Security Directory

D

DVSC Futball Zrt.

dvsc.hu

51

DVSC Futball Zrt. operates as a professional Hungarian football club with a well-established online presence, offering comprehensive football-related services including team management, match hosting, ticket sales, and merchandising. The website targets football fans and the local community, leveraging a medium-sized business model with a strong brand identity and consistent digital branding. The domain age dating back to 1997 supports the club's longstanding history. Technically, the website is built on WordPress with Bootstrap 5 and specialized sports plugins, integrating modern analytics and marketing tools such as Google Analytics and Facebook Pixel. The site demonstrates good mobile optimization, SEO practices, and moderate performance, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, employs GDPR-compliant consent mechanisms, and avoids exposing sensitive data. However, it lacks explicit security headers and dedicated security or incident response policies, which could be improved to enhance resilience. No critical vulnerabilities or blocking mechanisms were detected. Overall, the website presents a professional, trustworthy, and user-friendly platform aligned with the business goals of DVSC Futball Zrt. Strategic recommendations include enhancing security headers, formalizing incident response documentation, and continuous monitoring of third-party scripts to maintain security and compliance.

U

UPC

upc.ch

73

UPC, now part of Sunrise, is a major telecommunications provider in Switzerland offering mobile, internet, and TV subscription services with 5G capabilities and bundled offers. The website is professionally designed and targets Swiss consumers seeking telecommunications services. The technical infrastructure is modern, leveraging Adobe Experience Manager CMS and Adobe Marketing Cloud tools including Adobe Analytics and Target, alongside Google Analytics and Facebook Pixel for tracking and marketing. The security posture is strong with HTTPS enforced and no exposed sensitive data, though explicit security headers and published security policies are absent. Privacy compliance is basic with no visible privacy or cookie policies in the provided content. Overall, the website is credible and trustworthy with consistent WHOIS data supporting legitimacy.

D

DAB+

dabplus.ch

47

DAB+ is a Swiss digital radio information platform focused on educating and assisting the public and industry stakeholders in the transition from UKW to DAB+ broadcasting. The website offers comprehensive content including FAQs, tutorials, news, and a chatbot to support users. It holds a strong market position as a leading source for DAB+ information in Switzerland, targeting radio listeners, automotive users, media professionals, and garages. The platform is well-branded, professionally designed, and consistently maintained with a clear focus on user experience and accessibility. Technically, it is built on WordPress with modern frameworks and integrates multiple analytics and marketing tools while maintaining GDPR compliance through a robust cookie consent mechanism. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Contact information is available via email, phone, and a validated contact form. No critical issues or suspicious elements were detected, supporting a high trustworthiness rating.

Haluxvill Kft. operates a professional e-commerce platform specializing in electrical supplies, serving both retail and wholesale customers primarily in Hungary. The website offers a broad catalog of electrical products, indicating a medium-sized business with a solid regional presence in the energy sector. The technical infrastructure leverages common web technologies such as jQuery, Bootstrap, Google Analytics, and Hotjar, reflecting a moderate level of digital maturity with room for modernization and enhanced performance optimization. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit privacy and terms of service documentation, which are important for compliance and trust. Overall, the site is accessible, well-structured, and professionally branded, though improvements in privacy compliance and security best practices are recommended to strengthen the business's digital trustworthiness and regulatory adherence.

H

HelpChat

haltdergewalt.at

72

HelpChat is a specialized online counseling platform dedicated to supporting women and girls affected by various forms of violence in Austria. The service offers anonymous, free, and confidential chat-based counseling during specified hours, focusing on providing advice, referrals, and psychosocial support without offering psychotherapy. The website positions itself as a trusted non-profit resource with strong ties to official Austrian support organizations and a clear target audience. Technically, the site is built on Joomla CMS with modern frontend enhancements, including accessibility features and multilingual support via GTranslate. The presence of Google Analytics and Facebook Pixel indicates moderate user tracking balanced with GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and cookie consent blocking session cookies until acceptance, though explicit security policies and incident response contacts are absent. Overall, the site demonstrates a good balance of usability, privacy, and trustworthiness appropriate for its non-profit counseling mission.

S

Seniorentreff im Internet

seniorentreff.de

45

Seniorentreff im Internet is a well-established German-language online community platform targeting seniors aged 50 and above. It offers a broad range of services including forums, blogs, interest groups, chats, and real-life event coordination, fostering social connections among its members. The platform operates on a free-to-use model supported by advertising and partner offers, positioning itself as a trusted and comprehensive social network for seniors in Germany. The website demonstrates consistent branding and professional content quality, appealing to its mature audience effectively. Technically, the website employs a variety of modern web technologies such as Google Tag Manager, Facebook SDK, Google Adsense, and Cookiefirst for consent management. It uses HTTPS with good SSL configuration and integrates third-party services for analytics, advertising, and social login. The site is mobile-optimized with good navigation and SEO practices, although no major CMS or hosting provider details are explicitly detected. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and uses reCAPTCHA on forms, but lacks visible security headers and a published security policy or incident response contacts. There are no detected vulnerabilities or exposed sensitive data in the provided content. Privacy compliance is strong with clear privacy and cookie policies and a consent mechanism in place, aligning with GDPR requirements. The WHOIS data is minimal but consistent, supporting the legitimacy of the domain. Overall, Seniorentreff im Internet presents a secure, privacy-conscious, and user-friendly platform with a strong focus on community engagement for seniors. Strategic improvements in security headers, incident response transparency, and technical performance could further enhance its security posture and user trust.

