Security Directory

P

Pedalo®

pedalo.de

49

Pedalo® is a well-established German company specializing in innovative products and concepts for movement, play, sport, and therapy. Founded in 1963, it targets a broad demographic from children to seniors, emphasizing quality, sustainability, and health promotion. The company operates an e-commerce platform powered by Shopware, integrating modern payment methods such as PayPal and Amazon Pay, and employs Google Tag Manager and analytics for marketing and user behavior tracking. The website is professionally designed, mobile-optimized, and provides clear navigation and customer support channels including phone and email contact. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response information are not publicly available. Overall, the site reflects a credible and trustworthy business with a solid digital presence.

LOTTO Rheinland-Pfalz operates as the official state lottery provider for the Rheinland-Pfalz region in Germany, offering a variety of lottery games including LOTTO 6aus49, Eurojackpot, Rubbellose, GlücksSpirale, BINGO!, KENO, and TOTO. The website facilitates online ticket purchases, account registration, and subscription services such as Dauerschein and Jackpot-Jäger. The business is positioned as a trusted regional government entity with a focus on secure and regulated gambling services for adults. The website content is professionally presented, consistent with the brand, and targets adult users interested in lottery gaming. Technically, the website employs modern web technologies including jQuery, SVG icons, and a custom JavaScript framework by MULTA MEDIO AG. It supports progressive web app features and is mobile optimized with responsive design. Analytics are implemented via etracker, and a chat widget from moin.ai is integrated for user support. While the site uses HTTPS and secure login forms, it lacks some security headers and explicit cookie consent mechanisms, which are areas for improvement. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and responsible disclosure availability, but could enhance its posture by adding security headers and publishing incident response contacts. No vulnerabilities or exposed sensitive data were detected. The domain WHOIS data is limited but does not raise concerns, and the overall legitimacy is supported by consistent branding and government affiliation. Overall, the website is a reliable and professional platform for online lottery services with moderate technical maturity and a solid security baseline. Enhancements in privacy compliance and security headers would further strengthen trust and regulatory adherence.

Ö

Ökumenewerk der Nordkirche

nordkirche-weltweit.de

54

The Ökumenewerk der Nordkirche is a non-profit organization affiliated with the Evangelisch-Lutherische Kirche in Norddeutschland, focusing on fostering ecumenical relationships and social justice initiatives globally. Their website serves as an informational and engagement platform for church members, partners, and volunteers, highlighting international partnerships and advocacy work. The organization maintains a moderate digital maturity with a WordPress-based infrastructure, leveraging caching and security plugins such as Google reCAPTCHA and Borlabs Cookie for consent management. While the site is well-structured and professionally designed with good navigation and mobile optimization, it lacks explicit privacy and terms of service documentation, which are critical for compliance and user trust. Security posture is adequate with HTTPS and some security best practices, but could be improved by adding security headers and incident response information. Overall, the website is safe, trustworthy, and serves its target audience effectively, though it would benefit from enhanced privacy compliance and transparency.

V

Page Not Found

vemission.org

32

The website vemission.org currently serves a 404 error page indicating that the site is not configured or content is missing. The domain is registered with Mesh Digital Limited since 1998, suggesting a long-standing registration, but the absence of any accessible content or business information severely limits the ability to assess the company or its operations. The site uses TYPO3 CMS but lacks proper configuration and content deployment. There are no privacy, cookie, or terms of service policies found, nor any contact information or security policies. Technically, the site shows minimal implementation with no detected security headers or HTTPS information, which raises concerns about security posture. Overall, the site is non-functional from a user and security perspective, resulting in a low trust and credibility score.

M

Mission EineWelt

mission-einewelt.de

46

Mission EineWelt is a non-profit international partnership center affiliated with the Evangelical Lutheran Church in Bavaria. It focuses on fostering dialogue and cooperation with partner churches worldwide, promoting peace, justice, tolerance, and sustainability. The organization offers volunteer programs, educational campaigns, publishing, and fundraising activities, positioning itself as an important regional entity with international reach. The website reflects a mature digital presence built on WordPress with Elementor, integrating privacy-conscious analytics and consent management tools. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though incident response contact details could be improved. Overall, the site is professional, trustworthy, and well-aligned with the organization's mission.

M

Misereor

misereor.de

66

Misereor is a well-established German Catholic non-profit organization dedicated to global development and social justice. The website serves as a comprehensive platform for informing the public, facilitating donations, and promoting advocacy campaigns. It targets donors, partners, and socially conscious individuals, offering detailed project information and engagement opportunities. The organization maintains a strong market position within the German and international development NGO sector, emphasizing transparency and partnership. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies including Bootstrap and FontAwesome Pro for styling and icons. It employs Usercentrics for cookie consent management, ensuring GDPR compliance. Hosting is inferred to be with NetCologne, a reputable German provider. The site demonstrates good performance, excellent mobile optimization, and solid SEO practices. From a security perspective, the site enforces HTTPS and integrates consent management for privacy compliance. While explicit security headers are not fully confirmed, no vulnerabilities or exposed sensitive data were detected. The absence of a published security policy or incident response contact is noted as an area for improvement. Overall, the security posture is strong for a non-profit organization. The website content is safe for general audiences, focusing on charitable activities without any adult or questionable material. The domain WHOIS data aligns with the organization's profile, supporting legitimacy and trustworthiness. No WAF or blocking mechanisms interfere with content accessibility, allowing full analysis. Strategic recommendations include enhancing security header implementation, publishing a formal security policy and vulnerability disclosure process, and continuing to maintain transparency and user trust through clear contact and privacy information.

