Security Directory

S

SRO Motorsports Group

intercontinentalgtchallenge.com

57

Intercontinental GT Challenge is a globally recognized motorsports media and event platform focused on the GT3 racing series. It provides fans and stakeholders with live streaming, live timing, news, video highlights, and photo galleries related to international GT3 events. The website is professionally designed with consistent branding and targets motorsports enthusiasts worldwide. The business operates under the SRO Motorsports Group umbrella, a well-established entity in the motorsports sector. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and jQuery, hosted likely on AWS infrastructure. It features good mobile optimization, accessibility, and SEO practices. However, no explicit CMS or advanced frameworks were detected. Performance is moderate with room for optimization. From a security perspective, the site uses HTTPS with a valid SSL certificate and domain registration protections. However, DNSSEC is not enabled and security headers are not evident, which could be improved. Privacy compliance is strong with a clear privacy policy and cookie consent mechanism, indicating GDPR awareness. No incident response or security policy pages were found. Overall, the website presents a low-risk profile with high professionalism and trustworthiness. Strategic improvements in security headers, DNSSEC, and incident response transparency would further enhance its security posture and compliance.

G

Google

lparket.com

74

Google LLC is a leading global technology company specializing in internet-related services and products, including its flagship search engine, advertising platforms, cloud computing, and software solutions. As a subsidiary of Alphabet Inc., Google holds a dominant market position in search and online advertising, serving billions of users worldwide. The website reflects Google's brand consistency and professionalism, offering a fast, accessible, and mobile-optimized user experience. Technically, the site leverages advanced proprietary Google technologies and frameworks, hosted on Google Cloud infrastructure, ensuring high performance and reliability. Security is robust with HTTPS enforcement, comprehensive security headers, and best practices in place, resulting in a high security score. Privacy compliance indicators are moderate based on the provided HTML, with privacy and cookie policies likely hosted on dedicated pages. Overall, Google.com is a highly credible and trustworthy website with extensive business and technical maturity.

I

ITIA Ltd

itia.tennis

61

The International Tennis Integrity Agency (ITIA) operates as a key global authority safeguarding the integrity of professional tennis worldwide. Established in 2021, the organization focuses on anti-corruption and anti-doping programs, providing education, sanctions reporting, and direct communication channels for players, coaches, and officials. The ITIA maintains partnerships with major tennis bodies such as ATP, WTA, ITF, and the Grand Slam tournaments, positioning itself as a trusted non-profit entity in the sports governance sector. The website reflects this mission with clear, professional content targeted at the tennis community and stakeholders. Technically, the website is built on the Umbraco CMS platform, utilizing modern web technologies including HTML5, CSS3, JavaScript, Google Fonts, and Google Analytics for tracking. The site is mobile-optimized with a responsive design and includes accessibility considerations, though these could be enhanced further. Performance is moderate with efficient use of external resources and asynchronous script loading. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements standard security headers. A cookie consent mechanism is in place, demonstrating compliance with GDPR and privacy best practices. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks explicit security policy documentation and incident response contact details, which are recommended for enhanced transparency and readiness. Overall, the ITIA website presents a professional, trustworthy, and secure digital presence aligned with its mission. Strategic improvements in security policy disclosure, accessibility, and incident response communication would further strengthen its posture and stakeholder confidence.

Z

Zalando SE

zalando.ch

52

Zalando.ch is a leading Swiss e-commerce platform specializing in fashion, shoes, and accessories for women, men, and children. It operates as part of the larger Zalando SE group, a major European online fashion retailer. The website offers a broad assortment of products with a focus on user experience, fast and free shipping, and easy returns. The platform targets general consumers in the German-speaking market, providing a comprehensive and professional shopping experience.

S

Skrill Limited

skrill.com

67

Skrill Limited operates a globally recognized digital wallet and online payment platform, serving millions of customers since 2001. The company offers services including money transfers, online payments, cryptocurrency transactions, and prepaid Mastercard products. As a regulated entity under the Central Bank of Ireland and a subsidiary of Paysafe Payment Solutions Limited, Skrill maintains a strong market position in the financial services sector. The website reflects a mature digital infrastructure with a professional design, comprehensive content, and multi-language support, targeting individuals and businesses requiring secure and efficient payment solutions. Technically, the site leverages TYPO3 CMS, modern JavaScript libraries, and integrates marketing and analytics tools such as Google Tag Manager and Optimizely, indicating a well-maintained digital presence. Security posture is robust with HTTPS enforcement and no visible vulnerabilities, although some security headers could be enhanced. Privacy compliance is strong, with clear policies and cookie consent mechanisms in place. Overall, Skrill's website demonstrates high professionalism, trustworthiness, and operational maturity, supporting its business credibility and customer confidence.

Mastercard Deutschland is the German regional website for Mastercard, a global leader in payment technology and financial services. The website serves consumers and businesses in Germany, offering information about Mastercard's payment solutions and services. The site is hosted on Akamai's CDN infrastructure, indicating a robust technical setup suitable for enterprise-level operations. The website design and content are basic but consistent with corporate branding, targeting a general audience interested in financial services. Security posture appears minimal based on the provided content, with no explicit security headers or policies detected. Privacy and cookie policies are not evident in the analyzed HTML snippet, which may indicate incomplete compliance or that such policies are located elsewhere. Overall, the domain registration and hosting details align with Mastercard's brand legitimacy, and no suspicious indicators were found. The website is safe for general audiences with no adult or questionable content.

