Security Directory

The website www.rexona.com/fi/home.html represents the Finnish localized site for Rexona, a personal care brand specializing in deodorants and antiperspirants, owned by Unilever. The site is professionally designed, well-branded, and provides product information and marketing content targeted at general consumers in Finland. It leverages a modern digital infrastructure based on Adobe Experience Manager and integrates privacy compliance tools such as OneTrust for cookie consent. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although explicit security headers and incident response information are absent. The WHOIS data is missing or unavailable, which is unusual but the site’s strong corporate branding and linkage to official Unilever domains support its legitimacy. Overall, the site is a reliable and professional brand presence with good privacy compliance and user experience.

G

Google

lparket.com

74

Google LLC is a leading global technology company specializing in internet-related services and products, including its flagship search engine, advertising platforms, cloud computing, and software solutions. As a subsidiary of Alphabet Inc., Google holds a dominant market position in search and online advertising, serving billions of users worldwide. The website reflects Google's brand consistency and professionalism, offering a fast, accessible, and mobile-optimized user experience. Technically, the site leverages advanced proprietary Google technologies and frameworks, hosted on Google Cloud infrastructure, ensuring high performance and reliability. Security is robust with HTTPS enforcement, comprehensive security headers, and best practices in place, resulting in a high security score. Privacy compliance indicators are moderate based on the provided HTML, with privacy and cookie policies likely hosted on dedicated pages. Overall, Google.com is a highly credible and trustworthy website with extensive business and technical maturity.

C

Convertia

convertia.com

10

Convertia is a strategic consulting and technology company specializing in marketing, sales, and customer experience optimization through digital strategies and AI integration. The company positions itself as an expert partner for businesses seeking to enhance their digital acquisition and operational efficiency. The website demonstrates a mature digital presence with comprehensive service offerings and client case studies, indicating a medium-sized enterprise with a strong market position in the technology sector. Technically, the site is built on modern frameworks like Next.js and React, optimized for performance and mobile responsiveness. Security posture is strong with HTTPS and security headers implemented, though explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and business-focused, though WHOIS data is unavailable, suggesting privacy protection or registration opacity.

I

ITIA Ltd

itia.tennis

61

The International Tennis Integrity Agency (ITIA) operates as a key global authority safeguarding the integrity of professional tennis worldwide. Established in 2021, the organization focuses on anti-corruption and anti-doping programs, providing education, sanctions reporting, and direct communication channels for players, coaches, and officials. The ITIA maintains partnerships with major tennis bodies such as ATP, WTA, ITF, and the Grand Slam tournaments, positioning itself as a trusted non-profit entity in the sports governance sector. The website reflects this mission with clear, professional content targeted at the tennis community and stakeholders. Technically, the website is built on the Umbraco CMS platform, utilizing modern web technologies including HTML5, CSS3, JavaScript, Google Fonts, and Google Analytics for tracking. The site is mobile-optimized with a responsive design and includes accessibility considerations, though these could be enhanced further. Performance is moderate with efficient use of external resources and asynchronous script loading. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements standard security headers. A cookie consent mechanism is in place, demonstrating compliance with GDPR and privacy best practices. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks explicit security policy documentation and incident response contact details, which are recommended for enhanced transparency and readiness. Overall, the ITIA website presents a professional, trustworthy, and secure digital presence aligned with its mission. Strategic improvements in security policy disclosure, accessibility, and incident response communication would further strengthen its posture and stakeholder confidence.

S

Skrill Limited

skrill.com

67

Skrill Limited operates a globally recognized digital wallet and online payment platform, serving millions of customers since 2001. The company offers services including money transfers, online payments, cryptocurrency transactions, and prepaid Mastercard products. As a regulated entity under the Central Bank of Ireland and a subsidiary of Paysafe Payment Solutions Limited, Skrill maintains a strong market position in the financial services sector. The website reflects a mature digital infrastructure with a professional design, comprehensive content, and multi-language support, targeting individuals and businesses requiring secure and efficient payment solutions. Technically, the site leverages TYPO3 CMS, modern JavaScript libraries, and integrates marketing and analytics tools such as Google Tag Manager and Optimizely, indicating a well-maintained digital presence. Security posture is robust with HTTPS enforcement and no visible vulnerabilities, although some security headers could be enhanced. Privacy compliance is strong, with clear policies and cookie consent mechanisms in place. Overall, Skrill's website demonstrates high professionalism, trustworthiness, and operational maturity, supporting its business credibility and customer confidence.

Mastercard Deutschland is the German regional website for Mastercard, a global leader in payment technology and financial services. The website serves consumers and businesses in Germany, offering information about Mastercard's payment solutions and services. The site is hosted on Akamai's CDN infrastructure, indicating a robust technical setup suitable for enterprise-level operations. The website design and content are basic but consistent with corporate branding, targeting a general audience interested in financial services. Security posture appears minimal based on the provided content, with no explicit security headers or policies detected. Privacy and cookie policies are not evident in the analyzed HTML snippet, which may indicate incomplete compliance or that such policies are located elsewhere. Overall, the domain registration and hosting details align with Mastercard's brand legitimacy, and no suspicious indicators were found. The website is safe for general audiences with no adult or questionable content.

