Security Directory

C

Crew Knüttel Motorsport GmbH & Co.KG

reifen-knuettel.de

47

Crew Knüttel Motorsport GmbH & Co.KG is a specialized motorsport company based in Germany, established in 1984, providing racing tire services and support for various motorsport disciplines. The company maintains a professional online presence with a well-structured website offering detailed information about their services, team, and contact points. Their market position is that of a traditional, niche service provider in the motorsport sector, targeting racing teams and motorsport enthusiasts. Technically, the website employs modern web technologies including JavaScript libraries like Splide.js and jQuery, and is optimized for mobile devices with responsive design elements. However, there is room for improvement in accessibility and performance optimization. Security-wise, the site uses HTTPS but lacks visible security headers and formal security policies, which could be enhanced to improve trust and compliance. Privacy compliance is partially addressed with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional and trustworthy but could benefit from stronger security and privacy features.

I

ISA-RACING

isa-racing.de

49

ISA-Racing is a German-based e-commerce retailer specializing in motorsport accessories and equipment, boasting over 45 years of experience in the motorsport industry. The website offers a broad catalog of more than 25,000 products from top brands, targeting motorsport enthusiasts, racing teams, and automotive professionals. The business model focuses on direct online sales complemented by personal consultation and a service hotline, positioning ISA-Racing as a trusted niche player in the motorsport retail sector. Technically, the website is built on a modern e-commerce platform, likely Shopware 6, utilizing contemporary JavaScript libraries such as jQuery and Bootstrap for responsive design. It integrates Usercentrics for cookie consent management and Trusted Shops for customer trust signals. The site is mobile-optimized and provides a good user experience with clear navigation and professional design, although SEO and accessibility features are basic. From a security perspective, the site enforces HTTPS and employs consent management, but lacks visible security headers like Content-Security-Policy and HSTS, which are recommended for enhanced protection. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is partial, with a cookie consent mechanism present but no clear privacy or terms of service pages found. Overall, the website presents a professional and trustworthy front for its business, but the absence of WHOIS registrant data and privacy policy pages slightly reduces its credibility. Strategic improvements in security headers, privacy documentation, and WHOIS transparency would strengthen its risk posture and trustworthiness.

F

Financial Market Authority Liechtenstein

fma-li.li

10

The Financial Market Authority Liechtenstein (FMA) operates as the national financial regulatory authority overseeing financial intermediaries, licensing, supervision, and regulation within Liechtenstein. The website serves as an authoritative source of regulatory information for financial institutions, intermediaries, and stakeholders in the financial sector. The content is well-organized, targeting professionals and entities involved in the financial market, with detailed sections on supervision, regulation, and financial centre activities. Technically, the website employs modern JavaScript frameworks such as Alpine.js and integrates Matomo analytics for privacy-conscious user tracking. Cookie consent is managed through a third-party service, indicating attention to privacy compliance. The site is mobile-optimized and demonstrates good navigation clarity and professional design quality. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data aligns with the website's claims, reinforcing legitimacy and trustworthiness. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic improvements include publishing comprehensive privacy and security policies, enhancing security headers, and providing clear contact information for incident response and data protection officers.

I

IHK Hessen innovativ GbR

ihk-hessen-innovativ.de

52

IHK Hessen innovativ GbR is a regional service organization affiliated with the Industrie- und Handelskammern (IHK) in Hessen, Germany. The company provides free and paid consulting services, webinars, seminars, and networking opportunities to support innovation and business development for founders, professionals, and executives in Hessen. Their market position is that of a trusted regional innovation partner with a strong focus on digital transformation and business growth. The website is professionally designed, well-structured, and optimized for mobile devices, reflecting a mature digital presence. Technically, the site uses modern JavaScript libraries, Matomo analytics for privacy-conscious tracking, and a cookie consent mechanism compliant with GDPR. Security posture is good with HTTPS enforced and no visible vulnerabilities, though formal security policies and incident response contacts are not published. Overall, the website is trustworthy, professional, and well-aligned with its business purpose.

B

BIEG Hessen GbR

bieg-hessen.de

11

BIEG Hessen GbR is a small, regionally focused service organization affiliated with the Industrie- und Handelskammern (IHKs) in Hessen, Germany. It provides free, neutral online marketing consulting, social media guidance, e-commerce support, and educational seminars primarily targeting small and medium-sized enterprises (SMEs) and member companies of the IHKs. The website is professionally designed, well-structured, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, it is built on WordPress with modern frameworks like Bootstrap and uses reputable plugins such as Yoast SEO and Borlabs Cookie for privacy compliance. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some HTTP security headers are missing and no explicit security policy or incident response information is published. Overall, the domain registration aligns with the business claims, and no suspicious patterns or vulnerabilities were detected. The website is safe, trustworthy, and compliant with GDPR regulations.

P

pixelegg Informatik & Design GmbH

pixelegg.de

11

pixelegg Informatik & Design GmbH is a well-established German digital agency specializing in TYPO3 CMS solutions, SEO, e-commerce, and marketing automation. Founded in 1998 and based in Mannheim, the company serves a broad range of clients including SMEs, public institutions, and marketing teams across Germany. Their offerings include enterprise-grade TYPO3 projects, local and regional SEO, product information management, and privacy-conscious analytics using Matomo. The website reflects a mature digital infrastructure with a modern tech stack and a strong focus on digital transformation and measurable business outcomes. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and policies could be improved. Overall, the site demonstrates high professionalism, excellent content quality, and strong business credibility.

