and consent mechanisms. However, the absence of WHOIS data and lack of explicit security and incident response policies slightly reduce trustworthiness. Overall, the platform appears mature and reliable for its target audience.

The Magyar Labdarúgó Szövetség (MLSZ) website serves as the official digital presence of the Hungarian Football Federation, providing comprehensive information on national teams, match results, news, and organizational resources. The site targets football fans, players, coaches, and officials within Hungary, positioning itself as the authoritative source for Hungarian football. The business model revolves around governance, event organization, fan engagement, and education within the sport. Technically, the website employs modern web technologies including Bootstrap for responsive design, jQuery, Font Awesome, and integrates social media SDKs from Facebook and Twitter. The site is mobile-optimized with good SEO practices and moderate performance. Privacy and cookie policies are well implemented with consent mechanisms, reflecting GDPR compliance. From a security perspective, the site enforces HTTPS, uses standard security headers, and avoids exposing sensitive data. However, explicit security policies and incident response contacts are not found, indicating room for improvement in transparency and readiness. No vulnerabilities or suspicious content were detected. Overall, the website is professional, trustworthy, and well-maintained, with a strong focus on content quality and user experience. Strategic recommendations include enhancing security transparency, adding vulnerability disclosure mechanisms, and improving accessibility features to further strengthen compliance and user trust.

F

FPT Software

fpt-software.com

79

FPT Software is a well-established global technology solutions provider headquartered in Vietnam, specializing in digital transformation and IT consulting services. The company offers a broad portfolio of services including AI, IoT, cloud computing, smart factories, and RPA, targeting enterprise clients worldwide. Their market position is strong, supported by a long domain history and a consistent brand presence across multiple localized domains. Technically, the website employs modern frameworks and analytics tools, indicating a mature digital infrastructure. However, some gaps exist in privacy compliance and security headers implementation. The security posture is generally good with HTTPS and domain transfer protections, but enabling DNSSEC and publishing security policies would enhance trust. Overall, the website is professional and trustworthy, with room for improvement in privacy and security transparency.

D

Dirk de Wit Mode

dirkdewitmode.nl

54

Dirk de Wit Mode is a prominent fashion retailer based in Bovenkarspel, Netherlands, offering a wide range of men's and women's apparel both online and in a large physical store. The company positions itself as the largest fashion store in North Holland, featuring over 200 top brands and a substantial retail space. Their business model integrates e-commerce with brick-and-mortar retail, complemented by additional services such as personal shopping appointments, tailoring, and an on-site restaurant. Technically, the website is built on WordPress with WooCommerce, leveraging modern web technologies and marketing tools like Google Tag Manager and HubSpot. The site demonstrates good digital maturity with responsive design, SEO optimization, and moderate performance. Security-wise, the site enforces HTTPS, employs security headers, and integrates reCAPTCHA for forms, reflecting a solid security posture. However, there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a reliable platform for customers.

Y

Yet

yet.nl

67

Yet is a Dutch online mental health platform offering quick access to one-on-one sessions with qualified psychologists, coaches, and counselors using the Single Session Therapy method. The platform targets employees and organizations seeking confidential, effective mental health support without waiting lists. With over 400 employer clients and a parent company Colbe, Yet holds a strong market position in the Netherlands. Technically, the website is built on modern frameworks like Next.js and React, with good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS, cookie consent, and reputable analytics, though explicit security policies and incident response contacts are not publicly disclosed. The domain is long-established and registered with a reputable registrar, supporting legitimacy. Overall, Yet presents a professional, trustworthy, and user-friendly digital presence in the healthcare sector.

F

FPT Software

fptsoftware.com

79

FPT Software is a well-established global technology solutions provider headquartered in Vietnam, specializing in AI-powered digital transformation and IT consulting services. The company offers a broad portfolio of services including smart factories, cloud, RPA, AI, IoT, and product engineering, targeting enterprises seeking next-level digital transformation. The website reflects a mature digital presence with excellent design, mobile optimization, and clear navigation, supporting its enterprise market positioning. Technically, the site leverages modern frameworks such as Bootstrap 5 and integrates multiple analytics and marketing tools including Google Analytics, Hotjar, Microsoft Clarity, and LinkedIn Insight Tag. Hosting and DNS services are managed via Cloudflare, ensuring good performance and security. However, the absence of DNSSEC and security headers indicates room for improvement in technical security hardening. From a security perspective, the website uses HTTPS and has domain transfer protections in place, but lacks visible privacy and cookie policies, consent mechanisms, and incident response contacts. No vulnerability disclosure or security.txt files were found, which are recommended for enterprise-grade security transparency. The WHOIS data confirms domain legitimacy with consistent registration details and appropriate domain age. Overall, the website demonstrates strong business credibility and technical maturity but requires enhancements in privacy compliance and security best practices to align with modern enterprise security standards.

