Security Directory

B

belboon GmbH

belboon.com

63

belboon GmbH operates as a leading international performance marketing and affiliate network headquartered in Berlin, Germany. Founded in 2005, the company offers comprehensive services including affiliate marketing, tracking solutions, first-party data strategies, and full funnel marketing to advertisers, publishers, and agencies. It is part of the Linehub marketing collective, enhancing its market reach and service portfolio. The website is professionally designed, multilingual, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, the site is built on WordPress with modern tools such as Yoast SEO and Borlabs Cookie for compliance and user experience. Security posture is good with HTTPS and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is strong with clear GDPR-aligned policies and cookie consent mechanisms. Contact information is transparent and includes multiple channels, supporting business credibility. Overall, belboon presents a trustworthy and professional digital footprint with room for security policy enhancements.

A

ASD Napoli Running

napolirunning.com

60

ASD Napoli Running is a non-profit organization dedicated to organizing running events and promoting running culture primarily in Naples, Italy. The website showcases upcoming events such as the Napoli City Half Marathon and related activities, supported by a network of institutional and commercial partners. The organization targets runners, volunteers, and the local community, emphasizing engagement and sports promotion. Technically, the website is built on WordPress with WooCommerce and uses modern JavaScript libraries and tracking tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and anti-bot measures like reCAPTCHA, though cookie consent mechanisms could be improved. The absence of WHOIS data limits domain trust verification but the site content and partnerships indicate legitimacy. Overall, the site is professional, content-rich, and well-positioned in its niche.

U

UniCredit Bank

unicreditbank.cz

65

UniCredit Bank is a well-established financial institution in the Czech Republic offering a comprehensive range of retail banking services including accounts, loans, mortgages, savings, investments, and insurance. The website targets individual customers with a strong emphasis on digital banking solutions and convenient access to banking products. The site demonstrates a mature digital presence with modern technologies and analytics integration, supporting a seamless user experience across devices. Security posture is solid with HTTPS and Content-Security-Policy headers, though additional security headers could enhance protection. Privacy compliance is evident with clear cookie and privacy policies and consent mechanisms. Overall, the website reflects a professional and trustworthy banking brand with a strong market position in the Czech banking sector.

D

dm drogerie markt

dm.cz

64

dm drogerie markt operates a comprehensive online retail platform focused on personal care, beauty, health, and household products in the Czech Republic. The website demonstrates a mature digital presence with a strong brand identity, extensive product offerings, and customer loyalty programs. Technically, the site employs modern web technologies, including a custom design system, responsive design, and consent management, ensuring a good user experience across devices. Security posture is robust with HTTPS enforcement and security headers, although no explicit incident response or vulnerability disclosure information is publicly available. Privacy compliance is well addressed with cookie consent mechanisms and privacy policies in place. Overall, the site reflects a professional and trustworthy e-commerce operation with minor gaps in publicly available WHOIS data.

A

adidas CZ

adidas.cz

72

The website www.adidas.cz is the official e-commerce platform for adidas in the Czech Republic, offering sports clothing and footwear. It represents a major global brand with a strong market position in retail sportswear. The site targets sports enthusiasts and general consumers within the Czech market, providing a comprehensive online shopping experience. Technically, the site is built on modern frameworks such as React and Next.js, hosted likely on Akamai infrastructure, and employs advanced performance and monitoring tools like Instana and Tealium. The website is well-optimized for SEO and mobile devices, with excellent design and user experience. Security posture is strong with HTTPS enforced and standard security headers, though explicit privacy and cookie policies are not clearly found in the provided content. Overall, the site demonstrates high professionalism and trustworthiness, though improvements in visible privacy compliance and contact information are recommended.

R

RunCzech Store

runczechstore.com

60

RunCzech Store is a Czech Republic-based e-commerce retailer specializing in running shoes, apparel, and official race merchandise, primarily featuring the adidas brand. The website targets runners and sports enthusiasts, offering a comprehensive product catalog with a professional and consistent brand presentation. The business operates on the Shoptet e-commerce platform, leveraging modern web technologies and marketing tools such as Google Analytics and Facebook Pixel. The site is well-optimized for mobile devices and provides clear navigation and user experience. Security measures include HTTPS enforcement and CSRF protection on forms, though some outdated libraries present potential risks. Privacy compliance is robust with visible cookie consent and a comprehensive privacy policy. However, the absence of WHOIS registration data raises concerns about domain legitimacy, warranting further verification. Overall, the site demonstrates a solid digital presence with moderate security posture and good privacy practices.

R

Reservanto s.r.o.

reservanto.cz

62

Reservanto s.r.o. operates a mature and well-established online reservation system tailored for various business sectors, including small entrepreneurs, professional service providers, corporations, and public administration. The company has a strong market presence in the Czech Republic with over 10,000 customers and offers a SaaS model with integrated payment and customer management features. The website reflects a professional and user-friendly design with clear navigation and comprehensive content in Czech. Technically, the site uses modern JavaScript libraries and tracking tools, hosted likely by Active24, and implements HTTPS with good security practices such as reCAPTCHA on forms. However, explicit security policies and incident response contacts are not published, which could be improved. Overall, the site is secure, compliant with GDPR, and trustworthy, with no signs of malicious content or blocking mechanisms.

