Austria security reports

U

U-B-C

u-b-c.at

58

U-B-C is an Austrian company specializing in cashless payment solutions and customer loyalty programs, partnering with major local providers such as card complete and cards 4 more. The website is built on Joomla CMS with a modern responsive design using Bootstrap 3 and T3 framework, offering a professional user experience targeted at business clients in Austria. Security posture is adequate with HTTPS enforced and cookie consent implemented, though lacking explicit security policies and incident response contacts. No suspicious or adult content is present, and the domain registration aligns well with the business claims, indicating legitimacy. Overall, the site is well-structured and trustworthy, though improvements in security headers and transparency could enhance compliance and trust.

P

PayLife

paylife.at

72

PayLife is a financial services company specializing in credit cards for private and business customers in Austria. The website showcases a broad portfolio of credit card products including Black, Platinum, GoldPlus, Classic, and student cards, along with prepaid cards and insurance offerings. The company is positioned as a premium provider with strong ties to the Bawag Group, a major Austrian banking group. The site emphasizes security awareness, including active phishing warnings and advice, reflecting a commitment to customer protection. Technically, the website is built on CoreMedia CMS and integrates modern tracking and consent management tools such as Google Tag Manager, Adobe Launch, and Cookiefirst. The site is well-optimized for mobile and accessibility, with a professional design and clear navigation. Security posture is strong with HTTPS and Content-Security-Policy headers, though additional headers could enhance protection. WHOIS data is unavailable due to NIC.AT restrictions, but the website's professional presentation and linkage to known parent companies support its legitimacy. Overall, PayLife's digital presence reflects a mature, secure, and customer-focused financial service provider.

H

hobex Payment Systems

hobex.at

66

hobex Payment Systems is a medium-sized Austrian company specializing in payment processing solutions, targeting businesses that require reliable payment systems. The website is built on WordPress using the Divi theme and integrates Matomo and LinkedIn Insight for analytics and marketing purposes. The technical infrastructure appears modern and moderately optimized for performance and mobile use. Security posture is moderate due to lack of visible security headers and unknown SSL configuration. Privacy compliance is minimal with no explicit privacy or cookie policies detected. The absence of WHOIS data limits domain trust analysis but the website content and structure suggest a legitimate business. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and cookie policies, and improving transparency with contact and incident response information.

C

Connex Marketing GmbH

connexgroup.net

55

Connex Marketing GmbH operates as a specialist provider of sales promotion, customer loyalty, and employee motivation solutions primarily targeting businesses in the German-speaking market, particularly Austria. Their offerings include voucher solutions, promotion systems, loyalty programs, and data generation services. The company maintains a professional online presence with consistent branding and clear navigation, supported by social media channels and integrated marketing tools. Technically, the website employs modern web technologies such as Bootstrap, Google Tag Manager, and Cookiebot for consent management, ensuring a moderate to good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit security policies. The absence of WHOIS registration data raises concerns about domain legitimacy, but the website content and business information appear credible and professional. Overall, the site is safe for general audiences and compliant with GDPR requirements through detailed cookie consent mechanisms.

C

card complete Service Bank AG

cardcomplete.at

66

card complete Service Bank AG is a leading Austrian financial services provider specializing in credit and prepaid card solutions for private and corporate customers. The company offers a comprehensive suite of payment products including card issuance, acceptance devices, and processing systems, positioning itself as a full-service payment solutions provider in Austria. The website reflects a mature digital presence with clear branding, extensive customer support options, and a focus on secure and convenient payment management through their complete Control app and customer portal. Technically, the website employs modern JavaScript libraries and integrates third-party services such as Google Tag Manager and Cookiebot for analytics and consent management. The site is mobile-optimized, accessible, and uses HTTPS to secure communications. However, explicit security headers are not evident in the HTML, and no public security policy or vulnerability disclosure program is found, indicating areas for security maturity improvement. From a security posture perspective, the site demonstrates good practices including secure login portals and cookie consent mechanisms, but lacks published incident response contacts and security certifications. The absence of WHOIS data reduces transparency but does not detract significantly from the overall legitimacy given the professional presentation and business information consistency. Overall, card complete presents a trustworthy and professional online presence suitable for its financial services market, with recommendations to enhance security headers, publish security policies, and improve WHOIS transparency to further strengthen trust and compliance.

