Security Directory

R

Race Ready

raceready.pt

59

Race Ready is a small Portuguese company specializing in the organization and management of historic racing events in the Iberian Peninsula, including Historic Endurance, CSS GROUP1, Troféu Mini, and Fórmula Ford Portugal. The company positions itself as a leader in this niche market, targeting classic car racing enthusiasts and participants. The website is professionally designed using the Wix platform, featuring multilingual support and structured data to enhance SEO and social media presence. However, it lacks explicit privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Technically, the site uses modern web technologies and is hosted on Wix, with moderate performance and good mobile optimization. Security measures include HTTPS enforcement and some script hardening, but security headers and incident response information are absent. Overall, the site is trustworthy but would benefit from enhanced privacy compliance and clearer contact information.

H

HOFER GRÜNSTROM

xn--hofer-grnstrom-nsb.at

70

HOFER GRÜNSTROM is an Austrian green electricity provider focused on offering 100% Austrian eco-friendly power with an emphasis on sustainability, transparency, and customer savings. The website positions the company as a medium-sized energy retailer targeting environmentally conscious consumers in Austria. The digital infrastructure employs a modern technology stack including jQuery, React, Adobe DTM, and Piwik PRO analytics, hosted on a secure HTTPS platform with good mobile optimization and accessibility features. The integration of an advanced accessibility tool demonstrates a commitment to inclusive user experience. Security posture is solid with HTTPS and no visible vulnerabilities, though the absence of explicit security policies and contact information for incident response is noted. Privacy compliance is limited due to missing visible privacy and cookie policies. Overall, the website is professional and trustworthy but could improve transparency and compliance documentation.

H

Hofer Fotos

hoferfotos.at

67

Hofer Fotos is a small local photography service based in Austria, specializing in portrait, event, and commercial photography. The website presents a professional image with good design quality and clear navigation, targeting individuals and businesses seeking photography services. The technical infrastructure includes modern JavaScript libraries such as jQuery and PrimeFaces, with integration of marketing and analytics tools like Google Analytics and Visual Website Optimizer. While the website uses HTTPS and secure cookies, it lacks several security headers and visible privacy or terms of service pages, indicating room for improvement in compliance and security posture. No direct contact information or incident response policies are visible, which may affect user trust and regulatory compliance.

H

HoT Telekom und Service GmbH

hot.at

76

HoT Telekom und Service GmbH operates as a prepaid mobile telecommunications provider in Austria, offering affordable and flexible mobile and internet services without contractual obligations. The company is positioned as a leading low-cost provider, affiliated with the reputable HOFER retail brand, and has received awards for customer satisfaction and price-performance. The website is professionally designed, mobile-optimized, and provides comprehensive information about services, legal policies, and customer support. Technically, the site uses modern frameworks such as Nuxt.js and Vue.js, with strong security practices including HTTPS and Content-Security-Policy headers. Privacy compliance is well addressed with clear cookie consent mechanisms and GDPR-aligned policies. No critical security vulnerabilities or blocking mechanisms were detected, indicating a mature and trustworthy online presence.

H

HOFER REISEN

hofer-reisen.at

74

HOFER REISEN is an established Austrian travel agency offering a wide range of affordable travel packages including car trips, flights, cruises, and bus tours. The website targets German-speaking travelers seeking budget-friendly vacation options. The company maintains a consistent brand presence with a professional and user-friendly website optimized for mobile devices. Technically, the site employs modern web technologies, integrates third-party marketing and analytics tools, and enforces strong security practices including HTTPS and security headers. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and a detailed privacy policy. However, contact information and terms of service pages are not readily found, which could be improved for better user trust and compliance.

K

Kelly Gesellschaft m.b.H

kelly.at

62

Kelly Gesellschaft m.b.H is a medium-sized Austrian company specializing in the production and distribution of popular salty snacks. It operates as part of the larger Intersnack Group, which has a broad international presence. The company emphasizes sustainability, healthier lifestyle products, and responsible supply chain management. The website reflects a professional corporate identity with consistent branding and a clear focus on its product offerings and sustainability initiatives. The target audience includes general consumers interested in snack foods and corporate responsibility. Technically, the website is built on TYPO3 CMS with modern frontend technologies, offering good mobile optimization and user experience. Security posture is solid with HTTPS and secure form handling, though some security headers and explicit policies are missing. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and trustworthiness.

S

Servus in Stadt & Land

servus.com

73

Servus.com is a well-established Austrian media platform focused on lifestyle content including recipes, gardening, culture, and regional traditions. The site offers a rich content experience with over 3,500 recipes and multiple magazine editions, supported by subscription and marketplace services. The technical infrastructure leverages modern web technologies, including Google Tag Manager and OneTrust for privacy compliance, ensuring a good user experience across devices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data suggests privacy protection or data unavailability, but the site's affiliation with Red Bull Media House and professional presentation indicate legitimacy. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements.