A

ASD Napoli Running

napolirunning.com

60

ASD Napoli Running is a non-profit organization dedicated to organizing running events and promoting running culture primarily in Naples, Italy. The website showcases upcoming events such as the Napoli City Half Marathon and related activities, supported by a network of institutional and commercial partners. The organization targets runners, volunteers, and the local community, emphasizing engagement and sports promotion. Technically, the website is built on WordPress with WooCommerce and uses modern JavaScript libraries and tracking tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and anti-bot measures like reCAPTCHA, though cookie consent mechanisms could be improved. The absence of WHOIS data limits domain trust verification but the site content and partnerships indicate legitimacy. Overall, the site is professional, content-rich, and well-positioned in its niche.

R

RunCzech Store

runczechstore.com

60

RunCzech Store is a Czech Republic-based e-commerce retailer specializing in running shoes, apparel, and official race merchandise, primarily featuring the adidas brand. The website targets runners and sports enthusiasts, offering a comprehensive product catalog with a professional and consistent brand presentation. The business operates on the Shoptet e-commerce platform, leveraging modern web technologies and marketing tools such as Google Analytics and Facebook Pixel. The site is well-optimized for mobile devices and provides clear navigation and user experience. Security measures include HTTPS enforcement and CSRF protection on forms, though some outdated libraries present potential risks. Privacy compliance is robust with visible cookie consent and a comprehensive privacy policy. However, the absence of WHOIS registration data raises concerns about domain legitimacy, warranting further verification. Overall, the site demonstrates a solid digital presence with moderate security posture and good privacy practices.

U

UMB AG

umb.ch

59

UMB AG is a Swiss-based IT services company specializing in digital transformation, cloud solutions, cybersecurity, and consulting. The company positions itself as a leading provider in Switzerland, serving large enterprises and SMEs with a broad portfolio of IT services and innovative solutions. Their website reflects a mature digital presence with comprehensive service descriptions and a strong employer brand. Technically, the site is built on TYPO3 CMS, integrates modern analytics and marketing tools, and employs Cloudflare for security and performance. Security posture is strong with HTTPS, bot filtering, and cookie consent mechanisms, though a dedicated security policy and incident response contacts are absent. Overall, the website is professional, trustworthy, and compliant with GDPR, making it a reliable digital front for the company.

M

MÁV-csoport

mavcsoport.hu

48

MÁV-csoport is the Hungarian state-owned railway group providing comprehensive passenger transport, infrastructure management, and related services. The website serves as an information and service portal targeting travelers, business partners, and the general public. It offers ticketing, schedules, news, and corporate information, positioning itself as the leading national railway operator in Hungary. The site is well-branded, consistent, and professionally maintained. Technically, the website is built on Drupal CMS with modern JavaScript libraries and responsive design, ensuring good mobile optimization and accessibility. It integrates Google Analytics and Facebook Pixel for analytics and marketing, with a clear cookie consent mechanism compliant with GDPR. Performance is moderate with room for optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though additional security headers and a public security policy could enhance trust. No incident response or vulnerability disclosure information is publicly available. Overall, the site is trustworthy, compliant, and professionally managed, reflecting the stature of a large state enterprise.

D

DKV Debreceni Közlekedési Zrt.

dkv.hu

11

DKV Debreceni Közlekedési Zrt. is the primary public transportation operator in Debrecen, Hungary, providing bus, trolleybus, and tram services. The company offers ticket and pass sales, travel planning, and maintains a strong digital presence with a modern, well-structured website. Their market position is solid as a key local transportation provider serving a broad audience including daily commuters and visitors. The website is professionally designed, mobile-optimized, and integrates essential services such as ticket purchasing and real-time travel information. Technically, the site leverages modern frameworks like React and Next.js, integrates Google Maps API for location services, and uses tracking tools such as Google Analytics and Facebook Pixel with proper consent mechanisms. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers could be improved. Overall, the site reflects a mature digital infrastructure supporting a large transportation business with clear contact information and trust signals. No critical vulnerabilities or suspicious content were detected.

