Security Directory

D

digris AG

digris.ch

51

digris AG is a Swiss-based telecommunications company specializing in digital radio broadcasting via dab+ technology. They operate a significant dab+ network in Switzerland with over 20 transmission areas and extend their services to France and the UK. Their offerings include network planning, audio encoding, multiplexing, and software defined radio development, positioning them as a key player in the digital radio broadcasting market. The website reflects a professional and consistent brand image with clear contact information and social media presence. Technically, the site uses modern web technologies including Vue.js, Google Analytics, and is hosted on DigitalOcean infrastructure. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and explicit policies could be improved. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and well-maintained, supporting the company's credibility in the telecommunications sector.

D

DABCOM SA

dabcom.ch

58

DABCOM SA is a Swiss company operating a DAB+ digital radio network serving the French-speaking region of Switzerland. The company holds a concession to operate this network, targeting radio broadcasters and listeners transitioning from FM to digital radio. The website presents a professional and consistent brand image with clear contact details and social media presence. Technically, the site uses standard web technologies including HTML5, CSS, JavaScript, and jQuery, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS usage implied, but lacks advanced security headers and updated libraries. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is trustworthy and functional but could improve compliance and security practices.

R

Romandie Médias SA

romandiemedias.ch

58

Romandie Médias SA is a Swiss company specializing in the transport and diffusion of DAB+ digital radio signals across the French-speaking region of Switzerland. Established in 2014, it operates a network of over 60 transmitters broadcasting 15 private radio stations, positioning itself as a key regional digital radio infrastructure provider. The website is professionally designed, mobile-optimized, and provides clear information about the company's services and coverage. Technically, the site uses WordPress CMS with Bootstrap framework, integrates Google Maps API for coverage visualization, and employs Google Analytics with IP anonymization for user tracking. Security posture is solid with HTTPS enforcement and standard security headers, although there is room for improvement in incident response and vulnerability disclosure transparency. Privacy compliance is good, featuring a cookie consent banner and a privacy policy page in French. Overall, the website reflects a trustworthy and credible business with a moderate to good digital maturity level.

Broadcast.ch is a specialized portal dedicated to providing uninterrupted reception information and support for SRG broadcasting programs in Switzerland. The website is developed by Intersim AG, a Swiss company, and serves as an information hub offering tips, technical insights, and news updates related to radio, television, and internet streaming services. The target audience includes general users interested in SRG program reception and related broadcasting technologies. The business model focuses on delivering informational content and technical support rather than direct commercial services. Technically, the website is built on the TYPO3 CMS platform, utilizing modern web technologies such as jQuery, Bootstrap, and Google Tag Manager for analytics. Usercentrics is employed for cookie consent management, indicating a commitment to privacy compliance. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Performance is moderate, with no significant technical issues detected. From a security perspective, the site uses HTTPS with excellent SSL configuration and implements cookie consent mechanisms. However, it lacks explicit security headers such as Content Security Policy or HSTS, and no published security or incident response policies are found. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is partial, with cookie consent present but no dedicated privacy policy or terms of service pages. Overall, Broadcast.ch presents a professional and trustworthy online presence with a clear focus on broadcasting information. To enhance security and compliance posture, the site should publish comprehensive privacy and security policies, implement security headers, and provide clearer contact information. These improvements would strengthen user trust and regulatory compliance while maintaining the site's role as a reliable resource for SRG program reception.

D

DAB+

dabsy.ch

49

The website dabsy.ch/login is a minimal login page titled 'DAB+'. It appears to be a user authentication portal with no publicly available business description, contact information, or policies. The site uses modern JavaScript modules and the Quill rich text editor library, indicating some level of technical maturity. However, the lack of privacy, cookie, and terms of service policies, as well as absence of contact or security information, limits trust and compliance assessment. No WAF or blocking mechanisms were detected, and the content is accessible and safe for general audiences. The domain WHOIS is privacy protected, which restricts transparency about ownership and legitimacy. Overall, the site shows basic technical implementation but lacks critical security and compliance disclosures.

H

Henkel AG & Co. KGaA

fritz-henkel.com

66

The website https://fritz-henkel.com/ is a professionally designed microsite dedicated to celebrating the 175-year legacy of Fritz Henkel, founder of Henkel AG & Co. KGaA. It provides rich historical content, brand heritage storytelling, and corporate culture insights targeted at a general audience including brand enthusiasts and stakeholders. The site leverages modern web technologies such as Nuxt.js and Vue.js, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent managed via OneTrust, although some security headers could be improved. The domain registration is consistent with the corporate identity and appropriate for a dedicated campaign site. Overall, the site demonstrates strong compliance with GDPR and presents trustworthy business information.

H

Henkel

phenion.com

67

Phenion is a specialized brand under Henkel, providing advanced 3D tissue engineered human skin models and related products for in vitro research and risk assessment. The website demonstrates a professional and scientific focus, targeting researchers and industry professionals in healthcare and tissue engineering sectors. The digital infrastructure leverages modern JavaScript libraries and cookie consent frameworks, ensuring GDPR compliance and a good user experience across devices. Security posture is strong with HTTPS and Content-Security-Policy headers, though explicit security policies and incident response information are not published. The absence of WHOIS data for the domain is unusual and should be verified for legitimacy. Overall, the site is credible, well-structured, and compliant with privacy standards, supporting Henkel's brand reputation.