H

Häfft Verlag

haefft.de

59

Häfft Verlag operates a German-language website focused on educational publishing products such as student planners, homework notebooks, and motivational content. The site targets students and young audiences in Germany, positioning itself as a niche leader in school-related publishing and retail. The business model includes direct product sales and affiliate marketing, notably through Amazon links. The website is professionally designed with good navigation, mobile optimization, and consistent branding. Technically, it employs modern web technologies including Bootstrap and Slick Slider, and uses Revive Adserver for advertising. Security posture is adequate with HTTPS enforced and cookie consent implemented, though security headers and incident response information are lacking. No critical vulnerabilities or suspicious content were detected. Overall, the site is trustworthy and compliant with GDPR, but could improve transparency by adding contact and security policies.

W

Women's Tennis Association

wtatennis.com

72

The Women's Tennis Association (WTA) official website serves as a comprehensive digital platform delivering live scores, player rankings, tournament calendars, video highlights, and news related to women's professional tennis. It targets tennis fans, players, coaches, and media, positioning itself as the authoritative source for WTA content. The site demonstrates a high level of digital maturity with modern technologies such as Brightcove for video streaming, Google Analytics, Microsoft Clarity for user behavior analysis, and Amazon Ads for monetization. Cookie consent and privacy mechanisms are implemented, reflecting basic compliance with privacy regulations. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers should be verified. The absence of WHOIS data is a notable anomaly, potentially indicating privacy protection or registrar issues, but the website's professional content and branding strongly support its legitimacy. Overall, the site is well-designed, user-friendly, and trustworthy, with room for improvement in transparency of privacy policies and domain registration information.

B

BILLURCOM

billur.com

54

BILLURCOM is a technology service provider based in Uzbekistan specializing in hosting, VPS, dedicated servers, domain registration, and SSL certificates. The company targets businesses and individuals within Uzbekistan, offering a range of IT infrastructure services supported by local data centers. The website is professionally designed, mobile-optimized, and provides clear service descriptions and contact information, positioning BILLURCOM as a reputable player in the local hosting market. Technically, the site uses modern front-end libraries and custom backend solutions, likely including WHMCS for billing and support. Security posture is strong with HTTPS and input validation, though some security headers and policies are missing. The absence of WHOIS data for the domain is a notable concern, suggesting either a recent registration or privacy protection, which impacts trust. Overall, the site is functional and professional but would benefit from enhanced transparency and security disclosures.

X

XXXLutz

xxxlutz.ro

10

XXXLutz.ro is a large Romanian e-commerce and retail website specializing in furniture and home decoration products. It is part of the XXXLutz Group, a well-known furniture retailer with a strong market presence in multiple countries. The website offers a wide range of products including furniture for living rooms, bedrooms, kitchens, garden furniture, and accessories. It targets consumers in Romania seeking quality furniture and home decor with options for online and in-store shopping. The site is professionally designed with good navigation and mobile optimization, supporting multiple languages and regional domains.

Z

Zalando SE

zalando.at

47

Zalando SE operates a leading European online fashion retail platform, targeting consumers primarily in Austria and German-speaking countries. The website offers a broad assortment of shoes, clothing, accessories, and beauty products with a strong focus on user experience, free shipping, and returns. The brand is well-established with a significant market presence and a comprehensive e-commerce business model. Technically, the site leverages modern web technologies including React and RequireJS, with a strong emphasis on performance, mobile optimization, and accessibility. Security posture is robust with HTTPS enforcement, security headers, and consent management via Usercentrics. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates a mature digital infrastructure and trustworthy business operations.

S

SRO Motorsports Group

sro-motorsports.com

65

SRO Motorsports Group is a globally recognized leader in GT racing, organizing and managing a wide range of GT racing series including GT3, GT4, GT2, and touring car championships. The company operates a broad network of related motorsports events and subsidiaries, positioning itself as a key player in the international motorsports industry. Their website reflects a professional and modern digital presence with a focus on event promotion, news, and sustainability initiatives. Technically, the site uses modern web standards, including HTML5, CSS3, and JavaScript, with good mobile optimization and accessibility features. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although some security headers and explicit incident response contacts are missing. The absence of WHOIS data limits transparency but does not detract significantly from the site's legitimacy given the professional content and active event calendar. Overall, the site is well-maintained, trustworthy, and serves its target audience effectively.

The website www.msk-team.de is currently inaccessible beyond a Cloudflare security challenge page, which prevents access to any substantive business content or metadata. As such, no information about the company's operations, services, or market positioning can be determined. The technical infrastructure includes Cloudflare's Turnstile captcha for bot mitigation, indicating a focus on security at the perimeter level. However, the lack of accessible content limits the ability to assess digital maturity or technical sophistication beyond basic hosting and security measures. The security posture cannot be fully evaluated due to the absence of visible security headers or SSL details, but the presence of Cloudflare's WAF suggests some level of protection. Overall, the site is effectively blocked for analysis, resulting in a low trust and credibility score. Strategic recommendations include ensuring the site is accessible for legitimate users and providing clear business and compliance information to improve trust and transparency.