T

True Light, LLC

truelightdesigns.com

10

True Light, LLC operates the website truelightdesigns.com, providing customized web development services primarily focused on e-commerce platforms such as Shopify, Turbify, BigCommerce, Magento, WooCommerce, and others. Established since 2007, the company positions itself as a specialized service provider for businesses seeking tailored web solutions and API integrations. The website content is professional and well-structured, targeting business clients in need of web development expertise. Technically, the website employs modern web technologies including Google Tag Manager and Font Awesome icons, with hosting infrastructure leveraging Cloudflare DNS services. The site is mobile-optimized and demonstrates good SEO practices, although no CMS is explicitly detected. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protections in place. However, it lacks DNSSEC and important security headers, which are recommended to enhance security posture. Privacy compliance is partial; while a privacy policy and terms of service are present, there is no cookie consent mechanism despite the use of tracking scripts. Contact information is limited to a contact form without explicit emails or phone numbers, which may impact user trust. Overall, the website is trustworthy and professionally maintained with a solid business foundation. Strategic improvements in security headers, privacy compliance, and contact transparency would further strengthen its security posture and user confidence.

O

OS Data Solutions

osdatasolutions.de

61

OS Data Solutions is a German-based premium data provider specializing in delivering data-driven solutions and audience discovery services to businesses primarily within Germany. The company positions itself as a premium provider in the technology sector, focusing on data services that support business intelligence and marketing efforts. The website is built on WordPress using the Elementor page builder, indicating a modern and flexible technical infrastructure. The site is accessible, mobile-optimized, and presents professional branding consistent with its business focus. However, the absence of explicit privacy and cookie policies, as well as contact information, suggests areas for improvement in compliance and user trust. Security posture is adequate with HTTPS enabled but lacks visible security headers and formal incident response details.

Infosys Limited is a globally recognized leader in next-generation digital services and consulting, offering a broad portfolio of IT services including digital transformation, consulting, data analytics, and digital marketing. The company targets enterprise clients seeking to navigate complex digital landscapes and enhance operational efficiency. The website reflects Infosys's strong market position and commitment to innovation and client success. Technically, the website is built on a robust infrastructure leveraging Adobe Experience Manager as its CMS, integrated with modern technologies such as Adobe Launch for tag management, OneTrust for privacy compliance, and Vidyard for video content. The site is optimized for performance, mobile responsiveness, and accessibility, demonstrating a mature digital presence. From a security perspective, Infosys employs strong HTTPS encryption, comprehensive security headers, and cookie consent mechanisms aligned with GDPR requirements. The presence of certifications like ISO 27001 and SOC 2 further underscores their commitment to security and compliance. No significant vulnerabilities or suspicious indicators were detected. Overall, the website presents a professional, trustworthy, and secure digital front for Infosys, supporting their enterprise business model and global operations. Strategic recommendations include continuous monitoring of third-party dependencies, enhancing incident response visibility, and maintaining rigorous security practices to uphold their strong security posture.

W

WATERROWER | NOHRD GmbH

nohrd.com

69

WATERROWER | NOHRD GmbH operates a professional e-commerce website specializing in premium fitness equipment designed with sustainability and aesthetics in mind. The company targets fitness enthusiasts and gym/home users seeking high-quality, beautifully crafted products. The website is well-structured, mobile-optimized, and uses modern technologies such as Magento, RequireJS, and Google Tag Manager to deliver a smooth user experience. Privacy compliance is robust, with clear cookie consent mechanisms and a comprehensive privacy policy. Security posture is generally strong with HTTPS enforced and bot protection via FriendlyCaptcha, though the absence of certain security headers and lack of public WHOIS data slightly reduce trust. Overall, the site reflects a mature digital presence suitable for a medium-sized retail business.