M

Meteored

daswetter.at

66

Daswetter.at is a weather forecasting website focused primarily on Austria, providing 14-day weather forecasts, weather warnings, radar and satellite imagery, and weather-related news and videos. It is part of the Meteored network, which has a broader international presence. The site offers free access supported by advertising and provides mobile applications across major platforms including Android, iOS, Huawei, and Windows. The website is professionally designed with consistent branding and good content quality aimed at the general public interested in weather information. Technically, the website uses modern JavaScript frameworks and libraries such as Leaflet for maps, Google Tag Manager for analytics, and Prebid.js for header bidding advertising. It employs a consent management platform to comply with GDPR and uses HTTPS with strong SSL configuration. Performance is moderate with good mobile optimization and basic accessibility features. Security posture is strong with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The site implements GDPR-compliant cookie consent and privacy policies, although explicit security policies and incident response contacts are not found. The lack of WHOIS data suggests privacy protection, which is common and justified for this type of media service. Overall, the website is trustworthy, professional, and compliant with privacy regulations, with recommendations to enhance visible security headers, accessibility, and add vulnerability disclosure mechanisms for improved security maturity.

I

Irfan Skiljan

irfanview.info

49

IrfanView is a well-established freeware graphic viewer software primarily targeting Windows users worldwide. The website presents the software as fast, compact, and supporting multiple Windows versions with multi-language and Unicode support. The business model is freeware distribution with optional donations and support registrations. The site is small-scale, run by the author Irfan Skiljan, and hosted by domainunion in Austria. Technically, the website uses basic HTML, CSS, and JavaScript with no advanced frameworks or CMS detected. The hosting provider is domainunion, and the site performance is moderate with basic mobile optimization and accessibility. Security posture is moderate; no HTTPS status or security headers were confirmed from the data, and no forms collect sensitive data. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Contact information is limited to a generic email address. Overall, the site is trustworthy and professional but could improve security and privacy features.

I

Irfan Skiljan

irfanview.net

47

IrfanView.net is the official homepage for IrfanView, a widely recognized and popular freeware graphic viewer software primarily targeting Windows users. The website offers downloads for multiple versions of the software, including 32-bit, 64-bit, and ARM64, along with plugins, skins, and language packs. The business model is freeware for non-commercial use with options for donations and support registrations. The site is maintained by the author Irfan Skiljan, with a long domain history dating back to 2004, reinforcing its established market presence. Technically, the website is a straightforward static site using basic HTML, CSS, and JavaScript without modern frameworks or CMS. It is hosted by Hetzner Online GmbH, a reputable German hosting provider. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS but lacks DNSSEC and security headers such as CSP or HSTS. There is no visible cookie consent mechanism or detailed privacy compliance beyond a basic privacy policy. No incident response or vulnerability disclosure information is provided. The WHOIS data is consistent with the website claims, showing a legitimate and long-standing domain registration. Overall, the website is trustworthy, professional, and safe for general audiences. However, improvements in security headers, privacy compliance, and transparency about data protection and incident response would enhance its security posture and user trust.

M

meetnlearn s.r.o.