R

Race Ready

raceready.pt

59

Race Ready is a small Portuguese company specializing in the organization and management of historic racing events in the Iberian Peninsula, including Historic Endurance, CSS GROUP1, Troféu Mini, and Fórmula Ford Portugal. The company positions itself as a leader in this niche market, targeting classic car racing enthusiasts and participants. The website is professionally designed using the Wix platform, featuring multilingual support and structured data to enhance SEO and social media presence. However, it lacks explicit privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Technically, the site uses modern web technologies and is hosted on Wix, with moderate performance and good mobile optimization. Security measures include HTTPS enforcement and some script hardening, but security headers and incident response information are absent. Overall, the site is trustworthy but would benefit from enhanced privacy compliance and clearer contact information.

H

HoT Telekom und Service GmbH

hot.at

76

HoT Telekom und Service GmbH operates as a prepaid mobile telecommunications provider in Austria, offering affordable and flexible mobile and internet services without contractual obligations. The company is positioned as a leading low-cost provider, affiliated with the reputable HOFER retail brand, and has received awards for customer satisfaction and price-performance. The website is professionally designed, mobile-optimized, and provides comprehensive information about services, legal policies, and customer support. Technically, the site uses modern frameworks such as Nuxt.js and Vue.js, with strong security practices including HTTPS and Content-Security-Policy headers. Privacy compliance is well addressed with clear cookie consent mechanisms and GDPR-aligned policies. No critical security vulnerabilities or blocking mechanisms were detected, indicating a mature and trustworthy online presence.

H

HOFER REISEN

hofer-reisen.at

74

HOFER REISEN is an established Austrian travel agency offering a wide range of affordable travel packages including car trips, flights, cruises, and bus tours. The website targets German-speaking travelers seeking budget-friendly vacation options. The company maintains a consistent brand presence with a professional and user-friendly website optimized for mobile devices. Technically, the site employs modern web technologies, integrates third-party marketing and analytics tools, and enforces strong security practices including HTTPS and security headers. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and a detailed privacy policy. However, contact information and terms of service pages are not readily found, which could be improved for better user trust and compliance.

M

mégaphone-internet sàrl

megaphone-internet.ch

46

mégaphone-internet sàrl is a Swiss-based small technology company specializing in web creation and hosting services since 1995. The company targets associations and businesses in Switzerland seeking tailored digital solutions including website creation, e-commerce, content management, hosting, and email marketing. Their market position is that of a local artisan web service provider with a long-standing presence and a professional online presence. Technically, the website uses a modern but minimal tech stack including jQuery, Slick Carousel, and lazy loading with Lozad.js, delivering a good user experience with moderate performance and good mobile optimization. Security posture is adequate with HTTPS usage but lacks explicit security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Business credibility is strong given the clear company information, physical address, and professional content. Overall, the website is safe, professional, and trustworthy but could improve in privacy compliance and security best practices.

M

Maison Béthel / Fondation Praz-Soleil

maison-bethel.ch

52

Maison Béthel is a Swiss non-profit healthcare establishment specializing in transitional psychiatric care for adults aged 18 to 65. It operates under the Fondation Praz-Soleil umbrella and is recognized as a public interest institution within the canton of Vaud's psychiatric network. The website presents clear information about its mission, services, and contact details, targeting patients, families, and healthcare professionals. Technically, the site uses standard web technologies including HTML5, CSS3, and jQuery, with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, although formal security policies and incident response information are not published. Overall, the site is professional, trustworthy, and compliant with privacy regulations, with room for improvement in security transparency and accessibility.

B

Bremer Toto und Lotto GmbH

lottoindeutschland.de

64

The website www.lottoindeutschland.de serves as the official information portal for the Deutscher Lotto- und Totoblock, the collective of 16 independent lottery companies in Germany. It provides insights into the structure, responsibilities, and current news related to the state-regulated lottery market. The site targets professionals in media, politics, and administration and explicitly excludes direct gambling services. The business model centers on providing authoritative information and promoting responsible gaming under German legal frameworks. The site is affiliated with recognized lottery organizations and emphasizes social welfare funding from lottery proceeds. Technically, the website employs modern web standards including HTML5, CSS3, JavaScript modules, and structured data via JSON-LD for SEO. It is mobile-optimized and accessible, with good performance indicators. However, no CMS or hosting provider details are explicitly identified. The site uses HTTPS with excellent SSL configuration but lacks explicit security headers and cookie consent mechanisms, which are recommended for enhanced security and compliance. From a security perspective, the site demonstrates a solid posture with no visible vulnerabilities or sensitive data exposure. The absence of security headers and incident response contacts are areas for improvement. Privacy compliance is partially met with a privacy policy present but no cookie consent banner detected. Business credibility is high due to consistent branding, official affiliations, and trust signals such as whitelist approval and links to responsible gaming resources. Overall, the website is a trustworthy, professional portal with a clear focus on information dissemination rather than gambling operations. Strategic recommendations include implementing cookie consent, enhancing security headers, publishing terms of service, and providing clearer contact information to improve compliance and user trust.