H

Häfft Verlag

haefft.de

59

Häfft Verlag operates a German-language website focused on educational publishing products such as student planners, homework notebooks, and motivational content. The site targets students and young audiences in Germany, positioning itself as a niche leader in school-related publishing and retail. The business model includes direct product sales and affiliate marketing, notably through Amazon links. The website is professionally designed with good navigation, mobile optimization, and consistent branding. Technically, it employs modern web technologies including Bootstrap and Slick Slider, and uses Revive Adserver for advertising. Security posture is adequate with HTTPS enforced and cookie consent implemented, though security headers and incident response information are lacking. No critical vulnerabilities or suspicious content were detected. Overall, the site is trustworthy and compliant with GDPR, but could improve transparency by adding contact and security policies.

W

Women's Tennis Association

wtatennis.com

72

The Women's Tennis Association (WTA) official website serves as a comprehensive digital platform delivering live scores, player rankings, tournament calendars, video highlights, and news related to women's professional tennis. It targets tennis fans, players, coaches, and media, positioning itself as the authoritative source for WTA content. The site demonstrates a high level of digital maturity with modern technologies such as Brightcove for video streaming, Google Analytics, Microsoft Clarity for user behavior analysis, and Amazon Ads for monetization. Cookie consent and privacy mechanisms are implemented, reflecting basic compliance with privacy regulations. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers should be verified. The absence of WHOIS data is a notable anomaly, potentially indicating privacy protection or registrar issues, but the website's professional content and branding strongly support its legitimacy. Overall, the site is well-designed, user-friendly, and trustworthy, with room for improvement in transparency of privacy policies and domain registration information.

B

BILLURCOM

billur.com

54

BILLURCOM is a technology service provider based in Uzbekistan specializing in hosting, VPS, dedicated servers, domain registration, and SSL certificates. The company targets businesses and individuals within Uzbekistan, offering a range of IT infrastructure services supported by local data centers. The website is professionally designed, mobile-optimized, and provides clear service descriptions and contact information, positioning BILLURCOM as a reputable player in the local hosting market. Technically, the site uses modern front-end libraries and custom backend solutions, likely including WHMCS for billing and support. Security posture is strong with HTTPS and input validation, though some security headers and policies are missing. The absence of WHOIS data for the domain is a notable concern, suggesting either a recent registration or privacy protection, which impacts trust. Overall, the site is functional and professional but would benefit from enhanced transparency and security disclosures.

Z

Zalando SE

zalando.at

47

Zalando SE operates a leading European online fashion retail platform, targeting consumers primarily in Austria and German-speaking countries. The website offers a broad assortment of shoes, clothing, accessories, and beauty products with a strong focus on user experience, free shipping, and returns. The brand is well-established with a significant market presence and a comprehensive e-commerce business model. Technically, the site leverages modern web technologies including React and RequireJS, with a strong emphasis on performance, mobile optimization, and accessibility. Security posture is robust with HTTPS enforcement, security headers, and consent management via Usercentrics. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates a mature digital infrastructure and trustworthy business operations.

S

SRO Motorsports Group

sro-motorsports.com

65

SRO Motorsports Group is a globally recognized leader in GT racing, organizing and managing a wide range of GT racing series including GT3, GT4, GT2, and touring car championships. The company operates a broad network of related motorsports events and subsidiaries, positioning itself as a key player in the international motorsports industry. Their website reflects a professional and modern digital presence with a focus on event promotion, news, and sustainability initiatives. Technically, the site uses modern web standards, including HTML5, CSS3, and JavaScript, with good mobile optimization and accessibility features. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although some security headers and explicit incident response contacts are missing. The absence of WHOIS data limits transparency but does not detract significantly from the site's legitimacy given the professional content and active event calendar. Overall, the site is well-maintained, trustworthy, and serves its target audience effectively.

The website www.msk-team.de is currently inaccessible beyond a Cloudflare security challenge page, which prevents access to any substantive business content or metadata. As such, no information about the company's operations, services, or market positioning can be determined. The technical infrastructure includes Cloudflare's Turnstile captcha for bot mitigation, indicating a focus on security at the perimeter level. However, the lack of accessible content limits the ability to assess digital maturity or technical sophistication beyond basic hosting and security measures. The security posture cannot be fully evaluated due to the absence of visible security headers or SSL details, but the presence of Cloudflare's WAF suggests some level of protection. Overall, the site is effectively blocked for analysis, resulting in a low trust and credibility score. Strategic recommendations include ensuring the site is accessible for legitimate users and providing clear business and compliance information to improve trust and transparency.

R

Race Ready

raceready.pt

59

Race Ready is a small Portuguese company specializing in the organization and management of historic racing events in the Iberian Peninsula, including Historic Endurance, CSS GROUP1, Troféu Mini, and Fórmula Ford Portugal. The company positions itself as a leader in this niche market, targeting classic car racing enthusiasts and participants. The website is professionally designed using the Wix platform, featuring multilingual support and structured data to enhance SEO and social media presence. However, it lacks explicit privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Technically, the site uses modern web technologies and is hosted on Wix, with moderate performance and good mobile optimization. Security measures include HTTPS enforcement and some script hardening, but security headers and incident response information are absent. Overall, the site is trustworthy but would benefit from enhanced privacy compliance and clearer contact information.

