Security Directory

H

Henkel AG & Co. KGaA

henkel-ventures.com

61

Henkel Ventures is the corporate venture capital arm of Henkel AG & Co. KGaA, focusing on early-stage investments up to Series B in startups aligned with Henkel's strategic business units such as Adhesive Technologies, Beauty Care, and Laundry & Home Care. The website presents a professional and comprehensive overview of their investment focus, partnership approach, and strategic objectives, targeting startups and innovation partners globally. The technical infrastructure is modern, leveraging a custom CMS with advanced JavaScript libraries and analytics tools, ensuring a responsive and accessible user experience. Security posture is strong with HTTPS and Content-Security-Policy headers, complemented by GDPR-compliant privacy and cookie policies with user consent mechanisms. However, the absence of WHOIS registration data for the domain is a notable anomaly that requires further verification to confirm domain legitimacy. Overall, the site reflects a mature corporate digital presence with good security and privacy practices.

P

power4me

power4me.at

46

Power4me.at is a small Austrian educational organization focused on prevention and self-defense programs primarily targeting children in kindergarten and primary school. The website presents a professional and consistent brand image with clear descriptions of its services, emphasizing empowerment and safety education. The technical infrastructure is based on standard web technologies including HTML5, CSS3, JavaScript, jQuery, and Bootstrap, providing a responsive and user-friendly experience. Security posture is moderate with no evident vulnerabilities or exposed sensitive data, but lacks advanced security headers and incident response information. Privacy compliance is basic but present, with a privacy policy page accessible. Overall, the website is trustworthy and well-positioned within its niche educational market.

O

Opferberatung Zürich

onlineopferberatung.ch

47

The website www.onlineopferberatung.ch serves as an online platform for victim support and counseling services primarily in the canton of Zürich, Switzerland, with expanding cooperation across multiple Swiss cantons. It offers confidential, free, and anonymous chat and online counseling for victims of various forms of violence including domestic, sexual, and traffic-related incidents. The service is operated by Opferberatung Zürich, a non-profit organization under Stiftung Opferhilfe Zürich, and is supported by several cantonal and federal entities. The platform is designed to be accessible to adults, youth, children, and their relatives, emphasizing confidentiality and ease of access. Technically, the website employs a modern but straightforward technology stack including HTML5, CSS3, JavaScript with jQuery and Bootstrap 4 for responsive design. It includes a cookie consent mechanism compliant with EU cookie directives. The site is well-structured with clear navigation and good mobile optimization, although accessibility features are basic. No advanced CMS or analytics tools are detected, indicating a focus on privacy and minimal tracking. From a security perspective, the site uses HTTPS (assumed but not explicitly verified here) and implements cookie consent. However, no explicit security headers or incident response contacts are provided. The site does not expose sensitive data or vulnerable libraries. The WHOIS data is privacy protected, which is justified given the sensitive nature of the service. Overall, the security posture is moderate with room for improvement in headers and incident response transparency. Overall, the website is trustworthy, professional, and well-aligned with its mission to provide victim support. It scores well on content quality, business credibility, and privacy compliance, with minor technical and security enhancements recommended to further strengthen its posture.

H

Henkel

henkel-swiatmlodychbadaczy.pl

54

The website www.henkel-swiatmlodychbadaczy.pl represents the Polish branch of Henkel's international educational program 'Świat Młodych Badaczy' (World of Young Researchers). The program focuses on engaging primary school children with science through interactive workshops, educational materials, and multimedia content. The site is well-branded with Henkel's corporate identity and offers resources for children, parents, and teachers. Technically, the site uses modern web technologies and includes comprehensive privacy and cookie consent mechanisms, reflecting good GDPR compliance. Security posture is strong with HTTPS and Content Security Policy in place, though additional headers could enhance protection. The absence of WHOIS data limits domain trust verification, but the strong corporate branding and content quality support legitimacy. Overall, the site is a professional, secure, and user-friendly educational platform aligned with Henkel's corporate social responsibility initiatives.

H

Henkel

henkel-kesifdunyasi.com

61

Henkel's Keşif Dünyası website is a well-structured educational platform aimed at introducing children and teachers in Turkey to scientific concepts through experiments and multimedia content. The initiative aligns with Henkel's corporate social responsibility and brand engagement strategies, focusing on areas relevant to their business such as adhesives, personal care, and sustainability. Technically, the site employs modern web technologies and complies with privacy regulations, including GDPR, with a robust cookie consent mechanism. Security posture is good with HTTPS and Content-Security-Policy headers, though additional security headers and published policies could enhance trust. The absence of WHOIS data is a notable anomaly but does not detract significantly from the site's legitimacy given the strong corporate branding and content quality. Overall, the site presents a professional, trustworthy, and user-friendly experience suitable for its target audience.

H

Henkel

henkel-ricercamondo.it

57

Ricercamondo is an educational initiative by Henkel AG & Co. KGaA aimed at promoting STEM education among primary school children in Italy. The website provides scientific experiments, workshops, and educational content designed to engage young learners and educators. The initiative is well-branded and consistent with Henkel's corporate social responsibility efforts. Technically, the website uses a modern tech stack including JavaScript libraries such as GSAP, Highcharts, and SwiperJS, and is built on the CoreMedia CMS platform. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is strong with HTTPS enforced and a Content-Security-Policy header present, alongside a cookie consent mechanism compliant with GDPR. No critical vulnerabilities or suspicious activities were detected. Contact information is available via email and contact forms, although no phone numbers or detailed physical addresses were found. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations.