meetnlearn.at

60

meetnlearn s.r.o. operates an established online platform focused on connecting students with private tutors for individual and online tutoring sessions primarily in Austria. The website offers comprehensive services including tutor search, homework help, and flexible scheduling for both in-person and remote learning. The platform targets students and tutors, emphasizing verified profiles and user reviews to build trust. The company is positioned as a medium-sized player in the education sector with a strong regional presence and partnerships with notable organizations such as Wayra, the European Union, and Telefónica. Technically, the website employs modern web technologies including Bootstrap, React components, Google Tag Manager, and Facebook SDK for analytics and marketing. The site is mobile-optimized, accessible, and SEO-friendly, providing a smooth user experience. Security is well-handled with HTTPS enforced and a cookie consent mechanism in place, although some security headers and incident response information are not publicly disclosed. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is good, with a comprehensive privacy policy and cookie consent aligned with GDPR requirements. However, the lack of WHOIS data limits domain trust verification, slightly impacting the overall credibility score. The website content is safe, family-friendly, and focused on education without any adult or questionable material. Overall, meetnlearn.at presents a professional, trustworthy, and user-friendly platform with room for improvement in transparency around security policies and domain registration details. Strategic recommendations include enhancing security headers, publishing incident response contacts, and verifying domain registration information to strengthen trust and compliance.

I

Irfan Skiljan

irfanview.com

47

IrfanView is a well-established freeware graphic viewer software primarily targeting Windows users. The website serves as the official homepage offering downloads, information, and support for the software. It positions itself as one of the most popular image viewers worldwide with a focus on simplicity, speed, and multi-language support. The business model is freeware for non-commercial use with options for donations and support. The website content is professionally presented with clear navigation and relevant partner links, targeting a general audience interested in image viewing and editing tools. Technically, the website uses standard HTML, CSS, and JavaScript without advanced frameworks or CMS. Hosting is provided by domainunion.de, and the site offers multiple download mirrors. The site is moderately optimized for performance and mobile devices but lacks advanced accessibility features. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site lacks visible security headers and cookie consent mechanisms. The WHOIS data is missing, which raises concerns about domain registration legitimacy despite the website's apparent long history and professional presentation. No forms collect sensitive data, reducing immediate risk, but the absence of HTTPS verification and security policies is a gap. Overall, the security posture is moderate but could be improved with standard best practices. The overall risk is moderate with recommendations to improve domain registration transparency, implement HTTPS and security headers, add privacy and cookie policies, and publish security incident response information. These steps would enhance trust and compliance, aligning the site with modern security and privacy standards.

E

European Association of Independent Performing Arts

eaipa.eu

50

The European Association of Independent Performing Arts (EAIPA) is a small, pan-European umbrella organization founded in 2018 that represents independent performing arts groups and professionals across 17 countries. It operates primarily as a B2B membership association advocating for the sector, providing policy input, and raising visibility for independent performing arts communities. The website is built on WordPress using Elementor and integrates GDPR compliance tools such as Complianz and Mailjet for marketing. The technical infrastructure is modern and adequate, with good mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response policies are not publicly available. Overall, the site is professional, trustworthy, and compliant with European privacy regulations.

E

ERSTE Foundation

erstestiftung.org

74

ERSTE Foundation is a non-profit organization based in Vienna, Austria, focusing on financial health, democratic values, cultural initiatives, and social finance. The foundation supports a variety of projects including financial education, social finance ventures, cultural collections, and democracy-related policy initiatives. Their market position is that of a well-established regional foundation with a strong presence in Central and Eastern Europe. The website reflects a professional and consistent brand image with clear navigation and comprehensive content tailored to a general audience interested in social impact and education. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Matomo Analytics, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance. The use of privacy-respecting analytics and a detailed cookie consent mechanism demonstrates a commitment to GDPR compliance and user privacy. From a security perspective, the site enforces HTTPS and employs cookie consent best practices. However, it lacks visible security headers and a dedicated security or incident response policy page. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is typical for non-profit organizations, and does not raise suspicion. Overall, ERSTE Foundation's website presents a trustworthy, professional, and privacy-conscious digital presence. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and compliance.

B

BfG Eigentümer/-innen- und Verwaltungsgenossenschaft eG

gemeinwohl.coop

61

The website 'Genossenschaft für Gemeinwohl' represents a cooperative organization based in Austria focused on reforming the financial system towards social good. Founded in 2018, it is one of the largest new cooperatives in Austria by membership. The site provides information about their mission and cooperative model but lacks explicit privacy and cookie policies. Technically, the site uses modern web technologies and Cloudflare DNS services, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS and domain transfer protections but could be improved by enabling DNSSEC and adding security headers. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security disclosures.