H

HoT Telekom und Service GmbH

hot.at

76

HoT Telekom und Service GmbH operates as a prepaid mobile telecommunications provider in Austria, offering affordable and flexible mobile and internet services without contractual obligations. The company is positioned as a leading low-cost provider, affiliated with the reputable HOFER retail brand, and has received awards for customer satisfaction and price-performance. The website is professionally designed, mobile-optimized, and provides comprehensive information about services, legal policies, and customer support. Technically, the site uses modern frameworks such as Nuxt.js and Vue.js, with strong security practices including HTTPS and Content-Security-Policy headers. Privacy compliance is well addressed with clear cookie consent mechanisms and GDPR-aligned policies. No critical security vulnerabilities or blocking mechanisms were detected, indicating a mature and trustworthy online presence.

H

HOFER REISEN

hofer-reisen.at

74

HOFER REISEN is an established Austrian travel agency offering a wide range of affordable travel packages including car trips, flights, cruises, and bus tours. The website targets German-speaking travelers seeking budget-friendly vacation options. The company maintains a consistent brand presence with a professional and user-friendly website optimized for mobile devices. Technically, the site employs modern web technologies, integrates third-party marketing and analytics tools, and enforces strong security practices including HTTPS and security headers. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and a detailed privacy policy. However, contact information and terms of service pages are not readily found, which could be improved for better user trust and compliance.

M

mégaphone-internet sàrl

megaphone-internet.ch

46

mégaphone-internet sàrl is a Swiss-based small technology company specializing in web creation and hosting services since 1995. The company targets associations and businesses in Switzerland seeking tailored digital solutions including website creation, e-commerce, content management, hosting, and email marketing. Their market position is that of a local artisan web service provider with a long-standing presence and a professional online presence. Technically, the website uses a modern but minimal tech stack including jQuery, Slick Carousel, and lazy loading with Lozad.js, delivering a good user experience with moderate performance and good mobile optimization. Security posture is adequate with HTTPS usage but lacks explicit security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Business credibility is strong given the clear company information, physical address, and professional content. Overall, the website is safe, professional, and trustworthy but could improve in privacy compliance and security best practices.

M

Maison Béthel / Fondation Praz-Soleil

maison-bethel.ch

52

Maison Béthel is a Swiss non-profit healthcare establishment specializing in transitional psychiatric care for adults aged 18 to 65. It operates under the Fondation Praz-Soleil umbrella and is recognized as a public interest institution within the canton of Vaud's psychiatric network. The website presents clear information about its mission, services, and contact details, targeting patients, families, and healthcare professionals. Technically, the site uses standard web technologies including HTML5, CSS3, and jQuery, with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, although formal security policies and incident response information are not published. Overall, the site is professional, trustworthy, and compliant with privacy regulations, with room for improvement in security transparency and accessibility.

B

Bremer Toto und Lotto GmbH

lottoindeutschland.de

64

The website www.lottoindeutschland.de serves as the official information portal for the Deutscher Lotto- und Totoblock, the collective of 16 independent lottery companies in Germany. It provides insights into the structure, responsibilities, and current news related to the state-regulated lottery market. The site targets professionals in media, politics, and administration and explicitly excludes direct gambling services. The business model centers on providing authoritative information and promoting responsible gaming under German legal frameworks. The site is affiliated with recognized lottery organizations and emphasizes social welfare funding from lottery proceeds. Technically, the website employs modern web standards including HTML5, CSS3, JavaScript modules, and structured data via JSON-LD for SEO. It is mobile-optimized and accessible, with good performance indicators. However, no CMS or hosting provider details are explicitly identified. The site uses HTTPS with excellent SSL configuration but lacks explicit security headers and cookie consent mechanisms, which are recommended for enhanced security and compliance. From a security perspective, the site demonstrates a solid posture with no visible vulnerabilities or sensitive data exposure. The absence of security headers and incident response contacts are areas for improvement. Privacy compliance is partially met with a privacy policy present but no cookie consent banner detected. Business credibility is high due to consistent branding, official affiliations, and trust signals such as whitelist approval and links to responsible gaming resources. Overall, the website is a trustworthy, professional portal with a clear focus on information dissemination rather than gambling operations. Strategic recommendations include implementing cookie consent, enhancing security headers, publishing terms of service, and providing clearer contact information to improve compliance and user trust.

N

Nissan

nissan.de

71

Nissan Deutschland's website serves as the official German portal for Nissan's automotive offerings, including passenger cars, commercial vehicles, and electric vehicles. The site targets consumers in Germany interested in innovative automotive solutions. The business is positioned as a major automotive brand with a strong market presence. Technically, the website employs modern web technologies such as HTML5, CSS3, and JavaScript with a likely enterprise CMS backend, delivering a good user experience with mobile optimization and SEO best practices. However, the site lacks explicit privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security posture is moderate with no visible security headers or incident response information, indicating room for improvement in security best practices. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

The website ars-mia.de hosts a login portal titled 'MIA | Anmeldung' primarily serving users associated with 'autohausen'. The site appears to be a business application login interface with minimal public-facing content. The target audience is likely internal or authorized users of the MIA system. The business sector is not explicitly stated but is related to automotive or dealership services given the author metadata and company name. The website is hosted in Germany and uses HTTPS with basic security measures.