H

Henkel AG & Co. KGaA

henkel-ventures.com

61

Henkel Ventures is the corporate venture capital arm of Henkel AG & Co. KGaA, focusing on early-stage investments up to Series B in startups aligned with Henkel's strategic business units such as Adhesive Technologies, Beauty Care, and Laundry & Home Care. The website presents a professional and comprehensive overview of their investment focus, partnership approach, and strategic objectives, targeting startups and innovation partners globally. The technical infrastructure is modern, leveraging a custom CMS with advanced JavaScript libraries and analytics tools, ensuring a responsive and accessible user experience. Security posture is strong with HTTPS and Content-Security-Policy headers, complemented by GDPR-compliant privacy and cookie policies with user consent mechanisms. However, the absence of WHOIS registration data for the domain is a notable anomaly that requires further verification to confirm domain legitimacy. Overall, the site reflects a mature corporate digital presence with good security and privacy practices.

H

Henkel

henkel.de

64

Henkel is a leading global enterprise operating in both industrial and consumer goods sectors, specializing in hair care, colorants, detergents, cleaning agents, fabric softeners, adhesives, sealants, and functional coatings. The company maintains a strong market position with a comprehensive portfolio targeting both B2B and B2C customers. The website reflects a mature digital infrastructure with modern JavaScript libraries, a corporate CMS, and extensive multilingual support. Security posture is robust with HTTPS enforcement, Content Security Policy, and cookie consent mechanisms aligned with GDPR. While no critical vulnerabilities or exposed sensitive data were detected, there is room for improvement in security headers and incident response visibility. Overall, the website demonstrates high professionalism, trustworthiness, and compliance, supporting Henkel's reputation as a global manufacturing leader.

H

Henkel

henkel-gcc.com

62

Henkel GCC operates as a regional branch of the global Henkel corporation, specializing in both industrial and consumer products including adhesives, hair care, and laundry detergents. The website reflects a mature enterprise with a strong market position in the GCC region, targeting both business clients and consumers. The digital infrastructure is built on modern JavaScript libraries and a CoreMedia CMS platform, delivering a responsive and accessible user experience. Security posture is solid with HTTPS and Content-Security-Policy headers, complemented by GDPR-compliant privacy and cookie policies. However, the absence of WHOIS registration data raises questions about domain registration transparency, though the website content and branding strongly support legitimacy. Overall, the site demonstrates professionalism and compliance with regional and international standards.

H

Henkel

henkel-northamerica.com

67

Henkel North America is a well-established enterprise with a legacy of nearly 150 years, specializing in manufacturing and consumer goods including hair care products, laundry detergents, fabric softeners, adhesives, sealants, and functional coatings. The company holds leading market positions in both industrial and consumer sectors, emphasizing innovation and sustainability. The website reflects a mature digital presence with professional design, clear navigation, and mobile optimization. Technically, the site employs a modern JavaScript stack with various libraries and frameworks to enhance user experience and analytics capabilities. Security posture is strong with HTTPS enforcement and Content-Security-Policy headers, complemented by a comprehensive cookie consent mechanism. However, the absence of WHOIS data and explicit privacy and security policy pages suggests areas for improvement in transparency and compliance. Overall, the site is trustworthy and professional but would benefit from enhanced security disclosures and clearer contact information for incident response.

I

IDEA 2000

idea2000.hu

46

IDEA 2000 is a Hungarian small business established in 1996 specializing in web and print design services. Their offerings include website and webshop creation, graphic and brand identity design, print media preparation, SEO, and language teaching. The company targets Hungarian businesses and individuals seeking professional digital and print marketing solutions. The website is built on WordPress using modern themes and plugins, with good SEO and mobile optimization. Google Analytics is used for visitor tracking, but no cookie consent mechanism is present. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and published security policies. Contact information is clearly provided, enhancing business credibility. Overall, the website presents a professional and trustworthy image with room for improvement in privacy compliance and security transparency.

S

SPACEFOOT SAS

sneakids.ch

67

Sneakids is a specialized e-commerce retailer focusing on children's shoes, clothing, toys, and accessories, primarily targeting parents and caregivers in France and Switzerland. The company operates under SPACEFOOT SAS, with a clear market position as a trusted provider of popular brands such as adidas, Puma, and Asics. The website offers a comprehensive product catalog with secure payment options and customer service based in France. Technically, the site is built on Magento (OpenMage), leveraging modern marketing and analytics tools including Google Analytics, Google Ads, and a consent management platform to ensure GDPR compliance. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is strong with HTTPS, invisible reCAPTCHA, and no visible vulnerabilities, although some HTTP security headers could be improved. Overall, the domain registration details align well with the business claims, indicating legitimacy and transparency.

