Security Directory

S

Schüco Group

schueco.com

68

Schüco Group is a leading German company specializing in system solutions for building envelopes made from aluminium, steel, and PVC-U. Their extensive product portfolio includes windows, doors, façades, ventilation, security, and solar shading systems, complemented by digital and networked solutions for both residential and commercial buildings. The company emphasizes sustainability and climate neutrality, positioning itself as a pioneer in the construction industry. Technically, the website employs modern web technologies including JavaScript, lazy loading, and privacy management tools, offering a responsive and accessible user experience. Security-wise, the site uses HTTPS and privacy consent mechanisms but lacks some advanced security headers and publicly available incident response information. Overall, the website is professional, trustworthy, and well-structured, though the absence of WHOIS data and explicit contact details slightly reduces transparency.

C

Cheltenham Playhouse

cheltplayhouse.org.uk

9

Cheltenham Playhouse is a small non-profit community theatre organization based in the United Kingdom, focused on providing theatrical productions and cultural events to the local community. The website reflects a consistent brand identity and offers relevant information about the theatre's activities, targeting local residents and theatre enthusiasts. The business model relies on community engagement and event hosting. Technically, the website uses modern front-end technologies such as the Bulma CSS framework and FontAwesome icons, hosted by a reputable registrar, 123-Reg Limited. The site appears to be mobile-optimized with a moderate performance profile. Security posture is basic, with no detected security headers or published security policies, and no HTTPS enforcement details available from the provided data. Privacy compliance is lacking, as no privacy or cookie policies were found, which is a notable compliance gap. Overall, the website is safe for general audiences and does not contain adult or explicit content. The domain registration is consistent with the organization's history and shows no suspicious patterns.

W

WE media

wemedia.group

9

WE media is a Russian-language media platform focused on advertising and brand promotion services. The platform leverages a strong community and live content to connect brands with audiences, aiming to convert attention into trust and sustainable growth. The website is built on the Tilda CMS platform, utilizing modern web technologies and integrated with Yandex Metrika for analytics. While the site demonstrates good design quality, mobile optimization, and user experience, it lacks critical privacy and cookie policies, and no explicit contact information is provided. Security posture is basic with no visible security headers or advanced configurations. The domain WHOIS data is privacy-protected, which is common for small media businesses but limits transparency. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security measures.

A

Arbeitgeberverband Gesamtmetall

gesamtmetall.de

51

Gesamtmetall is the leading employer association representing the metal and electrical industry in Germany, encompassing over 26,000 companies and nearly 3.9 million employees. The website serves as a comprehensive platform for industry news, policy updates, educational initiatives, and event information, targeting employers, policymakers, and industry stakeholders. Technically, the site is built on WordPress with modern plugins such as Gravity Forms and uses Matomo for privacy-conscious analytics. The site is well-structured, mobile-optimized, and accessible, reflecting a mature digital presence. Security-wise, the site enforces HTTPS and implements cookie consent but lacks visible security headers and explicit security or privacy policy documents, which are recommended for compliance and trust. Overall, the website is professional, trustworthy, and content-rich, with room for improvement in privacy documentation and security hardening.

N

Nemzeti Média- és Hírközlési Hatóság

onlineplatformok.hu

43

The website onlineplatformok.hu is the official digital services coordinator portal of the Hungarian National Media and Infocommunications Authority (NMHH). It serves as a comprehensive resource for regulatory information, research, and educational content related to online platforms and the Digital Services Act (DSA). The site targets a broad audience including the general public, researchers, policymakers, and digital platform users in Hungary. It provides authoritative content on digital rights, platform governance, and safe online practices. Technically, the website employs modern web standards with HTML5, CSS3, and JavaScript, including integration of Google Analytics with IP anonymization and Spotify embeds. The site is hosted by NMHH and demonstrates good mobile optimization, accessibility, and SEO practices. Performance is moderate, with no critical technical issues detected. From a security perspective, the site uses HTTPS with a strong SSL configuration and implements GDPR-compliant cookie consent mechanisms. However, explicit security policies and incident response information are not published, and security headers are not explicitly detected. No vulnerabilities or suspicious elements were found, indicating a solid security posture appropriate for a government informational site. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. It effectively fulfills its role as a government portal providing transparency and education about online platforms. Strategic recommendations include publishing detailed security policies, enhancing security headers, and considering a vulnerability disclosure policy to further strengthen trust and security posture.

kozadat.hu is a Hungarian government-operated public data search portal managed by Nemzeti Infokommunikációs Szolgáltató Zrt. The site provides access to various public data sets, legal drafts, government documents, and archives, serving citizens, researchers, and public sector stakeholders. The platform is part of the official Közadat program and links to multiple authoritative government resources, reinforcing its position as a trusted government information source. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and Modernizr for feature detection. It integrates Google Analytics for user tracking but lacks visible cookie consent mechanisms. The site appears moderately optimized for performance and mobile use, with basic accessibility features. The CMS or platform is not explicitly identified, suggesting a custom or government-developed solution. From a security perspective, the site uses HTTPS and avoids exposing sensitive data in its HTML. However, no explicit security headers such as CSP or HSTS were detected in the provided content, indicating room for improvement. The absence of privacy and cookie policies and consent mechanisms also represents a compliance gap. No vulnerabilities or suspicious content were found, and the domain's WHOIS data confirms a long-standing, consistent registration aligned with the government entity. Overall, kozadat.hu is a credible and professional government portal with good content quality and business credibility. To enhance security posture and privacy compliance, it should implement security headers, publish clear privacy and cookie policies, and introduce user consent mechanisms for tracking technologies.