S

Sketchfab, Inc.

sketchfab.com

72

Sketchfab, Inc. operates a leading global platform for 3D and augmented reality content, serving a community of over one million creators. The company provides a comprehensive suite of services including 3D model publishing, sharing, embedding, and business solutions such as 3D asset management and eCommerce configurators. Positioned as a market leader in 3D and AR web technologies, Sketchfab targets creators, enterprises, and consumers interested in immersive digital content. The platform is backed by Epic Games, enhancing its credibility and market reach. Technically, Sketchfab demonstrates a mature and modern digital infrastructure leveraging JavaScript frameworks, AWS hosting, and third-party integrations like Vimeo and PayPal. The website is well-optimized for performance, mobile responsiveness, and accessibility, with strong SEO practices and structured data implementation. Cookie consent and privacy compliance mechanisms are robust, reflecting adherence to GDPR and other privacy regulations. From a security perspective, the site enforces HTTPS, employs domain registration protections, and integrates cookie consent frameworks. However, DNSSEC is not enabled, and no explicit security policy or incident response contacts are publicly available, representing areas for improvement. No vulnerabilities or suspicious activities were detected in the analysis. Overall, Sketchfab presents a trustworthy, professional, and technically sound platform with strong business credibility. Strategic recommendations include enhancing DNS security, publishing formal security policies, and establishing vulnerability disclosure channels to further strengthen security posture and user trust.

The website ex1tp.com appears to be a minimal online presence for a business related to exit popup services, indicated by the site title and displayed text. The content is very limited, with no detailed business description, policies, or multiple contact methods. The domain is relatively new, registered in 2022, and uses Cloudflare for DNS and CDN services. The technical infrastructure is basic but includes modern elements such as Google Fonts and mobile optimization. Security posture is minimal with no detected security headers or privacy policies, and DNSSEC is not enabled. There is no evidence of active WAF blocking or security challenges, allowing full access to the site content. Overall, the site lacks comprehensive compliance and trust indicators, which limits its credibility and security maturity.

L

LOUPE

loupe.at

65

LOUPE is a specialized compliance management solution provider focusing on whistleblowing, anti-corruption, integrity management, and risk assessments. The company targets businesses needing to fulfill regulatory requirements such as the Corporate Sustainability Due Diligence Directive. Their market position is niche but professional, supported by ISO 27001 certification, indicating a strong commitment to information security. The website is well-designed, mobile-optimized, and uses modern technologies like Nuxt.js and Vue.js, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and a comprehensive cookie consent mechanism, although explicit incident response and vulnerability disclosure information are absent. Overall, the website and business present a trustworthy and professional image with moderate user tracking balanced by GDPR-compliant privacy practices.

O

Overtracking

overtracking.com

63

Overtracking is a privacy-first web analytics platform launched in 2023, positioning itself as an easy-to-use alternative to Google Analytics with a focus on respecting user privacy by avoiding cookies. The company targets website owners and digital marketers who require accurate, GDPR-compliant analytics including heatmaps, real-time visitor tracking, and Core Web Vitals measurement. The business operates on a SaaS model with a free tier and paid plans based on monthly pageviews. Technically, the website is modern, fast, and mobile-optimized, leveraging Cloudflare DNS and custom JavaScript analytics scripts. Security posture is solid with HTTPS enforced and no exposed sensitive data, though DNSSEC is not enabled and security headers are missing. Privacy compliance is strong, with clear privacy policy and no cookie consent mechanism needed due to cookie-free tracking. Overall, the site is professional, trustworthy, and well-branded, though it lacks explicit security and incident response policies.

U

UMB AG

umb.ch

59

UMB AG is a Swiss-based IT services company specializing in digital transformation, cloud solutions, cybersecurity, and consulting. The company positions itself as a leading provider in Switzerland, serving large enterprises and SMEs with a broad portfolio of IT services and innovative solutions. Their website reflects a mature digital presence with comprehensive service descriptions and a strong employer brand. Technically, the site is built on TYPO3 CMS, integrates modern analytics and marketing tools, and employs Cloudflare for security and performance. Security posture is strong with HTTPS, bot filtering, and cookie consent mechanisms, though a dedicated security policy and incident response contacts are absent. Overall, the website is professional, trustworthy, and compliant with GDPR, making it a reliable digital front for the company.