B

BAKHTI - Zentrum für EmPOWERment für Mädchen* und junge Frauen*

bakhti.at

69

BAKHTI is a non-profit empowerment center based in Vienna, Austria, dedicated to supporting girls and young women aged 14 to 25 who have experienced violence. The organization offers a range of free and anonymous services including coaching, counseling, art therapy, workshops, silent accompaniment to official appointments, swimming courses, and learning cafés. The website reflects a clear mission focused on empowerment and community support, targeting a specific demographic with culturally sensitive and multilingual offerings. Technically, the website is built on Joomla! CMS using the Astroid framework, enhanced with modern JavaScript libraries such as jQuery and Lenis for smooth scrolling. It integrates Google Analytics and Google Tag Manager for analytics and uses GTranslate for multilingual support. The site is mobile-optimized with good navigation and accessibility features, although some improvements could be made in accessibility compliance. From a security perspective, the site enforces HTTPS and implements a GDPR-compliant cookie consent mechanism with opt-in functionality. However, it lacks advanced security headers and does not publish explicit security or incident response policies. No vulnerabilities or suspicious external links were detected, indicating a generally secure posture suitable for its non-profit nature. Overall, the website is professional, trustworthy, and well-aligned with its business goals. Strategic recommendations include enhancing security headers, publishing incident response information, and improving accessibility to further strengthen compliance and user trust.

S

StoP - Stadtteile ohne Partnergewalt

stop-partnergewalt.at

64

StoP - Stadtteile ohne Partnergewalt is a well-established Austrian non-profit organization focused on preventing domestic and partner violence through community engagement and neighborhood activism. The website reflects a mature digital presence with comprehensive content, clear navigation, and a strong focus on social impact. Technically, the site is built on a modern WordPress stack with WooCommerce and Elementor, ensuring good performance and mobile optimization. Security posture is solid with HTTPS, security headers, and reCAPTCHA integration, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the site is trustworthy, GDPR compliant, and professionally maintained, supporting the organization's mission effectively.

M

MeinBezirk.at

meinbezirk.at

68

MeinBezirk.at is a prominent Austrian local news platform providing regional and community news, reports, opinions, and multimedia content. It targets a broad general audience across Austria with a focus on local relevance. The website operates on a modern technical infrastructure utilizing JavaScript frameworks, Google Tag Manager, and multiple advertising networks to monetize content. While the site employs HTTPS and standard analytics tools, it lacks comprehensive security headers and a robust cookie consent mechanism, indicating room for improvement in privacy compliance and security posture. The absence of explicit contact and incident response information suggests limited transparency in security governance. Overall, the site is professionally designed, content-rich, and trustworthy, serving as a key media outlet in Austria's regional news market.

K

kids-line

kids-line.at

53

kids-line is a non-profit organization providing free counseling services to children and teenagers aged 6 to 20 in Austria. The website offers multiple contact channels including a free phone number and chat/mail support, emphasizing accessibility and youth engagement. The service operates daily from 13 to 21 hours, focusing on listening and supporting young people in need. The website is professionally designed using WordPress with Elementor and Astra theme, ensuring a good user experience and mobile optimization. Privacy and cookie policies are implemented with GDPR compliance, supported by Usercentrics consent management. Security measures include HTTPS and standard security headers, with no critical vulnerabilities detected. Overall, kids-line presents a trustworthy and well-maintained digital presence aligned with its mission.

W

Wir für Kinderrechte

kinder-rechte.at

53

Wir für Kinderrechte is a small Austrian non-profit organization dedicated to advocating for children's rights. Their website provides educational resources and information targeted at parents, educators, and policymakers. The organization maintains a consistent brand presence and complies with GDPR regulations, including a comprehensive privacy policy and cookie consent mechanism. Technically, the website is built on WordPress using the Divi theme, with Matomo analytics for privacy-respecting user tracking. Security posture is good with HTTPS enforced and standard security headers present, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website is professional, trustworthy, and safe for general audiences.

G

Gesundheit Österreich GmbH

toolbox-opferschutz.at

59

The website toolbox-opferschutz.at is operated by Gesundheit Österreich GmbH, a government-affiliated organization in Austria focused on health promotion and victim protection. It serves as a comprehensive resource for healthcare professionals, victim protection groups, and affected individuals, providing educational materials, legal information, and networking opportunities. The site is well-positioned as a national competence center in Austria for these topics. Technically, the website is built on Drupal 10, employs Matomo analytics for privacy-respecting user tracking, and is optimized for mobile devices with good accessibility and SEO practices. The performance is moderate, and the site uses HTTPS with a valid SSL configuration, ensuring secure communications. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and no visible sensitive data exposure. However, it lacks explicit security headers and a cookie consent mechanism, which are recommended for enhanced security and GDPR compliance. No vulnerabilities or suspicious activities were detected. Overall, the website is trustworthy, professionally maintained, and serves an important public health and social function. Strategic improvements in security headers and privacy consent would further strengthen its security posture and compliance.