A

A. & S. Klein GmbH & Co KG

almdudler.com

52

Almdudler is a well-established Austrian beverage company specializing in herbal lemonade products since 1957. The website reflects a strong market position with a comprehensive product range including original herbal lemonade, sugar-free variants, energy drinks, and syrups. The brand targets a broad general audience with a focus on natural ingredients and sustainability. Technically, the website is built on WordPress with modern SEO and marketing tools integrated, including Google Analytics, Facebook Pixel, and Trusted Shops for trust signals. The site is mobile-optimized and provides a professional user experience with clear navigation and rich content. Security posture is good with HTTPS enforced and no visible vulnerabilities, though additional security headers could enhance protection. Privacy compliance is strong with clear cookie consent mechanisms and GDPR-aligned privacy policies. WHOIS data confirms domain legitimacy and long-term operation consistent with the brand's history. Overall, the website demonstrates a mature digital presence with solid business credibility and security practices.

D

Die Tafel Österreich

tafel-oesterreich.at

57

Die Tafel Österreich is a reputable non-profit organization dedicated to rescuing food and providing free support to impoverished individuals through social institutions in Austria. The website reflects a solid market position within the national non-profit sector, offering key services such as food rescue and fundraising management. Their digital presence is built on a modern WordPress infrastructure using the Divi theme, enhanced with advanced cookie consent management and analytics tools like Google Analytics and Facebook Pixel. Security is well-managed with HTTPS, Wordfence, and appropriate security headers, although a formal security policy and incident response page are absent. Overall, the website demonstrates good technical maturity, privacy compliance, and business credibility, making it a trustworthy platform for its audience.

P

Pride Biz Austria

pridebiz.at

66

Pride Biz Austria is a non-profit platform dedicated to promoting LGBTIQ+ inclusion in the Austrian business sector. Founded in 2019, it serves as a key contact point for companies and policymakers, offering networking events, awards, and forums to foster diversity and inclusion. The website reflects a professional and consistent brand image, supported by partnerships with established organizations such as AGPRO and QBW. Technically, the site is built on WordPress with the Avada theme and uses modern plugins for SEO and GDPR compliance. While the site is well-structured and mobile-optimized, it lacks an explicit privacy policy and security headers, which are areas for improvement. Overall, the security posture is solid with HTTPS enforced and no visible vulnerabilities. The domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

F

Fielmann AG

fielmann.at

59

Fielmann AG is a leading optical retailer in Austria, providing eyeglasses, contact lenses, and eye care services through both online and physical store channels. The company has a strong market presence and brand recognition, targeting consumers seeking quality eyewear and optical solutions. The website reflects a mature digital infrastructure utilizing modern frontend technologies such as Vue.js and Tailwind CSS, supported by CDN providers to ensure fast and responsive user experience. Security posture is robust with HTTPS enforcement and comprehensive security headers, although explicit security policies and incident response contacts are not prominently published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates a professional and trustworthy online presence consistent with the company's established reputation.

The Secession website represents a well-established Austrian non-profit cultural institution dedicated to contemporary art exhibitions and events. It holds a strong market position as one of the oldest independent art exhibition houses globally, with a rich history dating back to 1897. The site targets art enthusiasts, visitors, and the contemporary art community, offering detailed information about exhibitions, events, and the institution's mission. The business model is non-commercial, focusing on cultural promotion and education. The website content is rich, professionally designed, and consistent with the institution's branding and reputation. Technically, the website employs a mix of legacy and modern JavaScript libraries, including jQuery 1.11.3, GSAP, and Slick Carousel, with no explicit CMS detected, suggesting a custom-built platform. Performance is moderate with good mobile optimization and accessibility features. SEO practices are well implemented with proper meta tags and Open Graph data. Hosting details are not explicitly identified. From a security perspective, the site enforces HTTPS and uses Google Analytics with consent mechanisms denying ad and analytics storage by default, indicating good privacy awareness. However, the use of outdated jQuery versions and missing explicit security headers like Content Security Policy and X-Frame-Options present moderate risks. No critical vulnerabilities or exposed sensitive data were detected. Privacy policies and cookie consent mechanisms are comprehensive and GDPR compliant. Overall, the website is trustworthy, professional, and safe for general audiences. It demonstrates a mature digital presence suitable for a cultural institution, with minor technical and security improvements recommended to enhance resilience and compliance.

M

McDonald’s

mcdonalds.at

69

McDonald's Austria operates as a local branch of the global McDonald's Corporation, providing fast food restaurant services to the Austrian market. The website serves as an information portal in German, showcasing products, promotions, and corporate information. The site is built on WordPress with performance optimizations such as WPRocket and uses jQuery for client-side scripting. The presence of structured data and official branding indicates a professional and consistent digital presence. Security posture is adequate with HTTPS enforced and some security best practices observed, though explicit security headers and vulnerability disclosures are lacking. Privacy compliance is minimal with no clear privacy or cookie policies detected in the provided content. Overall, the website is trustworthy and professionally maintained but could improve transparency and compliance aspects.