N

Nissan

nissan.de

71

Nissan Deutschland's website serves as the official German portal for Nissan's automotive offerings, including passenger cars, commercial vehicles, and electric vehicles. The site targets consumers in Germany interested in innovative automotive solutions. The business is positioned as a major automotive brand with a strong market presence. Technically, the website employs modern web technologies such as HTML5, CSS3, and JavaScript with a likely enterprise CMS backend, delivering a good user experience with mobile optimization and SEO best practices. However, the site lacks explicit privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security posture is moderate with no visible security headers or incident response information, indicating room for improvement in security best practices. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

The website ars-mia.de hosts a login portal titled 'MIA | Anmeldung' primarily serving users associated with 'autohausen'. The site appears to be a business application login interface with minimal public-facing content. The target audience is likely internal or authorized users of the MIA system. The business sector is not explicitly stated but is related to automotive or dealership services given the author metadata and company name. The website is hosted in Germany and uses HTTPS with basic security measures.

S

Sägewerk - Hirschbach GmbH

hirschbach.de

57

Sägewerk - Hirschbach GmbH is a traditional family-owned sawmill and wood trade company based in Baden-Württemberg, Germany, with over 116 years of history. The company focuses on sustainable wood production and direct sales from the sawmill, targeting local customers and businesses. The website reflects a well-established local business with a consistent brand and clear communication of its services. Technically, the website is built on WordPress using the Avada theme and several plugins such as Rank Math SEO and TranslatePress for multilingual support. The hosting is provided by lima-city.de, as indicated by the nameservers. Security-wise, the site uses HTTPS and has a cookie consent mechanism, but lacks explicit security headers and published security or incident response policies. No privacy policy or terms of service pages were detected in the provided content, which is a compliance gap. Overall, the website is professional, mobile-optimized, and SEO-friendly, with a good trustworthiness profile based on domain age and business consistency.

H

Hüster GmbH

huester-gmbh.de

53

Hüster GmbH is a small, family-owned manufacturing company based in Germany, specializing in the production of high-quality sawn timber from spruce logs since 1974. The company emphasizes sustainability, ecological responsibility, and precision in its production processes, targeting B2B customers in the wood and construction industries. The website reflects a consistent brand image and provides basic corporate information but lacks detailed contact data and advanced digital features. Technically, the site uses an older JavaScript stack with the Neko Framework and jQuery, offering moderate performance and good mobile responsiveness. Security posture is weak due to lack of HTTPS enforcement, missing security headers, and absence of published security policies. Privacy compliance is limited, with no cookie consent mechanism and only a basic privacy policy page. Overall, the website is functional and professional but requires improvements in security and privacy to enhance trust and compliance.

Fondation Praz-Soleil is a Swiss non-profit foundation established in 1984, providing medical psychosocial services including an EPSM, supervised apartments, and home care in the Vaud region. The organization collaborates with regional health authorities and is engaged in modernization projects to enhance its service offerings. The website is professionally designed with clear navigation and provides comprehensive contact information and compliance with GDPR through a cookie consent mechanism and a privacy policy document. Technically, the site uses basic but functional technologies including HTML5, CSS, and jQuery, with room for modernization and improved security headers. Security posture is moderate with no critical vulnerabilities detected, but lacks published security policies or incident response contacts. Overall, the website is trustworthy, safe, and well-aligned with the foundation's mission and audience.

W

webQ GmbH

webq.de

52

webQ GmbH is a well-established full-service advertising agency based in Weinheim, Germany, with 25 years of experience. The company offers a broad range of creative and digital marketing services including web design, graphic design, video production, 3D animation, print, domain registration, hosting, SEO, and consulting. Their target audience includes both public and private sector clients across various industries. The website reflects a professional and consistent brand image with clear contact information and a portfolio of clients, indicating a strong local market presence. Technically, the website is built with modern web standards using HTML5, CSS3, and JavaScript, featuring a strict Content-Security-Policy header and HTTPS usage, which demonstrates a good security posture. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. However, there is a lack of explicit privacy and cookie policies, which is a compliance gap that should be addressed. Security-wise, the site benefits from HTTPS and CSP headers but lacks other common security headers and incident response contact information. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is limited due to DENIC privacy restrictions but shows no suspicious patterns, and the domain age aligns with the company's claimed history. Overall, webQ GmbH presents a trustworthy and professional online presence with room for improvement in privacy compliance and security transparency. Strategic recommendations include adding comprehensive privacy and cookie policies, implementing security.txt for vulnerability disclosure, and enhancing security headers to further strengthen the security posture.

Pfadiheime.ch is a specialized non-profit platform operated by Stiftung Pfadiheime Schweiz, serving as the primary directory and booking platform for scout homes across Switzerland. With over 25 years of history, it provides comprehensive search and booking functionalities tailored to scout groups and home administrators. The platform also promotes HeimV, a home management software, enhancing operational efficiency for home administrators. The website is well-structured, mobile-optimized, and offers clear navigation, targeting a niche audience effectively. Technically, the site leverages modern web technologies including HTML5, CSS3, JavaScript with jQuery, and likely a Ruby on Rails backend. The presence of CSRF tokens indicates attention to form security, though there is room for improvement in security headers and privacy compliance mechanisms. Performance is moderate with good mobile responsiveness and basic accessibility features. From a security perspective, the site uses HTTPS and includes CSRF protection but lacks visible security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR explicit indicators. Contact information is limited to a general info email, with no phone or physical address provided. Overall, the platform presents a trustworthy and professional service with a strong business credibility score. Strategic improvements in privacy compliance, security headers, and incident response documentation would enhance its security posture and regulatory adherence.