The website 'Unterstützung und Beratung für Väter in Krisen' is a non-profit platform focused on providing support and counseling services to fathers experiencing life crises, primarily in Vienna, Austria. It offers resources and contact options for acute crises, mental health risks, and social support, positioning itself as a specialized crisis intervention center for men and fathers. The site is well-structured with clear navigation and relevant content tailored to its target audience. Technically, the website is built on WordPress 4.9.28 with the Yoast SEO plugin, indicating a moderate level of digital maturity. The site uses HTTPS with an excellent SSL configuration, SVG graphics, and custom fonts. Mobile optimization and accessibility are good, though the WordPress version is outdated, which could pose security risks. No advanced analytics or tracking tools are detected, reflecting a privacy-conscious approach but also a lack of marketing sophistication. From a security perspective, the site enforces HTTPS and uses secure forms but lacks important security headers and a formal security or incident response policy. There is no cookie consent mechanism or explicit GDPR compliance indicators, which are notable compliance gaps. Contact information is clearly provided, but no email addresses are listed openly. The WHOIS data aligns well with the website's Austrian non-profit identity, supporting legitimacy. Overall, the website is a trustworthy and professional resource for its niche audience but would benefit from improved privacy compliance, updated software, and enhanced security practices to reduce risk and increase user trust.

P

power4me

power4me.at

46

Power4me.at is a small Austrian educational organization focused on prevention and self-defense programs primarily targeting children in kindergarten and primary school. The website presents a professional and consistent brand image with clear descriptions of its services, emphasizing empowerment and safety education. The technical infrastructure is based on standard web technologies including HTML5, CSS3, JavaScript, jQuery, and Bootstrap, providing a responsive and user-friendly experience. Security posture is moderate with no evident vulnerabilities or exposed sensitive data, but lacks advanced security headers and incident response information. Privacy compliance is basic but present, with a privacy policy page accessible. Overall, the website is trustworthy and well-positioned within its niche educational market.

D

DEC112

dec112.at

45

DEC112 is a specialized Austrian initiative focused on developing modern, standardized, and accessible emergency call infrastructures based on NG112 standards. The organization operates core NG112 services and offers a text-based emergency call app, targeting telecommunications providers, emergency response organizations, and IoT developers. DEC112 holds a strong market position in Austria with government partnerships and international recognition through awards and participation in standards events. Technically, the website is built on WordPress with Elementor and optimized for accessibility and SEO, using modern technologies and open-source software. Security posture is good with HTTPS and no visible vulnerabilities, though it lacks explicit security policies and headers. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the website is professional, trustworthy, and well-positioned in its niche, but could improve transparency on privacy and security policies.

V

Verein Autonome Österreichische Frauenhäuser - AÖF

aoef.at

10

The Verein Autonome Österreichische Frauenhäuser (AÖF) is a well-established Austrian non-profit umbrella organization representing 16 autonomous women's shelters. Founded in 1988, it provides coordination, advocacy, and support services including a 24/7 multilingual telephone counseling hotline (Frauenhelpline), online chat counseling (HelpChat), and violence prevention projects such as StoP and the Zentrum BAKHTI empowerment center. The organization targets women affected by domestic violence and related social support stakeholders within Austria. The website reflects a mature digital presence with comprehensive content and multilingual support.

O

Opferberatung Zürich

onlineopferberatung.ch

47

The website www.onlineopferberatung.ch serves as an online platform for victim support and counseling services primarily in the canton of Zürich, Switzerland, with expanding cooperation across multiple Swiss cantons. It offers confidential, free, and anonymous chat and online counseling for victims of various forms of violence including domestic, sexual, and traffic-related incidents. The service is operated by Opferberatung Zürich, a non-profit organization under Stiftung Opferhilfe Zürich, and is supported by several cantonal and federal entities. The platform is designed to be accessible to adults, youth, children, and their relatives, emphasizing confidentiality and ease of access. Technically, the website employs a modern but straightforward technology stack including HTML5, CSS3, JavaScript with jQuery and Bootstrap 4 for responsive design. It includes a cookie consent mechanism compliant with EU cookie directives. The site is well-structured with clear navigation and good mobile optimization, although accessibility features are basic. No advanced CMS or analytics tools are detected, indicating a focus on privacy and minimal tracking. From a security perspective, the site uses HTTPS (assumed but not explicitly verified here) and implements cookie consent. However, no explicit security headers or incident response contacts are provided. The site does not expose sensitive data or vulnerable libraries. The WHOIS data is privacy protected, which is justified given the sensitive nature of the service. Overall, the security posture is moderate with room for improvement in headers and incident response transparency. Overall, the website is trustworthy, professional, and well-aligned with its mission to provide victim support. It scores well on content quality, business credibility, and privacy compliance, with minor technical and security enhancements recommended to further strengthen its posture.

B

Bundesamt für Familie und zivilgesellschaftliche Aufgaben

hilfetelefon.de

58

The website www.hilfetelefon.de is an official German government-supported platform operated by the Bundesamt für Familie und zivilgesellschaftliche Aufgaben. It provides a nationwide, free, and anonymous counseling service for women affected by violence, accessible 24/7 via phone (116 016) and online channels. The service targets women of all nationalities, including those with disabilities, as well as their relatives, friends, and professionals. The site is professionally designed with strong accessibility features including sign language and easy language options, supporting a broad and inclusive audience. Technically, the site is built on TYPO3 CMS, uses Matomo for privacy-conscious analytics, and is hosted with domainfactory for analytics services. The website employs HTTPS and cookie consent mechanisms aligned with GDPR requirements, ensuring user privacy and data protection. However, explicit security policies and incident response contacts are not found, and security headers are not evident, representing areas for improvement. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with privacy standards.