S

SELECT Sport International

select-sport.com

75

SELECT Sport International operates a professional e-commerce website specializing in sports equipment, including footballs, futsal balls, handballs, sportswear, and training equipment primarily targeting clubs and athletes. The company leverages the Shopify platform to deliver a modern, responsive, and user-friendly online shopping experience. The website demonstrates good content quality, consistent branding, and comprehensive privacy and cookie policies, reflecting a mature digital presence. However, the absence of WHOIS registration data introduces some uncertainty regarding domain ownership transparency. Technically, the site employs modern web technologies including Shopify's Liquid framework, JavaScript ES modules, and integrates third-party analytics and marketing tools such as Google Analytics and Facebook Pixel. The site is hosted on Shopify's CDN infrastructure, ensuring good performance and security. Cookie consent mechanisms are robust, supporting GDPR compliance. Accessibility and SEO optimizations are present but could be enhanced further. From a security perspective, the website enforces HTTPS with strong SSL configuration and includes standard security headers, although explicit security policies and incident response contacts are not published. No vulnerabilities or exposed sensitive data were detected. The overall security posture is solid but could benefit from additional transparency and documentation. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include publishing explicit security and incident response policies, improving accessibility compliance, and addressing the WHOIS data gap to enhance trust and transparency.

E

European Handball Federation (EHF)

ehftv.com

66

EHFTV.com is the official streaming platform of the European Handball Federation, providing live and on-demand handball competition content to fans worldwide. The platform offers a subscription-based model with free registration, enabling personalized fan experiences. It holds a strong market position as the primary digital destination for EHF competitions, supported by consistent branding and comprehensive content offerings. Technically, the site leverages modern web technologies including Next.js, cloud CDN services, and integrates multiple analytics and marketing tools while maintaining good performance and mobile responsiveness. Security posture is solid with HTTPS enforcement and domain transfer protection, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Privacy compliance is robust, with comprehensive policies and cookie consent mechanisms implemented via Iubenda. Overall, EHFTV.com demonstrates a mature digital presence with high trustworthiness and professional execution.

R

RunCzech s.r.o.

runczech.com

62

RunCzech s.r.o. operates as the largest organizer of running events in the Czech Republic, including the Prague International Marathon and Prague Half Marathon. The company targets runners and running enthusiasts, providing event organization, registration, and results services. The website is professionally designed, mobile-optimized, and rich in relevant content, reflecting a mature digital presence. Technically, the site is built on WordPress with modern plugins and tracking tools, ensuring good SEO and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response information are lacking. The absence of WHOIS registration data is a concern for domain legitimacy verification but is mitigated by the professional site and consistent branding. Overall, the site demonstrates a strong business and technical foundation with room for improvement in security transparency and contact information availability.

Fenster zum Sonntag Talk is a Swiss Christian media website focused on TV talk shows broadcast on SRF channels. It provides viewers with insights into personal life stories and the role of faith. The site is professionally designed using WordPress and modern web technologies, with a consistent brand presence and good content quality. The technical infrastructure includes multiple analytics platforms and a cookie consent mechanism, reflecting a mature digital presence. Security posture is strong with HTTPS enforcement and security headers, though some compliance areas like terms of service and incident response policies could be improved. Overall, the site is trustworthy and well-maintained, serving a general audience interested in religious and social topics.

E

ERF Medien

lifechannel.ch

56

Life Channel is a Swiss-based Christian media broadcaster offering 24/7 radio programming, podcasts, music streaming, and news content focused on faith and constructive journalism. The website is professionally designed with consistent branding and targets German-speaking Christian audiences. Technically, it is built on WordPress with modern libraries and frameworks such as UIkit and JW Player, and integrates multiple analytics platforms including Matomo, Plausible, Google Tag Manager, and Facebook Pixel. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though advanced security headers and explicit security policies are absent. Overall, the site demonstrates good compliance with GDPR and provides clear privacy and cookie policies. The domain registration data aligns well with the website's claims, supporting legitimacy.

E

ERF Medien

radio-erf-plus.ch

51

ERF Medien Schweiz operates Radio ERF Plus, a Christian 24-hour radio station providing inspirational content for listeners in Switzerland. The website serves as a platform to promote the radio service, offer downloadable programming, newsletters, and facilitate donations to support broadcasting costs. The organization positions itself as a niche media provider focused on faith-based content with a clear target audience of Christian listeners. The business model is non-profit, relying on donations and community support. Technically, the website is built on WordPress with modern libraries and analytics tools, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS, cookie consent, and multiple tracking protections, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR regulations, reflecting a mature digital presence for a small media entity.

B

Basket-Center: Equipamiento y accesorios de baloncesto

basket-center.es

60

Basket-Center.es is a professional e-commerce platform specializing in basketball equipment, apparel, and accessories. It serves primarily Spanish-speaking customers and offers products from well-known brands such as Mitchell & Ness, Spalding, Adidas, and Wilson. The site positions itself as a leading online basketball store in Spain with a focus on fast delivery and secure payment options. Technically, the website is built on Magento (OpenMage) and integrates multiple modern marketing and tracking technologies including Google Analytics, Facebook Pixel, and Google Ads. The site uses HTTPS and implements reCAPTCHA for security, but lacks some advanced security headers and visible privacy documentation. The absence of WHOIS data due to Red.es restrictions limits full verification of domain legitimacy. Overall, the site demonstrates a moderate to good security posture and a solid business presence in the retail sports sector.