L

Landeshauptstadt Mainz

gutenberg.de

57

The website gutenberg.de is an official cultural microsite dedicated to Johannes Gutenberg, hosted under the Landeshauptstadt Mainz domain. It serves as an educational and informational platform providing historical content about Gutenberg's life, his invention of movable type printing, and related cultural institutions such as the Gutenberg Museum. The site targets a general audience interested in history and culture, with a focus on accessibility and multilingual support. The business model is non-commercial, focusing on public cultural outreach and education. Technically, the site is built on the Sitepark Information Enterprise Server CMS with a technology stack including jQuery, Modernizr, and Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized, accessible, and performs moderately well. It uses HTTPS and a cookie consent banner, demonstrating good privacy compliance. However, explicit security headers and incident response information are not present. From a security perspective, the site shows good practices such as HTTPS enforcement and no visible vulnerabilities or exposed sensitive data. The use of Matomo analytics aligns with GDPR compliance. The absence of explicit security policies or contact points for incident response is a minor gap. Overall, the domain registration and WHOIS data are consistent with a legitimate government cultural site, supporting a high trust level. The overall risk is low, with recommendations to enhance security headers, provide explicit security policies, and keep libraries updated. The site is safe, professional, and trustworthy, serving its cultural and educational mission effectively.

D

Direktoratet for forvaltning og økonomistyring (DFØ)

anskaffelser.no

63

Anskaffelser.no is a Norwegian government portal managed by the Direktoratet for forvaltning og økonomistyring (DFØ), providing authoritative information, tools, and guidance on public procurement. The site targets public sector procurement professionals in Norway, offering comprehensive resources on regulations, sustainable procurement, and innovative purchasing practices. The website is well-branded, professionally designed, and consistent with government standards, reflecting a high level of trust and credibility. Technically, the site is built on Drupal 10 with modern JavaScript libraries, ensuring good performance, accessibility, and mobile optimization. Security posture is solid with HTTPS enforced and anti-bot measures on forms, though some security headers could be improved. Privacy compliance is adequate with links to comprehensive privacy policies on the parent organization’s site, but explicit cookie consent mechanisms are not evident. Overall, the site is a reliable and professional resource with a strong business credibility and moderate to high technical maturity.

V

VENRO – Verband Entwicklungspolitik und Humanitäre Hilfe deutscher Nichtregierungsorganisationen e.V.

venro.org

48

VENRO is a well-established German non-profit umbrella organization representing approximately 150 development and humanitarian NGOs. The website reflects a professional and comprehensive digital presence, leveraging TYPO3 CMS and modern web technologies. It provides extensive information on its advocacy, member services, publications, and events, targeting NGOs, policymakers, and the interested public. The organization maintains a strong market position within the German development sector, supported by long domain tenure and clear branding. Technically, the site is well-structured, mobile-optimized, and integrates privacy-compliant analytics and consent management tools. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and security headers are not explicitly observed. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR requirements.

W

WEVO-CHEMIE GmbH

wevo-chemie.de

44

WEVO-CHEMIE GmbH is a German-based manufacturer specializing in high-quality casting compounds, adhesives, and sealants serving multiple industrial sectors such as automotive, energy, and infrastructure. With over 80 years of experience and a presence in more than 50 export countries, the company operates as a medium-sized enterprise under the parent company Dr. Neidlinger Holding GmbH. Their product portfolio includes polyurethane, epoxy, and silicone systems tailored for diverse applications. The website reflects a professional and consistent brand image with clear navigation and multilingual support for global markets. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries like jQuery and Slick Slider, providing a responsive and user-friendly experience. Analytics are implemented via etracker, though no explicit cookie consent mechanism was detected. The site uses HTTPS with good SSL configuration but lacks some security headers and published incident response policies. From a security perspective, the site demonstrates good practices such as secure forms and no visible vulnerabilities or exposed sensitive data. However, improvements are recommended in cookie consent compliance, security header implementation, and transparency around incident response. The WHOIS data aligns well with the website's claims, showing consistent domain registration and legitimacy. Overall, WEVO-CHEMIE GmbH's website is a solid representation of a reputable industrial manufacturer with room for enhancement in privacy compliance and security transparency to further strengthen trust and regulatory adherence.

Fischer Power Solutions Germany operates as a specialized provider of power and energy storage solutions, targeting industrial and commercial clients primarily in Germany. The company offers battery systems and energy management technologies, positioning itself as a niche player in the energy sector. The website reflects a professional digital presence with a focus on clear communication of services and compliance with privacy regulations. Technically, the site uses modern web technologies including Cookiebot for consent management and web fonts for branding consistency. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit incident response policies. The absence of WHOIS data introduces some uncertainty regarding domain legitimacy, but the overall professional presentation and compliance indicators suggest a legitimate business. Strategic recommendations include enhancing security headers, publishing security policies, and improving transparency around domain registration to strengthen trust.

weg//weiser GmbH is a specialized technology company focused on providing advanced testing and analysis solutions for electric machines, particularly electric motors and power inverters. Founded in 2019 and based in Karlsruhe, Germany, the company targets developers, test engineers, application engineers, and software developers in the energy and transportation sectors. Their offerings include universal power inverter hardware and software solutions designed to optimize electric machine performance and efficiency. The company maintains a professional online presence with clear contact information and compliance with GDPR and cookie regulations. Technically, the website is built on WordPress with Elementor and enhanced by SEO and cookie consent plugins, hosted by One.com. The site demonstrates good performance, mobile optimization, and SEO practices, though accessibility could be improved. Security posture is solid with HTTPS and cookie consent but lacks explicit security headers and incident response details. No vulnerabilities or suspicious content were detected. Overall, the domain registration is consistent with the business profile, showing legitimacy and appropriate domain age. The website content is safe, professional, and targeted at a general audience interested in electric machine testing technologies. Strategic recommendations include enhancing security headers, adding a security policy, and improving accessibility features to further strengthen trust and compliance.