Hutchison Drei Austria GmbH operates the website drei.at, a leading Austrian telecommunications provider offering mobile telephony, internet, TV streaming, and green energy services. The company targets private customers in Austria with a broad portfolio of products including 5G mobile plans, device financing, and energy supply. The website is professionally designed, mobile-optimized, and provides comprehensive information about services and offers, reflecting a mature digital presence. Technically, the site is built on modern frameworks such as Next.js and uses Storyblok CMS, ensuring a responsive and performant user experience. Security best practices are observed, including HTTPS enforcement and security headers, though explicit security policy and incident response information are not publicly detailed. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. The security posture is robust with no visible vulnerabilities or exposed sensitive data. The WHOIS data confirms the legitimacy of the domain and company, matching the business claims and geographic focus. Overall, the website demonstrates a high level of professionalism, trustworthiness, and technical maturity, suitable for a large telecommunications enterprise. Strategic recommendations include publishing a dedicated security policy and incident response contacts, enhancing transparency and trust, and considering a vulnerability disclosure program to further strengthen security culture.

D

Direct-Running: Skor, textilier, löputrustning

direct-running.se

56

Direct-Running.se is a Swedish e-commerce retailer specializing in running shoes, sportswear, and related equipment. The website offers a broad selection of well-known brands such as Adidas, Nike, and Saucony, targeting running enthusiasts primarily in Sweden. The business appears to be relatively new, with domain registration dating to 2023, and positions itself as a niche player with promises of fast delivery and secure payment options. Technically, the site is built on Magento, uses modern web fonts, and integrates Google Analytics and Google Ads for marketing and analytics purposes. The presence of a consent management platform indicates awareness of GDPR requirements, although explicit privacy and cookie policies were not found in the provided content. Security posture is generally good with HTTPS enabled and no visible sensitive data exposure, but the absence of security headers and vulnerability disclosure mechanisms suggests room for improvement. Overall, the website is professional and trustworthy, but enhancing transparency around privacy, security policies, and contact information would strengthen its compliance and user trust.

B

Basket-Center : Basketutrustning och tillbehör

basket-center.se

55

Basket-Center.se is a Swedish e-commerce retailer specializing in basketball equipment, apparel, and accessories. The website serves as an official distributor for well-known sports brands such as Mitchell & Ness, Spalding, Hummel, Adidas, and Wilson, targeting basketball players and fans primarily in Sweden. The business model focuses on online sales with promises of fast delivery and secure payment options. The domain is relatively new, registered in mid-2023, consistent with a recently launched retail operation. Technically, the website is built on a Magento-based platform with modern web technologies including Google Tag Manager, Google Analytics, and Google Ads for marketing and analytics. The site is mobile-optimized with good navigation and SEO practices, though accessibility features are basic. Hosting is managed via Gandi SAS, and HTTPS is properly implemented ensuring secure communications. From a security perspective, the site employs a consent management platform for GDPR compliance and uses secure payment mentions, but lacks explicit privacy policy and terms of service pages in the analyzed content. No security headers were detected, and no incident response or vulnerability disclosure information is provided. The domain WHOIS data is transparent and consistent with the business claims, enhancing legitimacy. Overall, Basket-Center.se presents a professional and trustworthy e-commerce platform with room for improvement in privacy transparency, security headers, and contact information disclosure. The risk level is moderate with no critical vulnerabilities detected, but enhancing compliance and security posture is recommended.

T

Training-Fit : Utrustning för fitness och kroppsbyggnad

training-fit.se

50

Training-Fit.se is an e-commerce website specializing in fitness, bodybuilding, crossfit, yoga, and combat sports equipment and apparel. The site targets fitness enthusiasts and athletes primarily in Sweden, offering a wide range of products from well-known brands with claims of fast delivery and secure payment. The business appears to be recently established in 2023 and operates as a small retail entity. Technically, the website is built on the Magento (OpenMage) platform, leveraging modern web technologies including Google Analytics, Google Ads, and reCAPTCHA for marketing and security. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and bot protection in place, though improvements can be made by enabling DNSSEC and adding security headers. Privacy compliance is basic; while a consent mechanism is implemented, explicit privacy and cookie policies are not found. No contact information or incident response channels are explicitly provided, which could impact user trust. Overall, the website is functional and trustworthy but would benefit from enhanced transparency and security best practices.

S

Smash-Expert

smash-expert.at

62

Smash-Expert is a specialized e-commerce retailer focused on racket sports equipment including tennis, padel, badminton, squash, and table tennis. The website targets German-speaking customers, primarily in Austria, offering a wide range of products such as shoes, rackets, balls, clothing, and accessories. The business emphasizes fast shipping and secure payment options, positioning itself as a trusted specialist in the racket sports retail market. Technically, the website is built on the Magento OpenMage platform, utilizing modern web fonts and integrating Google services such as Analytics, Ads, and reCAPTCHA for security and marketing. The site demonstrates good mobile optimization and structured navigation, although some accessibility features appear basic. Performance is moderate, with room for improvement in SEO and accessibility. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect forms. Consent management scripts indicate GDPR compliance efforts, but explicit privacy and cookie policies are not found in the provided content. Security headers are minimal, and no vulnerability disclosure or incident response information is published, which could be improved to enhance trust. Overall, Smash-Expert presents a professional and secure online retail platform with moderate risk. Strategic improvements in privacy transparency, security policy publication, and contact information visibility would strengthen compliance and customer trust.