F

Forschungsstätte der Evangelischen Studiengemeinschaft e.V.

fest-heidelberg.de

62

The Forschungsstätte der Evangelischen Studiengemeinschaft e.V. (FEST) is a well-established non-profit interdisciplinary research institute based in Heidelberg, Germany, founded in 1958. It is primarily funded by member organizations within the Evangelical Church community and conducts research, consulting, and publishes academic content. The website reflects a professional and consistent brand image targeting academic and church audiences. Technically, the site uses Edith CMS, jQuery, Bootstrap, and Matomo analytics, indicating a mature but somewhat traditional technology stack. Security posture is good with HTTPS and cookie consent mechanisms, though it lacks explicit security headers and published privacy policies. WHOIS data confirms domain legitimacy and consistency with the organization's history. Overall, the site is trustworthy and professionally maintained but could improve transparency on privacy and security policies.

The website centrostudicts.it is currently inaccessible due to a security challenge page implementing a JavaScript-based proof-of-work captcha. This challenge blocks normal access and prevents extraction of meaningful business or contact information. The domain is registered since 2019 with no privacy protection and is set to expire in 2025, indicating a legitimate registration. However, the lack of DNSSEC, security headers, and absence of privacy or cookie policies suggests a weak security posture. The site uses Cloudfront CDN for hosting assets and employs advanced client-side cryptographic challenges to mitigate automated access. Overall, the site is not currently usable for end users without passing the challenge, limiting content and business insight extraction.

The website www.bodensee-stiftung.org/wp-admin/ is currently inaccessible without authentication, presenting a WordPress error message indicating permission denial. The site appears to be a WordPress-based platform with restricted admin access, likely protected by security plugins or access controls. Due to the lack of accessible content, no business description, contact information, or policies are available for analysis. The WHOIS data query failed, returning no registrar or registrant information, which limits trust and transparency. Technically, the site uses WordPress CMS but lacks visible security headers or SSL configuration details. Overall, the site’s security posture cannot be fully assessed, but the access restriction is a positive security control. However, the absence of public business and privacy information is a concern for compliance and trust.

A

Arquitectos Urbanistas e Ingenieros Asociados S.L.

auia.es

50

Arquitectos Urbanistas e Ingenieros Asociados S.L. (AUIA) is a well-established Spanish firm specializing in architecture, urbanism, and engineering with a strong focus on sustainable building practices. Founded in 1969, the company serves both public and private sectors, offering a broad range of services including residential architecture, urban development, industrial construction, and rehabilitation of historic buildings. Their website reflects a professional and consistent brand image, targeting clients interested in sustainable and efficient architectural solutions. Technically, the website is built on WordPress using popular plugins such as Yoast SEO, Contact Form 7, and Slider Revolution, indicating a modern and maintainable infrastructure. The site is mobile-optimized and includes SEO best practices, although performance is moderate and accessibility features are basic. Security is adequate with HTTPS enforced and a cookie consent mechanism in place, but lacks advanced security headers and explicit security policies. From a security perspective, no critical vulnerabilities or exposed sensitive data were detected. However, the absence of published security policies and incident response contacts suggests room for improvement in transparency and readiness. WHOIS data is unavailable due to Red.es restrictions, but the domain's privacy protection is typical and justified for a professional services firm. Overall, the website presents a trustworthy and credible digital presence with moderate risk. Strategic recommendations include enhancing security headers, publishing clear security and incident response policies, and improving technical performance and accessibility to further strengthen the company's digital maturity and client trust.

G

Green Fins

greenfins.net

53

Green Fins is a well-established non-profit initiative dedicated to protecting coral reefs through sustainable marine tourism. Supported by the United Nations Environment Programme and partnered with Reef-World, it offers certified and digital memberships to dive centers, snorkelling centers, and liveaboard businesses globally. The website provides educational e-courses for recreational divers and professional guides, promoting responsible tourism practices. The organization targets eco-conscious tourists and marine operators, positioning itself as a trusted global leader in marine conservation education and certification. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Google Analytics, and Google Maps API integration. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Hosting and DNS services leverage Cloudflare and NameCheap, ensuring reliable performance and domain security. From a security perspective, the site enforces HTTPS and has domain transfer protections in place. However, DNSSEC is not enabled, and some security headers are missing. There is no public vulnerability disclosure or incident response policy, and cookie consent mechanisms are absent, which may impact GDPR compliance. No exposed sensitive data or vulnerabilities were detected. Overall, Green Fins presents a professional, trustworthy, and content-rich platform with a strong business credibility score. Strategic improvements in privacy compliance and enhanced security practices are recommended to further strengthen its security posture and regulatory adherence.