I

INVENT Marketing und Tourismus GmbH

urlaubsbox.com

61

Urlaubsbox.com is a well-established Austrian e-commerce platform specializing in the sale of travel vouchers, hotel vouchers, and experience gift boxes for short trips and wellness vacations primarily in Austria, Germany, and neighboring European countries. The company positions itself as a premium provider with over 30 years of experience, offering flexible and attractive gift solutions for a wide range of customer segments including couples, families, singles, and activity enthusiasts. The website features a professional design, clear navigation, and comprehensive product information, supporting a positive user experience and strong brand trust. Technically, the site uses modern JavaScript libraries and frameworks such as jQuery and Foundation, integrates trusted third-party services like Trusted Shops for buyer protection, and enforces HTTPS with appropriate security headers. However, there is room for improvement in privacy compliance, notably the absence of an explicit cookie consent mechanism and published security policies. Overall, the site demonstrates a solid security posture with no evident vulnerabilities or suspicious content, making it a trustworthy platform for customers seeking travel gift solutions.

Z

Zotter Schokolade GmbH

zotter.at

62

Zotter Schokolade GmbH operates a professional and well-structured e-commerce website focused on premium organic and fair trade chocolates. The company offers a broad product range including custom editions, gift sets, and experiential tours at their Zotter Erlebniswelt location. The website is built on TYPO3 CMS with modern web technologies and integrates marketing and consent management tools such as Google Tag Manager, Intercom, and Usercentrics. The site demonstrates good SEO practices and mobile optimization, providing a positive user experience. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Privacy compliance is partially addressed via cookie consent but lacks a visible privacy policy page. Overall, the website reflects a credible and established chocolate brand with a strong market position in Austria.

G

Gigasport

gigasport.at

66

Gigasport is a prominent Austrian sports retail company operating both online and through 11 physical stores. The website serves as a comprehensive e-commerce platform offering over 450 top sports brands, targeting sports enthusiasts and general consumers primarily in Austria and German-speaking regions. The business model integrates retail sales with loyalty programs such as the PlusCard and a dedicated mobile app to enhance customer engagement. The site is professionally designed with consistent branding and clear navigation, reflecting a strong market position supported by its parent company Kastner & Öhler. Technically, the website is built on WordPress CMS and employs modern web technologies including Google Tag Manager, Usercentrics for consent management, and Dynamic Yield for personalization. The site is mobile-optimized and incorporates SEO best practices with structured data and meta tags. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and uses consent management tools, but lacks explicit security headers in the visible HTML. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially addressed with a cookie consent mechanism, though a clear privacy policy page was not found in the provided content. WHOIS data is unavailable due to quota restrictions, but the domain appears legitimate based on branding and business context. Overall, Gigasport's website presents a trustworthy and professional online presence with good technical and security foundations. Strategic improvements in privacy policy visibility and security header implementation would enhance compliance and security posture further.

O

Opodo

opodo.com

66

Opodo is a large, well-established online travel agency headquartered in the United Kingdom with a parent company eDreams ODIGEO. The company offers a comprehensive suite of travel services including flights, hotels, car rentals, holiday packages, and transfers. It targets a broad audience of travelers seeking competitive prices and convenience through an easy-to-use online platform. The website is professionally designed with consistent branding and multilingual support, reflecting its international market presence. Technically, the website employs modern web technologies such as React, RequireJS, and integrates with Google Analytics and Tag Manager for data collection and marketing. It supports service workers for progressive web app capabilities and provides mobile app downloads for iOS and Android. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site enforces HTTPS and uses Content-Security-Policy headers, anonymizes IPs in analytics, and avoids exposing sensitive data. However, additional security headers and a public security policy or vulnerability disclosure page are absent. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms in place. Contact information and legal disclosures are transparent, enhancing trust. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. The lack of WHOIS data is a minor concern but likely due to privacy protection. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility to further strengthen the security posture and user trust.

E

eDreams

edreams.com

66

eDreams is a well-established online travel agency offering a broad range of travel services including flights, hotels, car rentals, and package holidays. The company operates internationally with multiple country-specific domains and is part of the larger eDreams ODIGEO group. Their market position is strong, supported by industry awards and accreditations such as IATA. The website is professionally designed with good content quality and consistent branding, targeting general consumers seeking travel bookings. Technically, the website uses modern web technologies including React, RequireJS, and integrates Google Analytics and Tag Manager for tracking. It is hosted behind Cloudflare, ensuring good performance and security. The site is mobile optimized and includes accessibility features, although some areas could be improved. Security posture is solid with HTTPS enforced and Content-Security-Policy headers present, but additional headers and explicit security policies could enhance protection. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms in place, reflecting GDPR adherence. However, the absence of WHOIS data for the domain is unusual and reduces trust slightly, though the overall legitimacy is supported by the business presence and branding. No adult or questionable content is present, making the site safe for general audiences. Overall, eDreams presents a mature, professional online travel platform with good security and privacy practices. Strategic improvements in transparency around security policies and WHOIS data would further strengthen trust and compliance.