R

ROTE NASEN Clowndoctors

rotenasen.at

54

ROTE NASEN Clowndoctors is a well-established Austrian non-profit organization founded in 1994, dedicated to bringing laughter and joy to patients of all ages through professional clown visits. The organization operates with a strong international partnership with RED NOSES International and focuses on various target groups including children, adults, seniors, and people with special needs. Their business model relies heavily on donations, sponsorships, and community engagement programs such as the Emergency Smile and online clown visits. The website reflects a mature digital presence with excellent content quality, clear navigation, and strong branding consistency. Technically, the website is built on the TYPO3 CMS platform, utilizing modern JavaScript libraries and frameworks such as jQuery and Bootstrap. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Security-wise, the site enforces HTTPS, implements cookie consent mechanisms, and avoids exposing sensitive data. However, there is room for improvement in security headers and incident response disclosures. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with GDPR and privacy standards. The presence of recognized certifications and clear donation information further enhances credibility. No critical security issues or content safety concerns were identified, making the site safe for general audiences. Strategically, the organization should focus on enhancing security headers, publishing vulnerability disclosure policies, and possibly providing more explicit incident response contacts to strengthen their security posture and trust further.

J

Julius Meinl

juliusmeinl.com

62

Julius Meinl is a well-established premium coffee and tea company with a rich heritage dating back to 1862. The company positions itself as a global ambassador for Viennese Coffee House Culture, offering a wide range of products and services tailored to both businesses and home consumers. Their offerings include premium coffee and tea, professional coffee machines, training, and bespoke business solutions. The website reflects a mature brand with consistent messaging and a strong market presence in the hospitality sector, particularly in Austria and internationally. Technically, the website is built on a modern stack including Kentico CMS, hosted on Azure, and utilizes advanced analytics and tracking tools such as Microsoft Application Insights and Google Tag Manager. The site is mobile-optimized, accessible, and SEO-friendly, with good performance metrics. Privacy compliance is well addressed through Cookiebot consent mechanisms and a comprehensive privacy policy. From a security perspective, the site enforces HTTPS, implements a Content Security Policy, and avoids exposing sensitive data. However, there is room for improvement by enabling DNSSEC, adding more security headers, and publishing a formal security policy or incident response contacts. No critical vulnerabilities or suspicious patterns were detected. Overall, Julius Meinl's website demonstrates a high level of professionalism, trustworthiness, and digital maturity. The domain registration details corroborate the company's legitimacy and long-standing market presence. Strategic recommendations include enhancing DNS security, expanding security policies, and improving transparency around incident response to further strengthen trust and security posture.

B

Beiersdorf

beiersdorf.at

76

Beiersdorf is a globally recognized enterprise specializing in skin care products with a portfolio of strong brands such as NIVEA, Eucerin, and La Prairie. The website reflects a mature digital presence with comprehensive corporate information, a focus on consumer needs, and a commitment to sustainability. Technically, the site employs modern frameworks like UIkit, integrates Google Analytics and Tag Manager for data insights, and uses a robust consent management platform to ensure GDPR compliance. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response details are not publicly disclosed. Overall, the site is professional, trustworthy, and well-optimized for user experience and privacy.

L

Lindt & Sprüngli Österreich

lindt.at

72

Lindt & Sprüngli Österreich operates a professional e-commerce website showcasing its premium chocolate products, recipes, and promotional content. The site targets a general audience in Austria and leverages a mature digital infrastructure based on Magento Commerce, enhanced with modern JavaScript frameworks and third-party marketing and analytics tools such as Adobe Target, Google Tag Manager, Trustpilot, and New Relic. The website demonstrates consistent branding and a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS enforced and monitoring tools in place, though explicit security headers and privacy policies are not clearly visible in the provided content. Overall, the site reflects a reputable and established brand presence in the retail chocolate market.

S

SPEEDWEEK.COM

speedweek.com

65

SPEEDWEEK.com is a German-language motorsport news website providing comprehensive coverage of various motorsport disciplines including Formula 1, MotoGP, Superbike, IDM, and DTM. The site targets motorsport enthusiasts primarily in German-speaking regions and offers news, videos, photo galleries, and editorial content. The website appears professionally designed with consistent branding and regular content updates, positioning it as a reputable media outlet in its niche. The affiliation with Red Bull Media House is implied through authentication and embedded content domains, suggesting a strong backing and market presence. Technically, the site uses modern web technologies such as Bootstrap, lazy loading, and third-party authentication via Auth0, indicating a mature digital infrastructure. However, some areas such as explicit privacy policy pages and security headers could be improved. Security posture is moderate with HTTPS usage and secure authentication but lacks visible security headers and explicit incident response information. Overall, the site is functional, trustworthy, and well-positioned but would benefit from enhanced transparency and security practices.

R

Red Bull Media House GmbH

carpediem.life

65

carpediem.life is a German-language health and wellness media website operated under the Red Bull Media House GmbH umbrella. It provides rich content focused on longevity, mental health, nutrition, and lifestyle, targeting health-conscious adults primarily in Austria and German-speaking regions. The website features articles, podcasts, events, and newsletters, positioning itself as a niche media brand with a professional and consistent brand image. Technically, the site is built using the Hugo static site generator, employs Google Tag Manager and Google Publisher Tags for advertising and analytics, and integrates OneTrust for cookie consent, reflecting a modern and privacy-aware infrastructure. Security posture is good with HTTPS enforced and privacy policies in place, though some security headers could be improved. The domain WHOIS data is privacy protected, which is common and justified for media businesses. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements.