M

Mouvement des Flambeaux et des Claires Flammes

flambeaux.org

57

The Mouvement des Flambeaux et des Claires Flammes is a French non-profit scouting organization established in 1964, serving evangelical Protestant churches and open to all youth. The website reflects a well-established community-focused entity with clear educational and youth engagement objectives. Technically, the site is built on WordPress using standard plugins such as Yoast SEO and Contact Form 7, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and Cloudflare Turnstile captcha implemented, though additional security headers and explicit incident response policies are absent. The lack of WHOIS data limits domain trust analysis but the website content and affiliations support legitimacy. Overall, the site is professional, trustworthy, and safe for general audiences.

A

Association du Scoutisme Jurassien (ASJ)

asj.ch

59

The Association du Scoutisme Jurassien (ASJ) operates as a regional non-profit scouting organization in Switzerland, serving the Jura and Jura-bernois regions. It coordinates local scout groups, organizes training and events, and promotes youth development through scouting principles. The website reflects a well-structured association with clear organizational teams and committees, supported by regional government funding. Technically, the site is built on Joomla CMS with modern libraries like Bootstrap and jQuery, offering a good user experience and mobile optimization. Security is adequate with HTTPS and CSRF protections, though it lacks some security headers and formal privacy/cookie policies, which are compliance gaps. No tracking or analytics scripts were detected, indicating minimal user tracking. Overall, the site is safe, professional, and trustworthy, but could improve privacy compliance and security hardening.

Service de Missions et d'Entraide (SME) is a Swiss non-profit organization dedicated to providing education and professional training to underprivileged populations. Established in 2007, SME operates primarily in the education sector, focusing on basic education, professional training, and professional development. The organization relies on donations and volunteer support to fund its projects and has a strong presence in Switzerland with multilingual website support in French and German. SME maintains a reputable position in its niche with certifications such as ZEWO and active social media engagement.

M

Ministock.ch

ministock.ch

48

Ministock.ch is a small non-profit website providing evangelical Christian educational resources primarily for children, families, and church ministries in the French-speaking region of Switzerland. The site offers a variety of content including illustrated Bible verses, videos, lesson programs, and links to partner organizations. It is affiliated with La FREE - Fédération romande d'Eglises évangéliques, reinforcing its niche position within the evangelical community. The website was founded around 2016 and maintains consistent branding and content quality suitable for its target audience. Technically, the site is built on Joomla CMS with the K2 extension and uses common web technologies such as jQuery, Magnific Popup, and Google reCAPTCHA for form security. It integrates social media sharing and newsletter subscription via AcyMailing. The site is moderately optimized for performance and mobile devices, with good SEO practices but basic accessibility features. From a security perspective, the site uses HTTPS and employs reCAPTCHA to protect forms, but lacks explicit security headers which could improve its security posture. No privacy or cookie policies were found, indicating compliance gaps with GDPR and other privacy regulations. Contact information is limited to a newsletter subscription form without direct emails or phone numbers. Overall, Ministock.ch presents a trustworthy and professional resource platform for its community but should enhance privacy compliance and security headers to improve user trust and regulatory adherence.

L

lafree.ch - Site évangélique d'information

eglisesfree.ch

50

The website eglisesfree.ch serves as the official online presence for the Fédération romande d'Églises évangéliques (FREE), a non-profit federation of evangelical churches in French-speaking Switzerland. It provides news, event information, resources, and community support tailored to evangelical communities. The site is well-structured, content-rich, and targets a specific religious audience with relevant services such as podcasts, theological commissions, and youth programs. The business model is non-profit and community-focused, with partnerships to support its mission. Technically, the site is built on Joomla CMS using the Helix3 framework, integrating common web technologies like jQuery, Google Analytics, and YouTube embeds. The site is mobile-optimized and performs moderately well, with good SEO practices. However, it lacks some advanced accessibility features and security headers that could enhance its robustness. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. No vulnerability disclosure or security.txt files are present, and security headers are missing, indicating room for improvement in security posture. The WHOIS data aligns well with the website's identity, supporting legitimacy. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices to reduce risk and improve user trust.

L

lafree.ch - Site évangélique d'information

myfreelife.ch

50

Myfreelife.ch is a French-language evangelical Christian news and community website operated under the Fédération romande d’Églises évangéliques (FREE), targeting the Suisse romande evangelical community. The site provides news, portraits, spiritual reflections, and societal articles relevant to its audience. It maintains a consistent brand identity aligned with the federation and integrates social media channels for broader engagement. Technically, the site is built on Joomla CMS with the Helix3 template framework and uses common web technologies such as jQuery and Bootstrap. Google Analytics and Tag Manager are employed for user tracking. Security posture is adequate with HTTPS enabled and CSRF protections in forms, but lacks security headers and explicit privacy or cookie policies. Contact information and incident response details are not directly visible, which may impact user trust and compliance. Overall, the site is professionally presented, content-rich, and trustworthy within its niche, but could improve privacy compliance and security best practices.