S

SPACEFOOT SAS

sneakids.at

63

Sneakids is an e-commerce retailer specializing in children's footwear and clothing, targeting parents and guardians primarily in France and Austria. The company operates under SPACEFOOT SAS, offering a curated selection of branded products such as adidas, Puma, and Asics. Their market position is that of a niche online retailer with a focus on quality, secure payment options, and customer service including a clear return policy. Technically, the website is built on Magento (OpenMage), integrating modern marketing and analytics tools like Google Analytics, Google Tag Manager, and Actito marketing automation. The site employs GDPR-compliant consent management and invisible reCAPTCHA for form security. Security posture is good with HTTPS enforced and secure payment logos displayed, though explicit security headers could be improved. Overall, the website is professional, well-branded, and trustworthy with no signs of blocking or WAF interference.

T

Training-Fit : Fitness- und Muskelaufbaugeräte

training-fit.at

62

Training-Fit.at is an Austrian-based e-commerce retailer specializing in fitness, muscle building, cross training, yoga, and combat sports equipment and apparel. The website offers a broad catalog of products from well-known brands, targeting fitness enthusiasts and athletes primarily in Austria and France. The business model focuses on online retail with fast delivery options and secure payment methods. Technically, the site is built on the Magento (OpenMage) platform, utilizing modern web technologies and marketing tools such as Google Analytics, Google Ads, and Actito marketing automation. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and bot protection via reCAPTCHA, although explicit security headers and published privacy and cookie policies are missing, which are areas for improvement. No signs of adult or unsafe content were detected, and the site is fully accessible without WAF or blocking mechanisms. Overall, the website is a legitimate and professional online retailer with moderate risk and room for enhanced privacy and security compliance.

P

Pet & Garden

pet-and-garden.at

63

Pet & Garden is an Austrian-based e-commerce retailer specializing in pet supplies, garden products, and agricultural equipment. The website targets pet owners, gardeners, and farmers primarily in German-speaking regions, offering a broad catalog of products with fast shipping options and outlet deals. The business model focuses on online retail with a medium-sized market presence and consistent branding. Technically, the website is built on the Magento (OpenMage) platform, utilizing modern web technologies including Google Tag Manager, Google Analytics, and marketing automation tools like Actito. The site demonstrates good mobile optimization, clear navigation, and a professional design, although some accessibility features are basic. From a security perspective, the site enforces HTTPS and employs consent management for GDPR compliance. However, explicit security headers are not fully implemented, and no privacy or cookie policy pages are directly found, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected, and no WAF or blocking mechanisms interfere with content access. Overall, the website presents a moderate risk profile with good business credibility but could enhance privacy compliance and security posture by publishing clear policies and improving security headers. Contact information visibility is limited, which may affect user trust and incident response readiness.

P

Pecheur-Store

pecheur-store.at

62

Pecheur-Store is a specialized online retailer based in Austria, focusing on fishing equipment including rods, reels, baits, and accessories for various fishing styles such as carp, predator, sea fishing, and more. The website targets German-speaking anglers and offers a broad product catalog with fast shipping and secure payment options. Technically, the site is built on Magento (OpenMage) platform, utilizing modern web technologies and integrated with Google Analytics, Google Ads, and reCAPTCHA for marketing and security. The site demonstrates moderate digital maturity with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and bot protection in place, though some security headers and explicit policies are missing. Privacy compliance is basic, with consent mechanisms present but no visible privacy or cookie policies. Overall, the domain registration data aligns with the business claims, indicating legitimacy. The site is safe for general audiences and does not contain adult or questionable content.

T

Tripnbikers : Fodral och väskor för motorcykel

tripnbikers.se

56

Tripnbikers.se is a Swedish e-commerce website specializing in motorcycle luggage and accessories, including top cases, side bags, soft luggage, and communication devices such as Bluetooth intercoms. The site targets motorcycle riders and enthusiasts primarily in Sweden and other European countries, as evidenced by sister sites in multiple languages and countries. The business appears to be recently established in 2023, with a focused niche market and a professional online presence. Technically, the site is built on Magento (OpenMage), leveraging modern marketing and analytics tools such as Google Analytics, Google Tag Manager, Google Ads, and Actito marketing automation. The website is mobile-optimized with good navigation and content quality. Security posture is solid with HTTPS enforced and reCAPTCHA implemented, though some security headers are missing and DNSSEC is not enabled. Privacy compliance is basic, with no explicit privacy or cookie policies found, but a consent management platform is active. Overall, the domain registration is legitimate and consistent with the business profile. Recommendations include enhancing privacy disclosures, adding security headers, and publishing a vulnerability disclosure policy to improve trust and compliance.

S

SPACEFOOT SAS

selleriemae.ch

67

La Sellerie de Maé, operated by SPACEFOOT SAS, is a specialized e-commerce retailer focused on equestrian and pet equipment, targeting riders and horse enthusiasts primarily in Switzerland and Europe. The website offers a broad catalog of products including horse gear, rider apparel, and accessories, supported by express delivery options and customer service based in France. The business maintains a professional online presence with clear branding, secure payment options, and customer-friendly policies such as a 14-day return window. Technically, the site is built on a Magento (OpenMage) platform, integrating modern marketing and analytics tools including Google Analytics, Google Ads, and a consent management platform to ensure GDPR compliance. Security posture is strong with HTTPS enforcement, invisible reCAPTCHA on forms, and no visible vulnerabilities or exposed sensitive data. Overall, the website demonstrates a mature digital infrastructure and trustworthy business operations.