E

ebookers UK is ending

ebookers.com

53

The domain www.ebookers.com appears to be unregistered or its WHOIS data is inaccessible, as indicated by the raw WHOIS output stating 'No match for "WWW.EBOOKERS.COM"'. The website content provided is heavily truncated and lacks meaningful metadata, structured data, or business information, suggesting that the site is either inactive, blocked by a web application firewall (WAF), or under security restrictions. Consequently, no privacy policies, cookie policies, terms of service, or contact information could be identified. The absence of these critical elements severely limits the ability to assess the business operations or technical infrastructure. Security posture cannot be evaluated due to lack of data, and no trust indicators or certifications are present. Overall, the domain's legitimacy and operational status are highly questionable, and the site appears inaccessible for comprehensive analysis.

Z

zooplus SE

zooplus.at

60

zooplus SE operates a professional e-commerce platform focused on pet supplies and pet food in Austria. The website offers a wide range of products including food for cats, dogs, and other animals, as well as accessories and specialty veterinary diets. The business targets pet owners in Austria and positions itself as a leading online retailer in this sector. The platform is well-branded and provides promotional offers to attract customers. Technically, the website is built using modern web technologies such as Next.js and Contentful CMS, ensuring a responsive and accessible user experience across devices. The site loads with moderate performance and includes SEO best practices. Security is well implemented with HTTPS and visible buyer protection logos, although explicit security headers and policies are not evident in the provided content. The security posture is solid with no detected vulnerabilities or WAF blocking. However, the absence of visible privacy and cookie policies and the inability to access WHOIS data due to quota limits restrict a full compliance and trust assessment. Contact information is available via a contact page, but no direct emails or phone numbers are found in the HTML snippet. Overall, the website appears trustworthy and professionally managed, but improvements in transparency regarding privacy, cookie consent, and security policies would enhance compliance and user trust.

Z

Zalando SE

zalando-lounge.at

52

Lounge by Zalando is a well-established online outlet platform operated by Zalando SE, targeting Austrian and European consumers with discounted fashion, home, and sports products. The website demonstrates a mature e-commerce business model with a strong market position as part of the Zalando group. Technically, the site uses modern web technologies including React, RequireJS, and integrates advanced analytics and consent management tools, ensuring a high-quality user experience with fast performance and mobile optimization. Security posture is strong with HTTPS enforcement, security headers, and active vulnerability reporting mechanisms, although a dedicated security policy page and security.txt file could enhance transparency. Privacy compliance is robust, featuring comprehensive privacy and cookie policies with user consent mechanisms. Overall, the website is professional, trustworthy, and aligns well with the parent company's branding and business practices.

Douglas GmbH operates a leading beauty and cosmetics retail website in Austria, offering a wide range of perfumes, skincare, and makeup products. The company holds a strong market position as a top beauty retailer with both online and physical store presence. The website is professionally designed, mobile optimized, and provides comprehensive customer support and privacy information. Technically, the site leverages modern JavaScript frameworks, performance monitoring tools like Instana, and integrates marketing and analytics services such as Adobe Experience Platform and Criteo. Security posture is strong with HTTPS enforcement and security headers, though public security policies and vulnerability disclosure mechanisms are absent. Overall, the domain and website present a trustworthy and mature e-commerce platform with good compliance to GDPR and privacy standards.

T

Tchibo

tchibo.at

60

The website represents an online shop for Tchibo products, primarily focused on retailing coffee and related merchandise to a general audience in Austria. The site uses modern frontend technologies such as Vue.js and Vuetify, indicating a contemporary technical infrastructure. However, the content quality is basic with limited visible business or contact information. Security posture is weak due to lack of visible security headers, absence of privacy and cookie policies, and no evident incident response or vulnerability disclosure mechanisms. The WHOIS data is unavailable due to quota restrictions, limiting the ability to verify domain legitimacy and registration details. Overall, the site functions as a basic e-commerce platform but requires improvements in security, privacy compliance, and transparency to enhance trust and compliance.

XXXLutz is a large Austrian furniture retailer operating both physical stores and an online e-commerce platform. The website offers a broad range of furniture, lighting, and home accessories targeting general consumers. The company maintains a strong market position in Austria with 47 physical locations and sister sites in multiple European countries. The technical infrastructure is modern, leveraging React and advanced monitoring tools like Dynatrace, with responsive design and SEO optimizations. Security posture is solid with HTTPS and monitoring, but lacks explicit privacy and cookie policies in the analyzed content. Overall, the site is professional and trustworthy but could improve privacy compliance and contact transparency.

S

stadt wien marketing gmbh

bewegungfindetstadt.at

51

Mein SportPlatz is a well-established initiative supported by the city marketing company of Vienna, focused on promoting sports and physical activity among residents. The website serves as a comprehensive resource for sports opportunities, events, and courses in Vienna, targeting a broad audience of all ages and skill levels. It leverages a modern WordPress infrastructure with reputable plugins and analytics tools, ensuring good technical maturity and SEO optimization. The site demonstrates strong GDPR compliance with a clear cookie consent mechanism and links to comprehensive privacy policies hosted on the official city marketing domain. Security posture is solid with HTTPS and privacy plugins, though explicit security policies and headers could be improved. Overall, the website is trustworthy, professional, and serves its community-oriented mission effectively.