F

Foot-store: Tienda de fútbol 100% | Jerseys y zapatos

foot-store.es

58

Foot-store.es is a specialized e-commerce retailer focused on football-related products including boots, jerseys, and equipment. The site targets football players, fans, and sports enthusiasts primarily in Spain but is part of a broader network of country-specific domains. The business model is retail e-commerce with a focus on fast delivery and competitive pricing. Technically, the website is built on Magento (OpenMage), leveraging modern web fonts and responsive design. It integrates multiple marketing and tracking tools such as Google Analytics, Facebook Pixel, and affiliate tracking via AWIN. Security posture is adequate with HTTPS enforced and consent management implemented, but lacks some security headers and explicit privacy and terms pages. The WHOIS data is not publicly accessible due to Red.es restrictions, which is typical for .es domains, but this limits transparency. Overall, the site is professional, trustworthy, and safe for general audiences.

H

HAVALning O'zbekistondagi rasmiy distribyutori

haval.uz

46

The website haval.uz serves as the official distributor platform for Haval vehicles in Uzbekistan, offering information on new car models such as H6, H9, Dargo, and Jolion. It targets automotive customers and dealers within Uzbekistan, providing services including vehicle sales, test drives, and promotional offers. The site demonstrates a moderate level of digital maturity with a modern tech stack including Firebase, Yandex Maps API, Google Tag Manager, and Yandex Metrika for analytics and tracking. The design is professional and mobile-optimized, ensuring a good user experience. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks explicit security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. Overall, the site is legitimate and consistent with its business claims, but improvements in privacy and security transparency are recommended.

E

Enigma SA

enigma.swiss

56

Enigma SA is a Swiss-based digital marketing agency with a regional presence in Geneva, Bern, and Zurich. The company offers a comprehensive suite of digital marketing services including strategy, design, branding, digital trading, and growth hacking. The website reflects a professional business model targeting businesses seeking digital marketing expertise in Switzerland. The company was founded in 2016, consistent with the domain registration date, and maintains a consistent brand presence online. Technically, the website is built on WordPress with modern JavaScript frameworks like Svelte and uses Cloudflare for DNS management. It integrates multiple marketing and analytics tools such as Google Analytics, HubSpot, Facebook Pixel, and Bing Ads, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS, has domain transfer locks, and uses Cloudflare DNS, but could improve by enabling DNSSEC and adding more HTTP security headers. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. However, explicit terms of service and security policies are not found. Overall, the website is trustworthy, professionally maintained, and compliant with key privacy regulations.

W

World Vision Schweiz und Liechtenstein

worldvision.ch

50

World Vision Schweiz und Liechtenstein is a well-established non-profit organization dedicated to supporting children and families in need through sponsorships, donations, and humanitarian aid. With 75 years of experience and operations in over 100 countries, it holds a strong market position in the Swiss charitable sector. The website reflects a professional and trustworthy image, featuring multiple certifications and transparent donation options. Technically, the site is built on WordPress with modern plugins and optimized for performance and accessibility. Security posture is good with HTTPS and secure forms, though improvements can be made in explicit security headers and incident response disclosures. Overall, the site is safe, compliant, and user-friendly, targeting donors and supporters globally.

C

Compassion Suisse

compassion.ch

57

Compassion Suisse is a well-established non-profit organization dedicated to liberating children from extreme poverty through child sponsorship programs in 29 countries. The organization collaborates with over 8700 local churches and supports more than 2 million children globally. Their website reflects a professional and consistent brand image, targeting donors, volunteers, and churches. The digital infrastructure is built on WordPress with modern plugins and tracking tools, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS and consent management, though some security headers could be enhanced. Overall, the website is trustworthy, compliant with GDPR, and provides clear contact and business information.

E

ERF Medien

erf-medien.ch

51

ERF Medien is a Swiss Christian media organization providing multimedia content including podcasts, articles, radio programs, and various services targeting a general audience interested in faith, society, and life questions. The website is professionally designed with consistent branding and offers a broad range of content and services, positioning it as an established player in the Swiss Christian media sector. Technically, the site is built on WordPress with modern frameworks like UIkit and integrates multiple analytics and marketing tools while maintaining GDPR compliance through a comprehensive cookie consent mechanism. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Overall, the site is safe, trustworthy, and well-optimized for users, with clear navigation and good mobile responsiveness.