S

SPACEFOOT SAS

selleriemae.se

58

La Sellerie de Maé operates as a specialized e-commerce retailer focusing on equestrian equipment and apparel, targeting riders and horse enthusiasts primarily in Sweden and France. The company, legally registered as SPACEFOOT SAS in France, offers a broad product range from reputable brands, emphasizing quality and customer service with a French-based support center. The website is professionally designed with clear navigation and a consistent brand presence, supporting a positive user experience and trustworthiness. Technically, the website is built on a Magento (OpenMage) platform, leveraging modern marketing and analytics tools such as Google Analytics, Google Ads, and Actito, with GDPR compliance mechanisms including consent management and reCAPTCHA for form protection. The site demonstrates good mobile optimization and moderate performance, though some security enhancements like DNSSEC and additional security headers could further strengthen its posture. From a security perspective, the site uses HTTPS and implements best practices like invisible reCAPTCHA and consent management, but lacks explicit security policies or incident response contacts. The WHOIS data is transparent and consistent with the business information, enhancing legitimacy. No critical vulnerabilities or adult content are detected, indicating a safe and professional online presence. Overall, La Sellerie de Maé presents a credible and well-managed online retail platform with room for security improvements and enhanced transparency in security policies to further build customer trust and compliance.

J

JYSK

jysk.dk

60

JYSK is a well-established Danish retail company specializing in furniture and home goods, operating both online and through physical stores. The website demonstrates a strong market position with a comprehensive product offering and a clear focus on consumer and B2B customers. The site is professionally designed, mobile-optimized, and provides a seamless user experience with clear navigation and search capabilities. The business is supported by a mature digital infrastructure leveraging Drupal CMS, advanced marketing tools like Dynamic Yield, and robust analytics via Google Tag Manager and New Relic.

E

Expodom

expodom.hu

56

Expodom.hu is a Hungarian e-commerce website specializing in the sale of quickly foldable party tents and related accessories. The site targets both general consumers and businesses requiring versatile outdoor tents for events, sales, or exhibitions. The company positions itself as a niche market leader in Hungary with a focus on quality, offering a variety of tent sizes and frame constructions, including steel and aluminum options, backed by a 5-year warranty on all frames. The business model is retail e-commerce with additional services such as custom printed tents and spare parts sales. Contact information is clearly provided, enhancing customer trust and support.

Ifjúsági Ház Debrecen is a small non-profit community center established in 2011 in Debrecen, Hungary, focused on providing cultural, leisure, and youth-oriented programs and services. The website serves as an information portal for events, room rentals, and community activities targeting children, youth, and young families. The business model revolves around community engagement and event hosting, supported by local partnerships. Technically, the site is built on WordPress with a moderate tech stack including jQuery and several plugins for galleries and news tickers. The site is mobile-optimized and uses HTTPS, but lacks advanced security headers and cookie consent mechanisms. Security posture is adequate but could be improved with formal policies and enhanced headers. Overall, the website is professional, trustworthy, and content-rich for its target audience, with clear contact information and consistent branding. The domain age and WHOIS data align well with the business history, supporting legitimacy.

R

Radics Zoltán EV.

radicsmezeskalacs.hu

40

Radics Mézeskalács is a small Hungarian artisanal e-commerce business specializing in handcrafted gingerbread products based on a 100-year-old family recipe. The company operates a WordPress WooCommerce webshop targeting general consumers interested in traditional and custom gingerbread items. The website is professionally designed with good SEO and structured data, providing clear contact information and basic legal pages such as privacy policy and terms of service. Technically, the site uses a modern WordPress stack with WooCommerce and integrates Google Analytics for tracking. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is trustworthy and legitimate, with consistent WHOIS data and no suspicious indicators.

M

Médiacentrum Debrecen Kft.

dehir.hu

47

Dehir.hu is a well-established regional news portal serving Debrecen and Hajdú-Bihar county in Hungary, operated by Médiacentrum Debrecen Kft. The website offers comprehensive local news coverage, including culture, sports, economy, and lifestyle, supported by multimedia content such as video and photo galleries and live TV streaming. It holds a strong market position as a trusted regional media source with a consistent brand presence and active social media engagement. Technically, the site employs a modern tech stack including jQuery, Bootstrap, Font Awesome, and various JavaScript libraries for UI and media handling. The platform appears to be a custom CMS with moderate performance and good mobile optimization. SEO and accessibility are adequately addressed, though some improvements are possible. From a security perspective, the site uses HTTPS and secure login modals but lacks visible security headers and explicit cookie consent mechanisms, which are important for GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. The domain's WHOIS data is consistent with the business history, supporting legitimacy. Overall, Dehir.hu presents a professional, content-rich, and trustworthy regional news platform with room for improvement in privacy compliance and security hardening to enhance user trust and regulatory adherence.