The CISPA Helmholtz Center for Information Security is a prominent German national research institution specializing in cybersecurity, privacy, and trustworthy artificial intelligence. It operates as a Big Science institution within the Helmholtz Association and is recognized as a world-leading center in its field. The website showcases extensive research achievements, faculty expertise, and collaborations, particularly with the Technical University of Munich. The institution focuses on foundational and applied research, technology transfer, and knowledge dissemination to benefit society and industry.

T

Training-Fit : Fitness- und Muskelaufbaugeräte

training-fit.ch

66

Training-Fit.ch is an e-commerce retailer specializing in fitness, muscle building, crossfit, yoga, and martial arts equipment and apparel. The website offers a broad catalog of products from well-known brands, targeting fitness enthusiasts primarily in Switzerland and neighboring regions. The business model focuses on online sales with fast shipping options and secure payment methods. The site demonstrates consistent branding and a professional design, supporting a medium-sized retail operation. Technically, the website is built on the Magento OpenMage platform, utilizing modern web technologies including Google Analytics, Google Ads, and reCAPTCHA for security and marketing. The site is mobile-optimized and features good SEO practices, although accessibility could be improved. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses bot protection mechanisms. However, explicit security headers are not clearly present, and there is no published security policy or incident response contact. Privacy compliance is partially addressed with a cookie consent mechanism, but no clear privacy policy or terms of service pages were found. No vulnerabilities or exposed sensitive data were detected. Overall, the website presents a moderate risk profile with good business credibility but some gaps in privacy and security transparency. Strategic improvements in policy publication, security headers, and contact information would enhance trust and compliance.

D

Direct-Volley : Nummer 1 Website für Online-Volleyball

direct-volley.ch

67

Direct-Volley.ch is a German-language e-commerce website specializing in volleyball equipment, apparel, and accessories. It positions itself as the leading online volleyball shop, targeting volleyball players and enthusiasts primarily in German-speaking regions such as Switzerland and Germany. The site offers a broad catalog including shoes, clothing, balls, protective gear, and club equipment, supported by a structured navigation and search functionality. The business model is retail-focused, leveraging an online platform to reach its audience efficiently. Technically, the website is built on the Magento OpenMage platform, integrating modern web technologies such as Google Analytics, Google Ads, and reCAPTCHA for security and marketing purposes. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features are basic. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses bot protection mechanisms. However, it lacks explicit security headers like Content-Security-Policy and X-Frame-Options, and no visible privacy policy or terms of service pages were found in the provided content. Contact information for security incidents or data protection officers is also absent, indicating areas for improvement in compliance and transparency. Overall, the website is professional and trustworthy for its retail purpose but would benefit from enhanced privacy disclosures, security header implementation, and clearer contact channels to improve its security posture and compliance with GDPR requirements.

TECHBOOK is a well-established German digital lifestyle and technology magazine offering a wide range of content including guides, tips, and product reviews focused on mobile lifestyle, home entertainment, streaming, and smart finance. The website targets tech-savvy and lifestyle-interested audiences primarily in Germany. The business model is based on online media publishing with revenue generated through advertising and partnerships. TECHBOOK maintains a consistent brand presence with active social media channels and structured data for SEO enhancement. Technically, the website is built on WordPress CMS and employs modern web technologies such as JavaScript, JSON-LD for structured data, and CSS. Hosting and content delivery are managed via Akamai CDN, ensuring good performance and availability. The site is mobile-optimized and implements basic accessibility features. SEO practices are well implemented with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes security headers like CSP, HSTS, and X-Frame-Options. GDPR compliance is evident through comprehensive privacy and cookie policies and a consent management platform. However, explicit security policies and incident response contacts are not published, which could be improved to enhance trust and readiness. Overall, TECHBOOK presents a low-risk profile with a professional online presence, good privacy compliance, and a solid technical foundation. Strategic recommendations include publishing a dedicated security policy, adding vulnerability disclosure information, and enhancing accessibility and incident response transparency to further strengthen security posture and user trust.

D

DABCOM SA

dabcom.ch

58

DABCOM SA is a Swiss company operating a DAB+ digital radio network serving the French-speaking region of Switzerland. The company holds a concession to operate this network, targeting radio broadcasters and listeners transitioning from FM to digital radio. The website presents a professional and consistent brand image with clear contact details and social media presence. Technically, the site uses standard web technologies including HTML5, CSS, JavaScript, and jQuery, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS usage implied, but lacks advanced security headers and updated libraries. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is trustworthy and functional but could improve compliance and security practices.

H

Henkel AG & Co. KGaA

henkel-ventures.com

61

Henkel Ventures is the corporate venture capital arm of Henkel AG & Co. KGaA, focusing on early-stage investments up to Series B in startups aligned with Henkel's strategic business units such as Adhesive Technologies, Beauty Care, and Laundry & Home Care. The website presents a professional and comprehensive overview of their investment focus, partnership approach, and strategic objectives, targeting startups and innovation partners globally. The technical infrastructure is modern, leveraging a custom CMS with advanced JavaScript libraries and analytics tools, ensuring a responsive and accessible user experience. Security posture is strong with HTTPS and Content-Security-Policy headers, complemented by GDPR-compliant privacy and cookie policies with user consent mechanisms. However, the absence of WHOIS registration data for the domain is a notable anomaly that requires further verification to confirm domain legitimacy. Overall, the site reflects a mature corporate digital presence with good security and privacy practices.