A

AFDRIPE

creches-ensemble.ch

53

The website 'Ensemble pour l'avenir' is a French-language platform dedicated to promoting an event on November 18, 2025, aimed at showcasing the daily operations and socio-economic importance of childcare centers in the canton of Fribourg, Switzerland. It targets childcare providers, political authorities, employers, and other stakeholders in early childhood education. The site provides detailed information about the event, including program schedules, registration forms, and contact details, positioning itself as a regional advocacy and informational resource. Technically, the website is built on WordPress 6.8.3, utilizing modern libraries such as Leaflet.js for interactive maps and Ultimate Addons for Gutenberg for form handling. The site is mobile-optimized with good navigation and content quality. Security practices include HTTPS enforcement and anti-spam measures, though it lacks advanced security headers and explicit incident response or vulnerability disclosure policies. From a security perspective, the site maintains a moderate security posture with no critical vulnerabilities detected. Privacy compliance is addressed through a privacy policy and cookie consent banner, aligning with GDPR requirements. Contact information is clearly presented, enhancing business credibility. No advertising or tracking beyond form submissions is present, indicating a privacy-conscious approach. Overall, the website is a trustworthy, well-structured informational platform with a clear business purpose in the non-profit and government sectors. Strategic recommendations include enhancing security headers, formalizing incident response policies, and improving accessibility features to further strengthen the site's security and compliance posture.

N

Nissan

nissan-jobboerse.de

49

The website nissan-jobboerse.de serves as an official job board platform dedicated to Nissan dealerships across Germany, facilitating job postings and applications within the automotive sector. It leverages a combination of WordPress CMS with WPBakery page builder and an Angular-based job board widget powered by the carsonal recruiting platform. The site is professionally designed with consistent Nissan branding and provides comprehensive job listings, employer registration, and applicant management features. The content is primarily in German and targets job seekers and Nissan dealer partners in Germany. Technically, the site uses modern web technologies and is mobile-optimized, though performance is moderate. Security posture is good with HTTPS enforced and no visible vulnerabilities, but lacks some security headers and explicit incident response policies. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism. WHOIS data is minimal, reducing trust slightly, but the overall business credibility is high due to official branding and partner integrations.

E

Escape The City Ltd.

escapethecity.org

57

Escape The City Ltd. operates a leading UK-based online platform dedicated to connecting ambitious professionals with purposeful jobs, volunteering roles, and career change programmes. The company has established a strong market position as a purpose-driven job board and employer certification provider, targeting professionals seeking meaningful work aligned with progressive values. Their services include curated job listings, employer services such as Top 1% Employer certification, and career development resources. The website is professionally designed, well-branded, and offers a seamless user experience with clear navigation and mobile optimization. Technically, the website leverages modern web technologies including Vue.js, Algolia for search, and Google Analytics for tracking. It is hosted on Bubble.io's CDN infrastructure, ensuring fast performance and reliable availability. The site implements security best practices such as HTTPS, CSRF tokens, and secure form handling, although explicit security policies and incident response information are not publicly disclosed. Privacy compliance is addressed with comprehensive privacy and cookie policies, though a cookie consent mechanism is not explicitly implemented. Overall, the security posture is strong with no evident vulnerabilities or exposed sensitive data. The business credibility is high, supported by company registration details, VAT number, and Certified B Corporation status. The domain age aligns well with the company's founding year, reinforcing legitimacy. Recommendations include enhancing transparency around security policies, adding a cookie consent mechanism, and publishing vulnerability disclosure information to further strengthen trust and compliance.

M

mégaphone-internet sàrl

megaphone-internet.ch

46

mégaphone-internet sàrl is a Swiss-based small technology company specializing in web creation and hosting services since 1995. The company targets associations and businesses in Switzerland seeking tailored digital solutions including website creation, e-commerce, content management, hosting, and email marketing. Their market position is that of a local artisan web service provider with a long-standing presence and a professional online presence. Technically, the website uses a modern but minimal tech stack including jQuery, Slick Carousel, and lazy loading with Lozad.js, delivering a good user experience with moderate performance and good mobile optimization. Security posture is adequate with HTTPS usage but lacks explicit security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Business credibility is strong given the clear company information, physical address, and professional content. Overall, the website is safe, professional, and trustworthy but could improve in privacy compliance and security best practices.

M

Maison Béthel / Fondation Praz-Soleil

maison-bethel.ch

52

Maison Béthel is a Swiss non-profit healthcare establishment specializing in transitional psychiatric care for adults aged 18 to 65. It operates under the Fondation Praz-Soleil umbrella and is recognized as a public interest institution within the canton of Vaud's psychiatric network. The website presents clear information about its mission, services, and contact details, targeting patients, families, and healthcare professionals. Technically, the site uses standard web technologies including HTML5, CSS3, and jQuery, with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, although formal security policies and incident response information are not published. Overall, the site is professional, trustworthy, and compliant with privacy regulations, with room for improvement in security transparency and accessibility.