M

MÁV-csoport

mavcsoport.hu

48

MÁV-csoport is the Hungarian state-owned railway group providing comprehensive passenger transport, infrastructure management, and related services. The website serves as an information and service portal targeting travelers, business partners, and the general public. It offers ticketing, schedules, news, and corporate information, positioning itself as the leading national railway operator in Hungary. The site is well-branded, consistent, and professionally maintained. Technically, the website is built on Drupal CMS with modern JavaScript libraries and responsive design, ensuring good mobile optimization and accessibility. It integrates Google Analytics and Facebook Pixel for analytics and marketing, with a clear cookie consent mechanism compliant with GDPR. Performance is moderate with room for optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though additional security headers and a public security policy could enhance trust. No incident response or vulnerability disclosure information is publicly available. Overall, the site is trustworthy, compliant, and professionally managed, reflecting the stature of a large state enterprise.

S

Stadtmagistrat Innsbruck

innsbruck.at

61

The website www.innsbruck.at serves as the official digital presence for the city of Innsbruck, Austria, encompassing municipal services, tourism promotion, and marketing activities. It targets residents, visitors, and businesses, providing authoritative information and links to related official sites. The business model is governmental and tourism-oriented, positioning itself as a trusted source for local information and services. Technically, the site is built on the Webflow platform, utilizing modern web technologies such as HTML5, CSS3, JavaScript, and jQuery. It integrates Matomo analytics for user tracking, reflecting a privacy-conscious approach. The site demonstrates good mobile optimization and user experience, though accessibility and SEO could be further enhanced. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and a cookie consent mechanism, which are important for GDPR compliance and security hardening. No incident response or security policy information is published, indicating room for improvement in transparency and preparedness. Overall, the website is professional, trustworthy, and well-aligned with its governmental role. Strategic improvements in privacy compliance and security practices would enhance its risk posture and user trust.

S

Sportoló Nemzet

sportolonemzet.hu

62

Sportoló Nemzet is a Hungarian government-supported sports promotion platform launched in 2023. It targets Hungarian sports enthusiasts and club members by offering membership benefits such as discounts on sports facilities, events, and equipment. The website is built on WordPress using Elementor and several popular plugins, reflecting a modern and maintainable technical infrastructure. The site demonstrates good SEO, accessibility, and GDPR compliance with a comprehensive privacy policy and cookie consent mechanism. Security posture is solid with HTTPS and nonce usage, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected. Overall, the platform presents a professional and trustworthy digital presence aligned with its business goals.

D

Debrecen Megyei Jogú Város Önkormányzata

debrecen.hu

62

The website www.debrecen.hu is the official online presence of the Municipality of Debrecen, Hungary. It serves as a comprehensive portal providing information and services for residents, tourists, and business stakeholders. The site offers access to local government services, tourism guides, business investment information, and public announcements, positioning itself as a key digital resource for the city. The target audience includes local citizens, visitors, and investors, reflecting a government service model focused on public administration and community engagement. Technically, the website employs a custom CMS with a technology stack that includes jQuery, jQuery UI, Google Fonts, and lazy loading libraries. It demonstrates good mobile optimization and accessibility features, although SEO optimization is basic. The site loads with moderate performance and uses multiple third-party analytics and marketing tools, all integrated with a clear cookie consent mechanism, indicating a mature digital infrastructure. From a security perspective, the site enforces HTTPS and implements cookie consent in compliance with GDPR. However, it lacks publicly available security policies and incident response contacts, and security headers are not explicitly detected in the provided data. No vulnerabilities or exposed sensitive data were found in the content. The domain registration is consistent with the official municipality, enhancing trustworthiness. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its role as a government portal effectively. Strategic improvements could include publishing security policies, enhancing SEO, and adding incident response information to strengthen security posture and user trust.

M

Magyar Telekom Nyrt.

telekom.hu

63

Magyar Telekom Nyrt. is a leading telecommunications provider in Hungary, offering a wide range of services including mobile telephony, internet, TV, and device sales targeted primarily at residential customers. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to its audience. The company is a subsidiary of Deutsche Telekom AG, reinforcing its strong market position and enterprise scale. Technically, the site employs modern web technologies such as Vue.js and Google Tag Manager, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement and appropriate security headers, though explicit security policy and incident response information are not publicly detailed. Overall, the site demonstrates high trustworthiness and compliance with GDPR and cookie regulations, supporting a positive user experience and business credibility.

W

WESTbahn Management GmbH

westbahn.at

78

WESTbahn Management GmbH operates a professional rail transport service primarily serving Austria and Germany, offering long-distance train services and ticket sales. The website is well-branded and targets passengers seeking affordable and frequent train connections between major cities. The company maintains a consistent market position as an important private rail operator in the region. Technically, the website employs modern web technologies including Google Tag Manager and Cookiebot for consent management, ensuring compliance with privacy regulations. The site is mobile-optimized with good SEO and accessibility features, although some accessibility aspects could be improved. Security posture is strong with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and published security policies. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, though it could enhance transparency by adding privacy and terms of service pages. The domain registration data aligns well with the business, supporting legitimacy and trust.