K

KOVOS

kovos.ch

49

KOVOS is a Swiss non-profit organization representing Catholic religious communities, providing information and support for vocations, retreats, and monastic hospitality. The website serves as an informational platform targeting religious individuals and communities in Switzerland. Technically, the site is built on TYPO3 CMS with modern web technologies and includes tracking via Google Analytics and Tag Manager. The site is mobile-optimized and well-structured, though some accessibility features could be improved. Security posture is adequate with HTTPS and nonce usage but lacks visible security headers and published security or privacy policies. No forms or social media links were detected, limiting direct user engagement channels. Overall, the domain registration aligns well with the organization's identity, indicating legitimacy and trustworthiness.

The website rkz.ch currently serves a 404 error page indicating that the site configuration is missing or the site is not accessible. The page is generated by TYPO3 CMS, but no actual business content, contact information, or policies are present. This severely limits the ability to assess the business operations, market position, or services offered. Technically, the site lacks visible security headers, privacy policies, or any tracking or analytics technologies. The absence of content and policies suggests the site is either under construction, misconfigured, or abandoned. From a security perspective, no WAF or security challenge mechanisms are detected, but the lack of HTTPS information and security headers is a concern. No vulnerabilities or incident response information is available. The site does not provide any privacy or cookie consent mechanisms, which would be required for GDPR compliance if it were operational. Overall, the site is currently non-functional and does not provide any meaningful business or security information. This represents a high risk for trust and credibility, and the site should be remediated to provide proper content, security, and compliance information. Strategic recommendations include restoring the website content, implementing HTTPS and security headers, publishing privacy and cookie policies, and providing clear contact and business information to improve trust and compliance.

S

Schweizer Bischofskonferenz

bischoefe.ch

48

The Schweizer Bischofskonferenz website serves as the official digital presence of the Swiss Bishops' Conference, providing comprehensive information about the Catholic Church's activities, leadership, and ethical services in Switzerland. The site targets church members, religious communities, and the general public interested in ecclesiastical matters. It offers news, documents, and partner links, positioning itself as a trusted non-profit religious institution with a medium organizational size. Technically, the website is built on WordPress 6.6.2, leveraging common plugins such as Contact Form 7 and Bootstrap for responsive design. The infrastructure supports moderate performance and good mobile optimization, with Google Tag Manager integrated for analytics. However, some accessibility features are basic, and SEO practices are adequately implemented. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. Nonetheless, it lacks explicit security headers and a cookie consent mechanism, which are important for GDPR compliance and enhanced security posture. No vulnerability disclosures or incident response contacts are provided, indicating room for improvement in transparency and security readiness. Overall, the website is professional, trustworthy, and content-rich, but it would benefit from enhanced privacy compliance measures and security best practices to strengthen user trust and regulatory adherence.

S

Servizio nazionale «Abusi nel contesto ecclesiale»

abusi-catt-info.ch

10

The website 'abusi-catt-info.ch' is a Swiss institutional platform dedicated to scientific research and reprocessing of sexual abuse cases within the Roman Catholic Church in Switzerland. It is supported by major Swiss Catholic organizations such as the CVS, RKZ, and KOVOS. The site provides detailed information on ongoing research projects, support services for victims, and national measures to combat abuse. The target audience includes victims, researchers, church members, and the general Swiss public interested in this sensitive topic. The business model is non-profit and institutional, focusing on transparency, education, and victim support. Technically, the website employs modern web technologies including SVG graphics, web fonts, and Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized with good SEO practices and clear navigation. However, no major CMS or hosting provider information is evident. Performance is moderate, and accessibility is basic but functional. From a security perspective, the site uses HTTPS with good SSL configuration and does not expose sensitive data or vulnerable libraries. However, it lacks explicit security headers and does not publicly disclose a security policy or incident response plan. Privacy compliance is strong with a clear privacy policy and cookie policy, though no explicit cookie consent mechanism is present. Contact information is transparent and professional, enhancing trust. Overall, the website presents a low-risk profile with a high trustworthiness rating. Strategic recommendations include implementing security headers, publishing security policies, and adding cookie consent mechanisms to further enhance compliance and security posture.

S

Service national Abus dans le contexte ecclésial

abus-cath-info.ch

50

The website 'abus-cath-info.ch' serves as a national initiative focused on scientific research and treatment of sexual abuse within the Catholic Church in Switzerland. It is supported by major Swiss Catholic organizations including the CES, RKZ, and KOVOS, positioning it as a credible and authoritative source on this sensitive topic. The site provides resources for victims, updates on research projects, and information on church measures to address abuse. The target audience includes victims, researchers, church authorities, and the general public concerned with this issue. Technically, the website employs modern web standards with HTML5, CSS3, and JavaScript, and uses Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized, accessible, and SEO-friendly, though no explicit CMS or hosting provider is identified. Performance is moderate with good navigation and professional design. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks visible advanced security headers and does not provide explicit security policies or incident response contacts. Privacy compliance is adequate with a privacy policy present, but no cookie consent mechanism is detected. No forms collecting personal data are found on the homepage. Overall, the website is trustworthy, professionally maintained, and fulfills its mission effectively. Strategic recommendations include implementing cookie consent, publishing security and incident response policies, and enhancing security headers to improve compliance and security posture.