H

Henkel

henkel-forscherwelt.com

62

Henkel Researchers’ World is a well-established educational initiative by Henkel AG & Co. KGaA aimed at introducing children and educators to scientific methods and experiments in areas aligned with Henkel's business sectors such as adhesives, personal care, and sustainability. The website is professionally designed with rich content, including videos and interactive experiments, targeting a young audience and educators. The platform leverages modern web technologies and complies with GDPR through comprehensive privacy and cookie policies. However, the absence of WHOIS data for the domain raises questions about domain registration transparency, though the website content and branding strongly support its legitimacy. Security posture is strong with HTTPS and Content Security Policy in place, but additional security headers and explicit security policies could enhance trust. Overall, the site presents a credible, secure, and user-friendly educational resource with room for improvement in transparency and security documentation.

H

Henkel

henkel-forscherwelt.de

64

Henkel Forscherwelt is a well-established international educational initiative by Henkel, focused on fostering curiosity and scientific exploration among children. The website offers a variety of educational programs, teaching materials, and teacher training aligned with Henkel's research areas. The initiative has been active since 2011 and targets children and educators primarily in Germany. Technically, the website employs a modern tech stack including JavaScript libraries like GSAP, Highcharts, and uses CoreMedia CMS, hosted on professional DNS infrastructure. Privacy and cookie consent mechanisms are well implemented, with GDPR compliance evident. Security posture is strong with HTTPS and Content Security Policy in place, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and safe for its target audience.

F

Foot-Store

foot-store.pt

58

Foot-Store is a specialized e-commerce retailer focused on football shoes, shirts, balls, and related equipment primarily targeting Portuguese and European football enthusiasts. The website demonstrates a solid market presence with multiple country-specific sister domains, indicating a broad regional footprint. The business model centers on online retail with an emphasis on fast delivery and competitive pricing. The site content is professionally structured and well-branded, catering to a sports-focused audience.

B

BILD

bild.de

64

BILD.de is a leading German news media website operated by Axel Springer SE, offering a wide range of news, entertainment, sports, and video streaming services. The site targets a general audience with a comprehensive content offering including free and subscription-based (BILDplus) content. The business model relies on advertising and subscriptions, positioning BILD as a major player in the German media landscape. Technically, the website employs modern web technologies including ES6 JavaScript, CSS3, and HTML5, with a strong focus on performance and mobile optimization. Hosting is managed via Akamai, ensuring fast content delivery. The site integrates a Consent Management Platform to comply with GDPR requirements and uses various third-party scripts for analytics and advertising. From a security perspective, BILD.de enforces HTTPS and implements consent mechanisms for privacy compliance. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly visible, representing areas for improvement. The site shows no signs of WAF blocking or content restrictions, and no adult or NSFW content is present. Overall, BILD.de demonstrates a mature digital presence with strong business credibility and technical infrastructure. Strategic enhancements in transparency around privacy policies and security incident handling would further strengthen trust and compliance.

S

Stadtmagistrat Innsbruck

innsbruck.at

61

The website www.innsbruck.at serves as the official digital presence for the city of Innsbruck, Austria, encompassing municipal services, tourism promotion, and marketing activities. It targets residents, visitors, and businesses, providing authoritative information and links to related official sites. The business model is governmental and tourism-oriented, positioning itself as a trusted source for local information and services. Technically, the site is built on the Webflow platform, utilizing modern web technologies such as HTML5, CSS3, JavaScript, and jQuery. It integrates Matomo analytics for user tracking, reflecting a privacy-conscious approach. The site demonstrates good mobile optimization and user experience, though accessibility and SEO could be further enhanced. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and a cookie consent mechanism, which are important for GDPR compliance and security hardening. No incident response or security policy information is published, indicating room for improvement in transparency and preparedness. Overall, the website is professional, trustworthy, and well-aligned with its governmental role. Strategic improvements in privacy compliance and security practices would enhance its risk posture and user trust.

M

Magyar Telekom Nyrt.

telekom.hu

63

Magyar Telekom Nyrt. is a leading telecommunications provider in Hungary, offering a wide range of services including mobile telephony, internet, TV, and device sales targeted primarily at residential customers. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to its audience. The company is a subsidiary of Deutsche Telekom AG, reinforcing its strong market position and enterprise scale. Technically, the site employs modern web technologies such as Vue.js and Google Tag Manager, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement and appropriate security headers, though explicit security policy and incident response information are not publicly detailed. Overall, the site demonstrates high trustworthiness and compliance with GDPR and cookie regulations, supporting a positive user experience and business credibility.

W

WESTbahn Management GmbH

westbahn.at

78

WESTbahn Management GmbH operates a professional rail transport service primarily serving Austria and Germany, offering long-distance train services and ticket sales. The website is well-branded and targets passengers seeking affordable and frequent train connections between major cities. The company maintains a consistent market position as an important private rail operator in the region. Technically, the website employs modern web technologies including Google Tag Manager and Cookiebot for consent management, ensuring compliance with privacy regulations. The site is mobile-optimized with good SEO and accessibility features, although some accessibility aspects could be improved. Security posture is strong with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and published security policies. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, though it could enhance transparency by adding privacy and terms of service pages. The domain registration data aligns well with the business, supporting legitimacy and trust.