M

Mercy Ships Deutschland e.V.

mercyships.ch

68

Mercy Ships Deutschland e.V. operates as a non-profit humanitarian organization providing life-saving surgery, medical mentoring, and training courses primarily in Africa. The organization maintains a professional and consistent online presence with a focus on volunteer engagement and medical aid. The website is built on a modern WordPress platform with multilingual support and integrates various plugins for SEO, user interaction, and performance optimization. Social media channels are actively linked, enhancing outreach and trust. Technically, the site employs HTTPS with good SSL configuration and uses consent management tools to comply with cookie regulations. However, explicit privacy policies and terms of service pages are not found, which could be improved for better compliance and transparency. Security posture is solid with no critical vulnerabilities detected, but the absence of security headers and incident response information suggests room for enhancement. Overall, the site reflects a credible and trustworthy NGO with a moderate to good digital maturity level.

P

Pépinières Naudet

pepinieres-naudet.com

58

Pépinières Naudet operates an online nursery specializing in the sale of trees and shrubs, targeting gardeners and landscaping enthusiasts primarily in France. The website is built on the PrestaShop e-commerce platform and integrates several marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Sendinblue. The site demonstrates a good level of content quality and user experience with a professional design and clear navigation. However, the absence of a publicly accessible WHOIS record raises concerns about domain registration legitimacy. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit privacy policies. Overall, the site is functional and trustworthy for retail customers but would benefit from improved transparency and compliance documentation.

S

Smash-Expert: Der Spezialist für Racketsportarten

smash-expert.de

61

Smash-Expert.de is a specialized e-commerce retailer focused on racket sports equipment including tennis, padel, badminton, squash, and table tennis. The website offers a broad catalog of products such as shoes, rackets, balls, clothing, and accessories, targeting sports enthusiasts primarily in Germany. The business model is retail-oriented with an emphasis on fast delivery and secure payment options. Technically, the site is built on a Magento (OpenMage) platform, integrating modern marketing and analytics tools such as Google Analytics, Facebook Pixel, and Google Ads, indicating a mature digital marketing strategy. The website is mobile-optimized with good navigation and performance characteristics. Security posture is adequate with HTTPS enforced and reCAPTCHA implemented, but lacks some advanced security headers and explicit security policies. Privacy compliance is partially addressed through cookie consent mechanisms, but the absence of a clear privacy policy and terms of service pages is a notable gap. Overall, the site presents a professional and trustworthy retail presence with room for improvement in transparency and security documentation.

F

Foot-store: 100% Fußballgeschäft : Pullover und Schuhe

foot-store.de

62

Foot-store.de is a German e-commerce website specializing in football-related products including shoes, jerseys, training clothing, and accessories. The site targets football enthusiasts, clubs, and athletes, offering a wide range of branded products with a focus on fast delivery and competitive pricing. The website is part of a broader network of localized sites serving multiple European markets. Technically, the site is built on a Magento-based platform (OpenMage variant) and integrates multiple modern marketing and analytics tools such as Google Analytics, Facebook Pixel, and AWIN affiliate tracking. Security posture is solid with HTTPS enforced and GDPR consent mechanisms implemented, although explicit privacy and cookie policies are not found in the provided content. No contact information or security policies are explicitly published, which could impact user trust and compliance. Overall, the site presents a professional and trustworthy retail platform with room for improvement in transparency and security documentation.

S

Sport is good

sportisgood.es

55

Sport is good is an e-commerce retailer specializing in sportswear, footwear, and fashion products. The website targets consumers interested in popular sports and lifestyle brands, offering a broad catalog with fast delivery and secure payment options. The business operates primarily in France with a network of associated retail domains, indicating a medium-sized retail operation with a focus on customer service and brand variety. Technically, the website uses modern frameworks such as SvelteKit and integrates multiple marketing and tracking tools with a consent management platform to comply with GDPR. Security posture is generally good with HTTPS enforced and secure payment methods displayed, though some security headers are missing and could be improved. The WHOIS data is unavailable due to query restrictions, but the domain appears legitimate with privacy protection justified for this business type. Overall, the website is professional, trustworthy, and compliant with privacy regulations.

S

Sport is good

sportisgood.com

59

Sport is good is a professional e-commerce retailer specializing in sportswear, lifestyle clothing, and sports equipment. Founded in 2018 and based in France, the company targets consumers interested in major sports and fashion brands, offering fast delivery and secure payment options. The website is well-branded and consistent across multiple country-specific domains, indicating a medium-sized business with a strong online presence in Europe and the US. Technically, the site uses modern frameworks such as SvelteKit, integrates with major analytics and marketing tools, and is hosted with Cloudflare DNS services, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy, cookie consent mechanism, and GDPR adherence. Overall, the website is trustworthy, professional, and secure, with room for enhancements in security policy transparency and DNS security.