A

Administration du Cadastre et de la Topographie (ACT)

geoportail.lu

56

The Geoportal of the Grand-Duchy of Luxembourg is an official government platform providing comprehensive geospatial data, maps, and related services to individuals, professionals, and developers. It serves as the authoritative source for governmental geodata, supporting sectors such as energy, environment, spatial planning, and real estate. The platform offers a variety of applications including cadastral extract ordering, 3D modeling, route planning, and mobile apps, positioning itself as a key digital infrastructure for Luxembourg's geospatial needs. Technically, the website employs a moderate technology stack including jQuery, Modernizr, and Matomo analytics, with good mobile optimization and accessibility features. The site is served over HTTPS with no detected blocking or WAF interference, ensuring accessibility and security. However, some security best practices such as explicit security headers and published incident response policies are missing. From a security perspective, the platform enforces strong authentication for sensitive services and uses privacy-conscious analytics. The absence of cookie consent mechanisms and vulnerability disclosure policies indicates room for improvement in privacy compliance and transparency. Overall, the site demonstrates a solid security posture appropriate for a government service but could enhance user trust by adopting additional security and privacy measures. The domain registration aligns well with the website's governmental nature, registered to a Luxembourg government entity, reinforcing legitimacy and trustworthiness. No suspicious or malicious content was found, and the site is safe for general audiences.

I

ImmoScout24

immoscout24.de

10

ImmoScout24 is a leading German real estate marketplace platform offering extensive listings for renting, buying, and selling residential and commercial properties. The platform targets both private individuals and professional real estate agents, providing services such as property search, listing, valuation, and digital management tools. The website demonstrates a high level of digital maturity, utilizing modern web technologies like React and Next.js, hosted on AWS infrastructure, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though there is room for improvement in security headers and published security policies. Privacy compliance is moderate due to the absence of explicit privacy and cookie policies in the analyzed content. Overall, the platform is professional, trustworthy, and well-positioned in the German real estate market.

M

Mapp

mapp.com

51

Mapp is a well-established marketing cloud technology company founded in 2003, offering AI-powered digital analytics, marketing automation, and multi-channel campaign management solutions. The company targets businesses seeking to leverage customer data for personalized marketing across email, SMS, apps, and websites. With over 3500 brands trusting their platform and a recent acquisition of Dressipi, Mapp positions itself strongly in the retail and e-commerce sectors with a focus on AI-driven personalization. Technically, the website is built on WordPress hosted on AWS infrastructure, utilizing modern JavaScript libraries such as Swiper.js and Slick Carousel for UI components, and integrates multiple analytics and tracking tools including Google Tag Manager, Hotjar, and proprietary Mapp Intelligence. The site is well optimized for SEO, mobile responsiveness, and accessibility, reflecting a mature digital presence. From a security perspective, the site enforces HTTPS, employs domain registration protections, and uses a consent management platform (Usercentrics) to comply with privacy regulations. However, DNSSEC is not enabled, and explicit security headers are not detected, indicating room for improvement. No critical vulnerabilities or exposed sensitive data were found. Overall, Mapp demonstrates a strong business credibility and technical maturity with good privacy compliance. The website content is professional and safe for general audiences. Strategic recommendations include enabling DNSSEC, publishing a dedicated security policy, and enhancing security headers to further strengthen the security posture.

A

Alufit International Pvt Ltd

alufit.com

63

Alufit International Pvt Ltd is a leading facade contractor in India, established in 1984 and now a wholly owned subsidiary of Schueco International KG. The company specializes in facade design, supply, and installation for large-scale projects including office complexes, luxury condos, and airports. With over 2000 employees and multiple state-of-the-art facilities, Alufit has a strong market position and reputation for quality and professionalism. The website reflects a mature digital presence built on WordPress with modern plugins and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is partial with a cookie consent mechanism but no visible privacy or terms of service pages. Contact information is clearly provided, enhancing business credibility.

K

Kestrel Aluminium Systems.

kestrelaluminium.co.uk

53

Kestrel Aluminium Systems Ltd is a UK-based manufacturer and supplier of aluminium fenestration systems, including windows, doors, roofing, framing, and powder coating services. Established in 1989, the company has a strong market presence with over 30 years of experience, serving contractors, fabricators, specifiers, and homeowners nationwide. Their business model focuses on providing high-quality, fabricator-friendly products with a comprehensive support system including technical assistance and quick lead times. The company maintains a reputable position supported by certifications such as Qualicoat licensing and industry memberships.

S

SÄLZER Security

saelzer-security.com

67

SÄLZER Security is a German-based manufacturer and installer specializing in high-security building products such as windows, doors, facades, and barriers designed to protect against burglary, shooting, fire, and explosions. With over 50 years of experience and more than 1,000 test certificates, the company holds a strong market position serving military, police, embassies, critical infrastructure, and private clients worldwide. The website is professionally designed using TYPO3 CMS and integrates modern tools like Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response contacts are not publicly visible. The absence of WHOIS registration data for the domain is a notable anomaly that slightly reduces trustworthiness. Overall, the website reflects a mature, professional business with good digital maturity and compliance practices.

V

Venuro AG

venuro.com

65

Venuro AG is a Swiss company specializing in the manufacture of frameless sliding windows, combining precision engineering with advanced materials such as carbon fiber and fiberglass. Established in 1973, the company positions itself as a premium provider of architectural sliding masterpieces, targeting architects and discerning clients seeking innovative and aesthetically refined building solutions. The website reflects a high level of professionalism with rich multimedia content, clear branding, and a focus on craftsmanship and innovation. Technically, the website is built on the Webflow platform, leveraging modern JavaScript libraries such as GSAP for animations and Swiper for sliders. It employs a cookie consent mechanism compliant with GDPR, integrates Google Analytics for visitor tracking, and is hosted on a reliable CDN infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, providing a smooth user experience. From a security perspective, the site uses HTTPS and implements cookie consent with opt-in features. However, it lacks visible security headers and published security or incident response policies. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, although the website content and branding strongly indicate a legitimate business. Overall, the security posture is good but could be improved with additional headers and formal policies. The overall risk assessment is moderate to low, with recommendations to enhance domain registration transparency, implement security headers, and publish incident response information to strengthen trust and compliance.