M

MG Motor Europe

mgmotor.eu

68

MG Motor Europe operates a professional and well-branded website targeting Finnish and broader European markets with a focus on electric and hybrid vehicles. The site offers detailed model information, configurators, test drive requests, and dealer locators, indicating a mature digital presence aligned with automotive industry standards. The technical infrastructure leverages modern web technologies including Google Tag Manager, Imgix CDN, and Swiper.js for UI components, supported by SEOmatic CMS meta generation. Security posture is strong with HTTPS enforced and no visible sensitive data exposure, though security headers and explicit privacy policies are lacking. The absence of direct contact information and incident response details suggests room for improvement in transparency and compliance. Overall, the site is trustworthy and professionally maintained, suitable for its business domain.

A

ADMIRAL Sportwetten

admiral.at

69

ADMIRAL Sportwetten operates an online sports betting platform primarily targeting German-speaking users in Austria. The website offers sports betting services with a focus on providing competitive odds. The business model revolves around online gambling, catering to mature audiences interested in sports wagering. The site branding is consistent and the content is relevant to its target market, though the content quality is basic with limited visible business contact information or policy disclosures. Technically, the website employs modern front-end technologies including Bootstrap and OverlayScrollbars, ensuring a responsive and moderately optimized user experience. However, the absence of visible security headers and privacy-related policies indicates gaps in security and compliance maturity. No advanced analytics or advertising technologies were detected, suggesting minimal tracking or marketing integrations. From a security perspective, the site lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. The WHOIS data aligns well with the business claims, showing consistent registration details and domain age appropriate for the business. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the website demonstrates a functional but basic digital presence with room for improvement in privacy compliance, security posture, and transparency. Strategic enhancements in these areas would strengthen trust and regulatory adherence.

E

Engelbert Strauss GmbH & Co. KG

engelbert-strauss.com

77

Engelbert Strauss GmbH & Co. KG operates the www.strauss.com website, a leading European retailer specializing in high-performance workwear and safety shoes targeted at tradespeople and farmers. The website is professionally designed with a strong international presence, supporting multiple languages and leveraging modern web technologies and CDN hosting for optimal performance. Privacy and cookie policies are comprehensive and GDPR compliant, although direct contact details are primarily available via contact forms rather than explicit emails or phone numbers. The absence of WHOIS data for the domain is a notable anomaly that requires further verification to confirm domain legitimacy. Security posture is strong with HTTPS enforcement and security headers, but the site lacks explicit security policies or incident response information.

W

Werbehelden GmbH

werbehelden.com

55

Werbehelden GmbH is a small Austrian marketing agency specializing in below-the-line marketing, ambient media, promotions, and sampling campaigns. The company offers comprehensive 360-degree promotional services including concept creation, planning, execution, and documentation. Their market position is that of an established regional player with award-winning campaigns and a strong focus on experiential marketing. The website is professionally designed, mobile-optimized, and provides clear navigation and rich content in German targeting business clients seeking direct marketing solutions. Technically, the site uses modern JavaScript libraries, Matomo and Google Analytics for tracking, and implements a detailed cookie consent mechanism with GDPR compliance. Security posture is good with HTTPS enforced and privacy-conscious analytics configurations, but lacks some HTTP security headers and a published security policy or incident response contacts. The WHOIS data is missing or inaccessible, which raises concerns about domain registration legitimacy despite the active and professional website presence. Overall, the site scores well on content quality, technical implementation, and privacy compliance but is slightly penalized for WHOIS inconsistencies and minor security header omissions.

1

1blu GmbH

1blu.de

58

1blu GmbH operates a professional web hosting and server services platform primarily targeting business and professional customers in Germany. Their offerings include web hosting packages, VPS, dedicated servers, domain registration, and a website builder. The company emphasizes performance with NVMe SSD technology and managed hosting options. The website is well-structured, professionally designed, and provides clear pricing and service information. Technical infrastructure appears modern with use of Bootstrap and JavaScript frameworks, hosted in their own German data center in Frankfurt/Main. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacks published security policies or incident response contacts. Overall, the site is trustworthy and compliant with GDPR, with transparent business operations and no suspicious indicators.

A

ARC Imaging Resources

arcsupplies.com

49

ARC Imaging Resources operates a customer supply and service portal accessible via arcsupplies.com. The website serves as a login gateway for existing customers to manage their supply orders and service requests. The business appears to be a niche supplier in the imaging resources retail sector, with a domain age consistent with its founding year of 2012, indicating a stable market presence. The portal is designed with basic but functional user experience and mobile optimization, targeting primarily existing customers requiring supply and service support. Technically, the website uses standard HTML5, CSS3, and JavaScript with a theme framework from Coderthemes. The site is hosted under a domain registered with Network Solutions, LLC, with no DNSSEC enabled and no advanced CMS detected. Performance and accessibility are moderate to good, but SEO and privacy compliance are minimal. No analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the site uses HTTPS (implied by URL), but lacks visible security headers such as Content-Security-Policy or HSTS. The login form does not show anti-CSRF tokens, and no incident response or security contact information is provided. The domain WHOIS data is consistent and trustworthy, with clientTransferProhibited status and no privacy protection, supporting legitimacy. However, the absence of privacy and cookie policies and security best practices reduces the overall security posture. Overall, the website is functional and moderately professional but lacks comprehensive privacy and security measures. Strategic improvements in security headers, privacy compliance, and incident response visibility are recommended to enhance trust and compliance.