The website gemeinwohlprojekte.at operates as a crowdfunding platform dedicated to financing projects that promote the common good, including sustainable development, social initiatives, and ecological projects primarily in Austria. It offers services such as project submission, support, and verification, targeting individuals and organizations interested in social impact investments. The platform is built on TYPO3 CMS and integrates Piwik/Matomo analytics with privacy-conscious settings. The site features secure login and registration forms with password encryption and provides clear privacy and cookie policies compliant with GDPR. Social media presence is established on Facebook, YouTube, and Twitter, enhancing community engagement. However, the absence of WHOIS data for the domain raises some concerns about domain registration transparency.

D

Display Europe

displayeurope.eu

61

Display Europe is a European media platform that aggregates news and media content from various European sources, targeting media professionals, researchers, and the general public interested in European affairs. The platform offers search and filtering capabilities to access a wide range of media articles from partner sources. Technically, the website is built using modern web technologies including React and Next.js, with Apollo GraphQL for data management and Matomo for analytics. The site demonstrates good digital maturity with responsive design and moderate performance. Security-wise, the site enforces HTTPS, includes essential security headers, and avoids exposing sensitive data. However, it lacks a cookie consent mechanism and explicit security or incident response policies, which are areas for improvement. Overall, the website is trustworthy and professionally maintained, with a strong European identity and co-funding from the European Union.

F

fairkom

fairkom.net

65

fairkom is a small Austrian technology company specializing in open source based IT solutions, including consulting, cloud hosting, videoconferencing, chat platforms, and identity management. The company emphasizes GDPR compliance, green hosting, and sustainable digital communication. Their market position is supported by over 20 years of experience and partnerships with public institutions and NGOs. The website reflects a mature digital presence with a modern Drupal 10 CMS, privacy-respecting analytics, and a clear focus on open source technologies. Security posture is good with HTTPS and privacy measures, though explicit security policies and vulnerability disclosure mechanisms are absent. Overall, fairkom presents a trustworthy and professional business with a strong commitment to privacy and sustainability.

F

fairkom

fairkom.eu

65

fairkom is a small Austrian technology company specializing in open source based IT solutions, including consulting, cloud hosting, videoconferencing, chat platforms, and identity management. The company emphasizes GDPR compliance, ecological hosting, and fair digital communication. Their market position is solid with over 20 years of experience and trusted partnerships with public institutions and NGOs. The website is professionally designed, content-rich, and well-structured, targeting private users, organizations, and public sector clients. Technically, the site uses Drupal 10 CMS, modern open source tools, and privacy-respecting Matomo analytics without cookies. Security posture is good with HTTPS and privacy best practices, though explicit security policies and incident response information are missing. Overall, the website is trustworthy, compliant, and technically sound.

M

Mary’s Meals – Schulernährung für hungernde Kinder

marysmeals.at

70

Mary's Meals Österreich is a non-profit organization dedicated to providing daily school meals to children in impoverished regions, thereby enabling education and combating hunger. The website is professionally designed using WordPress with a focus on donations and volunteer engagement. It features a donation slider, news updates, and multimedia content to engage supporters. Technically, the site uses modern plugins and frameworks, hosted likely on Raidboxes, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and no exposed sensitive data, though it lacks some security headers and explicit privacy policies. Overall, the domain registration and hosting details align well with the organization's identity, indicating legitimacy and trustworthiness. Strategic improvements include adding comprehensive privacy and terms policies and enhancing security headers to strengthen compliance and security.