M

MG Motor Europe

mgmotor.eu

68

MG Motor Europe operates a professional and well-branded website targeting Finnish and broader European markets with a focus on electric and hybrid vehicles. The site offers detailed model information, configurators, test drive requests, and dealer locators, indicating a mature digital presence aligned with automotive industry standards. The technical infrastructure leverages modern web technologies including Google Tag Manager, Imgix CDN, and Swiper.js for UI components, supported by SEOmatic CMS meta generation. Security posture is strong with HTTPS enforced and no visible sensitive data exposure, though security headers and explicit privacy policies are lacking. The absence of direct contact information and incident response details suggests room for improvement in transparency and compliance. Overall, the site is trustworthy and professionally maintained, suitable for its business domain.

D

DKV Debreceni Közlekedési Zrt.

dkv.hu

11

DKV Debreceni Közlekedési Zrt. is the primary public transportation operator in Debrecen, Hungary, providing bus, trolleybus, and tram services. The company offers ticket and pass sales, travel planning, and maintains a strong digital presence with a modern, well-structured website. Their market position is solid as a key local transportation provider serving a broad audience including daily commuters and visitors. The website is professionally designed, mobile-optimized, and integrates essential services such as ticket purchasing and real-time travel information. Technically, the site leverages modern frameworks like React and Next.js, integrates Google Maps API for location services, and uses tracking tools such as Google Analytics and Facebook Pixel with proper consent mechanisms. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers could be improved. Overall, the site reflects a mature digital infrastructure supporting a large transportation business with clear contact information and trust signals. No critical vulnerabilities or suspicious content were detected.

M

MOL Mercarius

mercarius.hu

46

MOL Mercarius is a Hungarian company specializing in vehicle fleet management services, boasting nearly three decades of experience in the transportation sector. The website positions the company as a reliable partner for comprehensive fleet solutions, targeting fleet owners and managers primarily in Hungary. The business model focuses on providing tailored fleet management services, leveraging its established market presence and 100% Hungarian ownership to build trust and credibility. Technically, the website is built on WordPress using the Elementor framework, incorporating modern web technologies such as jQuery and Google Tag Manager for analytics and marketing. The site demonstrates good mobile optimization and moderate performance, with proper SEO and accessibility features, although some accessibility improvements could be made. Security is well addressed with HTTPS enforced and multiple security headers present, indicating a mature security posture. However, the site lacks explicit privacy and terms of service pages, which are critical for GDPR compliance and user trust. Contact information is limited to contact forms without explicit emails or phone numbers, which may hinder direct communication. No incident response or vulnerability disclosure information is provided, representing an area for improvement in security transparency. Overall, MOL Mercarius presents a professional and trustworthy online presence with solid technical and security foundations. Strategic enhancements in privacy compliance, contact transparency, and security communication would further strengthen its digital maturity and user trust.

N

N.S. MÉDIA ÉS VAGYONKEZELŐ Kft.

nemzetisport.hu

10

Nemzeti Sport Online is a leading Hungarian sports news portal operated by N.S. MÉDIA ÉS VAGYONKEZELŐ Kft. The website offers comprehensive sports coverage including football, handball, F1, and other sports, complemented by live sports radio streaming and extensive RSS feeds. The site targets Hungarian sports enthusiasts and maintains a strong market position as a trusted media source. Technically, the site is built on Angular framework with integration of modern analytics and advertising tools such as Google Tag Manager, Hotjar, and Gemius Prism, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and consent management integration, though explicit privacy and cookie policies are not found in the provided content. Overall, the site demonstrates professional design, consistent branding, and high content quality, but could improve privacy compliance and security header implementation.

S

SELECT Sport International

select-sport.com

75

SELECT Sport International operates a professional e-commerce website specializing in sports equipment, including footballs, futsal balls, handballs, sportswear, and training equipment primarily targeting clubs and athletes. The company leverages the Shopify platform to deliver a modern, responsive, and user-friendly online shopping experience. The website demonstrates good content quality, consistent branding, and comprehensive privacy and cookie policies, reflecting a mature digital presence. However, the absence of WHOIS registration data introduces some uncertainty regarding domain ownership transparency. Technically, the site employs modern web technologies including Shopify's Liquid framework, JavaScript ES modules, and integrates third-party analytics and marketing tools such as Google Analytics and Facebook Pixel. The site is hosted on Shopify's CDN infrastructure, ensuring good performance and security. Cookie consent mechanisms are robust, supporting GDPR compliance. Accessibility and SEO optimizations are present but could be enhanced further. From a security perspective, the website enforces HTTPS with strong SSL configuration and includes standard security headers, although explicit security policies and incident response contacts are not published. No vulnerabilities or exposed sensitive data were detected. The overall security posture is solid but could benefit from additional transparency and documentation. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include publishing explicit security and incident response policies, improving accessibility compliance, and addressing the WHOIS data gap to enhance trust and transparency.