H

Handball-Store: online handball specialist

handball-store.com

63

Handball-Store.com is an established e-commerce retailer specializing in handball equipment, including shoes, balls, clothing, and protective gear. Founded in 2009, it operates multiple localized domains targeting various European markets, indicating a medium-sized business with a focused niche in sports retail. The website demonstrates a good level of technical maturity, leveraging modern tracking and marketing technologies such as Google Analytics, Facebook Pixel, and AWIN affiliate tracking. The platform appears to be built on Magento or a variant thereof, hosted under the registrar Gandi SAS, with SSL enabled and a secure domain status. However, explicit privacy and cookie policies are not found in the provided content, though a consent management framework is implemented, suggesting some GDPR compliance awareness. Security posture is solid but could be improved by enabling DNSSEC and publishing security policies and incident response contacts. Overall, the site is professional, well-branded, and safe for general audiences.

F

Foot-Store

foot-store.com

62

Foot-Store is a specialized e-commerce retailer focused on football-related products including boots, jerseys, balls, and protective gear. Established in 2014, it serves a broad international audience with a strong presence in France and offers fast delivery and secure payment options. The website demonstrates a professional and consistent brand image with a good user experience and clear navigation. Technically, the site leverages modern frameworks such as SvelteKit, integrates multiple marketing and analytics tools, and is hosted with Cloudflare DNS and CDN services, ensuring fast performance and mobile optimization. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is well addressed with a comprehensive privacy policy, cookie consent mechanism, and GDPR indicators. Overall, the site is trustworthy and well-positioned in the niche football retail market.

D

Direct-Volley : Number 1 website for online volleyball

direct-volley.com

10

Direct-Volley.com is an established e-commerce platform specializing in volleyball equipment, apparel, and accessories. Founded in 2014, it positions itself as a leading online retailer in the volleyball niche, offering a wide range of products including shoes, wear, balls, and protective gear. The website targets volleyball players and enthusiasts globally, with multiple localized sister sites for different countries. Technically, the site is built on Magento Open Source (OpenMage), leveraging modern tracking and marketing technologies such as Google Analytics, Google Ads, and Facebook Pixel. The site implements a consent management platform for GDPR compliance and uses HTTPS with a reputable registrar, Gandi SAS. However, there is no visible privacy policy or terms of service in the provided content, which is a compliance gap. Security posture is generally good but could be improved by enabling DNSSEC and adding security.txt for vulnerability disclosures. Overall, the site is professional, well-branded, and safe for general audiences.

1

11teamsports

11teamsports.ro

10

11teamsports.ro is a Romanian e-commerce retailer specializing in football sportswear, equipment, and accessories. The website offers a wide range of products from leading brands such as Nike, adidas, and PUMA, targeting football players, teams, and fans. The business model focuses on online retail with additional services like team sales and loyalty programs, positioning itself as a specialist in the football retail market in Romania. The website demonstrates a professional design with clear navigation and good mobile optimization, supporting a positive user experience. Technically, the site employs modern web technologies including Bootstrap, jQuery, and multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and TikTok Pixel, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS, uses DNSSEC, and implements cookie consent mechanisms, reflecting a good security posture. No critical vulnerabilities or blocking mechanisms were detected, and the WHOIS data confirms domain legitimacy and appropriate domain age. Overall, the site is a trustworthy and professional e-commerce platform with strong business credibility and compliance with privacy regulations.

1

11teamsports

11teamsports.es

10

11teamsports.es is a specialized e-commerce platform focused on football-related products including boots, apparel, balls, and accessories. The company targets football players, fans, and teams primarily in Spain and Spanish-speaking markets. Established in 2007, it has built a solid market position with partnerships with major sports brands such as Nike, Adidas, and Puma. The website offers loyalty programs and ambassador initiatives to engage customers. Technically, the site uses a modern tech stack including Bootstrap, jQuery, and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, TikTok Pixel, and Klarna for payments. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is good with HTTPS enforced and secure payment options, though some security headers could be improved. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. WHOIS data is unavailable due to access restrictions, limiting domain registration verification, but the website content and business presence appear legitimate and professional.

G

Gruber Sauna

gruber-sauna.at

49

Gruber Sauna is a well-established Austrian company specializing in the design and construction of high-quality wellness solutions including Massivholz-Saunas, Infrarotkabinen, Dampfbäder, and Home Spa installations. With a tradition spanning approximately 50 years, the company serves private customers, hotels, and commercial clients, emphasizing custom craftsmanship and personalized service. The website reflects a mature digital presence with clear navigation, good content quality, and multiple physical locations enhancing customer trust. Technically, the site employs modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and Matomo, and uses HTTPS with good SSL configuration. However, it lacks some security headers and a cookie consent mechanism, which are areas for improvement. No critical security vulnerabilities or suspicious content were detected, and the WHOIS data aligns well with the business claims, supporting legitimacy.