M

Moshbit GmbH

moshbit.com

11

Moshbit GmbH operates a professional website offering Controlling as a Service, primarily targeting tech-oriented startups and small to medium-sized enterprises (KMUs) in Austria and German-speaking markets. Their key services include financial planning, forecasting, dashboards, KPI tracking, investment calculations, and strategic consulting. The company presents itself as a niche service provider with a focus on efficient and tailored financial controlling solutions, leveraging their proprietary CoreControlling® tool. The website is well-branded, consistent, and provides clear service descriptions and team information, enhancing business credibility. Technically, the website uses modern frontend technologies such as Tailwind CSS and Alpine.js, with assets hosted on Amazon S3, indicating a modern and scalable infrastructure. The site is mobile-optimized, fast-loading, and accessible, with good SEO practices. However, some security best practices like DNSSEC and security headers are not implemented, representing minor improvement areas. From a security perspective, the site enforces HTTPS and has domain transfer protections, but lacks published security policies, incident response contacts, and vulnerability disclosure mechanisms. Privacy compliance is partially met with a privacy policy present, but no cookie consent mechanism is detected. Contact information is primarily via a web form, with no direct emails or phone numbers listed. Social media presence is limited to LinkedIn profiles of key team members. Overall, the website is professional, trustworthy, and well-suited for its target audience, but could enhance security posture and privacy compliance by implementing additional security headers, DNSSEC, cookie consent, and incident response disclosures.

S

Sulu GmbH

sulu.io

47

Sulu GmbH operates a leading open-source PHP CMS platform built on the Symfony framework, targeting enterprise projects and developers. The company offers a robust content management system with multisite and multilingual capabilities, supported by professional consulting, training, and development services. The website reflects a mature business with consistent branding and a clear value proposition for developers, marketers, agencies, and content teams. Technically, the site is well-implemented with modern technologies, fast performance, and good mobile optimization. Security posture is solid with HTTPS and secure domain registration, though improvements are recommended in security headers and published policies. Overall, the site is professional, trustworthy, and well-positioned in the technology CMS market.

S

Studo GmbH

studoflow.com

78

Studo GmbH is a European software company specializing in digital solutions for higher education institutions. Their flagship product, Studo Flow, is a SaaS platform designed to help universities digitize and simplify administrative processes through modular, configurable software components. The company targets small and emerging higher education institutions, offering a user-friendly and integrable platform that supports various administrative needs. Their market position is strong as a pioneer in European higher education SaaS solutions, supported by EU and Austrian funding agencies. Technically, the website is well-constructed with modern web technologies, including Cloudflare DNS and CDN services, and uses Piwik PRO for privacy-conscious analytics. The site is mobile-optimized, fast-loading, and SEO-friendly, reflecting a mature digital infrastructure. However, some security best practices such as DNSSEC and explicit security headers could be improved. From a security perspective, the company demonstrates a solid posture with HTTPS enforcement, GDPR compliance, and support for modern authorization frameworks like OAuth, SAML, and LDAP. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a cookie consent mechanism and explicit incident response contacts are areas for enhancement. Overall, the website and company present a trustworthy and professional image with a high level of business credibility and technical maturity. Strategic improvements in security headers, DNSSEC, and privacy mechanisms would further strengthen their security and compliance stance.

S

Somfy

somfy.at

71

Somfy is a well-established company specializing in motorized shading solutions and smart home automation products. The website www.somfy.at serves the Austrian market with a comprehensive product catalog, e-commerce integration, and extensive customer support resources. The company targets private customers, professional partners, and technical planners, positioning itself as a leader in smart home technology and automation. The site is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the website employs modern web technologies including responsive images, SVG icons, JSON-LD structured data, and uses Akamai CDN for performance optimization. The platform appears custom-built with a focus on user experience and SEO best practices. Security measures such as HTTPS, security headers, and privacy compliance mechanisms are well implemented, although explicit security policy and incident response pages are not found. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust, with clear privacy and cookie policies and consent mechanisms aligned with GDPR. The absence of WHOIS data is noted but likely due to privacy protection, which is justified for a commercial brand site. Trust indicators such as Trusted Shops certification and active social media presence further enhance credibility. Overall, the website presents a low risk profile with strong business credibility and technical maturity. Recommendations include publishing explicit security policies and vulnerability disclosure information to further enhance transparency and trust.