P

power4me

power4me.at

46

Power4me.at is a small Austrian educational organization focused on prevention and self-defense programs primarily targeting children in kindergarten and primary school. The website presents a professional and consistent brand image with clear descriptions of its services, emphasizing empowerment and safety education. The technical infrastructure is based on standard web technologies including HTML5, CSS3, JavaScript, jQuery, and Bootstrap, providing a responsive and user-friendly experience. Security posture is moderate with no evident vulnerabilities or exposed sensitive data, but lacks advanced security headers and incident response information. Privacy compliance is basic but present, with a privacy policy page accessible. Overall, the website is trustworthy and well-positioned within its niche educational market.

O

Opferberatung Zürich

onlineopferberatung.ch

47

The website www.onlineopferberatung.ch serves as an online platform for victim support and counseling services primarily in the canton of Zürich, Switzerland, with expanding cooperation across multiple Swiss cantons. It offers confidential, free, and anonymous chat and online counseling for victims of various forms of violence including domestic, sexual, and traffic-related incidents. The service is operated by Opferberatung Zürich, a non-profit organization under Stiftung Opferhilfe Zürich, and is supported by several cantonal and federal entities. The platform is designed to be accessible to adults, youth, children, and their relatives, emphasizing confidentiality and ease of access. Technically, the website employs a modern but straightforward technology stack including HTML5, CSS3, JavaScript with jQuery and Bootstrap 4 for responsive design. It includes a cookie consent mechanism compliant with EU cookie directives. The site is well-structured with clear navigation and good mobile optimization, although accessibility features are basic. No advanced CMS or analytics tools are detected, indicating a focus on privacy and minimal tracking. From a security perspective, the site uses HTTPS (assumed but not explicitly verified here) and implements cookie consent. However, no explicit security headers or incident response contacts are provided. The site does not expose sensitive data or vulnerable libraries. The WHOIS data is privacy protected, which is justified given the sensitive nature of the service. Overall, the security posture is moderate with room for improvement in headers and incident response transparency. Overall, the website is trustworthy, professional, and well-aligned with its mission to provide victim support. It scores well on content quality, business credibility, and privacy compliance, with minor technical and security enhancements recommended to further strengthen its posture.

H

Henkel

henkel-swiatmlodychbadaczy.pl

54

The website www.henkel-swiatmlodychbadaczy.pl represents the Polish branch of Henkel's international educational program 'Świat Młodych Badaczy' (World of Young Researchers). The program focuses on engaging primary school children with science through interactive workshops, educational materials, and multimedia content. The site is well-branded with Henkel's corporate identity and offers resources for children, parents, and teachers. Technically, the site uses modern web technologies and includes comprehensive privacy and cookie consent mechanisms, reflecting good GDPR compliance. Security posture is strong with HTTPS and Content Security Policy in place, though additional headers could enhance protection. The absence of WHOIS data limits domain trust verification, but the strong corporate branding and content quality support legitimacy. Overall, the site is a professional, secure, and user-friendly educational platform aligned with Henkel's corporate social responsibility initiatives.

H

Henkel

henkel-kesifdunyasi.com

61

Henkel's Keşif Dünyası website is a well-structured educational platform aimed at introducing children and teachers in Turkey to scientific concepts through experiments and multimedia content. The initiative aligns with Henkel's corporate social responsibility and brand engagement strategies, focusing on areas relevant to their business such as adhesives, personal care, and sustainability. Technically, the site employs modern web technologies and complies with privacy regulations, including GDPR, with a robust cookie consent mechanism. Security posture is good with HTTPS and Content-Security-Policy headers, though additional security headers and published policies could enhance trust. The absence of WHOIS data is a notable anomaly but does not detract significantly from the site's legitimacy given the strong corporate branding and content quality. Overall, the site presents a professional, trustworthy, and user-friendly experience suitable for its target audience.

H

Henkel

henkel-ricercamondo.it

57

Ricercamondo is an educational initiative by Henkel AG & Co. KGaA aimed at promoting STEM education among primary school children in Italy. The website provides scientific experiments, workshops, and educational content designed to engage young learners and educators. The initiative is well-branded and consistent with Henkel's corporate social responsibility efforts. Technically, the website uses a modern tech stack including JavaScript libraries such as GSAP, Highcharts, and SwiperJS, and is built on the CoreMedia CMS platform. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is strong with HTTPS enforced and a Content-Security-Policy header present, alongside a cookie consent mechanism compliant with GDPR. No critical vulnerabilities or suspicious activities were detected. Contact information is available via email and contact forms, although no phone numbers or detailed physical addresses were found. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations.

H

Henkel

henkel-forscherwelt.com

62

Henkel Researchers’ World is a well-established educational initiative by Henkel AG & Co. KGaA aimed at introducing children and educators to scientific methods and experiments in areas aligned with Henkel's business sectors such as adhesives, personal care, and sustainability. The website is professionally designed with rich content, including videos and interactive experiments, targeting a young audience and educators. The platform leverages modern web technologies and complies with GDPR through comprehensive privacy and cookie policies. However, the absence of WHOIS data for the domain raises questions about domain registration transparency, though the website content and branding strongly support its legitimacy. Security posture is strong with HTTPS and Content Security Policy in place, but additional security headers and explicit security policies could enhance trust. Overall, the site presents a credible, secure, and user-friendly educational resource with room for improvement in transparency and security documentation.