C

CCEJ

cckj.ch

48

The website cckj.ch represents a small non-profit organization focused on promoting a charter for Christian children and youth work in Switzerland. The site provides information about the charter, encourages signatories, and targets Christian youth organizations and stakeholders. The business model is centered on advocacy and community engagement within a niche religious and youth sector. Technically, the website is built on WordPress using common plugins such as WPML for multilingual support and Contact Form 7 for user interaction. The site employs Google Analytics and Tag Manager for user tracking, indicating moderate digital maturity. Security posture is basic with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is partial, with a privacy policy PDF available but no cookie consent mechanism or GDPR explicit indicators. Overall, the site is functional and professional but could improve in security and privacy compliance to enhance trust and regulatory adherence.

S

Scoutisme Neuchâtelois

scoutne.ch

45

Scoutisme Neuchâtelois is a regional non-profit youth organization based in the canton of Neuchâtel, Switzerland, focused on providing scouting activities, outdoor adventures, and community engagement for young people starting from age 5. The website serves as an informational and engagement platform for local scouting groups, offering details about activities, groups, and contact options. The organization positions itself as a trusted community resource promoting friendship, nature, and adventure.

Pfadiheime.ch is a specialized non-profit platform operated by Stiftung Pfadiheime Schweiz, serving as the primary directory and booking platform for scout homes across Switzerland. With over 25 years of history, it provides comprehensive search and booking functionalities tailored to scout groups and home administrators. The platform also promotes HeimV, a home management software, enhancing operational efficiency for home administrators. The website is well-structured, mobile-optimized, and offers clear navigation, targeting a niche audience effectively. Technically, the site leverages modern web technologies including HTML5, CSS3, JavaScript with jQuery, and likely a Ruby on Rails backend. The presence of CSRF tokens indicates attention to form security, though there is room for improvement in security headers and privacy compliance mechanisms. Performance is moderate with good mobile responsiveness and basic accessibility features. From a security perspective, the site uses HTTPS and includes CSRF protection but lacks visible security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR explicit indicators. Contact information is limited to a general info email, with no phone or physical address provided. Overall, the platform presents a trustworthy and professional service with a strong business credibility score. Strategic improvements in privacy compliance, security headers, and incident response documentation would enhance its security posture and regulatory adherence.

A

Association du Scoutisme Vaudois

asvd.ch

49

Association du Scoutisme Vaudois (ASVd) is a well-established non-profit organization dedicated to promoting scouting activities for youth aged 5 to 16 in the Vaud region of Switzerland. It is part of the largest youth movement in Switzerland, serving thousands of scouts locally. The website provides comprehensive information about scouting, the association's structure, history, and facilities, targeting families and youth interested in scouting. Technically, the site is built on WordPress with common plugins such as Contact Form 7 and Jetpack, and uses modern JavaScript libraries like Leaflet for maps. The site is mobile-optimized and has good SEO practices but lacks visible privacy and cookie policies, which is a compliance gap. Security posture is generally good with HTTPS enforced, but security headers are missing and no vulnerability disclosure or incident response information is provided. Overall, the domain registration data aligns well with the organization's identity, supporting legitimacy and trustworthiness.

P

Pfadibewegung Schweiz

pfadi.swiss

60

Pfadibewegung Schweiz operates the website pfadi.swiss, serving as the largest youth scouting organization in Switzerland with approximately 51,000 members. The website provides information about scouting activities, international events, and resources for children, teenagers, and their families. The organization is well-established with a domain registered since 2017, consistent with its public presence. The website is professionally designed, mobile-optimized, and uses privacy-friendly analytics, reflecting a moderate to high level of digital maturity. However, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance and user trust. Security posture is adequate with HTTPS enabled and domain transfer protections, but could be improved by enabling DNSSEC and implementing security headers. Overall, the site is trustworthy and serves its non-profit mission effectively.

C

Central Danube - Twin City Liner

twincityliner.com

52

Twin City Liner operates a ferry transportation service connecting Vienna and Bratislava, offering a fast 75-minute journey along the Danube River. The website presents a professional and consistent brand image focused on this niche regional transport market. The technical infrastructure employs modern web technologies including Bootstrap, jQuery, and multiple analytics and tracking tools such as Google Analytics, Microsoft Clarity, and Bing Ads. Cookie consent is managed via Cookiebot, indicating some level of privacy compliance. However, the site lacks explicit privacy policy, terms of service, and contact information pages, which are important for user trust and regulatory compliance. Security posture is moderate with HTTPS enabled but missing explicit security headers and incident response information. The domain WHOIS data is consistent with the business profile, showing a long-established domain registered since 2005 with no suspicious patterns. Overall, the website is functional and professional but could improve in privacy and security transparency.