S

Storck

nimm2.at

74

The website www.nimm2.at represents the Austrian presence of the Storck brand 'nimm2', a well-established confectionery brand specializing in vitamin-enriched sweets and candies. The site serves as a consumer-facing platform providing product information, brand storytelling, and engagement through inspiration and ideas. It targets a general audience including families and consumers interested in vitamin candy products. The website is part of a larger corporate ecosystem under Storck, linking to multiple sister brand domains, indicating a strong market position in the confectionery retail sector in Austria. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries such as RequireJS, jQuery, and Lodash, and integrates Piwik PRO for analytics and tag management. The site is mobile-optimized with responsive design and good SEO practices. Performance is moderate, with asynchronous loading of scripts and media assets. Accessibility is basic but functional. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, explicit security headers are not detected in the HTML content, and no dedicated security or incident response policies are published. No vulnerabilities or exposed sensitive data were found in the content. The WHOIS data for the domain is unavailable due to NIC.AT restrictions, limiting full verification of domain registration details, but the website's branding and content strongly indicate legitimacy. Overall, the site presents a professional, trustworthy brand presence with good privacy compliance and moderate security posture. Strategic improvements could include enhancing security headers, publishing explicit security policies, and providing direct contact information for incident response. These steps would strengthen trust and compliance further.

S

Storck

werthers-original.at

65

Werther's Original is a well-established confectionery brand specializing in caramel products such as bonbons, soft toffees, caramel popcorn, and sugar-free variants. The website reflects a mature digital presence with a focus on product variety and brand heritage, targeting general consumers interested in quality caramel confectionery. The site is part of the larger Storck group, a recognized player in the retail confectionery sector. Technically, the website is built on TYPO3 CMS and uses modern JavaScript frameworks, ensuring a good user experience with mobile optimization and clear navigation. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, though it lacks some advanced security headers and explicit security policies. The absence of WHOIS data limits domain registration transparency but does not detract significantly from the site's legitimacy given the brand's reputation. Overall, the site scores well on content quality, technical implementation, and privacy compliance, with room for improvement in security best practices and contact information transparency.

S

Storck

toffifee.at

72

The website www.toffifee.at is a professionally designed brand site for Toffifee, a confectionery product under the Storck company umbrella. It provides product information, recipes, and brand engagement content targeted primarily at Austrian consumers and families. The site uses TYPO3 CMS and modern JavaScript libraries to deliver a responsive and user-friendly experience. Privacy and cookie consent mechanisms are implemented in compliance with GDPR requirements. However, no direct contact emails or phone numbers are present on the homepage, with contact facilitated via a form on a dedicated page. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved and explicit security policies are absent. WHOIS data is unavailable, limiting domain registration trust analysis, but the brand consistency and external links to Storck-related domains support legitimacy.

S

Storck

merci.at

72

Merci.at is the official Austrian website for the merci chocolate brand, owned by the Storck group. The site serves as a product showcase and marketing platform, offering detailed product information, personalization options, and promotional content targeted at Austrian consumers. The website demonstrates a mature digital presence with a professional design, consistent branding, and multilingual support via alternate hreflang links. Technically, the site is built on TYPO3 CMS with modern JavaScript frameworks and uses Piwik PRO for analytics, respecting user consent for tracking. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers are not evident in the HTML source. The absence of WHOIS data limits domain trust verification, but the strong brand association and external partner links support legitimacy. Overall, the site is well-structured, user-friendly, and compliant with GDPR requirements.

S

Somfy

somfypro.at

69

SomfyPRO is a professional B2B portal operated by Somfy, targeting professional partners in Austria. The website serves as a centralized digital platform offering product information, ordering capabilities, training, and support services related to Somfy's smart home and sun protection automation products. The portal is well-branded and localized for the Austrian market, reflecting Somfy's strong market presence in the energy efficiency and smart home sector. Technically, the site is built on modern frameworks such as React and Front-Commerce, integrating advanced search and mapping APIs, and demonstrates excellent mobile optimization and user experience. Security posture is solid with HTTPS and secure SSO integration, though some security headers are missing and no explicit security or incident response policies are published. The absence of WHOIS data transparency slightly reduces trust but does not detract from the site's legitimacy given the professional branding and ecosystem integration. Overall, SomfyPRO represents a mature digital platform supporting Somfy's professional customer base with a strong focus on usability and business functionality.