H

Henkel

henkel-forscherwelt.de

64

Henkel Forscherwelt is a well-established international educational initiative by Henkel, focused on fostering curiosity and scientific exploration among children. The website offers a variety of educational programs, teaching materials, and teacher training aligned with Henkel's research areas. The initiative has been active since 2011 and targets children and educators primarily in Germany. Technically, the website employs a modern tech stack including JavaScript libraries like GSAP, Highcharts, and uses CoreMedia CMS, hosted on professional DNS infrastructure. Privacy and cookie consent mechanisms are well implemented, with GDPR compliance evident. Security posture is strong with HTTPS and Content Security Policy in place, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and safe for its target audience.

U

UPC

upc.ch

73

UPC, now part of Sunrise, is a major telecommunications provider in Switzerland offering mobile, internet, and TV subscription services with 5G capabilities and bundled offers. The website is professionally designed and targets Swiss consumers seeking telecommunications services. The technical infrastructure is modern, leveraging Adobe Experience Manager CMS and Adobe Marketing Cloud tools including Adobe Analytics and Target, alongside Google Analytics and Facebook Pixel for tracking and marketing. The security posture is strong with HTTPS enforced and no exposed sensitive data, though explicit security headers and published security policies are absent. Privacy compliance is basic with no visible privacy or cookie policies in the provided content. Overall, the website is credible and trustworthy with consistent WHOIS data supporting legitimacy.

F

Foot-Store

foot-store.pt

58

Foot-Store is a specialized e-commerce retailer focused on football shoes, shirts, balls, and related equipment primarily targeting Portuguese and European football enthusiasts. The website demonstrates a solid market presence with multiple country-specific sister domains, indicating a broad regional footprint. The business model centers on online retail with an emphasis on fast delivery and competitive pricing. The site content is professionally structured and well-branded, catering to a sports-focused audience.

G

Getdesigned GmbH

getdesigned.at

55

Getdesigned GmbH is a Vienna-based digital agency specializing in TYPO3 and Craft CMS web design and implementation services. The company targets businesses and organizations seeking professional web-based communication solutions, offering services including web design, CMS implementation, consulting, and ongoing support. Their market position is that of an established regional agency with a strong portfolio of notable clients and projects. Technically, the website is built primarily on TYPO3 CMS with Craft CMS also mentioned, utilizing modern web technologies and providing a good user experience with mobile optimization and accessibility considerations. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some improvements in security headers and incident response disclosures are recommended. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, reflecting a mature digital presence.

B

BILD

bild.de

64

BILD.de is a leading German news media website operated by Axel Springer SE, offering a wide range of news, entertainment, sports, and video streaming services. The site targets a general audience with a comprehensive content offering including free and subscription-based (BILDplus) content. The business model relies on advertising and subscriptions, positioning BILD as a major player in the German media landscape. Technically, the website employs modern web technologies including ES6 JavaScript, CSS3, and HTML5, with a strong focus on performance and mobile optimization. Hosting is managed via Akamai, ensuring fast content delivery. The site integrates a Consent Management Platform to comply with GDPR requirements and uses various third-party scripts for analytics and advertising. From a security perspective, BILD.de enforces HTTPS and implements consent mechanisms for privacy compliance. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly visible, representing areas for improvement. The site shows no signs of WAF blocking or content restrictions, and no adult or NSFW content is present. Overall, BILD.de demonstrates a mature digital presence with strong business credibility and technical infrastructure. Strategic enhancements in transparency around privacy policies and security incident handling would further strengthen trust and compliance.

S

Stadtmagistrat Innsbruck

innsbruck.at

61

The website www.innsbruck.at serves as the official digital presence for the city of Innsbruck, Austria, encompassing municipal services, tourism promotion, and marketing activities. It targets residents, visitors, and businesses, providing authoritative information and links to related official sites. The business model is governmental and tourism-oriented, positioning itself as a trusted source for local information and services. Technically, the site is built on the Webflow platform, utilizing modern web technologies such as HTML5, CSS3, JavaScript, and jQuery. It integrates Matomo analytics for user tracking, reflecting a privacy-conscious approach. The site demonstrates good mobile optimization and user experience, though accessibility and SEO could be further enhanced. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and a cookie consent mechanism, which are important for GDPR compliance and security hardening. No incident response or security policy information is published, indicating room for improvement in transparency and preparedness. Overall, the website is professional, trustworthy, and well-aligned with its governmental role. Strategic improvements in privacy compliance and security practices would enhance its risk posture and user trust.

M

Magyar Telekom Nyrt.

telekom.hu

63

Magyar Telekom Nyrt. is a leading telecommunications provider in Hungary, offering a wide range of services including mobile telephony, internet, TV, and device sales targeted primarily at residential customers. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to its audience. The company is a subsidiary of Deutsche Telekom AG, reinforcing its strong market position and enterprise scale. Technically, the site employs modern web technologies such as Vue.js and Google Tag Manager, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement and appropriate security headers, though explicit security policy and incident response information are not publicly detailed. Overall, the site demonstrates high trustworthiness and compliance with GDPR and cookie regulations, supporting a positive user experience and business credibility.