B

basemap.at

basemap.at

62

basemap.at is an official Austrian government geospatial data portal providing comprehensive administrative base maps of Austria. It is a cooperative initiative involving federal states' GIS offices, the Austrian Cities Association, and other governmental partners. The website offers regularly updated raster and vector map products accessible via standard APIs and offline downloads, licensed under Austria's Open Government Data license. Technically, the site is built on WordPress with a modern theme and multilingual support, incorporating analytics and cookie consent mechanisms. Security posture is adequate with HTTPS enforced, though improvements are recommended in security headers and explicit privacy policies. The absence of WHOIS data limits domain trust analysis, but the strong government affiliation and partner links support legitimacy. Overall, the site is professional, trustworthy, and serves a specialized audience of GIS professionals and government entities.

W

Wien Holding

wienholding.tv

48

Wien Holding TV serves as a dedicated video portal for Wien Holding, a large Austrian corporate group with diverse subsidiaries in media, real estate, culture, logistics, and transportation sectors. The website provides video content showcasing developments, events, and news related to Wien Holding's companies, targeting a general audience interested in the group's activities. Technically, the site employs modern web technologies including Bootstrap, jQuery, and Video.js, hosted on a media server with HTTPS enabled, ensuring a good user experience and mobile responsiveness. Security posture is adequate with HTTPS but lacks explicit security headers and detailed privacy policy documentation. The absence of WHOIS data suggests privacy protection, which is reasonable for a corporate domain. Overall, the site is professional, trustworthy, and serves its communication purpose effectively.

Crownd Estates GmbH operates a premium luxury real estate platform focused on exclusive properties in Vienna, Austria. The company positions itself as a boutique investment and property sales firm targeting affluent clients seeking high-end residential projects. The website showcases multiple luxury projects with rich multimedia content, indicating a strong market presence in the Vienna real estate sector. Technically, the site is built on modern frameworks such as Next.js and React, hosted on Microsoft Azure, and employs Usercentrics for cookie consent, reflecting a mature digital infrastructure. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities, though privacy and terms policies are lacking. Overall, the site is professional and trustworthy but could improve compliance documentation and incident response transparency.

S

Scout24Media

scout24media.at

62

Scout24Media operates as a specialized advertising marketer for ImmoScout24 in Austria, focusing on real estate-related advertising campaigns. The company leverages exclusive access to first-party data to deliver targeted advertising solutions including data-driven, geo-targeting, and integration with newsletters. The website reflects a professional and consistent brand presence, supported by structured data and social media channels, positioning Scout24Media as a key player in the Austrian real estate advertising market. Technically, the site is built on WordPress with Elementor and Yoast SEO, ensuring modern CMS capabilities and SEO optimization. Security measures include HTTPS and Google reCAPTCHA on contact forms, though security headers are not explicitly detected. The absence of WHOIS data due to quota limits restricts domain registration insights, but the overall digital footprint supports legitimacy. Privacy and cookie policies are present and GDPR compliant, enhancing trust and compliance posture.

I

ImmoScout24

immobilienscout24.de

60

ImmoScout24 is Germany's leading online real estate marketplace, offering a comprehensive platform for property seekers and owners to buy, rent, and sell residential and commercial real estate. The platform serves both private individuals and professional real estate agents, providing extensive listings and additional services such as mortgage financing and agent search. The website demonstrates a mature digital infrastructure leveraging modern web technologies like React and Next.js, hosted on AWS, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforcement and security headers, although explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is robust with clear GDPR-aligned policies and cookie consent mechanisms. Overall, ImmoScout24 presents a trustworthy, professional, and well-maintained online presence with high business credibility and technical maturity.

P

Pinterest

pinterest.at

69

Pinterest is a leading global visual discovery and social media platform that enables users to find and share ideas such as recipes, home decor, and style inspiration. The website at.pinterest.com serves the Austrian market and reflects the brand's consistent and professional digital presence. The platform operates on a robust technical infrastructure leveraging modern JavaScript frameworks, strong security policies, and cloud hosting services. The site demonstrates excellent mobile optimization and accessibility, ensuring a seamless user experience across devices. Security posture is strong with HTTPS enforcement, comprehensive Content Security Policy, and integration of advanced bot mitigation technologies like reCAPTCHA Enterprise. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms, aligning with GDPR requirements. Overall, Pinterest maintains a high level of trustworthiness and professionalism, suitable for its enterprise scale and market position.

O

Ottakringer Getraenke AG

brauwerk.wien

60

Ottakringer BrauWerk is a medium-sized brewery business based in Vienna, Austria, operating under the parent company Ottakringer Getraenke AG. The company produces a variety of beers with an international style and hosts events while offering an online shop for direct sales. The website is built on WordPress with a moderate technical stack including jQuery and SEO and cookie consent plugins. It is well-optimized for mobile and SEO, with good content quality and clear navigation. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit incident response policies. WHOIS data confirms legitimacy and consistency with the business claims. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

S

Sporteo

sporteo.cc

53

Sporteo is a German-based small business specializing in international sports management, focusing on holistic sport management and brand enhancement, particularly in football. The website presents a professional and consistent brand image with good SEO optimization and structured data, indicating a mature digital presence. Technically, the site is built on WordPress with modern scripts like jQuery and lazy loading for performance, though some technical improvements are possible. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response information. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is legitimate and trustworthy but would benefit from enhanced security and compliance measures.