S

Sägewerk - Hirschbach GmbH

hirschbach.de

57

Sägewerk - Hirschbach GmbH is a traditional family-owned sawmill and wood trade company based in Baden-Württemberg, Germany, with over 116 years of history. The company focuses on sustainable wood production and direct sales from the sawmill, targeting local customers and businesses. The website reflects a well-established local business with a consistent brand and clear communication of its services. Technically, the website is built on WordPress using the Avada theme and several plugins such as Rank Math SEO and TranslatePress for multilingual support. The hosting is provided by lima-city.de, as indicated by the nameservers. Security-wise, the site uses HTTPS and has a cookie consent mechanism, but lacks explicit security headers and published security or incident response policies. No privacy policy or terms of service pages were detected in the provided content, which is a compliance gap. Overall, the website is professional, mobile-optimized, and SEO-friendly, with a good trustworthiness profile based on domain age and business consistency.

H

Hüster GmbH

huester-gmbh.de

53

Hüster GmbH is a small, family-owned manufacturing company based in Germany, specializing in the production of high-quality sawn timber from spruce logs since 1974. The company emphasizes sustainability, ecological responsibility, and precision in its production processes, targeting B2B customers in the wood and construction industries. The website reflects a consistent brand image and provides basic corporate information but lacks detailed contact data and advanced digital features. Technically, the site uses an older JavaScript stack with the Neko Framework and jQuery, offering moderate performance and good mobile responsiveness. Security posture is weak due to lack of HTTPS enforcement, missing security headers, and absence of published security policies. Privacy compliance is limited, with no cookie consent mechanism and only a basic privacy policy page. Overall, the website is functional and professional but requires improvements in security and privacy to enhance trust and compliance.

Fondation Praz-Soleil is a Swiss non-profit foundation established in 1984, providing medical psychosocial services including an EPSM, supervised apartments, and home care in the Vaud region. The organization collaborates with regional health authorities and is engaged in modernization projects to enhance its service offerings. The website is professionally designed with clear navigation and provides comprehensive contact information and compliance with GDPR through a cookie consent mechanism and a privacy policy document. Technically, the site uses basic but functional technologies including HTML5, CSS, and jQuery, with room for modernization and improved security headers. Security posture is moderate with no critical vulnerabilities detected, but lacks published security policies or incident response contacts. Overall, the website is trustworthy, safe, and well-aligned with the foundation's mission and audience.

W

webQ GmbH

webq.de

52

webQ GmbH is a well-established full-service advertising agency based in Weinheim, Germany, with 25 years of experience. The company offers a broad range of creative and digital marketing services including web design, graphic design, video production, 3D animation, print, domain registration, hosting, SEO, and consulting. Their target audience includes both public and private sector clients across various industries. The website reflects a professional and consistent brand image with clear contact information and a portfolio of clients, indicating a strong local market presence. Technically, the website is built with modern web standards using HTML5, CSS3, and JavaScript, featuring a strict Content-Security-Policy header and HTTPS usage, which demonstrates a good security posture. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. However, there is a lack of explicit privacy and cookie policies, which is a compliance gap that should be addressed. Security-wise, the site benefits from HTTPS and CSP headers but lacks other common security headers and incident response contact information. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is limited due to DENIC privacy restrictions but shows no suspicious patterns, and the domain age aligns with the company's claimed history. Overall, webQ GmbH presents a trustworthy and professional online presence with room for improvement in privacy compliance and security transparency. Strategic recommendations include adding comprehensive privacy and cookie policies, implementing security.txt for vulnerability disclosure, and enhancing security headers to further strengthen the security posture.

Pfadiheime.ch is a specialized non-profit platform operated by Stiftung Pfadiheime Schweiz, serving as the primary directory and booking platform for scout homes across Switzerland. With over 25 years of history, it provides comprehensive search and booking functionalities tailored to scout groups and home administrators. The platform also promotes HeimV, a home management software, enhancing operational efficiency for home administrators. The website is well-structured, mobile-optimized, and offers clear navigation, targeting a niche audience effectively. Technically, the site leverages modern web technologies including HTML5, CSS3, JavaScript with jQuery, and likely a Ruby on Rails backend. The presence of CSRF tokens indicates attention to form security, though there is room for improvement in security headers and privacy compliance mechanisms. Performance is moderate with good mobile responsiveness and basic accessibility features. From a security perspective, the site uses HTTPS and includes CSRF protection but lacks visible security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR explicit indicators. Contact information is limited to a general info email, with no phone or physical address provided. Overall, the platform presents a trustworthy and professional service with a strong business credibility score. Strategic improvements in privacy compliance, security headers, and incident response documentation would enhance its security posture and regulatory adherence.

P

Pfadibewegung Schweiz

pfadi.swiss

60

Pfadibewegung Schweiz operates the website pfadi.swiss, serving as the largest youth scouting organization in Switzerland with approximately 51,000 members. The website provides information about scouting activities, international events, and resources for children, teenagers, and their families. The organization is well-established with a domain registered since 2017, consistent with its public presence. The website is professionally designed, mobile-optimized, and uses privacy-friendly analytics, reflecting a moderate to high level of digital maturity. However, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance and user trust. Security posture is adequate with HTTPS enabled and domain transfer protections, but could be improved by enabling DNSSEC and implementing security headers. Overall, the site is trustworthy and serves its non-profit mission effectively.