T

The Motley Fool Canada

fool.ca

11

The Motley Fool Canada is a prominent financial media and advisory service focused on providing stock market news, investing advice, and retirement planning guidance to Canadian investors. The website demonstrates a strong market position as a regional branch of the well-known Motley Fool brand, offering comprehensive content tailored to its target audience. Technically, the site leverages modern web technologies including JavaScript monitoring via New Relic, Google Adsense for advertising, and NitroPack for performance optimization, all hosted on a WordPress CMS platform. The site is well-optimized for mobile devices and SEO, with good accessibility features and fast performance. Security-wise, the website enforces HTTPS, employs standard security headers, and shows no signs of vulnerabilities or exposed sensitive data. Privacy and cookie policies are present and indicate GDPR compliance, though explicit security policies and incident response contacts are not publicly available. Overall, the domain WHOIS data is privacy protected, which is common for media companies, and no suspicious patterns were detected. The website is trustworthy, professional, and safe for general audiences.

T

Tennisplaza

tennisplaza.be

49

Tennisplaza is a well-established Belgian media website focused on delivering tennis news, live streaming information, and expert analysis to tennis enthusiasts primarily in Belgium. Founded in 2011, it serves as a comprehensive source for tennis fans with regularly updated content and active social media engagement. The website leverages WordPress CMS with Elementor and Jet plugins, supported by Google Analytics, Microsoft Clarity, and other marketing tools to optimize user experience and track engagement. While the site is technically sound with HTTPS and modern web technologies, it lacks visible privacy and cookie policies, which impacts its privacy compliance score. Security posture is adequate with SSL but could be improved by adding security headers and incident response information. Overall, Tennisplaza presents a professional and trustworthy platform for tennis news but should enhance its privacy and security disclosures to align with best practices.

The Consiglio Conferenze Episcopali Europee (CCEE) website serves as the official online presence for the Council of European Episcopal Conferences, a non-profit religious organization coordinating Catholic episcopal conferences across Europe. The site provides comprehensive information about the organization's structure, activities, media resources, and upcoming events, targeting church officials and interested public audiences. The website is professionally designed with clear navigation and multilingual support, reflecting a moderate to high level of digital maturity. Technically, the website is built on WordPress CMS, utilizing popular plugins such as Events Manager and WPML for event scheduling and multilingual content respectively. The site employs modern web technologies including jQuery and the Foundation CSS framework, ensuring good mobile responsiveness and user experience. Performance is moderate, with external dependencies on Google Fonts and CDN resources. From a security perspective, the site enforces HTTPS and uses nonce tokens in AJAX calls, but lacks visible advanced security headers and explicit privacy or cookie policies. The WHOIS data is unavailable due to privacy protection, which is justified for this type of organization. No critical vulnerabilities or suspicious indicators were detected, but improvements in security headers and privacy compliance are recommended. Overall, the website presents a trustworthy and professional image consistent with its organizational role. Strategic recommendations include enhancing privacy and cookie policy visibility, implementing comprehensive security headers, and conducting regular security audits to maintain compliance and trust.

T

Tischtennis in Wien neu erleben | Wiener Tischtennis Plattform

tischtennishobbywien.at

63

The website 'Tischtennis Hobby Wien' serves as a local community platform dedicated to table tennis enthusiasts in Vienna, Austria. It provides information and engagement opportunities for hobbyists, positioning itself as a niche sports community. The business model focuses on community building and information dissemination rather than commercial transactions. Technically, the site is built on WordPress using the Elementor page builder and enhanced with the Rank Math PRO SEO plugin, indicating a moderate level of digital maturity. The site is mobile-optimized and performs moderately well, though some technical improvements could enhance user experience further. Security-wise, the site uses HTTPS but lacks important security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. No incident response or security contact information is available, which could be a concern for handling security issues. Overall, the site is safe for general audiences and maintains a moderate trust level. Strategic improvements in privacy compliance and security practices are recommended to enhance credibility and user trust.