O

Observer

observer.at

72

Observer is Austria's leading media monitoring and brand intelligence company, established in 1896. The company offers comprehensive services including media monitoring across print, online, social media, and broadcast channels, media resonance analysis, market research, and brand intelligence tools. Their market position is strong, supported by a long history and partnerships with major brands. Technically, the website is built on WordPress with modern JavaScript libraries and SEO optimizations, providing a good user experience and mobile responsiveness. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms in place, though a dedicated security policy and incident response information are absent. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

S

ServusTV On

servustv.com

67

ServusTV On is a professional Austrian media platform providing livestreams, on-demand content, TV programming, and news primarily in German. The website targets German-speaking audiences interested in sports, news, and entertainment. The platform leverages modern web technologies including Next.js and uses CDNs such as Red Bull's for content delivery. The site is well-designed, mobile-optimized, and includes structured data for SEO. Security posture is good with HTTPS enforced, but lacks explicit security headers and visible privacy or cookie policies. WHOIS data is unavailable, which raises some concerns about domain registration transparency. Overall, the site appears legitimate and professionally maintained but would benefit from improved privacy compliance and clearer contact information.

K

Kelly Ges.m.b.H.

kellys.at

50

Kelly Ges.m.b.H. is a well-established Austrian snack manufacturer and retailer specializing in chips, popcorn, nuts, and other snack products. The company has a strong market position in Austria as a market leader and is part of the larger Intersnack Group. Their website reflects a mature digital presence with a comprehensive product catalog, engaging content such as recipes and party planning tools, and active social media integration. Technically, the site is built on TYPO3 CMS and uses Matomo for analytics, indicating a preference for open-source and privacy-conscious tools. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers and cookie consent mechanisms could be improved. Overall, the website is professional, trustworthy, and well-aligned with the company's business objectives.

T

Transdanubia

transdanubia.com

55

Transdanubia is a transport and logistics service provider emphasizing faster, safer, and more reliable services in a dynamic environment. The website presents core business areas including transport, forwarding, and logistics but lacks detailed company information or contact data. The technical infrastructure includes usage of Google Maps API and custom JavaScript, with a basic design and moderate navigation clarity. However, the site lacks advanced CMS or analytics integrations and shows limited mobile optimization and accessibility features. Security posture is minimal with no evident security headers or privacy policies, and WHOIS data is missing, raising concerns about domain legitimacy. Overall, the site is functional but basic, with room for improvement in security, compliance, and business transparency.

I

ImmoUnited GmbH

immounited.com

50

ImmoUnited GmbH operates a professional website focused on providing real estate data and land registry analytics services primarily in Austria. The company offers a suite of products designed to support real estate professionals, banks, insurers, developers, and legal experts with data-driven decision-making tools. The website is well-branded, consistent, and targets a specialized B2B and B2C audience in the real estate sector. Technically, the site is built on WordPress with modern plugins and includes SEO and analytics integrations, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, reCAPTCHA, and cookie consent mechanisms, though explicit security policies and incident response details are absent. Overall, the site is trustworthy, professional, and compliant with GDPR requirements.

K

Kleider Bauer

kleiderbauer.at

60

Kleider Bauer is a well-established Austrian retail fashion chain offering clothing collections for women, men, and children, with a strong regional presence across 25 locations. The website reflects a mature digital presence built on WordPress with Elementor, featuring rich content, marketing campaigns, and social media integration. While the site is professionally designed and optimized for SEO and mobile, it lacks explicit privacy and terms of service pages, which are critical for compliance and user trust. Security posture is good with HTTPS and GDPR cookie compliance, but could be improved by adding security headers and incident response contacts. Overall, the site is trustworthy and serves its retail audience effectively.

H

HOFER

hofer.at

82

HOFER is a well-established Austrian retail supermarket chain founded in 1962 and operating as a subsidiary of ALDI SÜD GmbH & Co. The company offers a wide range of food products at discount prices through over 530 physical stores, targeting general consumers seeking quality and affordability. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its audience. Technically, the site leverages Adobe Experience Manager CMS, Adobe Launch for tag management, and OneTrust for cookie consent, indicating a modern and compliant infrastructure. Security posture is strong with HTTPS enforcement, security headers, and GDPR-compliant consent mechanisms, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the site demonstrates high trustworthiness and business credibility with consistent branding and transparent privacy practices.

Technogym is a globally recognized leader in manufacturing commercial and home fitness equipment, serving gyms, sports centers, healthcare facilities, and individual consumers. The website presents a professional and comprehensive catalog of products and services, emphasizing wellness and fitness solutions. Technogym's market position is strong, supported by decades of experience and Olympic partnerships. The technical infrastructure leverages modern web technologies such as React and integrates secure payment solutions like Adyen Checkout, indicating a mature digital presence. Security posture is generally good with HTTPS and secure payment integration, though explicit security headers and policies are not evident in the provided data. The absence of WHOIS registration details is a concern but does not detract significantly from the overall legitimacy given the brand's global recognition. Strategic recommendations include enhancing transparency around privacy, security policies, and domain registration details to bolster trust further.