INTERSPORT Austria operates as the leading sports retail company in Austria, offering a broad range of sports products through its online platform and physical stores. The website is professionally designed with a clear focus on the Austrian market and sports enthusiasts. The technical infrastructure employs modern web technologies such as HTML5, CSS3, JavaScript, and popular libraries like Swiper.js for sliders and Google Maps API for store location services. Mobile optimization and user experience are excellent, supporting a broad customer base effectively. However, the website lacks visible privacy and cookie policies, which are critical for GDPR compliance and user trust. Security posture is moderate due to the absence of explicit security headers and incident response information, which should be addressed to enhance protection and compliance. Overall, the domain registration data aligns well with the business claims, indicating a legitimate and trustworthy operation.

Q

Quiz Maker

quiz-maker.com

60

Quiz Maker is a technology-driven SaaS platform specializing in online quiz creation, offering users the ability to generate customized quizzes quickly, including AI-generated quizzes. The platform targets educators, marketers, and businesses aiming to engage audiences and capture leads. With over 15 million quizzes created over a decade, it holds a strong market position as an established quiz solution provider. The website features a user-friendly interface with clear navigation and mobile optimization, supporting a broad user base.

E

Eglise Evangélique Connexion

egliseconnexion.ch

62

Eglise Evangélique Connexion is a small non-profit evangelical church based in Montagny-près-Yverdon, Switzerland. The website serves as a community portal for families and individuals interested in contemporary biblical teachings. The organization focuses on religious services and community engagement without commercial activities. Technically, the website is built on the Wix platform using Wix Thunderbolt framework, with standard Wix scripts and styles. It is mobile optimized and uses HTTPS, but lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS enabled but missing security headers and formal privacy or cookie policies. No forms or analytics tools are present, indicating minimal data collection and tracking. Overall, the website is legitimate and trustworthy but could improve in privacy compliance and security best practices.

É

Église évangélique Béthel

ebyv.ch

52

Église évangélique Béthel is a small, local evangelical church based in Yverdon-les-Bains, Switzerland. The organization focuses on religious services and community engagement centered on the authority of the Bible and the teachings of Jesus Christ. The website serves as a portal for information about the church, its programs, and media such as photos and videos. The pastor is identified as Serge Viret, reinforcing the community and leadership structure. Technically, the website uses standard web technologies including HTML5, CSS3, and JavaScript with a slider library for image display. The site is moderately optimized for mobile devices and offers a good user experience with clear navigation. However, it lacks advanced technical frameworks or CMS indications.

R

Start Reiskorn | Reiskorn

reiskorn.at

56

The website www.reiskorn.at is a small business site hosted on the Wix platform, targeting an Austrian audience. The site appears to be in German language and uses standard Wix technologies including JavaScript, CSS, and Wix's proprietary scripts. The business description and detailed services are not clearly extractable from the provided HTML content, indicating minimal content presence or content loading dynamically beyond the provided snapshot. The technical infrastructure is typical for Wix-hosted sites, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled and some cookie handling scripts, but lacks explicit security headers and publicly disclosed security policies. Privacy compliance is weak due to absence of visible privacy or cookie policies and consent mechanisms. Business credibility is moderate but limited by lack of visible contact information and trust indicators. Overall, the site is functional but would benefit from enhanced content, privacy disclosures, and security best practices.

C

Crew Knüttel Motorsport GmbH & Co.KG

reifen-knuettel.de

47

Crew Knüttel Motorsport GmbH & Co.KG is a specialized motorsport company based in Germany, established in 1984, providing racing tire services and support for various motorsport disciplines. The company maintains a professional online presence with a well-structured website offering detailed information about their services, team, and contact points. Their market position is that of a traditional, niche service provider in the motorsport sector, targeting racing teams and motorsport enthusiasts. Technically, the website employs modern web technologies including JavaScript libraries like Splide.js and jQuery, and is optimized for mobile devices with responsive design elements. However, there is room for improvement in accessibility and performance optimization. Security-wise, the site uses HTTPS but lacks visible security headers and formal security policies, which could be enhanced to improve trust and compliance. Privacy compliance is partially addressed with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional and trustworthy but could benefit from stronger security and privacy features.

G

Gigasport

gigasport.at

66

Gigasport is a prominent Austrian sports retail company operating both online and through 11 physical stores. The website serves as a comprehensive e-commerce platform offering over 450 top sports brands, targeting sports enthusiasts and general consumers primarily in Austria and German-speaking regions. The business model integrates retail sales with loyalty programs such as the PlusCard and a dedicated mobile app to enhance customer engagement. The site is professionally designed with consistent branding and clear navigation, reflecting a strong market position supported by its parent company Kastner & Öhler. Technically, the website is built on WordPress CMS and employs modern web technologies including Google Tag Manager, Usercentrics for consent management, and Dynamic Yield for personalization. The site is mobile-optimized and incorporates SEO best practices with structured data and meta tags. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and uses consent management tools, but lacks explicit security headers in the visible HTML. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially addressed with a cookie consent mechanism, though a clear privacy policy page was not found in the provided content. WHOIS data is unavailable due to quota restrictions, but the domain appears legitimate based on branding and business context. Overall, Gigasport's website presents a trustworthy and professional online presence with good technical and security foundations. Strategic improvements in privacy policy visibility and security header implementation would enhance compliance and security posture further.