N

Nayoki Performance GmbH

nayoki.de

52

Nayoki Performance GmbH is a small, Munich-based digital marketing agency specializing in performance marketing services. The company emphasizes know-how, creativity, and long-standing experience to drive client success. Their website reflects a professional and consistent brand image, targeting businesses seeking marketing expertise in the German market. Technically, the site is built on WordPress using the Astra theme, enhanced with Yoast SEO and Cookiebot for SEO and privacy compliance respectively. The infrastructure includes Google Tag Manager for analytics and tracking, with hosting and domain registration managed by reputable German providers. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is partial, with cookie consent but no visible privacy policy or terms of service pages. Overall, the website is well-structured, mobile-optimized, and trustworthy, though it lacks some compliance documentation and explicit contact information. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and security policies, and improving transparency in contact details to strengthen trust and compliance.

R

Randi A/S

randi.dk

46

Randi A/S is a Danish manufacturer specializing in high-quality architectural hardware products such as door handles, building fittings, and sanitary equipment. With a history dating back to 1878 and as a member of the ECO Schulte Group, the company positions itself as a reputable player in the Nordic manufacturing sector, collaborating with renowned architects and designers. The website reflects this professional image with a modern WordPress-based infrastructure, including WooCommerce for e-commerce capabilities and Elementor for design. The site is well-structured, mobile-optimized, and includes multimedia content to engage visitors. Security-wise, the site uses HTTPS and a cookie consent mechanism compliant with GDPR principles, but lacks visible security headers and a published privacy policy, which are areas for improvement. The absence of WHOIS data limits domain trust verification, but the overall digital presence suggests a legitimate and established business. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and security policies, and improving contact transparency to strengthen trust and compliance.

M

MHZ Hachtel & Co AG

mhz.ch

53

MHZ Hachtel & Co AG operates a professional website focused on custom window coverings including plissee, rollos, jalousies, curtains, and outdoor sun protection products. The company targets consumers and professionals in Switzerland and neighboring regions, offering a product configurator and multi-language support to enhance user experience. The website is built on TYPO3 CMS with modern frontend technologies and integrates Google Tag Manager and Usercentrics for analytics and privacy compliance. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit privacy policy and terms of service pages are not detected in the provided content. Overall, the website reflects a mature digital presence with good business credibility and technical implementation.

M

MHZ Hachtel S.à r.l.

mhz.lu

49

MHZ Hachtel S.à r.l. operates a professional website focused on custom-made sun protection products including Plissees, Wabenplissees, Rollos, Jalousien, Markisen, and insect protection solutions. The company targets architects, dealers, and end customers primarily in Luxembourg and the Benelux region, offering a digital configurator and dealer portal to enhance customer engagement. The website is built on TYPO3 CMS with modern styling and includes GDPR-compliant cookie consent mechanisms, reflecting a mature digital presence. Security posture is strong with HTTPS and security headers implemented, though explicit security policies and incident response information are absent. WHOIS data is unavailable, limiting domain trust assessment, but the website's professional design and content suggest legitimacy. Overall, the site is well-structured, user-friendly, and compliant with privacy regulations, supporting MHZ's market position as a reputable regional manufacturer and retailer of sun protection products.

A

architects—Alliance

architectsalliance.com

59

architects—Alliance is a Toronto-based architectural design practice specializing in city building and a broad range of architectural services including schools, galleries, affordable housing, and urban parks. They serve clients in Canada, the United States, and Europe, positioning themselves as designers, researchers, and urbanists focused on meaningful urban spaces. The website presents a professional portfolio with detailed project imagery and client testimonials, reflecting a well-established presence in the architectural sector. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, jQuery, and lazy loading for images, along with Adobe Typekit fonts for typography. The site is mobile optimized and accessible, with an explicit accessibility statement demonstrating commitment to inclusivity. However, no CMS or hosting provider details are evident, and performance is moderate. Security posture is moderate with HTTPS implied but no explicit security headers detected. The absence of privacy and cookie policies, WHOIS registration data, and vulnerability disclosure mechanisms represent compliance and trust gaps. No forms on the homepage reduce exposure to input-based vulnerabilities. Social media presence is limited to Twitter and Instagram. Overall, the site is professional and trustworthy in content and design but requires improvements in domain registration transparency, privacy compliance, and security best practices to enhance trust and reduce risk.

A

ACO Pfuhler GmbH & Co. KG

aco-pfuhler.de

66

ACO Pfuhler GmbH & Co. KG is a specialized manufacturer of high-stability monolithic precast concrete slot drains and drainage components, serving construction and infrastructure sectors primarily in Germany. The company holds a leading market position in its niche, offering robust drainage solutions designed for large sealed surfaces and extreme conditions. Their website reflects a professional and consistent brand image with comprehensive product information and references. Technically, the site is built on TYPO3 CMS with modern frontend frameworks and includes essential SEO and accessibility features. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements.