S

Smash-Expert

smash-expert.pt

59

Smash-Expert is a specialized e-commerce retailer focused on racket sports equipment including tennis, padel, badminton, table tennis, and squash. The company operates multiple country-specific domains indicating a broad European market presence. Their website offers a comprehensive catalog of products including shoes, rackets, balls, strings, clothing, and accessories, targeting sports enthusiasts and athletes. The business model is retail e-commerce with emphasis on fast delivery and secure payment options. Technically, the website is built on the Magento (OpenMage) platform, leveraging modern web technologies such as Google Analytics, Google Ads, and reCAPTCHA, with a consent management platform to comply with privacy regulations. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Security posture is strong with HTTPS enforced and security best practices observed, but lacks explicit security policies and incident response information. Privacy compliance is partial due to missing explicit privacy and cookie policies. Overall, the website is professional, trustworthy, and well-positioned in the retail racket sports market in Portugal and Europe.

S

Smash-Expert: specialisten på racketsporter

smash-expert.se

56

Smash-Expert.se is a specialized e-commerce retailer focused on racketsports equipment including tennis, padel, badminton, table tennis, and squash. The website targets sports enthusiasts primarily in Sweden, offering a broad range of products with an emphasis on fast delivery and secure payment. The business is relatively new, with domain registration in 2023, and positions itself as a specialist in the racketsports retail market. Technically, the website is built on Magento (OpenMage), leveraging modern web technologies and integrating Google Analytics, Google Ads, and reCAPTCHA for marketing and security purposes. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Security posture is solid with HTTPS enforced and bot protection via reCAPTCHA, but could be improved by enabling DNSSEC and adding more comprehensive security headers. Privacy compliance is partial; while a consent mechanism is implemented, explicit privacy and cookie policy pages are not found, and contact information is not clearly provided. Overall, the website is professional and trustworthy but would benefit from enhanced transparency and security documentation.

H

HAVALning O'zbekistondagi rasmiy distribyutori

haval.uz

46

The website haval.uz serves as the official distributor platform for Haval vehicles in Uzbekistan, offering information on new car models such as H6, H9, Dargo, and Jolion. It targets automotive customers and dealers within Uzbekistan, providing services including vehicle sales, test drives, and promotional offers. The site demonstrates a moderate level of digital maturity with a modern tech stack including Firebase, Yandex Maps API, Google Tag Manager, and Yandex Metrika for analytics and tracking. The design is professional and mobile-optimized, ensuring a good user experience. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks explicit security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. Overall, the site is legitimate and consistent with its business claims, but improvements in privacy and security transparency are recommended.

W

WP Rocket

wp-rocket.com

67

WP Rocket is a well-established company founded in 2013, specializing in WordPress performance optimization through its flagship caching plugin. The company holds a strong market position as a leading WordPress caching solution, targeting a broad audience including bloggers, eCommerce sites, freelancers, and agencies. Their business model revolves around direct sales of their plugin with subscription options, supported by comprehensive documentation and customer testimonials. Technically, the website is built on WordPress, leveraging modern web technologies and third-party tools such as Google Tag Manager, VWO, and Termly for analytics and compliance. The site is fast, mobile-optimized, and SEO-friendly, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, CSP monitoring, and cookie consent mechanisms, although there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, making it a reliable resource for WordPress users seeking performance enhancements.

S

Smash-Expert: specjalista od sportów rakietowych

smash-expert.pl

58

Smash-Expert.pl is an e-commerce retailer specializing in racket sports equipment including tennis, padel, badminton, table tennis, and squash. The website targets sports enthusiasts primarily in Poland, offering a wide range of products from recognized brands with fast shipping and secure payment options. The business appears to be recently established in 2023, consistent with the domain registration data. Technically, the website is built on Magento (OpenMage), employs modern web technologies, and integrates Google Analytics and Google Ads for marketing and tracking. Security posture is good with HTTPS and DNSSEC enabled, and reCAPTCHA implemented to prevent bots. However, the site lacks explicit privacy and cookie policies, security policies, and incident response information, which are important for compliance and trust. Overall, the website is professional and functional with moderate risk, but improvements in privacy compliance and security transparency are recommended.

D

Direct-Running: buty, tekstylia, sprzęt do biegania

direct-running.pl

56

Direct-Running.pl is a specialized e-commerce platform focused on selling running shoes, sportswear, and related equipment primarily targeting Polish and European customers. The website offers a wide range of products from well-known brands such as Adidas, Nike, Saucony, and Puma, emphasizing fast shipping and secure payment options. The business appears to be relatively new, founded in 2023, with a medium-sized market presence in the retail sector. Technically, the website is built on Magento (OpenMage) and integrates modern marketing and analytics tools including Google Analytics, Google Ads, and Actito marketing automation. Security posture is solid with HTTPS and DNSSEC enabled, and bot protection via Google reCAPTCHA is implemented. However, the site lacks explicit privacy and cookie policy pages, and no direct contact information is visible in the provided content, which may impact user trust and compliance. Overall, the website is professionally designed with good navigation and mobile optimization, but improvements in privacy disclosures and security headers are recommended.