L

Logo-Solution GmbH

4bowl.de

53

4bowl is a German-based SaaS provider specializing in online reservation and booking systems tailored for bowling centers and leisure facilities. The company, operated by Logo-Solution GmbH, offers a comprehensive platform that enables professional management of bookings and staff, accessible via multiple devices including PC, Mac, tablets, and smartphones. With over 200 centers relying on their system, 4bowl holds a strong market position in the hospitality and leisure sector in Germany and surrounding countries. The website is well-branded, professionally designed, and provides clear information about its services and customer base. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and integrates multiple marketing and analytics tools including Google Analytics, Facebook Pixel, and Tawk.to live chat. Hosting and DNS services are managed via Cloudflare, ensuring robust infrastructure and performance. The site is mobile-optimized and SEO-friendly, though accessibility features could be improved. From a security perspective, the site enforces HTTPS with strong SSL configuration and uses Cloudflare for DNS and CDN services. It implements a cookie consent banner and maintains GDPR compliance with a privacy policy. However, it lacks visible security headers, an incident response policy, and a vulnerability disclosure mechanism, which are areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. Overall, 4bowl presents a trustworthy and professional online presence with a solid technical foundation and good privacy practices. Strategic enhancements in security policies and compliance documentation would further strengthen its security posture and business credibility.

O

OX-Fischapark GmbH

ox-wrneustadt.at

56

OX-Fischapark GmbH operates a hospitality business in Wiener Neustadt, Austria, specializing in steaks, pizza, and burgers served in a high-quality ambiance. The website reflects a well-established regional restaurant brand with multiple sister locations, offering dine-in services, online reservations, and gift vouchers. The business targets local residents and visitors seeking quality dining experiences. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and integrates Google Analytics and Facebook Pixel for marketing and analytics. The site is mobile-optimized and provides clear navigation and content relevant to its audience. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms compliant with GDPR. However, it lacks explicit security policies and incident response contacts. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting the business's credibility and customer engagement.

O

OX Tulln GmbH & Co KG

ox-tulln.at

56

OX Tulln GmbH & Co KG operates a hospitality business focused on steak and grill dining complemented by a music bar offering cocktails and snacks. The company positions itself as a premium dining location in Tulln, Austria, targeting a broad audience including partygoers and food enthusiasts. Key services include high-quality food offerings, an online reservation system, a loyalty app, and gift vouchers. The website is built on TYPO3 CMS with modern frontend technologies and integrates marketing and analytics tools such as Google Tag Manager and Facebook Pixel. Privacy and cookie policies are comprehensive and GDPR compliant, with clear consent mechanisms. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers and policies could be improved. Overall, the website is professional, trustworthy, and well-structured, supporting the business's market position effectively.

O

OX Wels Steaks&Grill GmbH & Co KG

ox-wels.at

56

OX Wels Steaks&Grill GmbH & Co KG operates a hospitality business specializing in high-quality steaks, fish dishes, Mediterranean appetizers, and a broad selection of wines in Wels, Austria. The website serves as a digital front for the restaurant, offering online reservations, gift voucher sales, and promoting a loyalty app. The business targets local and regional customers seeking premium dining experiences. The company maintains a network of partner hospitality sites, indicating a strong local market presence. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries such as jQuery, Fancybox, and carousel plugins. It integrates Google Analytics and Google Tag Manager with privacy-conscious configurations like IP anonymization. The site is mobile-optimized and provides a good user experience with clear navigation and downloadable menus. Cookie consent mechanisms and a comprehensive privacy policy demonstrate GDPR compliance. From a security perspective, the site uses HTTPS with no visible critical vulnerabilities or exposed sensitive data. However, it lacks explicit security policies and incident response contacts. The use of third-party scripts is standard but should be regularly audited. Overall, the security posture is solid but could be enhanced with additional headers and formal policies. The overall risk is low with no signs of malicious activity or suspicious registrations. Strategic recommendations include formalizing security policies, enhancing incident response readiness, and continuous monitoring of third-party components to maintain compliance and security standards.

The website www.eeagrants.sk serves as the official Slovak government portal for the EEA and Norway Grants, providing comprehensive information on grant programs, calls for proposals, bilateral cooperation, and project results. It targets government agencies, NGOs, and the general public interested in funding opportunities and grant management. The site is operated by the Ministry of Investment, Regional Development and Informatization of the Slovak Republic, ensuring authoritative and trustworthy content. Technically, the site employs a modern JavaScript stack including jQuery, Bootstrap, and various UI libraries, with good mobile optimization and accessibility features. Security-wise, the site enforces HTTPS, uses cookie consent management, and avoids exposing sensitive data, though it lacks some advanced security headers and a formal security policy. Overall, the site is professional, trustworthy, and compliant with GDPR, making it a reliable resource for its audience.