P

Pfadibewegung Schweiz

pfadi.swiss

60

Pfadibewegung Schweiz operates the website pfadi.swiss, serving as the largest youth scouting organization in Switzerland with approximately 51,000 members. The website provides information about scouting activities, international events, and resources for children, teenagers, and their families. The organization is well-established with a domain registered since 2017, consistent with its public presence. The website is professionally designed, mobile-optimized, and uses privacy-friendly analytics, reflecting a moderate to high level of digital maturity. However, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance and user trust. Security posture is adequate with HTTPS enabled and domain transfer protections, but could be improved by enabling DNSSEC and implementing security headers. Overall, the site is trustworthy and serves its non-profit mission effectively.

K

Kelly Ges.m.b.H.

kellys.at

50

Kelly Ges.m.b.H. is a well-established Austrian snack manufacturer and retailer specializing in chips, popcorn, nuts, and other snack products. The company has a strong market position in Austria as a market leader and is part of the larger Intersnack Group. Their website reflects a mature digital presence with a comprehensive product catalog, engaging content such as recipes and party planning tools, and active social media integration. Technically, the site is built on TYPO3 CMS and uses Matomo for analytics, indicating a preference for open-source and privacy-conscious tools. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers and cookie consent mechanisms could be improved. Overall, the website is professional, trustworthy, and well-aligned with the company's business objectives.

INTERSPORT Austria operates as the leading sports retail company in Austria, offering a broad range of sports products through its online platform and physical stores. The website is professionally designed with a clear focus on the Austrian market and sports enthusiasts. The technical infrastructure employs modern web technologies such as HTML5, CSS3, JavaScript, and popular libraries like Swiper.js for sliders and Google Maps API for store location services. Mobile optimization and user experience are excellent, supporting a broad customer base effectively. However, the website lacks visible privacy and cookie policies, which are critical for GDPR compliance and user trust. Security posture is moderate due to the absence of explicit security headers and incident response information, which should be addressed to enhance protection and compliance. Overall, the domain registration data aligns well with the business claims, indicating a legitimate and trustworthy operation.

Q

Quiz Maker

quiz-maker.com

60

Quiz Maker is a technology-driven SaaS platform specializing in online quiz creation, offering users the ability to generate customized quizzes quickly, including AI-generated quizzes. The platform targets educators, marketers, and businesses aiming to engage audiences and capture leads. With over 15 million quizzes created over a decade, it holds a strong market position as an established quiz solution provider. The website features a user-friendly interface with clear navigation and mobile optimization, supporting a broad user base.

Y

Y - Culte Louange

ycultelouange.com

56

The website 'Y - Culte Louange' is a French-language religious community platform hosted on the Wix platform. It provides services such as event agendas, sermons, forums, and contact options for its community members. The site is designed with a consistent branding approach and offers a good user experience with clear navigation and mobile optimization. Technically, it leverages Wix's Thunderbolt framework and standard web technologies, ensuring moderate performance and basic accessibility. Security-wise, the site benefits from HTTPS but lacks advanced security headers and formal privacy or incident response policies, which are areas for improvement. The absence of WHOIS data raises concerns about domain registration legitimacy, impacting overall trust. Strategic recommendations include enhancing security headers, adding privacy and cookie policies, and verifying domain registration to improve credibility and compliance.

É

Église évangélique Béthel

ebyv.ch

52

Église évangélique Béthel is a small, local evangelical church based in Yverdon-les-Bains, Switzerland. The organization focuses on religious services and community engagement centered on the authority of the Bible and the teachings of Jesus Christ. The website serves as a portal for information about the church, its programs, and media such as photos and videos. The pastor is identified as Serge Viret, reinforcing the community and leadership structure. Technically, the website uses standard web technologies including HTML5, CSS3, and JavaScript with a slider library for image display. The site is moderately optimized for mobile devices and offers a good user experience with clear navigation. However, it lacks advanced technical frameworks or CMS indications.

R

Start Reiskorn | Reiskorn

reiskorn.at

56

The website www.reiskorn.at is a small business site hosted on the Wix platform, targeting an Austrian audience. The site appears to be in German language and uses standard Wix technologies including JavaScript, CSS, and Wix's proprietary scripts. The business description and detailed services are not clearly extractable from the provided HTML content, indicating minimal content presence or content loading dynamically beyond the provided snapshot. The technical infrastructure is typical for Wix-hosted sites, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled and some cookie handling scripts, but lacks explicit security headers and publicly disclosed security policies. Privacy compliance is weak due to absence of visible privacy or cookie policies and consent mechanisms. Business credibility is moderate but limited by lack of visible contact information and trust indicators. Overall, the site is functional but would benefit from enhanced content, privacy disclosures, and security best practices.