V

VERBUND

verbund.com

75

VERBUND is Austria's leading energy company and a major producer of electricity from renewable sources in Europe. The company focuses on sustainable energy generation using water, wind, and solar power, positioning itself as a key player in the clean energy transition. The website reflects a mature digital presence with comprehensive corporate information, investor relations, and sustainability initiatives. The technical infrastructure includes a custom CMS, modern JavaScript frameworks, and integration with Google Tag Manager and a consent management platform, indicating a commitment to privacy and analytics best practices. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response details are not publicly available. Overall, the website is professional, trustworthy, and compliant with GDPR, serving a broad audience including customers, investors, and partners.

INTERSPORT Austria operates as the leading sports retail company in Austria, offering a broad range of sports products through its online platform and physical stores. The website is professionally designed with a clear focus on the Austrian market and sports enthusiasts. The technical infrastructure employs modern web technologies such as HTML5, CSS3, JavaScript, and popular libraries like Swiper.js for sliders and Google Maps API for store location services. Mobile optimization and user experience are excellent, supporting a broad customer base effectively. However, the website lacks visible privacy and cookie policies, which are critical for GDPR compliance and user trust. Security posture is moderate due to the absence of explicit security headers and incident response information, which should be addressed to enhance protection and compliance. Overall, the domain registration data aligns well with the business claims, indicating a legitimate and trustworthy operation.

H

Hyundai Import Gesellschaft m.b.H.

hyundai.at

67

Hyundai Import Gesellschaft m.b.H. operates as the official importer and distributor of Hyundai vehicles in Austria, offering a broad range of automotive products including electric vehicles, hybrids, and traditional combustion engine models. The company targets individual consumers, business clients, and entrepreneurs, providing services such as vehicle sales, leasing, test drives, and after-sales support through a network of partners. The website reflects a strong market position with comprehensive product information and customer engagement features such as newsletter subscriptions and social media integration. Technically, the website is built on a modern stack including jQuery, Piwik PRO analytics, and Umbraco CMS, with media assets hosted on Azure CDN. The site demonstrates good performance, mobile optimization, and accessibility. SEO practices are well implemented with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS, uses security best practices in form handling, and avoids exposing sensitive data. However, it lacks a visible cookie consent mechanism and explicit security or incident response policies. Privacy compliance is supported by a comprehensive privacy policy with GDPR consent in the newsletter form. Overall, the website is professional, trustworthy, and secure with minor gaps in privacy consent and security transparency. Strategic improvements in cookie consent and security disclosures would enhance compliance and user trust.

B

Burgenland Tourismus GmbH

burgenland.info

47

Burgenland.info is the official tourism website for the Burgenland region in Austria, providing comprehensive travel information, cultural highlights, and leisure activities. The site targets tourists and visitors seeking detailed guidance on visiting Burgenland, positioning itself as a trusted regional tourism authority. The business model focuses on tourism promotion and visitor engagement through digital content and event information. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies including JavaScript, CSS, and HTML5. It integrates multiple marketing and analytics tools such as Cookiebot for consent management, Facebook Pixel for advertising, Google Tag Manager, and Matomo for analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. However, explicit security headers and incident response information are not evident, suggesting room for improvement in security posture transparency. No critical vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the website presents a professional, trustworthy, and privacy-compliant digital presence for Burgenland tourism. The lack of WHOIS data limits domain registration insights, but the official nature and content quality support legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure channel to strengthen trust and security readiness.

Ö

Österreichischer Fußball-Bund

fussballoesterreich.at

58

The Österreichischer Fußball-Bund (Austrian Football Association) operates a comprehensive and authoritative website providing extensive data, news, and information about Austrian football leagues and competitions. The site serves a broad audience including football fans, clubs, players, and officials, positioning itself as the leading national football federation platform in Austria. The website features rich content, official branding, and strong partner relationships, reflecting its market leadership and credibility. Technically, the website employs a modern and robust technology stack including jQuery, Moment.js, JSViews, and various UI libraries, supported by a custom CMS framework. It demonstrates good performance, mobile optimization, and accessibility, ensuring a positive user experience. The site is well-structured with clear navigation and SEO best practices. From a security perspective, the site enforces HTTPS, implements key security headers, and maintains privacy compliance with GDPR through clear privacy and cookie policies and consent mechanisms. No critical vulnerabilities or security issues were detected. However, the site could enhance its security posture by publishing a dedicated security policy and incident response contacts. Overall, the website is a trustworthy, professional, and secure platform that effectively supports the Austrian Football Association's mission and services.