B

Basketbalové centrum: Basketbalové vybavení a doplňky

basket-center.cz

58

Basket-center.cz is an e-commerce website specializing in basketball-related apparel, equipment, and accessories, serving primarily the Czech market. The site acts as an official distributor for well-known brands such as Mitchell & Ness, Spalding, Adidas, and Wilson, offering NBA merchandise with promises of fast delivery and secure payment. The website is professionally designed with a comprehensive navigation structure and is optimized for mobile devices. Technically, it is built on the Magento Open Source platform (OpenMage fork) and integrates modern marketing and analytics tools including Google Analytics, Google Ads, and reCAPTCHA for bot protection. The site employs a consent management platform to comply with GDPR requirements, although explicit privacy and cookie policies are not found on the site. Security posture is good with HTTPS enforced and security best practices observed, but the absence of published security policies and incident response contacts is a gap. The WHOIS data presents an inconsistency with a domain creation date set in the future, which raises concerns about domain legitimacy. Overall, the website is functional, secure, and professional but would benefit from improved transparency in privacy and security documentation.

F

Frisbee

frisbeenet.ch

47

Frisbee is a non-profit network organization founded in 2013 that serves as the umbrella for childhood and youth organizations in the canton of Fribourg, Switzerland. It focuses on fostering collaboration, advocacy, and support for its member organizations, promoting extracurricular activities for children and youth. The website reflects a regional community-oriented mission with clear contact information and a bilingual approach (French and German). The technical infrastructure is based on standard web technologies including HTML5, CSS3, jQuery, and Google Analytics with IP anonymization, indicating moderate digital maturity. The site is mobile responsive and well-structured, providing a good user experience. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy and professionally presented, suitable for its non-profit community role.

D

Direct-Running: Laufschuhe, Lauftextilien, Laufausrüstung

direct-running.at

9

Direct-Running.at is a German-language e-commerce website specializing in running shoes, sports apparel, and related equipment. The platform offers a wide range of products from well-known brands such as Adidas, Nike, Saucony, and Puma, targeting runners and sports enthusiasts primarily in Austria and German-speaking regions. The website features a comprehensive product catalog with clear navigation and promotional offers, emphasizing fast shipping and secure payment options. Technically, the site is built on the Magento Open Source (OpenMage) platform, utilizing modern web technologies including Google Analytics, Google Ads, and reCAPTCHA for bot protection. While the site enforces HTTPS and employs consent management for cookies, explicit privacy policies and terms of service pages were not detected in the provided content, indicating room for improvement in privacy compliance. Security posture is moderate with HTTPS enabled but lacking visible security headers and vulnerability disclosure mechanisms. Overall, the website presents a professional and trustworthy retail experience with good content quality and user experience, though enhancements in privacy and security documentation are recommended.

P

Pecheur-Store : Online fishing shop

pecheur-store.ie

62

Pecheur-Store.ie is an e-commerce website specializing in the sale of fishing tackle and equipment, including rods, reels, baits, and accessories for various fishing types such as carp, predator, coarse, and sea fishing. The website targets fishing enthusiasts and anglers primarily in Ireland and possibly France, as indicated by customer service mentions. The business model is retail-focused with an emphasis on fast delivery and secure payment options. The domain is newly registered in 2024, consistent with a recently launched online store. Technically, the website is built on a Magento-based platform (OpenMage variant) and employs modern web technologies including HTML5, CSS3, and JavaScript. It integrates Google Analytics, Google Tag Manager, Google Ads, and reCAPTCHA for analytics, marketing, and security purposes. The site is moderately optimized for performance and mobile devices, with good SEO practices and basic accessibility features. From a security perspective, the site uses HTTPS and includes reCAPTCHA to protect forms, but lacks DNSSEC and explicit security headers such as Content-Security-Policy or X-Frame-Options. No privacy or cookie policies were found in the provided content, though consent management scripts indicate some GDPR compliance efforts. No contact emails or phone numbers were detected, which may impact user trust and support accessibility. Overall, the website presents a professional and trustworthy e-commerce platform with room for improvement in privacy transparency, security hardening, and contact information availability. Strategic recommendations include publishing comprehensive privacy and terms of service pages, enabling DNSSEC, adding security headers, and providing clear contact details to enhance user trust and compliance.

D

Direct-Volley : Number 1 website for online volleyball

direct-volley.ie

52

Direct-Volley.ie is a niche e-commerce platform specializing in volleyball equipment, apparel, and accessories. The website offers a comprehensive catalog of products including shoes, volleyballs, protective gear, and club equipment, targeting volleyball players and fans primarily in Ireland. The business appears to be newly established in late 2023, with a clear focus on fast delivery and competitive pricing. The site demonstrates a consistent brand presence and a well-structured navigation system that supports user experience and product discovery. Technically, the website is built on the Magento (OpenMage) platform, leveraging modern web technologies and integrating Google Analytics, Google AdWords, and marketing automation tools such as Actito. The site is secured with HTTPS and employs reCAPTCHA to mitigate bot activity. However, the absence of explicit privacy and cookie policy pages, as well as contact information, indicates areas for compliance and trust improvement. The domain registration is transparent and consistent with the business purpose, though DNSSEC is not enabled, representing a minor security gap. Overall, the website is functional and professionally presented but would benefit from enhanced privacy disclosures and contact transparency to improve user trust and regulatory compliance.