B

Bremer Toto und Lotto GmbH

lottoindeutschland.de

64

The website www.lottoindeutschland.de serves as the official information portal for the Deutscher Lotto- und Totoblock, the collective of 16 independent lottery companies in Germany. It provides insights into the structure, responsibilities, and current news related to the state-regulated lottery market. The site targets professionals in media, politics, and administration and explicitly excludes direct gambling services. The business model centers on providing authoritative information and promoting responsible gaming under German legal frameworks. The site is affiliated with recognized lottery organizations and emphasizes social welfare funding from lottery proceeds. Technically, the website employs modern web standards including HTML5, CSS3, JavaScript modules, and structured data via JSON-LD for SEO. It is mobile-optimized and accessible, with good performance indicators. However, no CMS or hosting provider details are explicitly identified. The site uses HTTPS with excellent SSL configuration but lacks explicit security headers and cookie consent mechanisms, which are recommended for enhanced security and compliance. From a security perspective, the site demonstrates a solid posture with no visible vulnerabilities or sensitive data exposure. The absence of security headers and incident response contacts are areas for improvement. Privacy compliance is partially met with a privacy policy present but no cookie consent banner detected. Business credibility is high due to consistent branding, official affiliations, and trust signals such as whitelist approval and links to responsible gaming resources. Overall, the website is a trustworthy, professional portal with a clear focus on information dissemination rather than gambling operations. Strategic recommendations include implementing cookie consent, enhancing security headers, publishing terms of service, and providing clearer contact information to improve compliance and user trust.

F

FundraisingBox

wikando.com

62

FundraisingBox is a well-established German-based SaaS provider specializing in digital fundraising solutions for NGOs and non-profit organizations. Founded in 2009, the company offers a comprehensive platform that integrates multi-channel fundraising, CRM, payment processing, and API integrations tailored to the needs of professional non-profits. The website demonstrates a high level of professionalism, with excellent content quality, clear navigation, and strong branding consistency. Technically, the site is built on WordPress, hosted likely on AWS infrastructure, and uses modern web technologies including jQuery and Google Tag Manager. Performance and mobile optimization are excellent, supporting a positive user experience. Security posture is strong with HTTPS enforcement and domain protections, though DNSSEC is not enabled and some CSP issues are noted. Privacy compliance is robust, featuring a comprehensive privacy policy, cookie consent via Usercentrics, and GDPR adherence. However, explicit security policies and incident response contacts are not publicly disclosed. Overall, FundraisingBox presents a trustworthy and credible digital presence with a clear focus on serving the non-profit sector.

MicroPayment.com is currently a parked domain sales landing page offering the premium domain name for sale. The site is brokered by AbdulBasit Makrani and targets domain investors or businesses interested in acquiring the domain. The business model is straightforward domain brokerage with inquiry via email, WhatsApp, or contact form. The website uses modern frontend technologies such as Bootstrap 5, jQuery, and Font Awesome, and integrates Google Analytics for visitor tracking. However, the content is minimal and primarily focused on domain sale inquiry. From a technical perspective, the site is moderately optimized with responsive design and basic SEO elements. The SSL configuration is excellent, enforcing HTTPS, but no advanced security headers were detected. The contact form includes a consent checkbox for data collection, indicating some privacy awareness, though no cookie policy or terms of service pages were found. Security posture is moderate but could be improved by adding security headers and explicit privacy and cookie policies. The WHOIS data is missing or indicates the domain is unregistered or expired, which lowers trust and legitimacy scores. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the site is low risk with no adult or explicit content, but the lack of WHOIS data and minimal content limits business credibility. Strategic recommendations include improving security headers, adding comprehensive privacy and cookie policies, and clarifying domain registration status to enhance trust.

V

Verein zur Förderung der entwicklungspolitischen Publizistik e.V.

welt-sichten.org

50

Welt-Sichten is a German-language non-profit magazine focused on global development and ecumenical cooperation. It is published by the Verein zur Förderung der entwicklungspolitischen Publizistik e.V. and partners with reputable NGOs such as Brot für die Welt and Misereor. The website offers rich content including articles, newsletters, and partner network contributions, targeting readers interested in social justice and development issues. Technically, the site is built on Drupal 10, uses Matomo and Google Tag Manager for analytics, and implements a consent management platform for GDPR compliance. Security posture is strong with HTTPS, security headers, and secure forms, though no explicit security policy or incident response contacts are found. WHOIS data is unavailable due to privacy protection, which is justified for this type of organization. Overall, the site is professional, trustworthy, and well-maintained.