W

WESTbahn Management GmbH

westbahn.at

78

WESTbahn Management GmbH operates a professional rail transport service primarily serving Austria and Germany, offering long-distance train services and ticket sales. The website is well-branded and targets passengers seeking affordable and frequent train connections between major cities. The company maintains a consistent market position as an important private rail operator in the region. Technically, the website employs modern web technologies including Google Tag Manager and Cookiebot for consent management, ensuring compliance with privacy regulations. The site is mobile-optimized with good SEO and accessibility features, although some accessibility aspects could be improved. Security posture is strong with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and published security policies. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, though it could enhance transparency by adding privacy and terms of service pages. The domain registration data aligns well with the business, supporting legitimacy and trust.

M

MG Motor Europe

mgmotor.eu

68

MG Motor Europe operates a professional and well-branded website targeting Finnish and broader European markets with a focus on electric and hybrid vehicles. The site offers detailed model information, configurators, test drive requests, and dealer locators, indicating a mature digital presence aligned with automotive industry standards. The technical infrastructure leverages modern web technologies including Google Tag Manager, Imgix CDN, and Swiper.js for UI components, supported by SEOmatic CMS meta generation. Security posture is strong with HTTPS enforced and no visible sensitive data exposure, though security headers and explicit privacy policies are lacking. The absence of direct contact information and incident response details suggests room for improvement in transparency and compliance. Overall, the site is trustworthy and professionally maintained, suitable for its business domain.

A

ADMIRAL Sportwetten

admiral.at

69

ADMIRAL Sportwetten operates an online sports betting platform primarily targeting German-speaking users in Austria. The website offers sports betting services with a focus on providing competitive odds. The business model revolves around online gambling, catering to mature audiences interested in sports wagering. The site branding is consistent and the content is relevant to its target market, though the content quality is basic with limited visible business contact information or policy disclosures. Technically, the website employs modern front-end technologies including Bootstrap and OverlayScrollbars, ensuring a responsive and moderately optimized user experience. However, the absence of visible security headers and privacy-related policies indicates gaps in security and compliance maturity. No advanced analytics or advertising technologies were detected, suggesting minimal tracking or marketing integrations. From a security perspective, the site lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. The WHOIS data aligns well with the business claims, showing consistent registration details and domain age appropriate for the business. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the website demonstrates a functional but basic digital presence with room for improvement in privacy compliance, security posture, and transparency. Strategic enhancements in these areas would strengthen trust and regulatory adherence.

W

Werbehelden GmbH

werbehelden.com

55

Werbehelden GmbH is a small Austrian marketing agency specializing in below-the-line marketing, ambient media, promotions, and sampling campaigns. The company offers comprehensive 360-degree promotional services including concept creation, planning, execution, and documentation. Their market position is that of an established regional player with award-winning campaigns and a strong focus on experiential marketing. The website is professionally designed, mobile-optimized, and provides clear navigation and rich content in German targeting business clients seeking direct marketing solutions. Technically, the site uses modern JavaScript libraries, Matomo and Google Analytics for tracking, and implements a detailed cookie consent mechanism with GDPR compliance. Security posture is good with HTTPS enforced and privacy-conscious analytics configurations, but lacks some HTTP security headers and a published security policy or incident response contacts. The WHOIS data is missing or inaccessible, which raises concerns about domain registration legitimacy despite the active and professional website presence. Overall, the site scores well on content quality, technical implementation, and privacy compliance but is slightly penalized for WHOIS inconsistencies and minor security header omissions.

1

1blu GmbH

1blu.de

58

1blu GmbH operates a professional web hosting and server services platform primarily targeting business and professional customers in Germany. Their offerings include web hosting packages, VPS, dedicated servers, domain registration, and a website builder. The company emphasizes performance with NVMe SSD technology and managed hosting options. The website is well-structured, professionally designed, and provides clear pricing and service information. Technical infrastructure appears modern with use of Bootstrap and JavaScript frameworks, hosted in their own German data center in Frankfurt/Main. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacks published security policies or incident response contacts. Overall, the site is trustworthy and compliant with GDPR, with transparent business operations and no suspicious indicators.

alixon gmbh is a Swiss-based small IT solutions company specializing in software and internet services such as address management, reservation systems, cloud solutions, and web hosting. Established in 2000, it serves primarily local businesses and organizations with a focus on personalized consulting and tailored software solutions. The website reflects a professional and consistent brand image with clear contact information and product offerings. Technically, the site uses Ext JS framework and a custom CMS, with moderate performance and basic mobile optimization. Security posture is moderate but lacks advanced security headers and published privacy or cookie policies, which are compliance gaps. Remote support is offered via AnyDesk, enhancing customer service capabilities. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

A

ARC Imaging Resources

arcsupplies.com

49

ARC Imaging Resources operates a customer supply and service portal accessible via arcsupplies.com. The website serves as a login gateway for existing customers to manage their supply orders and service requests. The business appears to be a niche supplier in the imaging resources retail sector, with a domain age consistent with its founding year of 2012, indicating a stable market presence. The portal is designed with basic but functional user experience and mobile optimization, targeting primarily existing customers requiring supply and service support. Technically, the website uses standard HTML5, CSS3, and JavaScript with a theme framework from Coderthemes. The site is hosted under a domain registered with Network Solutions, LLC, with no DNSSEC enabled and no advanced CMS detected. Performance and accessibility are moderate to good, but SEO and privacy compliance are minimal. No analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the site uses HTTPS (implied by URL), but lacks visible security headers such as Content-Security-Policy or HSTS. The login form does not show anti-CSRF tokens, and no incident response or security contact information is provided. The domain WHOIS data is consistent and trustworthy, with clientTransferProhibited status and no privacy protection, supporting legitimacy. However, the absence of privacy and cookie policies and security best practices reduces the overall security posture. Overall, the website is functional and moderately professional but lacks comprehensive privacy and security measures. Strategic improvements in security headers, privacy compliance, and incident response visibility are recommended to enhance trust and compliance.