P

Pure Paros Studios

pure-paros-studios.com

48

Pure Paros Studios operates a luxury apartment rental service focused on a high-end studio apartment experience on the Greek island of Paros. The website presents a professional and visually appealing platform targeting tourists seeking comfort and elegance. The business offers additional personalized services such as airport pick-up and local guides, positioning itself as a niche hospitality provider. Technically, the site uses modern web standards with HTTPS and Matomo analytics, indicating a moderate level of digital maturity. However, the absence of privacy and cookie policies and lack of security headers highlight compliance and security gaps. The WHOIS data is missing, which raises concerns about domain legitimacy despite the active and professional website presence. Overall, the site is safe and trustworthy for users but would benefit from improved transparency and security practices.

Ö

Österreichisches Rotes Kreuz Landesverband Oberösterreich

missionhumanity.at

49

MissionHumanity is a social engagement platform operated by the Austrian Red Cross Upper Austria branch, focusing on youth and community-driven social projects since 2020. The website serves as an information hub, project submission portal, and news outlet to foster community participation and social responsibility. It maintains a strong regional presence with partnerships in education and corporate sectors. Technically, the site uses modern web technologies including responsive design, JavaScript libraries like Owl Carousel, and privacy-focused Matomo analytics. Security posture is solid with HTTPS and basic security practices, though some security headers could be enhanced. Privacy compliance is well addressed with clear cookie consent and a GDPR-aligned privacy policy. Contact information is transparent and professional, reinforcing trust. Overall, the site is well-positioned as a credible non-profit platform with good digital maturity and community impact.

W

Weinbau Mayer

weinbau-mayer.at

55

Weinbau Mayer is a small, family-owned winery and Heuriger located in Perchtoldsdorf, Austria, specializing in producing high-quality white and red wines, including rare varieties. The business combines traditional wine production with hospitality services and an online wine shop, targeting wine enthusiasts and local visitors. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content including downloadable price lists and menus. Technically, the site uses modern web technologies and privacy-conscious analytics (Matomo), with HTTPS enforced and secure form handling. However, it lacks explicit security policies and incident response information. Overall, the security posture is good but could be improved by adding security headers and vulnerability disclosure mechanisms. The site complies with GDPR, featuring privacy and cookie policies with consent mechanisms. No suspicious or malicious elements were detected, and the WHOIS data confirms the legitimacy and consistency of the domain registration. The site is suitable for mature audiences due to its alcohol-related content but contains no explicit adult material.

The website modoo.at was a platform operated by Naver Corporation offering homepage creation services under the brand 'modoo!'. The current content indicates that the service has been officially terminated as of June 26, 2025, and no longer operates. The site serves solely as a notice of this termination with minimal content and no interactive elements or additional service offerings. Technically, the site uses standard HTML and CSS with custom fonts and static assets hosted on Naver's infrastructure. There is no evidence of advanced frameworks or CMS usage. Security posture is minimal with no visible security headers or policies, and no HTTPS status was provided in the data. Privacy and cookie policies are absent, indicating a lack of compliance features on this page. No contact or incident response information is provided, limiting user support options. Overall, the site is safe, with no adult or questionable content, but lacks comprehensive privacy and security features. The domain registration is consistent with Naver Corporation, confirming legitimacy.

H

Haufe Group SE

haufegroup.com

57

Haufe Group SE is a leading B2B provider specializing in integrated business and workplace solutions, including content, software, and training services. The company targets enterprises and professionals primarily in Germany, positioning itself as a key player in the technology sector. The website reflects a mature, professional brand with clear leadership and subsidiary information, supporting its market position. Technically, the site is built on modern web technologies such as Webflow CMS, jQuery, and Swiper.js, with strong mobile optimization and good SEO practices. Security posture is solid with HTTPS, consent management, and encrypted communication options, though some security headers and incident response details could be improved. Overall, the domain appears legitimate despite missing WHOIS registration details, and the site demonstrates strong privacy compliance and business credibility.

The website zweier-prellball.de is a domain parking page offering the domain for sale. It provides categorized links to various shopping and informational categories, likely monetized through affiliate or lead generation mechanisms. The site targets a general audience interested in purchasing the domain or browsing categorized content. The business model is primarily domain resale with minimal direct services or products. The market position is that of a domain marketplace listing without a clear operational business entity. Technically, the site uses standard HTML5, CSS3, and JavaScript with a custom captcha system to prevent automated bot access. The site is moderately optimized for mobile devices and has a clean, modern design. However, there is no evidence of a CMS or advanced frameworks. Performance is moderate with basic SEO and accessibility features. No hosting provider or SSL certificate information is available from the data provided. From a security perspective, the site employs a simple captcha and honeypot links to deter bots, but lacks visible HTTPS enforcement and security headers. There is no exposed sensitive data or vulnerable libraries detected, but the absence of HTTPS and security headers lowers the security posture. Privacy compliance is minimal with only a basic privacy policy page and no cookie consent mechanism. No contact or incident response information is provided, limiting trust and transparency. Overall, the site presents a low-risk profile but also low trustworthiness due to missing WHOIS data, lack of business information, and minimal security controls. Strategic recommendations include implementing HTTPS, adding security headers, improving privacy compliance, and providing clear contact and business information to enhance credibility and user trust.