S

Service national Abus dans le contexte ecclésial

abus-cath-info.ch

50

The website 'abus-cath-info.ch' serves as a national initiative focused on scientific research and treatment of sexual abuse within the Catholic Church in Switzerland. It is supported by major Swiss Catholic organizations including the CES, RKZ, and KOVOS, positioning it as a credible and authoritative source on this sensitive topic. The site provides resources for victims, updates on research projects, and information on church measures to address abuse. The target audience includes victims, researchers, church authorities, and the general public concerned with this issue. Technically, the website employs modern web standards with HTML5, CSS3, and JavaScript, and uses Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized, accessible, and SEO-friendly, though no explicit CMS or hosting provider is identified. Performance is moderate with good navigation and professional design. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks visible advanced security headers and does not provide explicit security policies or incident response contacts. Privacy compliance is adequate with a privacy policy present, but no cookie consent mechanism is detected. No forms collecting personal data are found on the homepage. Overall, the website is trustworthy, professionally maintained, and fulfills its mission effectively. Strategic recommendations include implementing cookie consent, publishing security and incident response policies, and enhancing security headers to improve compliance and security posture.

A

architects—Alliance

architectsalliance.com

59

architects—Alliance is a Toronto-based architectural design practice specializing in city building and a broad range of architectural services including schools, galleries, affordable housing, and urban parks. They serve clients in Canada, the United States, and Europe, positioning themselves as designers, researchers, and urbanists focused on meaningful urban spaces. The website presents a professional portfolio with detailed project imagery and client testimonials, reflecting a well-established presence in the architectural sector. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, jQuery, and lazy loading for images, along with Adobe Typekit fonts for typography. The site is mobile optimized and accessible, with an explicit accessibility statement demonstrating commitment to inclusivity. However, no CMS or hosting provider details are evident, and performance is moderate. Security posture is moderate with HTTPS implied but no explicit security headers detected. The absence of privacy and cookie policies, WHOIS registration data, and vulnerability disclosure mechanisms represent compliance and trust gaps. No forms on the homepage reduce exposure to input-based vulnerabilities. Social media presence is limited to Twitter and Instagram. Overall, the site is professional and trustworthy in content and design but requires improvements in domain registration transparency, privacy compliance, and security best practices to enhance trust and reduce risk.

M

Gestalten und verkaufen mit Print-on-Demand | Spreadshop

myspreadshop.ch

59

The website myspreadshop.ch serves as a landing page for a print-on-demand merchandise platform affiliated with Spreadshop and Spreadshirt. It targets individuals and small businesses interested in creating and selling custom merchandise online. The business model is based on enabling users to open their own merchandise shops with no upfront cost, leveraging print-on-demand fulfillment services. The site is positioned within the e-commerce sector and appears to serve primarily the Swiss and German-speaking markets. Technically, the site is simple, using standard HTML and CSS with web fonts, and is moderately optimized for mobile devices. However, it lacks advanced frameworks or CMS indications and does not include analytics or tracking scripts in the provided content. Security posture is weak due to absence of visible security headers, privacy policies, and contact information, which impacts compliance and trust. The domain uses privacy protection, which is common and justified for this business type. Overall, the site is functional but minimalistic, with room for improvement in security, privacy, and user engagement features.

G

Gemeinde Therwil

therwil.ch

67

Gemeinde Therwil operates as the official municipal government website for the community of Therwil in Switzerland. It provides residents and visitors with comprehensive information about local administration, education, social services, public safety, events, and waste management. The website serves as a digital portal for accessing municipal services, announcements, and contact information, positioning itself as a trusted local government resource. Technically, the site is built on the Weblication CMS platform, utilizing standard web technologies such as HTML5, CSS3, JavaScript, and jQuery, with video content delivered via Video.js. The site demonstrates good mobile optimization and clear navigation, though accessibility features could be enhanced. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit incident response policies. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its public sector role effectively.

The Ehemaligenverein Jungwacht Therwil is a small Swiss non-profit organization dedicated to connecting former leaders and members of the Jungwacht Therwil youth group. The website serves as an informational portal to promote membership, share memories, and provide access to a summer camp archive. The organization is community-focused with a clear founding date and transparent contact information via email. Technically, the website is simple, built with basic HTML and CSS, and integrates Facebook social plugins for community engagement. However, it lacks advanced CMS, security headers, and privacy or cookie policies, indicating room for improvement in compliance and security. The security posture is basic with no visible vulnerabilities but missing standard security best practices. Overall, the site is safe, trustworthy, and serves its niche audience well but would benefit from enhanced privacy compliance and security hardening.

S

SEFE

sefe.eu

68

SEFE is a European energy company focused on securing reliable energy supply through trading, sales, infrastructure, and services across gas, power, and hydrogen sectors. The company positions itself as a key player in enhancing energy security and accelerating the transition to a low-carbon future in Europe. Their website reflects a professional and comprehensive digital presence with detailed sections on company strategy, sustainability, portfolio, and career opportunities. Technically, the website employs modern web technologies including ES6 JavaScript modules, jQuery, and integrates a GDPR-compliant cookie management platform (Usercentrics). Google Tag Manager is used for analytics and tracking, indicating a mature digital marketing approach. Security-wise, the site uses HTTPS and shows evidence of good security practices, although explicit security headers are not fully visible in the HTML content. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is common for corporate domains, and no suspicious patterns were found. Overall, the website is trustworthy, well-designed, and compliant with privacy regulations.