The website www.unesco.sk represents the Slovak national commission for UNESCO, a specialized agency of the United Nations focused on education, science, culture, and communication. The site provides informative content about UNESCO's mission, history, and activities in Slovakia, targeting a general audience interested in cultural heritage and educational initiatives. The organization is well-established with a clear global mandate and recognized legitimacy. Technically, the website employs standard and modern web technologies including jQuery, Bootstrap, Font Awesome, and Google Maps API, hosted likely behind Cloudflare. The site is mobile responsive with moderate performance and basic SEO and accessibility features. However, it lacks advanced security headers and formal privacy or cookie policies, which are important for compliance and user trust. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. Analytics are limited to Cloudflare Insights, indicating minimal user tracking. No forms or contact details are provided, limiting data collection and interaction. The WHOIS data aligns well with the website's claims, confirming legitimacy and consistent registration. Overall, the site is professionally presented and trustworthy but would benefit from enhanced privacy compliance, security headers, and clearer contact information to improve user confidence and regulatory adherence.

C

CONCORD

concordeurope.org

60

CONCORD is a well-established European confederation of NGOs focused on sustainable development and international cooperation. The organization acts as a key interlocutor with EU institutions, advocating for social justice, gender equality, and sustainable policies. Their website reflects a mature digital presence with rich content, resources, and active engagement with their audience and partners. Technically, the site is built on WordPress with a modern theme and plugins, hosted by OVH sas, and uses HTTPS with Google Tag Manager for analytics. Security posture is generally good but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is limited as no explicit privacy or cookie policies were detected in the provided content. Overall, the site is professional, trustworthy, and serves its non-profit advocacy mission effectively.

N

Nubassa Gewürzwerk GmbH

nubassa.de

51

Nubassa Gewürzwerk GmbH is a well-established German B2B company specializing in the supply of spices, marinades, and food technology solutions with a history spanning over 90 years. The company targets food manufacturers and retailers, offering high-quality products and customer service to facilitate consistent production standards. Their website reflects a professional and consistent brand image, supporting their market position as a reliable partner in the food manufacturing sector. Technically, the website is built on TYPO3 CMS, leveraging modern frontend technologies such as Bootstrap and Font Awesome, and is hosted on German infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms, but lacks some explicit security headers and published security policies. No critical vulnerabilities or suspicious content were detected, and the domain WHOIS data aligns with the company's German business identity, supporting legitimacy. Overall, the website demonstrates a solid digital presence with room for improvement in privacy and security transparency.

K

KW automotive GmbH

kwautomotive.de

55

KW automotive GmbH is a well-established German company specializing in chassis optimization for racing and street vehicles, with over 30 years of industry experience. The company operates an informative and professionally designed website built on WordPress with Elementor, targeting automotive professionals and enthusiasts. The site supports multilingual content and integrates modern web technologies and analytics tools. Security posture is solid with HTTPS and reCAPTCHA, though explicit security policies and headers could be improved. Privacy compliance is basic, with cookie consent implemented but no visible privacy or terms of service pages. Overall, the website reflects a credible and mature business with room for enhanced transparency and security documentation.

A

Association du Scoutisme Jurassien (ASJ)

asj.ch

59

The Association du Scoutisme Jurassien (ASJ) operates as a regional non-profit scouting organization in Switzerland, serving the Jura and Jura-bernois regions. It coordinates local scout groups, organizes training and events, and promotes youth development through scouting principles. The website reflects a well-structured association with clear organizational teams and committees, supported by regional government funding. Technically, the site is built on Joomla CMS with modern libraries like Bootstrap and jQuery, offering a good user experience and mobile optimization. Security is adequate with HTTPS and CSRF protections, though it lacks some security headers and formal privacy/cookie policies, which are compliance gaps. No tracking or analytics scripts were detected, indicating minimal user tracking. Overall, the site is safe, professional, and trustworthy, but could improve privacy compliance and security hardening.

S

Scout24Media

scout24media.at

62

Scout24Media operates as a specialized advertising marketer for ImmoScout24 in Austria, focusing on real estate-related advertising campaigns. The company leverages exclusive access to first-party data to deliver targeted advertising solutions including data-driven, geo-targeting, and integration with newsletters. The website reflects a professional and consistent brand presence, supported by structured data and social media channels, positioning Scout24Media as a key player in the Austrian real estate advertising market. Technically, the site is built on WordPress with Elementor and Yoast SEO, ensuring modern CMS capabilities and SEO optimization. Security measures include HTTPS and Google reCAPTCHA on contact forms, though security headers are not explicitly detected. The absence of WHOIS data due to quota limits restricts domain registration insights, but the overall digital footprint supports legitimacy. Privacy and cookie policies are present and GDPR compliant, enhancing trust and compliance posture.