Grazer Athletiksport Klub 1902 is a historic football club based in Graz, Austria, with a strong local presence and a dedicated fan base. The website serves as a comprehensive portal for club news, team information, ticket sales, merchandise, and youth academy details. It effectively targets football fans and club members, providing relevant content and engagement opportunities. Technically, the site employs modern web technologies including Vue.js and Laravel, integrates Google Analytics for tracking, and uses Mailchimp for newsletter subscriptions. The site is mobile-optimized and features a clear navigation structure, contributing to a positive user experience. Security-wise, the website enforces HTTPS and implements a cookie consent mechanism, though it lacks advanced security headers and explicit incident response policies. Overall, the domain registration details align well with the club's identity, supporting legitimacy and trustworthiness.

The website www.teamwerft.de is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks content until human verification is completed. As a result, no business information, contact details, or policy documents are available for analysis. The site appears to be hosted on Jimdo platform with Cloudflare providing security and performance services. The lack of accessible content prevents a full assessment of the company's market position, services, or compliance posture. Technically, the site uses modern security mechanisms such as Cloudflare's WAF and captcha but no further technical or security details are visible. Overall, the site is protected but currently not analyzable beyond the security challenge.

D

DOSB New Media GmbH

turn-deutschland.tv

59

Sport Europe, operated by DOSB New Media GmbH, is a German-based media platform specializing in streaming and broadcasting sports content targeted at European sports fans. The website presents a professional design with good content relevance and user experience, leveraging modern web technologies such as Bootstrap and Font Awesome. The technical infrastructure is hosted by IONOS SE, a reputable provider, and the domain registration aligns with the business entity and location, supporting legitimacy. However, the website lacks critical compliance elements such as privacy and cookie policies, and no contact information is readily available, which may impact user trust and regulatory compliance. Security posture is moderate with SSL enabled but missing key security headers and incident response information.

W

WSC

wsc.group

58

WSC Group is a specialized company in the motorsport industry, focusing on rule-making and service provision for car racing, particularly in Touring Car categories. Founded in 2014 and based in Switzerland, WSC has established itself as a key player by launching the TCR category and pioneering electric Touring Car racing with ETCR. The company also engages in SIM Racing competitions, reflecting a modern approach to motorsport. The website is professionally designed using Squarespace, with good content quality and clear navigation aimed at motorsport professionals and enthusiasts. Technically, the site uses modern web technologies and enforces HTTPS with HSTS, ensuring a secure browsing experience. However, the absence of privacy and cookie policies, lack of explicit contact information, and unavailable WHOIS data reduce the overall trust and compliance posture. Strategic improvements in privacy compliance and transparency are recommended to enhance credibility and security.

K

Kulturkreis Senne e.V.

kulturkreis-senne.de

39

Kulturkreis Senne e.V. is a local non-profit cultural organization serving the Senne district in Bielefeld, Germany. The organization offers a diverse cultural program including events such as multimedia shows, concerts, and literary gatherings. The website serves as an information hub for upcoming events, ticket sales, and community engagement, targeting local residents and culture enthusiasts. The business model focuses on community cultural enrichment rather than commercial profit. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and jQuery. It uses common plugins such as Yoast SEO and Contact Form 7, indicating a moderate level of digital maturity. The site is mobile-optimized and SEO-friendly, with good performance and accessibility standards. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security policies, incident response information, and vulnerability disclosure mechanisms. Privacy compliance is well addressed with a cookie consent banner and a GDPR-compliant privacy policy. Contact information is clearly provided, enhancing business credibility. Overall, the website presents a low-risk profile with good content quality and technical implementation. Strategic improvements in security headers, incident response transparency, and vulnerability disclosure could further enhance trust and resilience.

The website mdhosts.at is currently inactive and displays a placeholder page indicating that the webspace is not active. The only business reference is a link to Media Data IKT GmbH, suggesting that this domain is related to or owned by this company. There is no business description, services, or other content available on the site. Technically, the site uses basic HTML5 and CSS3 with Google Fonts but lacks modern frameworks, CMS, or advanced technologies. No security headers or HTTPS information is available, indicating a poor security posture. Privacy and cookie policies are absent, and no contact information or forms are present, limiting user engagement and compliance with data protection regulations. Overall, the site is minimal and does not provide meaningful content or business information.

S

Sportstiftung Hessen

sportstiftung-hessen.de

57

Sportstiftung Hessen is a regional non-profit foundation dedicated to supporting young athletes and trainers in the Hessen region of Germany. The foundation provides financial aid, scholarships, and advisory services to foster athletic talent, focusing on Olympic, Paralympic, Deaflympic, Special Olympics, and World Games disciplines. The website reflects a well-structured and professionally designed digital presence, leveraging modern web technologies including Webflow CMS, Usercentrics for consent management, and accessibility tools like eyeAble. The content is primarily in German and targets athletes, trainers, and sports supporters within Hessen. Security posture is strong with HTTPS enforced and GDPR compliance mechanisms in place, although explicit security policies and incident response contacts are not published. Overall, the website is trustworthy, accessible, and aligned with its mission to promote sports excellence in Hessen.