N

Nissan

nissan.de

71

Nissan Deutschland's website serves as the official German portal for Nissan's automotive offerings, including passenger cars, commercial vehicles, and electric vehicles. The site targets consumers in Germany interested in innovative automotive solutions. The business is positioned as a major automotive brand with a strong market presence. Technically, the website employs modern web technologies such as HTML5, CSS3, and JavaScript with a likely enterprise CMS backend, delivering a good user experience with mobile optimization and SEO best practices. However, the site lacks explicit privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security posture is moderate with no visible security headers or incident response information, indicating room for improvement in security best practices. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

The website ars-mia.de hosts a login portal titled 'MIA | Anmeldung' primarily serving users associated with 'autohausen'. The site appears to be a business application login interface with minimal public-facing content. The target audience is likely internal or authorized users of the MIA system. The business sector is not explicitly stated but is related to automotive or dealership services given the author metadata and company name. The website is hosted in Germany and uses HTTPS with basic security measures.

S

Sägewerk - Hirschbach GmbH

hirschbach.de

57

Sägewerk - Hirschbach GmbH is a traditional family-owned sawmill and wood trade company based in Baden-Württemberg, Germany, with over 116 years of history. The company focuses on sustainable wood production and direct sales from the sawmill, targeting local customers and businesses. The website reflects a well-established local business with a consistent brand and clear communication of its services. Technically, the website is built on WordPress using the Avada theme and several plugins such as Rank Math SEO and TranslatePress for multilingual support. The hosting is provided by lima-city.de, as indicated by the nameservers. Security-wise, the site uses HTTPS and has a cookie consent mechanism, but lacks explicit security headers and published security or incident response policies. No privacy policy or terms of service pages were detected in the provided content, which is a compliance gap. Overall, the website is professional, mobile-optimized, and SEO-friendly, with a good trustworthiness profile based on domain age and business consistency.

D

Dold Holzwerke GmbH

dold-holzwerke.com

58

Dold Holzwerke GmbH is a well-established German wood manufacturing company with a history dating back to 1882. The company specializes in producing sawn timber, planed timber, solid wood panels, and bioenergy products such as wood pellets and electricity. Their business model focuses on sustainable forestry and regional partnerships, serving international trade and industry customers. The website is professionally designed using TYPO3 CMS, with good content quality and clear navigation. Technical infrastructure includes modern JavaScript libraries and cookie consent mechanisms, with Google Analytics integrated respecting privacy by anonymizing IP addresses. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and publishing security policies. Overall, the website reflects a credible and trustworthy business with a strong regional and international presence.

H

HWW GmbH & Co. Holzwerke KG

hww.cc

47

HWW GmbH & Co. Holzwerke KG operates as a wood manufacturing company based in Germany, providing wood products primarily for business clients in manufacturing and construction sectors. The website serves as a corporate presence, built on WordPress with a moderate level of technical sophistication including the use of Usercentrics for cookie consent management. The site demonstrates good design quality and user experience, with mobile optimization and clear navigation. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks published security policies and security headers. Privacy compliance is partial due to the absence of a visible privacy policy and terms of service. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and consistency. The website is safe for general audiences with no adult or questionable content detected.

Sägewerk Karl Alt GmbH & Co. KG is a medium-sized German hardwood sawmill specializing in the production and distribution of high-quality hardwood lumber primarily for European, North American, Arab, and Asian markets. The company emphasizes sustainable sourcing and offers additional services such as drying, steaming, and custom cutting. The website is built on an older TYPO3 CMS platform with legacy JavaScript libraries, indicating a need for modernization. While the site includes essential business information and a cookie consent mechanism compliant with GDPR, it lacks advanced security headers and incident response details. No social media presence or terms of service are evident, which may limit user engagement and trust. Overall, the digital infrastructure is functional but dated, with moderate performance and basic mobile optimization.

P

Cookie-Information

pfeifergroup.com

46

The website analyzed is primarily a cookie information and consent page for www.pfeifergroup.com, providing detailed information about cookie usage including third-party cookies from major providers such as Google, Hotjar, LinkedIn, Matomo, Meta, and Microsoft. The site implements a cookie consent mechanism compliant with GDPR, allowing users to accept all cookies, only essential cookies, or customize their preferences. However, the website content is minimal and focused solely on cookie information without broader business or contact details. WHOIS data for the domain is unavailable, indicating either a recent registration, privacy protection, or a domain registration issue, which impacts trust and legitimacy assessments. Technically, the site uses standard web technologies including JavaScript and CSS, with integrations for analytics and marketing tools, but lacks visible security headers and detailed business information.

P

Pieper Holz GmbH

pieperholz.de

41

Pieper Holz GmbH is a medium-sized German manufacturing company specializing in woodworking products including sawmill operations, raw wood trade, playground equipment, and bridge construction. Their website emphasizes sustainability and future-oriented wood solutions, targeting businesses and organizations in need of quality wood products and landscape construction materials. The company maintains a professional online presence with clear contact information and basic compliance with privacy regulations. Technically, the website uses common JavaScript libraries and Google Analytics with privacy-conscious configurations such as IP anonymization and opt-in cookie consent. However, no explicit security policies or incident response information are published, and security headers are not evident, indicating room for improvement in security posture. WHOIS data is limited but consistent with a legitimate hosting provider, supporting the website's credibility. Overall, the site is well-structured, user-friendly, and trustworthy with a moderate security maturity level.