S

Schweizerische Elektro-Einkaufs-Vereinigung (eev Genossenschaft)

e-tec.swiss

50

The website www.e-tec.swiss is a professionally designed online magazine focused on electrical and communication technology topics, primarily serving the Swiss market. It provides comprehensive content on intelligent living, building automation, security systems, solar energy, and related electrical engineering subjects. The site is affiliated with the Schweizerische Elektro-Einkaufs-Vereinigung (eev Genossenschaft), which adds credibility and industry relevance. The content is well-structured, regularly updated, and targets both professionals and consumers interested in these technologies. Technically, the website uses a modern but somewhat dated JavaScript library (jQuery 1.11.3) alongside Google Tag Manager and Cookiebot for analytics and cookie consent management. The site is mobile optimized with good SEO practices and uses HTTPS securely. However, no advanced security headers were detected, and no CMS or hosting provider information was found. The site performance is moderate, with good mobile responsiveness and accessibility at a basic level. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks visible security policies or incident response contacts. No vulnerabilities or suspicious external links were found. WHOIS data is privacy protected, which is common for Swiss domains, and the domain appears legitimate and consistent with the website's professional nature. Overall, the website presents a low risk profile with strong business credibility and good privacy compliance. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and updating JavaScript libraries to maintain security posture.

Q

Quiz Maker

quiz-maker.com

60

Quiz Maker is a technology-driven SaaS platform specializing in online quiz creation, offering users the ability to generate customized quizzes quickly, including AI-generated quizzes. The platform targets educators, marketers, and businesses aiming to engage audiences and capture leads. With over 15 million quizzes created over a decade, it holds a strong market position as an established quiz solution provider. The website features a user-friendly interface with clear navigation and mobile optimization, supporting a broad user base.

G

GEDLICH Racing

gt3-all-stars.com

44

Winter Series by GEDLICH Racing is a specialized motorsport event organizer focusing on winter racing series across Europe, primarily in Portugal and Spain. The company offers multiple racing series including GT Winter Series, GT4 Winter Series, Prototype Winter Series, PTWS Sports Prototypes, Formula Winter Series, and the 6h of Portimão endurance race. Their target audience includes professional and amateur racing drivers, motorsport teams, and fans. The business is relatively new, founded in 2023, and positions itself as a niche leader in European winter motorsport racing. Technically, the website is built on WordPress with modern JavaScript libraries such as jQuery and Swiper.js for UI components. SEO is enhanced using the Yoast SEO plugin, and the site is hosted by IONOS SE. Performance is moderate with good mobile optimization and basic accessibility features. The website is well-structured with comprehensive content and clear navigation. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protection enabled. However, it lacks DNSSEC and explicit security headers, which are recommended for enhanced security. No cookie consent mechanism was detected, which may affect GDPR compliance. No incident response or security policy information is published. Overall, the website is professional, trustworthy, and well-aligned with the business goals. Strategic improvements include implementing DNSSEC, adding security headers, and introducing a cookie consent mechanism to improve privacy compliance and security posture.

G

GEDLICH Racing

formula-winter-series.com

45

GEDLICH Racing operates the Formula Winter Series, a winter motorsport racing series focused on junior single seater drivers competing in Tatuus F4 cars. The series is positioned as a premier winter racing event in Southern Europe, targeting aspiring young drivers and motorsport enthusiasts. The website provides comprehensive event calendars, registration information, media coverage, and partner details, reflecting a professional and growing motorsport brand. Technically, the website is built on WordPress using a modern theme and includes popular libraries such as jQuery and Swiper.js. Hosting is provided by IONOS SE, a reputable provider. The site is mobile optimized and SEO friendly, with structured data and Open Graph tags enhancing search engine visibility and social media sharing. From a security perspective, the site uses HTTPS and has domain transfer protections in place. However, it lacks DNSSEC and some security headers, and does not provide explicit security policies or incident response contacts. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is trustworthy and professional with a solid business foundation. Strategic improvements in security hardening and privacy compliance would enhance its posture and user trust.

G

GEDLICH Racing

prototype-winter-series.com

44

GEDLICH Racing operates the Prototype Winter Series, a specialized motorsport championship focused on LMP3 prototype race cars competing on premier Southern European tracks during the winter months. The series is officially approved by the ACO, positioning it as a reputable and recognized event in the motorsport community. The website reflects a professional and well-branded presence, targeting racing teams, drivers, and enthusiasts with detailed event calendars, registration options, and media coverage. Technically, the site is built on WordPress with modern JavaScript libraries and SEO optimizations, delivering a good user experience across devices. Security posture is adequate with HTTPS and domain transfer protections, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is partially addressed with a privacy policy but lacks cookie consent mechanisms. Overall, the site demonstrates a strong business credibility and digital maturity suitable for its niche audience.

G

GEDLICH Racing

gt4-winter-series.com

44

GEDLICH Racing operates the GT4 Winter Series, a specialized motorsport racing series held in Southern Europe during winter months. The website presents a professional and well-structured platform for event information, registration, media, and partner engagement. The business targets motorsport teams, drivers, and enthusiasts, positioning itself as a premier winter racing series with SRO licensing and strong industry partnerships. Technically, the site is built on WordPress with modern libraries like jQuery and Swiper.js, offering good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and does not implement cookie consent mechanisms, indicating room for compliance improvements. Overall, the domain registration is transparent and consistent with the business timeline, supporting legitimacy. Strategic recommendations include enhancing security headers, enabling DNSSEC, and implementing privacy compliance features to strengthen trust and regulatory adherence.