H

Handball-Store: Numer 1 wśród stron internetowych poświęconych piłce ręcznej

handball-store.pl

56

Handball-Store.pl is a specialized e-commerce platform focused on providing comprehensive handball equipment, apparel, and accessories primarily targeting handball players and enthusiasts in Poland and Europe. The website offers a wide range of products including shoes, balls, textiles, protective gear, and club equipment, positioning itself as a leading online store in its niche. The business appears to be recently established in 2023, with a consistent domain registration and a clear market focus. Technically, the website is built on Magento (OpenMage), leveraging modern web technologies and integrated with Google Analytics and Google Ads for marketing and performance tracking. Security measures include HTTPS with DNSSEC enabled and Google reCAPTCHA to mitigate bot traffic. However, explicit privacy and cookie policies are not found, though a consent management platform is implemented, indicating partial GDPR compliance. Contact information is not prominently displayed, which may affect user trust and support accessibility. Overall, the site demonstrates a good balance of content quality, technical implementation, and security posture, but could improve in privacy transparency and contact availability.

FUTOUR GmbH is a well-established German consultancy specializing in tourism and regional development with over 30 years of experience. The company offers a broad range of services including tourism concepts, regional management, feasibility studies, marketing consulting, and quality management. Their market position is strong within their niche, supported by multiple regional offices and a professional online presence. Technically, the website uses modern web technologies including Google Maps API and Google Fonts, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and cookie consent implemented, though there is room for improvement in security headers and incident response transparency. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

T

tatwort Nachhaltige Projekte GmbH

tatwort.at

50

tatwort Nachhaltige Projekte GmbH is a small Austrian company specializing in sustainable projects, aiming to create solutions with lasting impact. The website is professionally designed using WordPress with Astra theme and includes key navigation for company information, services, projects, team, and contact. The site is primarily in German and targets a general audience interested in sustainability. Technically, the site is hosted by World4You Internet Services GmbH, uses HTTPS with a valid SSL certificate, and employs modern WordPress plugins including Borlabs Cookie for GDPR-compliant cookie consent. Security posture is good with HTTPS and cookie consent but lacks advanced security headers and explicit security policies. No contact emails or phone numbers are directly visible on the homepage, and no terms of service or vulnerability disclosure pages are present. Overall, the site is trustworthy, professional, and compliant with basic privacy regulations.

C

Caldecott Music Group

caldecottmusic.com

61

Caldecott Music Group is a global operator, innovator, and investor in the music industry, connecting various music brands and products worldwide. The company positions itself as a significant player in the media and music sectors, with multiple subsidiaries and brands under its umbrella, including BandLab Technologies, NME Networks, and Vista Musical Instruments. The website reflects a professional and modern digital presence built on the Framer platform, with integration of Google Analytics for user tracking. Security posture is generally good with HTTPS enabled, but lacks some security headers and formal privacy and cookie policies, which are important for compliance and trust. Overall, the site is accessible and well-structured, targeting music industry professionals and investors.

B

Britta Mackenrodt | Privatpraxis für Frauenheilkunde

frauenarzt-mackenrodt.de

63

Britta Mackenrodt operates a private gynecology and obstetrics practice in Köln, Germany, focusing on holistic and personalized women's healthcare. The website presents a professional image with clear descriptions of services such as bioidentical hormones, laser therapy, and preventive medicine. The practice targets female patients seeking advanced and empathetic gynecological care. Technically, the website uses modern web technologies including Bootstrap and Cookiebot for cookie consent management, hosted with DNS services from DomainControl. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enabled and cookie consent implemented, though security headers are not detected and no explicit security or incident response policies are published. Overall, the website is trustworthy and compliant with GDPR, with clear contact information and no suspicious content.

Y

YellowMap AG

yellowmap.de

54

YellowMap AG operates a comprehensive local business directory platform for Germany, offering over 5 million listings including companies, services, maps, events, and more. The website targets general users seeking local business information and related services such as hotels, pharmacies, and restaurants. The platform is well-established with visible partnerships and affiliate programs enhancing its market position. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript libraries like jQuery and Slick Carousel, and integrates Piwik analytics for user tracking. The site is mobile-optimized with good SEO and accessibility basics. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks visible advanced security headers and explicit security policies. Overall, the site is professional, trustworthy, and safe for general audiences.

The website valao.de serves as a simple informational landing page announcing the rebranding of valao digital to Tidenhub Digital GmbH and the migration of all content to website-tutor.com. The business focuses on providing digital project guidance and educational content primarily targeting beginners in digital projects. The site is minimalistic with basic HTML and CSS, hosted via INWX nameservers, and lacks advanced technical frameworks or CMS. Security posture is limited with no detected security headers or privacy policies, and no analytics or tracking technologies are present. Contact information is clearly provided, enhancing business credibility. Overall, the site is functional but basic, with room for improvement in security and privacy compliance.