Ö

Österreichische Bergbahnen GmbH

raxalpe.com

54

Österreichische Bergbahnen GmbH operates the Rax-Seilbahn, a cable car service providing access to hiking trails, snowshoe hiking, climbing tours, and mountain huts on the Raxalpe mountain in Austria. The company targets tourists, families, and outdoor enthusiasts, offering transportation, hospitality, and recreational services. The website is professionally designed with rich multimedia content and clear navigation, supporting a positive user experience and strong brand presence. Technically, the website employs modern analytics tools including Google Analytics, Matomo, and Facebook Pixel, alongside Google Tag Manager for marketing. The site is mobile optimized and accessible, with good SEO practices. However, some privacy compliance gaps exist, notably the absence of a cookie consent mechanism and terms of service page. Security posture is solid with HTTPS enforced, but security headers are missing, and no explicit incident response or vulnerability disclosure policies are published. The WHOIS data is unavailable, indicating possible recent registration or privacy protection, which slightly reduces trustworthiness. Nonetheless, the website's professional content, valid contact information, and certifications support its legitimacy. Overall, the site scores well in content quality, business credibility, and technical implementation, with room for improvement in privacy compliance and security best practices.

V

VBT - Vereinigung der Business Trainer Österreich

business-trainer.at

44

The Vereinigung der Business Trainer Österreich (VBT) is a professional association dedicated to business trainers in Austria, offering a platform for networking, professional development, and exclusive member benefits. The website reflects a well-established organization with a clear focus on education and community building within the business training sector. It maintains a strong market position by providing quality certifications, workshops, and cross-border membership advantages with the German BDVT. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Real Cookie Banner, ensuring good SEO and privacy compliance. The presence of Facebook Pixel and Plausible Analytics indicates moderate user tracking balanced with privacy considerations. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although explicit security policy documentation is absent. Overall, the site is professional, trustworthy, and compliant with GDPR, serving its target audience effectively.

S

Stiftung Zewo

zewo.ch

11

Stiftung Zewo operates as a Swiss non-profit foundation providing certification and trust assurance services to charitable organizations through the Zewo-Gütesiegel. The website serves donors and NPOs by offering verified information about certified organizations, ensuring transparency and confidence in charitable giving. It holds a strong market position as a leading certification body in Switzerland, offering key services such as NPO certification, donor guidance, and coordination of national fundraising efforts. The digital infrastructure is built on WordPress with modern technologies including Algolia search, Foundation framework, and various analytics and marketing tools, reflecting a mature and well-maintained technical environment. Security posture is robust with HTTPS enforcement, security headers, and no visible vulnerabilities, although formal security policies and incident response information are not publicly detailed. Overall, the website demonstrates high professionalism, excellent content quality, and strong trust indicators, making it a reliable resource for its target audience.

W

webgearing AG

webgearing.com

10

webgearing AG is a Swiss-based digital agency specializing in online marketing, mobile applications, web development, and corporate websites primarily targeting small and medium enterprises (KMU) in Switzerland. With over 25 years of experience, the company offers a comprehensive suite of services including consulting, UX design, development, hosting, and online marketing. Their market position is supported by a strong portfolio of projects and reputable clients. Technically, the website is built on TYPO3 CMS and integrates modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and Hotjar, indicating a mature digital infrastructure. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security-wise, the site enforces HTTPS and cookie consent but lacks explicit security headers and public security policies, which are areas for improvement. The WHOIS data is missing or unavailable, which raises some concerns about domain registration legitimacy despite the professional appearance of the website. Overall, the website is trustworthy and professional but would benefit from enhanced transparency in security and domain registration details.

D

Direct Running

direct-running.com

23

Direct Running is a specialized e-commerce retailer focused on running shoes, sportswear, and related equipment. The company offers a wide range of premium brands such as Adidas, Saucony, Puma, Mizuno, and Garmin, targeting runners and sports enthusiasts primarily in France and other European countries. The website demonstrates a solid market position within the niche of sports retail, emphasizing fast delivery and secure payment options. Technically, the site is built on modern frameworks like SvelteKit, hosted likely behind Cloudflare, and integrates multiple marketing and analytics tools including Google Tag Manager and Facebook Pixel. Privacy compliance is well addressed with a clear privacy policy, cookie consent mechanisms, and GDPR adherence. Security posture is good with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some security headers could be improved. Overall, the site is professional, trustworthy, and well-optimized for user experience and SEO.

S

Sport is good

sportisgood.co.uk

10

Sport is good is a UK-based e-commerce retailer specializing in sportswear, lifestyle clothing, and sports equipment. Founded in 2022, the company operates multiple country-specific domains, indicating a broad European and international market presence. The website offers a wide range of branded products with a focus on fast delivery and secure payment options, targeting consumers interested in sports and fashion. The business model is primarily online retail with affiliate partnerships and a strong brand portfolio.

P

Poptin

poptin.com

61

Poptin is a technology company specializing in website conversion optimization tools, offering smart popups, embedded forms, and autoresponder email services primarily targeting digital agencies, marketers, bloggers, and eCommerce businesses. The company operates a SaaS business model with a free trial and subscription plans, positioning itself as a competitive player in the lead capture and customer engagement market. The website is built on WordPress using the Divi theme and integrates multiple modern marketing and analytics technologies such as Google Analytics, Facebook Pixel, and Crisp Chat, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and security headers implemented, though the absence of a published security policy and incident response information suggests room for improvement. Overall, the website is professional, well-branded, and trustworthy, but the lack of WHOIS transparency and direct contact details slightly reduce business credibility.