A

A&G KG

ox-parndorf.at

40

OX Steaks & Grill Parndorf is a small hospitality business located in Austria, specializing in premium steak and grill dining experiences. The company offers a variety of high-quality food options including steaks, burgers, fish dishes, and Mediterranean appetizers. They maintain a strong market position as a top dining location in Parndorf, supported by a loyalty app and online gift voucher sales. The website is built on TYPO3 CMS and integrates modern front-end libraries and tracking tools such as Google Analytics and Facebook Pixel, with privacy-conscious configurations like IP anonymization and cookie consent mechanisms. Security posture is solid with HTTPS enforced, though there is room for improvement in security headers and incident response disclosures. Overall, the website is professional, user-friendly, and compliant with GDPR requirements, reflecting a trustworthy and credible business presence.

L

lafree.ch - Site évangélique d'information

lafree.ch

9

lafree.ch is a French-language evangelical information website primarily serving the French-speaking evangelical Christian community in Switzerland. It functions as a portal and redirection page to a network of affiliated sites offering news, cultural content, biblical education, church resources, and youth commission information. The website is built on Joomla CMS using modern front-end frameworks and integrates Google Analytics for visitor tracking. The design is professional and consistent with the organization's branding, targeting a niche religious audience. However, the site lacks visible privacy and cookie policies, contact emails, and security headers, which are areas for improvement. The domain uses privacy protection for WHOIS data, which is justified given the non-profit religious nature of the organization.

E

ECOTRANS

destinet.eu

51

The website destinet.eu operates as a knowledge networking portal dedicated to sustainable and responsible tourism. It serves as a platform connecting various stakeholders including businesses, certification bodies, destination administrations, and NGOs. The portal offers resources such as courses, publications, a market place, and news updates, positioning itself as a key player in the sustainable tourism ecosystem. The business model is non-profit and focuses on collaboration and information dissemination to promote sustainability in tourism. Technically, the site uses a Naaya CMS platform with a tech stack including jQuery, Google Analytics, Google Tag Manager, and Slick Carousel. The site is mobile optimized and has good SEO practices, though some technical debt exists with the use of an older jQuery version. Security posture is moderate with HTTPS enabled and some security best practices observed, but lacks advanced headers like CSP and a cookie consent mechanism. WHOIS data indicates consistent and legitimate domain registration without privacy protection, aligning with the website's business purpose. Overall, the site is professional, trustworthy, and serves its niche audience effectively.

S

STTA Consulting – Africa Sustainable Tourism Space

sttakenya.org

48

The website represents an organization likely operating in a community or non-profit sector, as indicated by the domain and content structure. The site is built on WordPress using Elementor and several plugins to enhance functionality, including Instagram feeds and quiz/survey makers. The technical infrastructure is moderate, with basic mobile optimization and standard CMS usage. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC, which could be improved. The absence of privacy, cookie, and terms of service policies indicates a gap in compliance and user trust mechanisms. Overall, the site appears legitimate but underdeveloped in terms of content richness and security maturity.

W

Westfälischer Turnerbund e.V.

wtb.de

58

Westfälischer Turnerbund e.V. is a regional non-profit sports association based in Hamm, Germany, focused on gymnastics, sports education, and community sports events. The website serves as an information hub for members, athletes, and trainers, offering event details, educational programs, and membership services. It maintains a strong regional presence and partners with several related sports organizations and event platforms. Technically, the site is built on Joomla CMS with Bootstrap and jQuery, providing a responsive and well-structured user experience. Security posture is good with HTTPS and CSRF protections, though some security headers like CSP could be improved. Privacy compliance is strong, with a comprehensive privacy policy, cookie consent mechanism, and a named data protection officer. Overall, the site is professional, trustworthy, and well-maintained, with no signs of malicious or adult content.

B

BBS

bbs.com

63

BBS is a reputable manufacturer specializing in automotive wheels with a strong motorsport heritage. Their website reflects a professional e-commerce platform built on Magento, targeting quality-conscious automotive enthusiasts globally. The technical infrastructure leverages modern JavaScript frameworks and includes tracking and consent management tools, indicating a mature digital presence. Security posture is adequate with HTTPS and cookie consent but lacks visible security headers and explicit privacy policies, which are areas for improvement. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, warranting further verification. Overall, the website is functional, professional, and safe for general audiences.