A

ADMIRAL Sportwetten

admiral.at

69

ADMIRAL Sportwetten operates an online sports betting platform primarily targeting German-speaking users in Austria. The website offers sports betting services with a focus on providing competitive odds. The business model revolves around online gambling, catering to mature audiences interested in sports wagering. The site branding is consistent and the content is relevant to its target market, though the content quality is basic with limited visible business contact information or policy disclosures. Technically, the website employs modern front-end technologies including Bootstrap and OverlayScrollbars, ensuring a responsive and moderately optimized user experience. However, the absence of visible security headers and privacy-related policies indicates gaps in security and compliance maturity. No advanced analytics or advertising technologies were detected, suggesting minimal tracking or marketing integrations. From a security perspective, the site lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. The WHOIS data aligns well with the business claims, showing consistent registration details and domain age appropriate for the business. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the website demonstrates a functional but basic digital presence with room for improvement in privacy compliance, security posture, and transparency. Strategic enhancements in these areas would strengthen trust and regulatory adherence.

A

Adolf Würth GmbH & Co. KG

wuerth.de

67

Adolf Würth GmbH & Co. KG operates a professional and comprehensive website focused on assembly and fastening technology products for industrial and craft users. The company is positioned as a leading manufacturer and supplier in its sector, offering over 100,000 products including screws, dowels, tools, and safety equipment. The website targets professional users such as workshops, construction sites, and various tradespeople. Technically, the site uses a modern CMS (FirstSpirit), Bootstrap framework, and integrates Visual Website Optimizer for analytics and A/B testing. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enabled and no visible vulnerabilities, but lacks explicit security headers and incident response information. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but could improve transparency and compliance aspects.

The website at gorenje.com is currently inaccessible due to a 403 Forbidden error caused by an SSL handshake failure with the remote server. This indicates that the site is likely behind a Cloudflare proxy or WAF that is blocking access. Consequently, no business content, metadata, or contact information is available for analysis. The domain is well-established, created in 1997, and registered through a reputable registrar without privacy protection, suggesting legitimacy. However, the lack of DNSSEC and the SSL issues represent security weaknesses. Overall, the site’s digital maturity and security posture cannot be fully assessed due to the blocked content, resulting in a low AI score and limited insights.

E

Engelbert Strauss GmbH & Co. KG

engelbert-strauss.com

77

Engelbert Strauss GmbH & Co. KG operates the www.strauss.com website, a leading European retailer specializing in high-performance workwear and safety shoes targeted at tradespeople and farmers. The website is professionally designed with a strong international presence, supporting multiple languages and leveraging modern web technologies and CDN hosting for optimal performance. Privacy and cookie policies are comprehensive and GDPR compliant, although direct contact details are primarily available via contact forms rather than explicit emails or phone numbers. The absence of WHOIS data for the domain is a notable anomaly that requires further verification to confirm domain legitimacy. Security posture is strong with HTTPS enforcement and security headers, but the site lacks explicit security policies or incident response information.

Grundfos Holding A/S is a global leader in water pump manufacturing and water technology solutions, serving industrial, commercial, and residential markets worldwide. The company emphasizes sustainability and innovation in water management. The website reflects a mature digital presence with extensive use of Adobe Experience Manager, Microsoft Azure hosting, and multiple integrated marketing and analytics tools. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although no explicit vulnerability disclosure or incident response contacts were found. Overall, the site is professional, trustworthy, and compliant with GDPR and privacy standards.

S

Schweizerischer Handball-Verband (SHV)

handball.ch

65

The Schweizerischer Handball-Verband (SHV) operates as the national governing body and competence center for handball in Switzerland. The website serves as an information hub for players, clubs, fans, and stakeholders, providing match schedules, league data, player profiles, and event information. The organization holds a strong market position as the official federation for handball in Switzerland, focusing on sport governance and promotion. Technically, the website is built on the Umbraco CMS platform, leveraging modern JavaScript libraries and integrations such as Google Tag Manager, HubSpot, and Cookiebot for analytics and compliance. The site demonstrates good digital maturity with responsive design and SEO optimization. Security posture is solid with HTTPS enforcement, security headers, and anti-CSRF protections, although explicit security and incident response policies are not publicly detailed. Privacy compliance is well addressed through a comprehensive privacy policy and cookie consent mechanism. Overall, the website is professional, trustworthy, and aligned with the organization's mission.

M

Magyar Kézilabda Szövetség

mksz.hu

58

The Magyar Kézilabda Szövetség website serves as the official digital presence of the Hungarian Handball Federation, providing comprehensive information about handball activities, news, competitions, and organizational details in Hungary. It targets handball players, fans, sports professionals, and the broader Hungarian sports community. The site is well-positioned as a national governing body with authoritative content and strong brand consistency. Technically, the website employs modern web technologies including Vue.js, jQuery, and various analytics tools such as Microsoft Clarity, Google Analytics, Hotjar, and Facebook Pixel. The site is mobile-optimized with good performance and SEO practices, although accessibility features could be enhanced. Hosting details are not explicitly identified but the site uses HTTPS with strong security headers. From a security perspective, the site demonstrates good practices with enforced HTTPS, cookie consent mechanisms, and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policies, incident response information, and vulnerability disclosure mechanisms, which could be improved to enhance trust and compliance. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. It effectively supports the federation's mission and provides a positive user experience. Strategic recommendations include publishing security and incident response policies, adding terms of service, and enhancing accessibility compliance.