H

HAVALning O'zbekistondagi rasmiy distribyutori

haval.uz

46

The website haval.uz serves as the official distributor platform for Haval vehicles in Uzbekistan, offering information on new car models such as H6, H9, Dargo, and Jolion. It targets automotive customers and dealers within Uzbekistan, providing services including vehicle sales, test drives, and promotional offers. The site demonstrates a moderate level of digital maturity with a modern tech stack including Firebase, Yandex Maps API, Google Tag Manager, and Yandex Metrika for analytics and tracking. The design is professional and mobile-optimized, ensuring a good user experience. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks explicit security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. Overall, the site is legitimate and consistent with its business claims, but improvements in privacy and security transparency are recommended.

W

WP Rocket

wp-rocket.com

67

WP Rocket is a well-established company founded in 2013, specializing in WordPress performance optimization through its flagship caching plugin. The company holds a strong market position as a leading WordPress caching solution, targeting a broad audience including bloggers, eCommerce sites, freelancers, and agencies. Their business model revolves around direct sales of their plugin with subscription options, supported by comprehensive documentation and customer testimonials. Technically, the website is built on WordPress, leveraging modern web technologies and third-party tools such as Google Tag Manager, VWO, and Termly for analytics and compliance. The site is fast, mobile-optimized, and SEO-friendly, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, CSP monitoring, and cookie consent mechanisms, although there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, making it a reliable resource for WordPress users seeking performance enhancements.

Z

Zuger Kantonaler Imkerverein

zugerimker.ch

49

The Zuger Kantonaler Imkerverein website serves as an informational and community platform for beekeepers in the Zug canton of Switzerland. It provides educational courses, event announcements, and resources related to beekeeping and bee health. The site targets local beekeepers and individuals interested in apiculture, operating as a small non-profit regional association. Technically, the website is built on the CMSimple platform, featuring a clean and consistent design with good navigation and mobile optimization. However, it lacks advanced technical features such as structured data and visible analytics. Security posture is moderate with no visible security headers or confirmed HTTPS status, and no cookie consent mechanism is implemented despite a privacy policy being present. Business credibility is supported by sponsor links and event information, though contact details are not clearly visible on the homepage. Overall, the site is safe and trustworthy but would benefit from enhanced security and privacy compliance measures.

B

Business Media Central Asia

bmca.uz

57

Business Media Central Asia (BMCA) operates as a representative office of Messe Frankfurt in Central Asia, focusing on organizing large-scale B2B exhibition projects and events that promote market development in the region. The company is relatively new, founded in 2022, and positions itself as a key player in the exhibition and media sector within Uzbekistan and neighboring markets. The website reflects a professional business presence with clear branding and navigation, targeting B2B clients and partners interested in exhibition participation and collaboration. Technically, the website is built on the Tilda CMS platform, leveraging Tilda's CDN and JavaScript libraries for content delivery and user experience. The site is mobile-optimized and performs moderately well, though accessibility and SEO optimizations are basic. The absence of advanced frameworks or complex backend technologies suggests a straightforward digital infrastructure suitable for the company's current scale. From a security perspective, the website uses HTTPS, ensuring encrypted communication. However, it lacks important security headers and does not provide privacy or cookie policies, which are critical for compliance with data protection regulations such as GDPR. No incident response contacts or vulnerability disclosure mechanisms are present, indicating room for improvement in security posture and transparency. Overall, BMCA's website demonstrates a solid business foundation and digital presence but requires enhancements in privacy compliance, security best practices, and contact transparency to strengthen trust and regulatory adherence.

D

Direct-Running: buty, tekstylia, sprzęt do biegania

direct-running.pl

56

Direct-Running.pl is a specialized e-commerce platform focused on selling running shoes, sportswear, and related equipment primarily targeting Polish and European customers. The website offers a wide range of products from well-known brands such as Adidas, Nike, Saucony, and Puma, emphasizing fast shipping and secure payment options. The business appears to be relatively new, founded in 2023, with a medium-sized market presence in the retail sector. Technically, the website is built on Magento (OpenMage) and integrates modern marketing and analytics tools including Google Analytics, Google Ads, and Actito marketing automation. Security posture is solid with HTTPS and DNSSEC enabled, and bot protection via Google reCAPTCHA is implemented. However, the site lacks explicit privacy and cookie policy pages, and no direct contact information is visible in the provided content, which may impact user trust and compliance. Overall, the website is professionally designed with good navigation and mobile optimization, but improvements in privacy disclosures and security headers are recommended.

B

Basketbalové centrum: Basketbalové vybavení a doplňky

basket-center.cz

58

Basket-center.cz is an e-commerce website specializing in basketball-related apparel, equipment, and accessories, serving primarily the Czech market. The site acts as an official distributor for well-known brands such as Mitchell & Ness, Spalding, Adidas, and Wilson, offering NBA merchandise with promises of fast delivery and secure payment. The website is professionally designed with a comprehensive navigation structure and is optimized for mobile devices. Technically, it is built on the Magento Open Source platform (OpenMage fork) and integrates modern marketing and analytics tools including Google Analytics, Google Ads, and reCAPTCHA for bot protection. The site employs a consent management platform to comply with GDPR requirements, although explicit privacy and cookie policies are not found on the site. Security posture is good with HTTPS enforced and security best practices observed, but the absence of published security policies and incident response contacts is a gap. The WHOIS data presents an inconsistency with a domain creation date set in the future, which raises concerns about domain legitimacy. Overall, the website is functional, secure, and professional but would benefit from improved transparency in privacy and security documentation.