I

Instituto de Turismo de la Región de Murcia

turismoregiondemurcia.es

62

The website www.turismoregiondemurcia.es serves as the official tourism portal for the Costa Cálida region in Murcia, Spain. Operated by the Instituto de Turismo de la Región de Murcia, it provides comprehensive travel information, event listings, activity bookings, accommodation search, and cultural insights aimed at tourists and visitors. The site is well-positioned as a government-backed tourism authority, offering a broad range of services to facilitate travel planning and regional exploration. Technically, the site employs modern web technologies including Bootstrap, jQuery, Swiper.js, and integrates multiple analytics and advertising tools such as Google Analytics, Facebook Pixel, and Adform. The site is mobile-optimized, accessible, and SEO-friendly, with consistent branding and professional design. Structured data (JSON-LD) is used to enhance search engine understanding. From a security perspective, the site uses HTTPS and includes several security best practices, though explicit security headers like CSP or X-Frame-Options were not confirmed in the provided data. No vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are present and include consent mechanisms, indicating good compliance with GDPR requirements. Overall, the website demonstrates a strong security posture, high content quality, and trustworthy business credibility. It effectively supports its mission as a regional tourism promotion platform. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining regular audits of third-party scripts to sustain security and compliance.

U

UpMoldova

upmoldova.md

50

UpMoldova is a medium-sized financial services company operating in Moldova since 2014, offering innovative and personalized employee motivation solutions such as meal vouchers, gift vouchers, and sport subscriptions. The company is part of the larger Grupul UP, which has a strong international presence. The website is professionally designed using WordPress with modern plugins and technologies, providing a good user experience and clear navigation. Security posture is adequate with HTTPS and basic security practices, though there is room for improvement in publishing explicit security policies and enhancing HTTP headers. Privacy and cookie policies are present and GDPR compliant. Overall, the website reflects a trustworthy and credible business with a solid technical foundation.

U

Up Luxembourg

up-luxembourg.lu

45

Up Luxembourg is a medium-sized company operating in the finance sector, specializing in digital employee benefits such as meal vouchers, gift vouchers, and discount platforms. It is part of the international Up Group cooperative, which has a strong presence in Europe. The website is professionally designed, multilingual, and optimized for SEO and mobile use. The technical infrastructure is modern, leveraging WordPress CMS, AWS hosting, and advanced JavaScript libraries for animations and user experience. Security posture is good with HTTPS enforced and privacy compliance evident through GDPR-aligned cookie consent mechanisms. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the website is trustworthy, well-branded, and serves its target audience effectively.

U

Up Tombou

uptombou.bg

43

Up Tombou operates as a licensed provider of electronic food vouchers, gift cards, and corporate fuel cards in Bulgaria, targeting businesses and their employees. The website presents a professional image with clear business offerings aligned with regulatory compliance. The technical infrastructure is based on WordPress with modern SEO and marketing tools such as Yoast SEO, Google Tag Manager, and Facebook Pixel, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers and explicit privacy policies are lacking. Overall, the site is legitimate and functional but could improve privacy compliance and contact transparency.

M

Mainstream Public Cloud Services d.o.o.

fitpass.rs

58

Fitpass.rs is a Serbian-based fitness membership platform offering access to a wide range of gyms, fitness studios, pools, and sports centers across Serbia. The business targets both individual consumers and corporate clients seeking wellness benefits for employees. The company appears to be a small-sized entity founded in 2014, with domain registration consistent with its business operations and location. The website is professionally designed with good content relevance and user experience, leveraging modern frontend technologies and multiple analytics tools to monitor user engagement. However, the site lacks visible privacy and cookie policies, which impacts its privacy compliance score. Security posture is moderate with HTTPS enabled but missing advanced security headers and explicit incident response contacts. Overall, the website is functional and trustworthy but would benefit from enhanced privacy and security practices to improve compliance and user trust.

B

Bielefeld Marketing GmbH

citybielefeld.de

62

City.Team Bielefeld is a municipal city marketing initiative operated by Bielefeld Marketing GmbH, focusing on promoting local events, projects, and cultural activities to residents and visitors of Bielefeld, Germany. The website is professionally designed using Drupal CMS and Bootstrap framework, featuring multimedia content such as videos and event listings. Privacy compliance is well implemented with GDPR-aligned cookie consent mechanisms and use of privacy-conscious analytics (Matomo) with cookies disabled by default. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though additional security headers could enhance protection. WHOIS data is minimal but consistent with a legitimate municipal domain. Overall, the website presents a trustworthy and professional digital presence for city marketing purposes.