D

Dive Damai

dive-damai.com

57

Dive Damai operates a luxury liveaboard diving service in Indonesia, targeting scuba diving enthusiasts seeking premium travel experiences. The website provides detailed information about their trips, destinations, itineraries, and schedules, positioning itself as a niche player in the hospitality sector focused on diving tourism. The business appears small but professional, with clear contact information and a consistent brand presentation. Technically, the website is built on the Wix platform, leveraging modern web technologies and delivering a good user experience with mobile optimization. However, the site lacks advanced security headers and privacy compliance features, which are important for protecting user data and building trust. From a security perspective, HTTPS is enabled, but the absence of WHOIS registration data raises concerns about domain legitimacy. No privacy or cookie policies were found, and no incident response or security contact information is provided. These gaps suggest room for improvement in compliance and security posture. Overall, the site is functional and professional but would benefit from enhanced security practices, privacy compliance, and verification of domain registration to improve trustworthiness and reduce risk.

DataCharts is a small German business specializing in the creation of tailored interactive dashboards and data visualizations to support decision-making for municipalities, regions, and businesses. Their key products include RegioBoard, KonjunkturBoard, and ResultBoard, which focus on economic, demographic, and survey data visualization. The company collaborates with partners such as pro Wirtschaft GT GmbH and has received an award for innovative economic development solutions. The website is professionally designed using an HTML5 UP template, with good mobile optimization and clear navigation. Technical infrastructure is basic but sufficient, relying on standard web technologies like HTML5, CSS3, and jQuery, hosted on a German hosting provider (1blu GmbH). Security posture is moderate, with cookie consent implemented but lacking advanced security headers or published security policies. No forms collecting sensitive data were detected, and no analytics or tracking scripts are present, indicating a privacy-conscious approach. Contact information is clearly provided, enhancing business credibility. Overall, the website is trustworthy and suitable for its target audience, though improvements in security best practices and incident response transparency are recommended.

S

Schüco Group

schueco.com

68

Schüco Group is a leading German company specializing in system solutions for building envelopes made from aluminium, steel, and PVC-U. Their extensive product portfolio includes windows, doors, façades, ventilation, security, and solar shading systems, complemented by digital and networked solutions for both residential and commercial buildings. The company emphasizes sustainability and climate neutrality, positioning itself as a pioneer in the construction industry. Technically, the website employs modern web technologies including JavaScript, lazy loading, and privacy management tools, offering a responsive and accessible user experience. Security-wise, the site uses HTTPS and privacy consent mechanisms but lacks some advanced security headers and publicly available incident response information. Overall, the website is professional, trustworthy, and well-structured, though the absence of WHOIS data and explicit contact details slightly reduces transparency.

C

Cheltenham Playhouse

cheltplayhouse.org.uk

9

Cheltenham Playhouse is a small non-profit community theatre organization based in the United Kingdom, focused on providing theatrical productions and cultural events to the local community. The website reflects a consistent brand identity and offers relevant information about the theatre's activities, targeting local residents and theatre enthusiasts. The business model relies on community engagement and event hosting. Technically, the website uses modern front-end technologies such as the Bulma CSS framework and FontAwesome icons, hosted by a reputable registrar, 123-Reg Limited. The site appears to be mobile-optimized with a moderate performance profile. Security posture is basic, with no detected security headers or published security policies, and no HTTPS enforcement details available from the provided data. Privacy compliance is lacking, as no privacy or cookie policies were found, which is a notable compliance gap. Overall, the website is safe for general audiences and does not contain adult or explicit content. The domain registration is consistent with the organization's history and shows no suspicious patterns.

W

WE media

wemedia.group

9

WE media is a Russian-language media platform focused on advertising and brand promotion services. The platform leverages a strong community and live content to connect brands with audiences, aiming to convert attention into trust and sustainable growth. The website is built on the Tilda CMS platform, utilizing modern web technologies and integrated with Yandex Metrika for analytics. While the site demonstrates good design quality, mobile optimization, and user experience, it lacks critical privacy and cookie policies, and no explicit contact information is provided. Security posture is basic with no visible security headers or advanced configurations. The domain WHOIS data is privacy-protected, which is common for small media businesses but limits transparency. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security measures.

N

Nemzeti Média- és Hírközlési Hatóság

onlineplatformok.hu

43

The website onlineplatformok.hu is the official digital services coordinator portal of the Hungarian National Media and Infocommunications Authority (NMHH). It serves as a comprehensive resource for regulatory information, research, and educational content related to online platforms and the Digital Services Act (DSA). The site targets a broad audience including the general public, researchers, policymakers, and digital platform users in Hungary. It provides authoritative content on digital rights, platform governance, and safe online practices. Technically, the website employs modern web standards with HTML5, CSS3, and JavaScript, including integration of Google Analytics with IP anonymization and Spotify embeds. The site is hosted by NMHH and demonstrates good mobile optimization, accessibility, and SEO practices. Performance is moderate, with no critical technical issues detected. From a security perspective, the site uses HTTPS with a strong SSL configuration and implements GDPR-compliant cookie consent mechanisms. However, explicit security policies and incident response information are not published, and security headers are not explicitly detected. No vulnerabilities or suspicious elements were found, indicating a solid security posture appropriate for a government informational site. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. It effectively fulfills its role as a government portal providing transparency and education about online platforms. Strategic recommendations include publishing detailed security policies, enhancing security headers, and considering a vulnerability disclosure policy to further strengthen trust and security posture.