H

Hüster GmbH

huester-gmbh.de

53

Hüster GmbH is a small, family-owned manufacturing company based in Germany, specializing in the production of high-quality sawn timber from spruce logs since 1974. The company emphasizes sustainability, ecological responsibility, and precision in its production processes, targeting B2B customers in the wood and construction industries. The website reflects a consistent brand image and provides basic corporate information but lacks detailed contact data and advanced digital features. Technically, the site uses an older JavaScript stack with the Neko Framework and jQuery, offering moderate performance and good mobile responsiveness. Security posture is weak due to lack of HTTPS enforcement, missing security headers, and absence of published security policies. Privacy compliance is limited, with no cookie consent mechanism and only a basic privacy policy page. Overall, the website is functional and professional but requires improvements in security and privacy to enhance trust and compliance.

R

Rettenmeier

rettenmeier.com

56

Rettenmeier operates as a large manufacturing company specializing in wood products and related services, targeting B2B customers and dealers primarily in Germany and neighboring countries. The website is professionally designed using TYPO3 CMS, featuring a clear navigation structure and multilingual support. The company demonstrates compliance with GDPR through a comprehensive privacy policy and an integrated Cookiebot consent mechanism. Google Analytics is used with IP anonymization to monitor website traffic and user behavior. Security posture is generally good with HTTPS enabled and privacy controls in place, though some security headers and explicit incident response information are absent. WHOIS data is unavailable or privacy protected, which slightly reduces transparency but does not detract significantly from the site's legitimacy. Overall, the website reflects a mature digital presence suitable for a large manufacturing business.

JamesGreenBlue.com is a personal blog operated by James Greenhalgh focusing on digital strategy, marine conservation, and personal adventures. The site features a collection of blog posts dating from 2020 through 2025, reflecting a niche content approach aimed at environmentally conscious and technology-interested audiences. The business model is primarily content-driven with no evident commercial transactions or services offered. The website is small in scale and founded in 2022, consistent with the domain registration data. Technically, the website is built using the Hugo static site generator, hosted behind Cloudflare DNS services, and leverages Google Fonts for typography. The site is performant, mobile-optimized, and accessible with good SEO practices. No CMS beyond Hugo is detected, and no analytics or tracking scripts are present, indicating a privacy-conscious approach. From a security perspective, the site enforces HTTPS and has domain-level protections such as clientDeleteProhibited and clientTransferProhibited statuses. However, DNSSEC is not enabled, and no security headers are detected in the provided data. There is no published privacy policy, cookie policy, or terms of service, which presents compliance gaps especially regarding GDPR. No contact information or incident response channels are provided, limiting transparency and user trust. Overall, the website is safe, professional, and trustworthy as a personal blog but would benefit from enhanced privacy compliance, security header implementation, and clearer contact information to improve user trust and regulatory adherence.

T

The Reef-World Foundation

reef-world.org

66

The Reef-World Foundation is a well-established non-profit organization dedicated to coral reef conservation globally, leveraging marine conservation, sustainable tourism, and community engagement. Founded in 1999, it has a strong market position with extensive reach across 80+ countries and significant engagement with marine tourism businesses and tourists. The website reflects a professional and consistent brand image, targeting environmental stakeholders and the general public interested in marine conservation. Technically, the website is built on the Squarespace platform, utilizing modern web technologies including Google Analytics and Tag Manager for tracking, and a video player for rich media content. The site is mobile-optimized and performs moderately well, with good SEO and basic accessibility features. From a security perspective, the site enforces HTTPS with HSTS and has domain transfer protections in place. However, it lacks DNSSEC and explicit security or privacy policies, which are areas for improvement. No vulnerabilities or suspicious activities were detected. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and explicit security documentation to improve user trust and regulatory adherence.

S

Stiftung Pfadiheime Schweiz

heimv.ch

64

HeimV is a specialized reservation and management software designed for Swiss scout homes and group houses, offering a comprehensive suite of features from booking validations to payment management. The platform is supported by the Stiftung Pfadiheime Schweiz, which also subsidizes its operation, positioning HeimV as a trusted solution within its niche market. The business model includes hosted SaaS offerings and a self-hosted open source option for internal use, with commercial licensing for providers. Technically, the website is built using the Astro framework, optimized for performance and mobile responsiveness, with Swiss-based hosting ensuring data sovereignty. Security posture is strong with HTTPS and no visible vulnerabilities, though improvements can be made by adding security headers and cookie consent mechanisms. Overall, HeimV presents a professional, trustworthy, and well-maintained digital presence aligned with its business goals.