The website hrse.eu currently presents no accessible content, consisting solely of an empty HTML structure with no metadata, text, or interactive elements. This lack of content prevents any meaningful analysis of the business, its services, or its digital presence. The domain is registered via Spaceship, Inc., but no registrant details or domain age information are available to verify legitimacy or business history. Technically, the site lacks any detectable technologies, scripts, or security configurations, indicating either an inactive site or one blocked by security mechanisms. The absence of HTTPS, security headers, privacy policies, or contact information reflects a very low security posture and compliance level. Overall, the site appears non-operational or heavily restricted, resulting in a low trust and credibility rating.

AKSD Kft. is a Hungarian waste management company based in Debrecen, providing services such as waste collection, bulk waste removal, cemetery maintenance, public area upkeep, hazardous waste transportation, and container rental. The website targets local residents and businesses, positioning itself as a regional essential service provider in transportation and energy sectors. The business model focuses on municipal and commercial waste management and related public services. The website content is professionally presented with consistent branding and relevant service descriptions, although it lacks comprehensive privacy and security disclosures.

D

Debreceni Vagyonkezelő Zrt.

dvrt.hu

43

Debreceni Vagyonkezelő Zrt. is a municipal asset management holding company based in Debrecen, Hungary, actively contributing to the city's development as a regional center. The company manages multiple subsidiaries providing public services and urban development projects, focusing on financial stability and sustainable growth. The website reflects a professional digital presence built on WordPress with modern accessibility features and SEO optimizations. Security posture is strong with HTTPS and security headers properly configured, though cookie consent mechanisms and incident response contacts are absent. Overall, the site demonstrates a mature and trustworthy online representation of a government-affiliated entity.

Henkel AG & Co. KGaA is a global leader in manufacturing, specializing in Adhesive Technologies and Consumer Brands. The company operates worldwide with a strong emphasis on innovation, sustainability, and corporate governance. Their website reflects a mature digital presence with comprehensive content targeting industrial customers, consumers, partners, and investors. The business model combines B2B and B2C approaches, leveraging a broad portfolio of products and technologies. Henkel maintains a strong market position supported by ISO certifications and a consistent brand image. Technically, the website employs a modern technology stack including JavaScript libraries like GSAP, Highcharts, and SwiperJS, and is built on the CoreMedia CMS platform. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance. Security measures include HTTPS enforcement, a robust Content Security Policy, and cookie consent mechanisms, indicating a strong security posture. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear privacy and cookie policies, GDPR compliance, and a visible data protection officer contact. The site uses multiple analytics and marketing tools, balancing user tracking with privacy considerations. Overall, the website demonstrates high professionalism, trustworthiness, and a secure environment suitable for a large multinational enterprise. Strategically, Henkel should continue enhancing its security posture by minimizing unsafe inline scripts, implementing a formal vulnerability disclosure program, and improving incident response visibility to maintain trust and compliance in an evolving regulatory landscape.

Mundo de Pesquisadores is an international educational initiative by Henkel Ltda. focused on promoting science education for primary school children through experiments, teaching materials, and training courses. The program leverages Henkel's expertise in adhesives, cleaning, personal care, and sustainability to provide engaging scientific learning experiences. The website is professionally designed, mobile-optimized, and integrates modern JavaScript libraries and CMS technology, reflecting a mature digital infrastructure. Privacy and cookie policies are well implemented with consent mechanisms, and the site maintains a good security posture with HTTPS and Content-Security-Policy headers. However, explicit security policies and incident response contacts are not publicly available. Overall, the website is trustworthy, safe for general audiences, and effectively supports Henkel's educational mission.

H

Henkel

henkel-swiatmlodychbadaczy.pl

54

The website www.henkel-swiatmlodychbadaczy.pl represents the Polish branch of Henkel's international educational program 'Świat Młodych Badaczy' (World of Young Researchers). The program focuses on engaging primary school children with science through interactive workshops, educational materials, and multimedia content. The site is well-branded with Henkel's corporate identity and offers resources for children, parents, and teachers. Technically, the site uses modern web technologies and includes comprehensive privacy and cookie consent mechanisms, reflecting good GDPR compliance. Security posture is strong with HTTPS and Content Security Policy in place, though additional headers could enhance protection. The absence of WHOIS data limits domain trust verification, but the strong corporate branding and content quality support legitimacy. Overall, the site is a professional, secure, and user-friendly educational platform aligned with Henkel's corporate social responsibility initiatives.

H

Henkel

henkel-kesifdunyasi.com

61

Henkel's Keşif Dünyası website is a well-structured educational platform aimed at introducing children and teachers in Turkey to scientific concepts through experiments and multimedia content. The initiative aligns with Henkel's corporate social responsibility and brand engagement strategies, focusing on areas relevant to their business such as adhesives, personal care, and sustainability. Technically, the site employs modern web technologies and complies with privacy regulations, including GDPR, with a robust cookie consent mechanism. Security posture is good with HTTPS and Content-Security-Policy headers, though additional security headers and published policies could enhance trust. The absence of WHOIS data is a notable anomaly but does not detract significantly from the site's legitimacy given the strong corporate branding and content quality. Overall, the site presents a professional, trustworthy, and user-friendly experience suitable for its target audience.