kozadat.hu is a Hungarian government-operated public data search portal managed by Nemzeti Infokommunikációs Szolgáltató Zrt. The site provides access to various public data sets, legal drafts, government documents, and archives, serving citizens, researchers, and public sector stakeholders. The platform is part of the official Közadat program and links to multiple authoritative government resources, reinforcing its position as a trusted government information source. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and Modernizr for feature detection. It integrates Google Analytics for user tracking but lacks visible cookie consent mechanisms. The site appears moderately optimized for performance and mobile use, with basic accessibility features. The CMS or platform is not explicitly identified, suggesting a custom or government-developed solution. From a security perspective, the site uses HTTPS and avoids exposing sensitive data in its HTML. However, no explicit security headers such as CSP or HSTS were detected in the provided content, indicating room for improvement. The absence of privacy and cookie policies and consent mechanisms also represents a compliance gap. No vulnerabilities or suspicious content were found, and the domain's WHOIS data confirms a long-standing, consistent registration aligned with the government entity. Overall, kozadat.hu is a credible and professional government portal with good content quality and business credibility. To enhance security posture and privacy compliance, it should implement security headers, publish clear privacy and cookie policies, and introduce user consent mechanisms for tracking technologies.

T

Training-Fit : Fitness- und Muskelaufbaugeräte

training-fit.ch

66

Training-Fit.ch is an e-commerce retailer specializing in fitness, muscle building, crossfit, yoga, and martial arts equipment and apparel. The website offers a broad catalog of products from well-known brands, targeting fitness enthusiasts primarily in Switzerland and neighboring regions. The business model focuses on online sales with fast shipping options and secure payment methods. The site demonstrates consistent branding and a professional design, supporting a medium-sized retail operation. Technically, the website is built on the Magento OpenMage platform, utilizing modern web technologies including Google Analytics, Google Ads, and reCAPTCHA for security and marketing. The site is mobile-optimized and features good SEO practices, although accessibility could be improved. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses bot protection mechanisms. However, explicit security headers are not clearly present, and there is no published security policy or incident response contact. Privacy compliance is partially addressed with a cookie consent mechanism, but no clear privacy policy or terms of service pages were found. No vulnerabilities or exposed sensitive data were detected. Overall, the website presents a moderate risk profile with good business credibility but some gaps in privacy and security transparency. Strategic improvements in policy publication, security headers, and contact information would enhance trust and compliance.

D

Direct-Volley : Nummer 1 Website für Online-Volleyball

direct-volley.ch

67

Direct-Volley.ch is a German-language e-commerce website specializing in volleyball equipment, apparel, and accessories. It positions itself as the leading online volleyball shop, targeting volleyball players and enthusiasts primarily in German-speaking regions such as Switzerland and Germany. The site offers a broad catalog including shoes, clothing, balls, protective gear, and club equipment, supported by a structured navigation and search functionality. The business model is retail-focused, leveraging an online platform to reach its audience efficiently. Technically, the website is built on the Magento OpenMage platform, integrating modern web technologies such as Google Analytics, Google Ads, and reCAPTCHA for security and marketing purposes. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features are basic. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses bot protection mechanisms. However, it lacks explicit security headers like Content-Security-Policy and X-Frame-Options, and no visible privacy policy or terms of service pages were found in the provided content. Contact information for security incidents or data protection officers is also absent, indicating areas for improvement in compliance and transparency. Overall, the website is professional and trustworthy for its retail purpose but would benefit from enhanced privacy disclosures, security header implementation, and clearer contact channels to improve its security posture and compliance with GDPR requirements.

D

Direct-Running: Laufschuhe, Lauftextilien, Laufausrüstung

direct-running.ch

67

Direct-Running.ch is a specialized e-commerce retailer focused on running shoes, sports apparel, and related equipment primarily targeting German-speaking customers in Switzerland. The website offers a broad catalog of well-known brands such as Adidas, Saucony, Puma, and Mizuno, emphasizing fast shipping and secure payment options. The business model is retail-oriented with a clear focus on the running and fitness market segment. Technically, the site is built on a Magento-based platform (OpenMage variant) and integrates modern marketing and analytics tools including Google Analytics, Google Ads, and Actito marketing automation. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the website enforces HTTPS and uses reCAPTCHA to mitigate bot activity. However, it lacks explicit security headers and does not publicly disclose a security policy or incident response contacts. Privacy compliance is partially addressed through a consent mechanism, but no dedicated privacy or terms of service pages were detected in the provided content. WHOIS data confirms the domain's legitimacy and consistency with the business claims, indicating a trustworthy online presence. Overall, the site is professional and secure but would benefit from enhanced privacy disclosures and security transparency.

D

digris AG

digris.ch

51

digris AG is a Swiss-based telecommunications company specializing in digital radio broadcasting via dab+ technology. They operate a significant dab+ network in Switzerland with over 20 transmission areas and extend their services to France and the UK. Their offerings include network planning, audio encoding, multiplexing, and software defined radio development, positioning them as a key player in the digital radio broadcasting market. The website reflects a professional and consistent brand image with clear contact information and social media presence. Technically, the site uses modern web technologies including Vue.js, Google Analytics, and is hosted on DigitalOcean infrastructure. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and explicit policies could be improved. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and well-maintained, supporting the company's credibility in the telecommunications sector.