R

Rheinischer Turnerbund e.V.

rtb.de

58

Rheinischer Turnerbund e.V. (RTB) is a regional non-profit sports federation based in Germany, focusing on supporting sports clubs and promoting gymnastics and physical education in the Rhineland region. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and hosting services, with moderate performance and good mobile optimization. The site includes basic structured data for business identification but lacks comprehensive privacy, cookie, and terms of service policies, which are critical for GDPR compliance. Security posture is moderate with HTTPS enabled but missing key security headers and incident response information. Overall, the website is functional and professional but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

G

Graewe

graewe.de

60

Graewe is a manufacturing company specializing in screws, bolts, and turned parts, positioning itself as a reliable European partner in the industrial sector. The website is built on the Wix platform, indicating a moderate level of digital maturity with standard Wix hosting and scripts. While the site presents professional and relevant content for its target industrial audience, it lacks critical privacy and security disclosures such as privacy policies, cookie consent mechanisms, and incident response contacts. The security posture is basic with HTTPS enabled but missing advanced security headers. Overall, the site is functional and professional but would benefit from enhanced compliance and security measures to improve trust and regulatory adherence.

C

Crew Knüttel Motorsport GmbH & Co.KG

reifen-knuettel.de

47

Crew Knüttel Motorsport GmbH & Co.KG is a specialized motorsport company based in Germany, established in 1984, providing racing tire services and support for various motorsport disciplines. The company maintains a professional online presence with a well-structured website offering detailed information about their services, team, and contact points. Their market position is that of a traditional, niche service provider in the motorsport sector, targeting racing teams and motorsport enthusiasts. Technically, the website employs modern web technologies including JavaScript libraries like Splide.js and jQuery, and is optimized for mobile devices with responsive design elements. However, there is room for improvement in accessibility and performance optimization. Security-wise, the site uses HTTPS but lacks visible security headers and formal security policies, which could be enhanced to improve trust and compliance. Privacy compliance is partially addressed with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional and trustworthy but could benefit from stronger security and privacy features.

G

Gigasport

gigasport.at

66

Gigasport is a prominent Austrian sports retail company operating both online and through 11 physical stores. The website serves as a comprehensive e-commerce platform offering over 450 top sports brands, targeting sports enthusiasts and general consumers primarily in Austria and German-speaking regions. The business model integrates retail sales with loyalty programs such as the PlusCard and a dedicated mobile app to enhance customer engagement. The site is professionally designed with consistent branding and clear navigation, reflecting a strong market position supported by its parent company Kastner & Öhler. Technically, the website is built on WordPress CMS and employs modern web technologies including Google Tag Manager, Usercentrics for consent management, and Dynamic Yield for personalization. The site is mobile-optimized and incorporates SEO best practices with structured data and meta tags. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and uses consent management tools, but lacks explicit security headers in the visible HTML. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially addressed with a cookie consent mechanism, though a clear privacy policy page was not found in the provided content. WHOIS data is unavailable due to quota restrictions, but the domain appears legitimate based on branding and business context. Overall, Gigasport's website presents a trustworthy and professional online presence with good technical and security foundations. Strategic improvements in privacy policy visibility and security header implementation would enhance compliance and security posture further.

S

Service national Abus dans le contexte ecclésial

abus-cath-info.ch

50

The website 'abus-cath-info.ch' serves as a national initiative focused on scientific research and treatment of sexual abuse within the Catholic Church in Switzerland. It is supported by major Swiss Catholic organizations including the CES, RKZ, and KOVOS, positioning it as a credible and authoritative source on this sensitive topic. The site provides resources for victims, updates on research projects, and information on church measures to address abuse. The target audience includes victims, researchers, church authorities, and the general public concerned with this issue. Technically, the website employs modern web standards with HTML5, CSS3, and JavaScript, and uses Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized, accessible, and SEO-friendly, though no explicit CMS or hosting provider is identified. Performance is moderate with good navigation and professional design. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks visible advanced security headers and does not provide explicit security policies or incident response contacts. Privacy compliance is adequate with a privacy policy present, but no cookie consent mechanism is detected. No forms collecting personal data are found on the homepage. Overall, the website is trustworthy, professionally maintained, and fulfills its mission effectively. Strategic recommendations include implementing cookie consent, publishing security and incident response policies, and enhancing security headers to improve compliance and security posture.

A

architects—Alliance

architectsalliance.com

59

architects—Alliance is a Toronto-based architectural design practice specializing in city building and a broad range of architectural services including schools, galleries, affordable housing, and urban parks. They serve clients in Canada, the United States, and Europe, positioning themselves as designers, researchers, and urbanists focused on meaningful urban spaces. The website presents a professional portfolio with detailed project imagery and client testimonials, reflecting a well-established presence in the architectural sector. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, jQuery, and lazy loading for images, along with Adobe Typekit fonts for typography. The site is mobile optimized and accessible, with an explicit accessibility statement demonstrating commitment to inclusivity. However, no CMS or hosting provider details are evident, and performance is moderate. Security posture is moderate with HTTPS implied but no explicit security headers detected. The absence of privacy and cookie policies, WHOIS registration data, and vulnerability disclosure mechanisms represent compliance and trust gaps. No forms on the homepage reduce exposure to input-based vulnerabilities. Social media presence is limited to Twitter and Instagram. Overall, the site is professional and trustworthy in content and design but requires improvements in domain registration transparency, privacy compliance, and security best practices to enhance trust and reduce risk.