Ö

Österreichischer Handballbund

oehb.at

57

The Österreichischer Handballbund operates as the official Austrian Handball Federation, providing governance, promotion, and organization of handball activities within Austria. The website serves as an information hub for players, fans, and clubs, offering news, event details, and resources related to handball. It holds a strong national position as the authoritative body for the sport in Austria. Technically, the website employs a modern technology stack including jQuery, Owl Carousel, Font Awesome, and a proprietary CMS by Internetkonzepte.at. It integrates Google Analytics and Google Tag Manager for analytics, alongside Adition for advertising and Cookiebot for GDPR-compliant cookie consent management. The site is mobile-optimized with moderate performance and good SEO practices. From a security perspective, the site enforces HTTPS, uses standard security headers, and implements a comprehensive cookie consent mechanism aligned with GDPR. However, it lacks publicly available security policies or incident response contacts, which could be improved to enhance trust and compliance. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its audience effectively. Strategic improvements in security transparency and accessibility could further strengthen its posture.

E

European Handball Federation (EHF)

ehftv.com

66

EHFTV.com is the official streaming platform of the European Handball Federation, providing live and on-demand handball competition content to fans worldwide. The platform offers a subscription-based model with free registration, enabling personalized fan experiences. It holds a strong market position as the primary digital destination for EHF competitions, supported by consistent branding and comprehensive content offerings. Technically, the site leverages modern web technologies including Next.js, cloud CDN services, and integrates multiple analytics and marketing tools while maintaining good performance and mobile responsiveness. Security posture is solid with HTTPS enforcement and domain transfer protection, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Privacy compliance is robust, with comprehensive policies and cookie consent mechanisms implemented via Iubenda. Overall, EHFTV.com demonstrates a mature digital presence with high trustworthiness and professional execution.

E

European Handball Federation

eurohandball.com

51

The European Handball Federation (EHF) operates a comprehensive and professionally designed website serving as the central hub for European handball competitions, news, media, and fan engagement. The site offers extensive information on club and national team competitions, development programs, and services such as media accreditation and ticketing. The EHF positions itself as the authoritative body for handball in Europe with a strong digital presence and multiple linked domains supporting its ecosystem. Technically, the website employs modern JavaScript frameworks including Vue.js, integrates advanced analytics tools like Segment and Google Tag Manager, and uses a robust cookie consent mechanism via Iubenda, ensuring GDPR compliance. The site is mobile-optimized, accessible, and SEO-friendly, providing a positive user experience. From a security perspective, the site enforces HTTPS and implements cookie consent with per-purpose control, though explicit security headers could be more visible. No vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data for the domain is a notable anomaly that slightly impacts trustworthiness, though the professional nature of the site mitigates concerns. Overall, the EHF website demonstrates a mature digital infrastructure with strong content quality and privacy compliance. The main risk lies in the missing WHOIS data, which should be monitored. Strategic recommendations include enhancing security header implementation, improving contact information visibility, and regular audits of third-party scripts to maintain security posture.

S

SPÖ Wien

donauinselfest.at

58

Donauinselfest.at is the official website for the Donauinselfest, a large free music festival organized by SPÖ Wien in Vienna, Austria. The site serves as an information and promotional platform for the event, showcasing partners, sponsors, and providing news and contact options. The business operates as a non-profit event organizer with strong local government and corporate partnerships, positioning itself as a major cultural event in the region. The website is well-branded, consistent, and targets a broad general audience interested in music and community events. Technically, the website is built on WordPress with Bootstrap and jQuery frameworks, integrating modern web technologies including FontAwesome icons, Google APIs, and Matomo analytics for user tracking. The site includes a cookie consent mechanism compliant with GDPR, and uses CAPTCHA for form submissions, indicating a moderate level of digital maturity and privacy awareness. Performance and mobile optimization are good, though some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and employs a cookie consent banner with granular options. While explicit security headers are not fully confirmed, no critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's claims, showing transparency and legitimacy. No incident response or security policy pages were found, which could be an area for improvement. Overall, the website presents a professional and trustworthy front for the Donauinselfest event, with good privacy compliance and a solid technical foundation. Strategic recommendations include enhancing security headers, adding explicit security policies, and improving accessibility to further strengthen the site's security posture and user experience.