F

Frisbee

frisbeenet.ch

47

Frisbee is a non-profit network organization founded in 2013 that serves as the umbrella for childhood and youth organizations in the canton of Fribourg, Switzerland. It focuses on fostering collaboration, advocacy, and support for its member organizations, promoting extracurricular activities for children and youth. The website reflects a regional community-oriented mission with clear contact information and a bilingual approach (French and German). The technical infrastructure is based on standard web technologies including HTML5, CSS3, jQuery, and Google Analytics with IP anonymization, indicating moderate digital maturity. The site is mobile responsive and well-structured, providing a good user experience. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy and professionally presented, suitable for its non-profit community role.

D

Direct-Running: Laufschuhe, Lauftextilien, Laufausrüstung

direct-running.at

9

Direct-Running.at is a German-language e-commerce website specializing in running shoes, sports apparel, and related equipment. The platform offers a wide range of products from well-known brands such as Adidas, Nike, Saucony, and Puma, targeting runners and sports enthusiasts primarily in Austria and German-speaking regions. The website features a comprehensive product catalog with clear navigation and promotional offers, emphasizing fast shipping and secure payment options. Technically, the site is built on the Magento Open Source (OpenMage) platform, utilizing modern web technologies including Google Analytics, Google Ads, and reCAPTCHA for bot protection. While the site enforces HTTPS and employs consent management for cookies, explicit privacy policies and terms of service pages were not detected in the provided content, indicating room for improvement in privacy compliance. Security posture is moderate with HTTPS enabled but lacking visible security headers and vulnerability disclosure mechanisms. Overall, the website presents a professional and trustworthy retail experience with good content quality and user experience, though enhancements in privacy and security documentation are recommended.

P

Pecheur-Store : Online fishing shop

pecheur-store.ie

62

Pecheur-Store.ie is an e-commerce website specializing in the sale of fishing tackle and equipment, including rods, reels, baits, and accessories for various fishing types such as carp, predator, coarse, and sea fishing. The website targets fishing enthusiasts and anglers primarily in Ireland and possibly France, as indicated by customer service mentions. The business model is retail-focused with an emphasis on fast delivery and secure payment options. The domain is newly registered in 2024, consistent with a recently launched online store. Technically, the website is built on a Magento-based platform (OpenMage variant) and employs modern web technologies including HTML5, CSS3, and JavaScript. It integrates Google Analytics, Google Tag Manager, Google Ads, and reCAPTCHA for analytics, marketing, and security purposes. The site is moderately optimized for performance and mobile devices, with good SEO practices and basic accessibility features. From a security perspective, the site uses HTTPS and includes reCAPTCHA to protect forms, but lacks DNSSEC and explicit security headers such as Content-Security-Policy or X-Frame-Options. No privacy or cookie policies were found in the provided content, though consent management scripts indicate some GDPR compliance efforts. No contact emails or phone numbers were detected, which may impact user trust and support accessibility. Overall, the website presents a professional and trustworthy e-commerce platform with room for improvement in privacy transparency, security hardening, and contact information availability. Strategic recommendations include publishing comprehensive privacy and terms of service pages, enabling DNSSEC, adding security headers, and providing clear contact details to enhance user trust and compliance.

P

P2 Betriebs GmbH

parndorf-entertainment.at

48

Parndorf Entertainment Center is a small hospitality and entertainment business located in Parndorf, Austria, operated by P2 Betriebs GmbH. The center hosts multiple tenant businesses including restaurants, a trampoline park, a tattoo studio, a toy store, and bowling facilities, targeting families and local visitors seeking leisure and dining experiences. The website presents a professional and consistent brand image with clear contact information and business details. Technically, the site uses modern web standards with responsive design and optimized images, though it lacks advanced frameworks or CMS indicators. Security posture is adequate with HTTPS enforced and cookie consent implemented, but could benefit from additional security headers and explicit security policies. Privacy compliance is supported by a visible privacy policy and cookie banner, aligning with GDPR requirements. Overall, the website is functional, trustworthy, and suitable for its business purpose, with room for technical and security enhancements.

P

Pure Paros Studios

pure-paros-studios.com

48

Pure Paros Studios operates a luxury apartment rental service focused on a high-end studio apartment experience on the Greek island of Paros. The website presents a professional and visually appealing platform targeting tourists seeking comfort and elegance. The business offers additional personalized services such as airport pick-up and local guides, positioning itself as a niche hospitality provider. Technically, the site uses modern web standards with HTTPS and Matomo analytics, indicating a moderate level of digital maturity. However, the absence of privacy and cookie policies and lack of security headers highlight compliance and security gaps. The WHOIS data is missing, which raises concerns about domain legitimacy despite the active and professional website presence. Overall, the site is safe and trustworthy for users but would benefit from improved transparency and security practices.