Z

Zwet GmbH

zwetdesign.com

62

Zwet GmbH operates as a specialized 3D agency based in Germany, offering advanced 3D animations, CGI visualizations, motion graphics, and interactive applications including VR, AR, and XR solutions. The company targets industrial and B2B clients seeking innovative digital content to enhance marketing, sales, and product presentations. Their website demonstrates a professional portfolio with rich multimedia content and clear navigation, reflecting a mature digital presence. Technically, the website is built on WordPress with modern technologies such as jQuery and Google Tag Manager for analytics. Embedded Vimeo videos and interactive WebGL applications showcase their technical capabilities. The site is mobile-optimized and SEO-friendly, though performance is moderate. Security posture is good with HTTPS enforced, but lacks some advanced security headers and explicit incident response policies. Security-wise, the site shows no critical vulnerabilities or exposed sensitive data. Privacy compliance is supported by a cookie consent mechanism and a privacy policy page in German, indicating GDPR awareness. However, no terms of service or security policy documents were found. WHOIS data is missing, which raises some questions about domain registration transparency but does not detract significantly from the site's legitimacy given the professional content and contact information. Overall, Zwet GmbH presents a credible and professional business with a strong digital footprint in the 3D visualization technology sector. Strategic improvements in security headers, incident response documentation, and WHOIS transparency would enhance trust and compliance.

A

ACO

draindesign.aco

58

ACO is a global leader in surface water management systems, specializing in manufacturing and supplying a wide range of drainage channels and grating styles. The website targets designers, engineers, and urban planners, providing product information and design support. The digital infrastructure is modern, leveraging Vue.js and progressive web app technologies, but lacks visible privacy and security policies. Analytics are implemented via Google Tag Manager without explicit cookie consent mechanisms. Security posture is moderate with no detected security headers and unknown SSL configuration. Overall, the website is professional and content-rich but requires improvements in privacy compliance and security transparency.

A

ACO Passavant Detego GmbH

aco-detego.de

67

ACO Passavant Detego GmbH is a specialized manufacturer within the ACO Group focusing on manhole covers, street and bridge drains, and technical covers. The company offers both standard and customized solutions, emphasizing safety and aesthetic integration for industrial and infrastructure clients. Their services extend beyond product development to include installation, maintenance, and repair, positioning them as a full-service provider in their niche market. The website reflects a professional and consistent brand image, targeting industrial and infrastructure sectors primarily in Germany. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including Bootstrap and Google Tag Manager. It features a responsive design with good SEO and accessibility practices. Cookie consent is managed through Klaro, indicating a mature approach to privacy compliance. Performance is moderate, with room for optimization. Security posture is solid with HTTPS enforced and no exposed sensitive data, though security headers could be enhanced and a formal security policy is absent. From a security perspective, the site shows good practices such as consent management and secure data handling in forms. However, the absence of explicit incident response contacts and security.txt files suggests areas for improvement. No vulnerabilities or suspicious content were detected. Overall, the site is trustworthy and professionally maintained, suitable for its business purpose. Strategically, the company should consider enhancing security headers, publishing a security policy, and providing clear incident response contacts to strengthen trust and compliance. Continuous monitoring and technical optimizations will support sustained digital maturity and business credibility.

A

ACO

aco.shop

72

ACO operates a professional e-commerce platform specializing in construction and drainage products targeted at both private and commercial customers in Germany. The website is built on Magento, leveraging modern web technologies such as RequireJS and jQuery, and integrates performance and analytics tools like New Relic and Google Tag Manager. The site demonstrates good technical maturity with HTTPS enforcement, security headers, and GDPR-compliant cookie consent mechanisms. However, the absence of detailed WHOIS registrant information and direct contact details on the homepage slightly detracts from overall trustworthiness. Security posture is solid with no evident vulnerabilities or exposed sensitive data. Strategic recommendations include enhancing transparency by publishing a security policy, incident response contacts, and improving accessibility features to further strengthen compliance and user trust.

V

Virgin Money UK PLC

virginmoneyukplc.com

73

Virgin Money UK PLC operates as a financial services provider in the United Kingdom, offering a broad range of products including credit cards, mortgages, savings accounts, ISAs, investments, and insurance. The company positions itself as a fair and rewarding alternative to traditional banks, emphasizing social good and customer-centric values. The website reflects a mature corporate presence with dedicated sections for investor relations, corporate sustainability, and community engagement, indicating a well-established market position within the UK banking sector. Technically, the website employs modern web technologies such as jQuery, Adobe Dynamic Tag Manager, and Visual Website Optimizer for marketing and analytics purposes. Evidon consent management scripts ensure compliance with privacy regulations, and the site is mobile-optimized with good accessibility features. Performance is moderate, with a well-structured navigation system and professional design quality. From a security perspective, the site enforces HTTPS and integrates content security policies via Evidon scripts. However, explicit security headers like HSTS and X-Frame-Options are not visibly present in the HTML content. There is no publicly available incident response or vulnerability disclosure information, which could be improved to enhance transparency and trust. The absence of WHOIS data for the domain is a notable anomaly, though the website content and branding strongly suggest legitimacy. Overall, Virgin Money UK PLC's website demonstrates a strong business and technical foundation with good privacy compliance and user experience. Addressing minor security header gaps and publishing incident response details would further strengthen its security posture and trustworthiness.

V

Virgin Group

virgin.com

77

Virgin.com is the official website of the Virgin Group, a globally recognized conglomerate founded by Richard Branson. The site serves as a central hub for information about the Virgin Group and its diverse subsidiaries spanning travel, telecommunications, finance, hospitality, and space exploration. The website features comprehensive content about Virgin companies, news, and initiatives, targeting a broad audience including customers, investors, and partners. The business model is that of a diversified holding company with a strong brand presence and multiple revenue streams from its subsidiaries.