L

Look!

looklive.at

52

Look! is a German-language online media platform specializing in fashion, beauty, lifestyle, and related content primarily targeting German-speaking audiences in Austria. The website offers a variety of articles, news, and features across multiple lifestyle categories, supported by advertising revenue. The platform uses WordPress CMS with a professional Newspaper theme and integrates advertising and cookie consent plugins to manage monetization and privacy compliance. Technically, the site employs modern web technologies including jQuery, Google Fonts, and Google Tag Manager, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and some security plugins detected, though security headers could be improved. Privacy compliance is partial, with cookie consent present but no explicit privacy policy or terms of service found in the analyzed content. Contact information is not clearly provided, which may affect user trust. Overall, the site represents a small media outlet with consistent branding and good content quality but could enhance transparency and security practices.

Freiner Fisch is a small Austrian company specializing in organic fish farming, retail, and hospitality services centered around the first organic fishing pond in Austria. Their business model combines direct consumer sales, recreational fishing, and on-site dining experiences. The company is well-positioned in a niche market with a focus on natural and organic products. Technically, the website is built on WordPress with WooCommerce and uses modern plugins and SEO tools, providing a good user experience and mobile optimization. Security measures include HTTPS and Google reCAPTCHA, but the absence of security headers and formal privacy policies indicates room for improvement. Overall, the website is professional and trustworthy, though privacy compliance and security posture could be enhanced.

V

VORmagazin

vormagazin.at

10

VORmagazin is a small Austrian media outlet specializing in culture, lifestyle, city life, travel, and contests. The website serves a general audience interested in these topics, primarily within Austria. It operates on a WordPress platform with a moderate technical infrastructure, leveraging popular plugins for SEO, advertising, and user engagement. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enabled and some security plugins in place, but lacks explicit security headers and formal security policies. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy or terms of service pages. Overall, the website is legitimate and consistent with its business claims, with a moderate risk profile and room for improvement in privacy and security transparency.

L

liverelations gmbh

liverelations.at

48

liverelations gmbh operates a German-language website focused on corporate magazines and event organization, targeting corporate clients primarily in Austria. The website is built on WordPress using the Enfold theme and integrates modern web technologies such as Google Fonts, YouTube embeds, and Google reCAPTCHA for bot protection. While the site is functional and moderately optimized for mobile, it lacks explicit privacy and cookie policy pages, though a cookie consent mechanism is present. Security posture is adequate with HTTPS enforced and reCAPTCHA implemented, but missing security headers and absence of a published security policy reduce overall security maturity. No contact emails or phone numbers are directly visible on the homepage, which may impact user trust and compliance. Overall, the site is a small media business with basic digital maturity and moderate security and privacy compliance.

W

Werbehelden GmbH

werbehelden.com

55

Werbehelden GmbH is a small Austrian marketing agency specializing in below-the-line marketing, ambient media, promotions, and sampling campaigns. The company offers comprehensive 360-degree promotional services including concept creation, planning, execution, and documentation. Their market position is that of an established regional player with award-winning campaigns and a strong focus on experiential marketing. The website is professionally designed, mobile-optimized, and provides clear navigation and rich content in German targeting business clients seeking direct marketing solutions. Technically, the site uses modern JavaScript libraries, Matomo and Google Analytics for tracking, and implements a detailed cookie consent mechanism with GDPR compliance. Security posture is good with HTTPS enforced and privacy-conscious analytics configurations, but lacks some HTTP security headers and a published security policy or incident response contacts. The WHOIS data is missing or inaccessible, which raises concerns about domain registration legitimacy despite the active and professional website presence. Overall, the site scores well on content quality, technical implementation, and privacy compliance but is slightly penalized for WHOIS inconsistencies and minor security header omissions.

R

Red Carpet Event & Gastro GmbH

redcarpet-event.at

10

Red Carpet Event & Gastro GmbH is a small hospitality company based in Austria specializing in exclusive event catering and event management services primarily in Vienna. The company offers tailored event experiences including gala events, Oktoberfest-style festivals, corporate and private celebrations, and catering services. Their market position is that of a niche provider focusing on high-quality, bespoke event gastronomy. The website is built on WordPress with modern technologies such as LiteSpeed caching and jQuery, providing a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and explicit incident response policies are absent. Privacy compliance is partially met with a privacy and cookie policy present but lacking a consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with the business model.

W

Wiener Kaiserwiesn

kaiserwiesn.at

58

Wiener Kaiserwiesn is a well-established event organizer hosting the annual Oktoberfest-style festival in Vienna, Austria. The website provides comprehensive information about the event, including schedules, ticket sales, partner acknowledgments, and multimedia content. The business targets local and international visitors interested in traditional and party music festivals. Technically, the website is built on WordPress with a modern theme and plugins, supporting multilingual content and SEO best practices. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies are absent. Overall, the site is professional, trustworthy, and well-maintained, supporting a medium-sized hospitality business.