Ö

Österreichisches Rotes Kreuz Landesverband Oberösterreich

missionhumanity.at

49

MissionHumanity is a social engagement platform operated by the Austrian Red Cross Upper Austria branch, focusing on youth and community-driven social projects since 2020. The website serves as an information hub, project submission portal, and news outlet to foster community participation and social responsibility. It maintains a strong regional presence with partnerships in education and corporate sectors. Technically, the site uses modern web technologies including responsive design, JavaScript libraries like Owl Carousel, and privacy-focused Matomo analytics. Security posture is solid with HTTPS and basic security practices, though some security headers could be enhanced. Privacy compliance is well addressed with clear cookie consent and a GDPR-aligned privacy policy. Contact information is transparent and professional, reinforcing trust. Overall, the site is well-positioned as a credible non-profit platform with good digital maturity and community impact.

M

museom service gmbh

museom.at

52

Museom service gmbh is a specialized Austrian company founded in 2012, offering consulting, exhibition construction, and art handling services primarily for museums and art institutions. The company leverages decades of industry experience and maintains strong references with notable museums such as the Wien Museum and Jüdisches Museum Wien. Their website reflects a professional and focused business presence with clear contact information and project showcases. Technically, the website is built on standard web technologies with a custom CMS, is mobile-optimized, and uses Matomo analytics for privacy-conscious tracking. Security posture is solid with HTTPS enforced, though improvements in security headers and published policies are recommended. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

W

Weinbau Mayer

weinbau-mayer.at

55

Weinbau Mayer is a small, family-owned winery and Heuriger located in Perchtoldsdorf, Austria, specializing in producing high-quality white and red wines, including rare varieties. The business combines traditional wine production with hospitality services and an online wine shop, targeting wine enthusiasts and local visitors. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content including downloadable price lists and menus. Technically, the site uses modern web technologies and privacy-conscious analytics (Matomo), with HTTPS enforced and secure form handling. However, it lacks explicit security policies and incident response information. Overall, the security posture is good but could be improved by adding security headers and vulnerability disclosure mechanisms. The site complies with GDPR, featuring privacy and cookie policies with consent mechanisms. No suspicious or malicious elements were detected, and the WHOIS data confirms the legitimacy and consistency of the domain registration. The site is suitable for mature audiences due to its alcohol-related content but contains no explicit adult material.

R

Rechtsanwalt Ing. Mag. Thomas Benda

rechtsanwalt-benda.at

47

Rechtsanwalt Ing. Mag. Thomas Benda is a small legal practice based in Austria, specializing in process representation, legal enforcement, contract drafting, and comprehensive legal advice. The website clearly targets individuals and businesses seeking legal services, emphasizing integrity, client-focused solutions, and professional legal support. The firm has been established since 2007 and operates independently since 2012, positioning itself as a trusted local legal advisor. Technically, the website employs standard web technologies including HTML5, CSS, and JavaScript, with a responsive design optimized for mobile devices. The site loads at a moderate speed and includes proper meta tags for SEO. However, no advanced frameworks or CMS platforms are detected, indicating a custom or lightweight implementation. Accessibility is basic but functional. From a security perspective, the website uses HTTPS with excellent SSL configuration, secure form submission, and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security headers and publicly available security or incident response policies. Privacy compliance is well addressed with a GDPR-compliant privacy policy and cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the website presents a professional, trustworthy, and secure online presence for a small legal practice. There are no critical security issues or content safety concerns. Strategic improvements could include adding security headers, publishing security policies, and enhancing accessibility features to further strengthen the security posture and user trust.

The website modoo.at was a platform operated by Naver Corporation offering homepage creation services under the brand 'modoo!'. The current content indicates that the service has been officially terminated as of June 26, 2025, and no longer operates. The site serves solely as a notice of this termination with minimal content and no interactive elements or additional service offerings. Technically, the site uses standard HTML and CSS with custom fonts and static assets hosted on Naver's infrastructure. There is no evidence of advanced frameworks or CMS usage. Security posture is minimal with no visible security headers or policies, and no HTTPS status was provided in the data. Privacy and cookie policies are absent, indicating a lack of compliance features on this page. No contact or incident response information is provided, limiting user support options. Overall, the site is safe, with no adult or questionable content, but lacks comprehensive privacy and security features. The domain registration is consistent with Naver Corporation, confirming legitimacy.

E

ELSTER

elster.de

53

ELSTER is the official German government online tax portal providing digital tax filing and related services to individuals, employers, and other user groups. The website offers a comprehensive suite of services including form submissions, digital document management, and user account functionalities. It targets a broad audience including private persons, businesses, and tax professionals. The platform is positioned as a trusted government service with a strong emphasis on security and user guidance. Technically, the site uses modern JavaScript libraries for cryptography and file handling, is hosted on reputable infrastructure providers including Akamai and Deutsche Telekom, and implements HTTPS with session management and CSRF protections. However, explicit privacy and cookie policies are not visible on the start page, and no public security or incident response policies are published. Overall, the site demonstrates a high level of professionalism, security awareness, and user-centric design, suitable for its critical government function.

H

Haufe Group SE

haufegroup.com

57

Haufe Group SE is a leading B2B provider specializing in integrated business and workplace solutions, including content, software, and training services. The company targets enterprises and professionals primarily in Germany, positioning itself as a key player in the technology sector. The website reflects a mature, professional brand with clear leadership and subsidiary information, supporting its market position. Technically, the site is built on modern web technologies such as Webflow CMS, jQuery, and Swiper.js, with strong mobile optimization and good SEO practices. Security posture is solid with HTTPS, consent management, and encrypted communication options, though some security headers and incident response details could be improved. Overall, the domain appears legitimate despite missing WHOIS registration details, and the site demonstrates strong privacy compliance and business credibility.