S

Stiftung Pfadiheime Schweiz

stiftung-pfadiheime.ch

51

Stiftung Pfadiheime Schweiz is a Swiss non-profit foundation established in 1919 dedicated to supporting the establishment and maintenance of scout homes and campgrounds across Switzerland. It owns multiple properties and operates several scout homes, serving as a central organization for the Swiss scouting community. The foundation also provides a booking platform for scout homes and collaborates with the Swiss Scout Foundation for financing projects. The website is built on WordPress using modern themes and plugins, offering a good user experience with clear navigation and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though it lacks some security headers and explicit incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site reflects a trustworthy and professional organization with a strong market position in the non-profit scouting sector in Switzerland.

R

Réseau évangélique suisse

evangelique.ch

52

The Réseau évangélique suisse is a Swiss non-profit organization that serves as a network for evangelical churches, unions, and works across Switzerland. It provides coordination, publications, and project management to support its members and promote evangelical interests nationally. The website is professionally designed using WordPress and Elementor, with a moderate technical infrastructure including Google Maps integration and Piwik analytics. Security posture is solid with HTTPS and security headers, though there is room for improvement in privacy compliance and explicit security policies. Overall, the site is trustworthy and well-positioned within its niche community.

O

One’

one-event.ch

51

One’ is a non-profit Christian event organizer based in Switzerland, focusing on uniting the Christian community in the French-speaking region through a large annual event. The website provides detailed information about the event scheduled for November 15, 2025, including speakers, program, ticketing, and partner organizations. The technical infrastructure is built on WordPress with Elementor and uses reputable third-party services for ticketing and analytics. Security posture is good with HTTPS and security headers, but lacks published privacy and cookie policies, which impacts compliance. Overall, the site is professional and trustworthy but should improve privacy compliance and incident response transparency.

Giornale Diplomatico is an Italian online news portal specializing in political, diplomatic, economic, and cultural news with a focus on Italian government and international relations. The website targets Italian-speaking audiences interested in these sectors and operates as a niche media outlet with a small organizational size. Technically, the site is built on a custom PHP-based CMS using jQuery and jQuery UI libraries, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS and a Content-Security-Policy header, but the use of an outdated PHP version and lack of advanced security headers present risks. Privacy and cookie policies are present and GDPR compliant, with a consent mechanism implemented. Contact information is limited to a contact form, with no explicit emails or phone numbers found. Overall, the site is safe, professional, and trustworthy but could benefit from technical and security improvements.

O

OX Linz

herberstein-linz.at

56

OX Linz operates the 'OX in the City' restaurant, specializing in sushi, steaks, and grill cuisine, positioned as a premium dining destination in Linz, Austria. The website effectively communicates the business offerings, including menus, events, online reservations, and gift vouchers, targeting food enthusiasts and fine dining customers. The technical infrastructure is based on WordPress with Elementor, utilizing modern web technologies and a cookie consent mechanism to address GDPR requirements. Security posture is strong with HTTPS, security headers, and no exposed sensitive data, although explicit privacy and terms policies are missing. Overall, the site is professional, trustworthy, and well-optimized for user experience and SEO.

Schloss - Herbersteins Brasserie is a small hospitality business based in Linz, Austria, offering restaurant dining, catering, exclusive event hosting, and special events such as Candle Light Dinners. The website positions the business as a local venue with a focus on quality dining experiences and private celebrations. The technical infrastructure is based on an older TYPO3 CMS version 4.5, with JavaScript libraries such as jQuery 1.4.4, and uses Google Analytics and Google Tag Manager for tracking. While the site is functional and provides clear contact information and event details, it lacks modern security headers and cookie consent mechanisms, which are important for GDPR compliance. The security posture is moderate but could be improved by updating outdated libraries and implementing security best practices. Overall, the website is professional and trustworthy but would benefit from technical modernization and enhanced privacy compliance.

O

OX Steaks & Grill Ried

ox-ried.at

55

OX Steaks & Grill Ried is a hospitality business specializing in high-quality steaks, burgers, fish dishes, and Mediterranean appetizers. The restaurant positions itself as a premium dining location with a unique ambiance and a loyalty app for customers. The business is currently closed for renovation until November 2025, aiming to relaunch with a new concept. The website is built on TYPO3 CMS and integrates modern web technologies including Google Analytics and Facebook Pixel for marketing and analytics purposes. Privacy and cookie policies are well implemented with user consent mechanisms. Contact information and legal disclosures are clearly presented, enhancing business credibility. Security posture is good with HTTPS and anonymized IP tracking, though formal security policies and incident response contacts are not published. Overall, the website is professional, secure, and compliant with GDPR, serving a general audience in Austria.

O

OX-Fischapark GmbH

ox-wrneustadt.at

56

OX-Fischapark GmbH operates a hospitality business in Wiener Neustadt, Austria, specializing in steaks, pizza, and burgers served in a high-quality ambiance. The website reflects a well-established regional restaurant brand with multiple sister locations, offering dine-in services, online reservations, and gift vouchers. The business targets local residents and visitors seeking quality dining experiences. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and integrates Google Analytics and Facebook Pixel for marketing and analytics. The site is mobile-optimized and provides clear navigation and content relevant to its audience. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms compliant with GDPR. However, it lacks explicit security policies and incident response contacts. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting the business's credibility and customer engagement.