R

RunCzech s.r.o.

runczech.com

62

RunCzech s.r.o. operates as the largest organizer of running events in the Czech Republic, including the Prague International Marathon and Prague Half Marathon. The company targets runners and running enthusiasts, providing event organization, registration, and results services. The website is professionally designed, mobile-optimized, and rich in relevant content, reflecting a mature digital presence. Technically, the site is built on WordPress with modern plugins and tracking tools, ensuring good SEO and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response information are lacking. The absence of WHOIS registration data is a concern for domain legitimacy verification but is mitigated by the professional site and consistent branding. Overall, the site demonstrates a strong business and technical foundation with room for improvement in security transparency and contact information availability.

1

1blu GmbH

1blu.de

58

1blu GmbH operates a professional web hosting and server services platform primarily targeting business and professional customers in Germany. Their offerings include web hosting packages, VPS, dedicated servers, domain registration, and a website builder. The company emphasizes performance with NVMe SSD technology and managed hosting options. The website is well-structured, professionally designed, and provides clear pricing and service information. Technical infrastructure appears modern with use of Bootstrap and JavaScript frameworks, hosted in their own German data center in Frankfurt/Main. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacks published security policies or incident response contacts. Overall, the site is trustworthy and compliant with GDPR, with transparent business operations and no suspicious indicators.

Fenster zum Sonntag Talk is a Swiss Christian media website focused on TV talk shows broadcast on SRF channels. It provides viewers with insights into personal life stories and the role of faith. The site is professionally designed using WordPress and modern web technologies, with a consistent brand presence and good content quality. The technical infrastructure includes multiple analytics platforms and a cookie consent mechanism, reflecting a mature digital presence. Security posture is strong with HTTPS enforcement and security headers, though some compliance areas like terms of service and incident response policies could be improved. Overall, the site is trustworthy and well-maintained, serving a general audience interested in religious and social topics.

E

ERF Medien

lifechannel.ch

56

Life Channel is a Swiss-based Christian media broadcaster offering 24/7 radio programming, podcasts, music streaming, and news content focused on faith and constructive journalism. The website is professionally designed with consistent branding and targets German-speaking Christian audiences. Technically, it is built on WordPress with modern libraries and frameworks such as UIkit and JW Player, and integrates multiple analytics platforms including Matomo, Plausible, Google Tag Manager, and Facebook Pixel. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though advanced security headers and explicit security policies are absent. Overall, the site demonstrates good compliance with GDPR and provides clear privacy and cookie policies. The domain registration data aligns well with the website's claims, supporting legitimacy.

E

ERF Medien

radio-erf-plus.ch

51

ERF Medien Schweiz operates Radio ERF Plus, a Christian 24-hour radio station providing inspirational content for listeners in Switzerland. The website serves as a platform to promote the radio service, offer downloadable programming, newsletters, and facilitate donations to support broadcasting costs. The organization positions itself as a niche media provider focused on faith-based content with a clear target audience of Christian listeners. The business model is non-profit, relying on donations and community support. Technically, the website is built on WordPress with modern libraries and analytics tools, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS, cookie consent, and multiple tracking protections, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR regulations, reflecting a mature digital presence for a small media entity.

Tagstream is a German-language technology service provider specializing in digital channel acceleration and digital transformation for businesses. Their offerings focus on process management, business integration, and measurable marketing and sales results. The website is built on WordPress with common plugins and integrates marketing tools such as Mailchimp and Payrexx for payments. The site is professionally designed, mobile-optimized, and includes GDPR-compliant privacy and cookie policies. However, no direct company contact emails or phone numbers are provided, only a contact form. The WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy despite the active and professional website presence. Security posture is moderate with HTTPS enabled but lacks security headers and published security policies. Overall, the site is functional and trustworthy for business visitors but would benefit from improved transparency and security practices.

alixon gmbh is a Swiss-based small IT solutions company specializing in software and internet services such as address management, reservation systems, cloud solutions, and web hosting. Established in 2000, it serves primarily local businesses and organizations with a focus on personalized consulting and tailored software solutions. The website reflects a professional and consistent brand image with clear contact information and product offerings. Technically, the site uses Ext JS framework and a custom CMS, with moderate performance and basic mobile optimization. Security posture is moderate but lacks advanced security headers and published privacy or cookie policies, which are compliance gaps. Remote support is offered via AnyDesk, enhancing customer service capabilities. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

M

Meinplatz

meinplatz.ch

36

Meinplatz.ch is an online platform dedicated to providing current offers in housing, work, and day structure for adult people with disabilities in Switzerland. It serves as a centralized resource for institutions offering these services and includes information about advisory centers for personalized support. The platform targets a niche audience within the disability support sector and positions itself as a trusted resource in this domain. Technically, the website leverages modern web technologies such as SvelteKit, Google Fonts, and Google Tag Manager, ensuring a responsive and accessible user experience. Security measures include HTTPS enforcement and standard security headers, contributing to a good security posture. However, the absence of visible privacy and cookie policies, as well as lack of explicit contact information, indicates compliance gaps that should be addressed to enhance trust and regulatory adherence. Overall, the website is professional and functional but would benefit from improved privacy compliance and clearer contact channels.