R

Römisch-katholischer Pastoralraum Möhlinbach

moehlinbach.ch

51

The Römisch-katholischer Pastoralraum Möhlinbach is a regional non-profit Catholic church organization serving multiple parishes in the Möhlinbach area of Switzerland. The website provides comprehensive information about its pastoral services, community offerings, and contact details for various parish offices. The organization targets local Catholic community members and offers services such as sacraments, social support, and youth programs. Technically, the website is built on TYPO3 CMS with modern front-end libraries like Bootstrap and jQuery, providing a good user experience and mobile optimization. Security posture is solid with HTTPS enforced and no exposed sensitive data, though it lacks some security headers and explicit security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy, professional, and well-aligned with its mission, though it could improve in privacy and security transparency.

K

KS-ORIGINAL GMBH

ks-original.de

56

KS-ORIGINAL GMBH operates as a consortium of 21 medium-sized Kalksandstein (sand-lime brick) manufacturers in Germany, focusing on sustainable and durable architectural materials. The website serves as an information portal for products, services, and industry news, targeting architects, builders, and regional partners. The company maintains a professional online presence with a well-structured Drupal 10 CMS-based website, featuring modern design and mobile optimization. Technical infrastructure includes Bootstrap and Matomo analytics, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit privacy or cookie policies. No incident response or vulnerability disclosure information is publicly available, which could be improved to enhance trust and compliance. Overall, the site is trustworthy, professional, and aligned with its business sector, but could benefit from enhanced privacy and security transparency.

A

Apple Orchard Campsite & Tea Room

appleorchardcampsite.co.uk

47

Apple Orchard Campsite & Tea Room is a small, independent family-run hospitality business offering caravan and camping pitches, luxury wooden pods, and an on-site tea room located in the Forest of Dean, UK. The website is professionally designed using WordPress with modern plugins such as Yoast SEO and Slider Revolution, providing a good user experience and mobile optimization. The business maintains a strong local presence with active social media channels and customer testimonials, enhancing credibility. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though additional security headers and policies could improve resilience. Privacy compliance is well addressed with a comprehensive cookie and privacy policy. Overall, the website reflects a trustworthy and mature digital presence suitable for its business size and sector.

The Chambre Nationale des Services d’Ambulances (CNSA) operates as a professional association representing ambulance services in France, providing legal, HR, training, and advocacy support to its members. The website is well-structured, content-rich, and targets ambulance professionals and related stakeholders. Technically, the site is built on WordPress with common plugins and uses HTTPS, but lacks some advanced security headers and explicit privacy policies. The absence of WHOIS registration data is a notable concern, potentially indicating privacy protection or data unavailability, which slightly impacts trustworthiness. Overall, the site demonstrates a moderate to good digital maturity with room for security and compliance improvements.

S

Stadt. Land. Niederrhein

stadt-land-niederrhein.de

48

Stadt. Land. Niederrhein is a regional tourism and cultural information website focused on the Niederrhein area in Germany. It provides visitors with culinary offers, cultural events, and regional attractions, targeting a general audience interested in tourism and local culture. The website is multilingual, supporting German, English, and Dutch, enhancing accessibility for international visitors. The business model centers on promoting regional tourism and culture, positioning itself as a key information portal for the Niederrhein region. The site uses WordPress CMS with a modern tech stack including Bootstrap, jQuery, and various plugins for SEO, multilingual support, and social media integration. Hosting is provided by kasserver.com, a professional hosting provider.

D

DEBRECEN4U

debrecen4u.hu

53

Debrecen4U is an informational website dedicated to providing comprehensive details about living, working, education, and business opportunities in Debrecen, Hungary. It serves as a resource for expats, residents, and visitors interested in the city, highlighting its economic strengths and city government priorities. The website is positioned as a trusted portal for city-related information and services. Technically, the site is built on WordPress with modern plugins such as Elementor, WooCommerce, and Yoast SEO, indicating a mature digital infrastructure. The site is mobile-optimized and uses structured data for SEO enhancement. Security-wise, the website enforces HTTPS and uses standard security practices but lacks advanced security headers and visible security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from improved privacy and security disclosures.