E

Elektro Lichtin AG

elektrolichtin.ch

48

Elektro Lichtin AG is a small regional electrical services company based in Möhlin, Switzerland, specializing in electrical installations, lighting, safety systems, network infrastructure, and household appliances. The website is primarily in German and targets local customers seeking professional electrical services. The business model focuses on service provision with a clear physical presence and contact information. The company maintains a moderate market position as a trusted local provider. Technically, the website uses standard HTML5 and CSS with JavaScript enhancements, including Google Analytics with IP anonymization and a cookie consent banner, indicating basic digital maturity and privacy awareness. The site is moderately optimized for mobile and accessibility but lacks advanced frameworks or CMS indications. Performance is moderate with no critical errors detected. From a security perspective, the site uses HTTPS (assumed from external Google Analytics scripts loaded over HTTPS), but no explicit security headers were detected in the provided data. The presence of cookie consent and anonymized analytics is positive, but the absence of published security policies or incident response information suggests room for improvement. No vulnerabilities or suspicious content were found. Overall, the website is professional, trustworthy, and safe for general audiences. The risk level is low, but strategic improvements in security headers, incident response transparency, and privacy policy detail would enhance compliance and trust.

M

Gestalten und verkaufen mit Print-on-Demand | Spreadshop

myspreadshop.ch

59

The website myspreadshop.ch serves as a landing page for a print-on-demand merchandise platform affiliated with Spreadshop and Spreadshirt. It targets individuals and small businesses interested in creating and selling custom merchandise online. The business model is based on enabling users to open their own merchandise shops with no upfront cost, leveraging print-on-demand fulfillment services. The site is positioned within the e-commerce sector and appears to serve primarily the Swiss and German-speaking markets. Technically, the site is simple, using standard HTML and CSS with web fonts, and is moderately optimized for mobile devices. However, it lacks advanced frameworks or CMS indications and does not include analytics or tracking scripts in the provided content. Security posture is weak due to absence of visible security headers, privacy policies, and contact information, which impacts compliance and trust. The domain uses privacy protection, which is common and justified for this business type. Overall, the site is functional but minimalistic, with room for improvement in security, privacy, and user engagement features.

G

Gemeinde Therwil

therwil.ch

67

Gemeinde Therwil operates as the official municipal government website for the community of Therwil in Switzerland. It provides residents and visitors with comprehensive information about local administration, education, social services, public safety, events, and waste management. The website serves as a digital portal for accessing municipal services, announcements, and contact information, positioning itself as a trusted local government resource. Technically, the site is built on the Weblication CMS platform, utilizing standard web technologies such as HTML5, CSS3, JavaScript, and jQuery, with video content delivered via Video.js. The site demonstrates good mobile optimization and clear navigation, though accessibility features could be enhanced. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit incident response policies. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its public sector role effectively.

The Ehemaligenverein Jungwacht Therwil is a small Swiss non-profit organization dedicated to connecting former leaders and members of the Jungwacht Therwil youth group. The website serves as an informational portal to promote membership, share memories, and provide access to a summer camp archive. The organization is community-focused with a clear founding date and transparent contact information via email. Technically, the website is simple, built with basic HTML and CSS, and integrates Facebook social plugins for community engagement. However, it lacks advanced CMS, security headers, and privacy or cookie policies, indicating room for improvement in compliance and security. The security posture is basic with no visible vulnerabilities but missing standard security best practices. Overall, the site is safe, trustworthy, and serves its niche audience well but would benefit from enhanced privacy compliance and security hardening.

The website smith-nephewonline.com currently serves a 404 error page indicating that the content is missing or the page never existed. There is no visible business information, contact details, or policies on the site. The domain is registered since 2013 with a reputable registrar, suggesting the domain is legitimate but the website is either under maintenance or abandoned. The technical infrastructure is minimal, with basic HTML, CSS, and JavaScript, and no advanced frameworks or CMS detected. Security posture is weak due to lack of HTTPS enforcement and absence of security headers. No privacy or cookie policies are present, indicating poor compliance with data protection regulations. Overall, the site is non-functional and lacks trust and professionalism.

S

SEFE

sefe.eu

68

SEFE is a European energy company focused on securing reliable energy supply through trading, sales, infrastructure, and services across gas, power, and hydrogen sectors. The company positions itself as a key player in enhancing energy security and accelerating the transition to a low-carbon future in Europe. Their website reflects a professional and comprehensive digital presence with detailed sections on company strategy, sustainability, portfolio, and career opportunities. Technically, the website employs modern web technologies including ES6 JavaScript modules, jQuery, and integrates a GDPR-compliant cookie management platform (Usercentrics). Google Tag Manager is used for analytics and tracking, indicating a mature digital marketing approach. Security-wise, the site uses HTTPS and shows evidence of good security practices, although explicit security headers are not fully visible in the HTML content. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is common for corporate domains, and no suspicious patterns were found. Overall, the website is trustworthy, well-designed, and compliant with privacy regulations.

A

Allianz Lebensversicherungs-Aktiengesellschaft

chemie-verbandsrahmenvertrag.de

60

The website www.chemie-verbandsrahmenvertrag.de serves as an informational and service platform for the Chemie-Verbandsrahmenvertrag, a tariff-based pension scheme for employers and employees in the chemical industry in Germany. Operated under the Allianz Lebensversicherungs-Aktiengesellschaft brand, it provides detailed information about membership, offers, administration, and support services. The site targets chemical industry companies and their workforce, offering tools such as an offer calculator and online login services. The business model focuses on facilitating pension scheme participation and management within the chemical sector, supported by industry partners BAVC and IG BCE. Technically, the website is built on the ecomas CMS platform, utilizing standard web technologies including JavaScript and CSS. It demonstrates good mobile optimization, accessibility features, and SEO practices. The site employs HTTPS with strong SSL configuration and includes a cookie consent mechanism compliant with GDPR. No major security vulnerabilities or exposed sensitive data were detected, though formal security policies and incident response contacts are not published. From a security perspective, the site maintains a solid posture with encrypted connections and privacy compliance. However, it lacks explicit security policy documentation and vulnerability disclosure mechanisms, which could be improved. The WHOIS data is minimal but consistent with the business purpose, and no WAF or blocking mechanisms interfere with content access. Overall, the website is professional, trustworthy, and well-suited for its target audience. Strategic recommendations include enhancing published security policies, adding incident response contacts, and implementing security.txt for vulnerability reporting to further strengthen trust and compliance.

D

Dive Damai

dive-damai.com

57

Dive Damai operates a luxury liveaboard diving service in Indonesia, targeting scuba diving enthusiasts seeking premium travel experiences. The website provides detailed information about their trips, destinations, itineraries, and schedules, positioning itself as a niche player in the hospitality sector focused on diving tourism. The business appears small but professional, with clear contact information and a consistent brand presentation. Technically, the website is built on the Wix platform, leveraging modern web technologies and delivering a good user experience with mobile optimization. However, the site lacks advanced security headers and privacy compliance features, which are important for protecting user data and building trust. From a security perspective, HTTPS is enabled, but the absence of WHOIS registration data raises concerns about domain legitimacy. No privacy or cookie policies were found, and no incident response or security contact information is provided. These gaps suggest room for improvement in compliance and security posture. Overall, the site is functional and professional but would benefit from enhanced security practices, privacy compliance, and verification of domain registration to improve trustworthiness and reduce risk.

DataCharts is a small German business specializing in the creation of tailored interactive dashboards and data visualizations to support decision-making for municipalities, regions, and businesses. Their key products include RegioBoard, KonjunkturBoard, and ResultBoard, which focus on economic, demographic, and survey data visualization. The company collaborates with partners such as pro Wirtschaft GT GmbH and has received an award for innovative economic development solutions. The website is professionally designed using an HTML5 UP template, with good mobile optimization and clear navigation. Technical infrastructure is basic but sufficient, relying on standard web technologies like HTML5, CSS3, and jQuery, hosted on a German hosting provider (1blu GmbH). Security posture is moderate, with cookie consent implemented but lacking advanced security headers or published security policies. No forms collecting sensitive data were detected, and no analytics or tracking scripts are present, indicating a privacy-conscious approach. Contact information is clearly provided, enhancing business credibility. Overall, the website is trustworthy and suitable for its target audience, though improvements in security best practices and incident response transparency are recommended.

B

Berufskolleg für Gymnastik Bielefeld

berufskolleg-gymnastik.de

43

Berufskolleg für Gymnastik Bielefeld is a private vocational school in North Rhine-Westphalia, Germany, specializing in gymnastics education with state recognition as an Ersatzschule. The website serves prospective and current students by providing information about training programs, school details, and news updates. The institution occupies a niche market in vocational education with a clear focus on gymnastics. Technically, the website is built on WordPress 6.8.3, employing standard web technologies and plugins for spam protection and cryptography. The site is mobile-optimized and accessible, with good SEO practices and structured data enhancing search visibility. Security posture is solid with HTTPS enforced and spam protection in place, though it lacks some security headers and formal security policies. No cookie consent mechanism was detected, which may affect GDPR compliance. Overall, the site is professional, trustworthy, and well-suited for its educational purpose.

S

Sparkasse Bielefeld

sparkasse-bielefeld.de

67

Sparkasse Bielefeld is a well-established regional bank in Germany, offering a wide range of financial services including online banking, loans, savings, insurance, and real estate services. The website reflects a mature digital presence with comprehensive content tailored for both private and corporate customers. The bank emphasizes secure online banking and customer support through multiple channels including phone, chat, and contact forms. Technically, the site uses modern web technologies and is built on a robust CMS platform, ensuring good performance, accessibility, and SEO. Security posture is strong with HTTPS enforcement, cookie consent mechanisms, and session management, although explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.