S

STORCK GES.M.B.H.

storck.at

66

STORCK GES.M.B.H. operates the www.storck.at website as the Austrian corporate presence of the Storck confectionery brand. The site provides comprehensive information about the company, its brands, career opportunities, and consumer services. The website is well-structured, professionally designed, and optimized for mobile devices, reflecting a mature digital presence. Technically, it is built on TYPO3 CMS and uses modern JavaScript libraries, ensuring good performance and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response contacts are not published. The absence of WHOIS data from NIC.AT limits domain registration trust assessment but does not detract from the site's professional appearance and content quality. Overall, the site is a trustworthy corporate resource for consumers and job seekers in Austria.

F

FCC Environment CEE

fcc-group.eu

60

FCC Environment CEE is a prominent waste management company operating in Central and South East Europe, offering a wide range of services including municipal, business, household, and environmental waste solutions. The company emphasizes sustainability and resource efficiency, supported by ISO certifications and a clear mission statement. The website demonstrates a mature digital presence with multimedia content, social media integration, and comprehensive cookie consent mechanisms. Technically, the site uses modern JavaScript libraries and tracking tools, though some security headers and explicit security policies are not publicly visible. The absence of WHOIS registrant data suggests privacy protection, which is justified for this business type. Overall, the site is professional, trustworthy, and well-positioned in its market.

S

Semperit

semperit.com

64

Semperit is a well-established Austrian tyre brand operating under the Continental group, offering a wide range of tyres for cars, SUVs, vans, trucks, and buses suitable for all weather and road conditions globally. The website demonstrates a professional and consistent brand presence with comprehensive product information, multimedia content, and legal documentation, reflecting a mature digital presence. Technically, the site leverages Adobe Experience Manager CMS, integrates dynamic media, and employs modern tracking and consent management tools, indicating a robust digital infrastructure. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though the absence of explicit security headers and a public security policy suggests room for improvement. The missing WHOIS data for the domain is a notable anomaly that slightly impacts trust but does not detract from the overall legitimacy given the brand's reputation and content quality. Overall, the site is well-designed, user-friendly, and compliant with privacy regulations, making it a trustworthy platform for its target audience.

A

aqotec GmbH

aqotec.com

65

aqotec GmbH is an Austrian company operating in the energy sector, likely providing technology or energy-related services. The company has a mature domain registered since 2009, indicating an established presence. The website is built on WordPress with common plugins such as RevSlider and WPRocket, and uses Google Analytics for visitor tracking. However, the site lacks explicit privacy, cookie, and terms of service policies, and does not provide clear contact information, which impacts its privacy compliance and user trust. Security posture is moderate with HTTPS enabled and domain status protections, but lacks DNSSEC and security headers. Overall, the website is functional but could improve in privacy compliance and security best practices.

A

AJ Produkte

ajprodukte.at

70

AJ Produkte is a medium-sized retail business specializing in Swedish-designed office furniture, workshop equipment, and industrial supplies. The company targets both business customers and general consumers, offering a broad product range with key services including online sales, fast delivery, and business invoicing options. The website is professionally designed with consistent branding and clear navigation, supporting a positive user experience. Technically, the site employs modern JavaScript frameworks, integrates cookie consent via Cookiebot, and uses Google Tag Manager and Raygun for analytics and error monitoring. Security posture is strong with HTTPS and a Content-Security-Policy header, though additional security headers and published privacy policies would enhance compliance and trust. The absence of WHOIS data limits domain trust assessment, but the website content and business presence appear legitimate and professional.

C

Cirio 1856 Österreich

cirio1856.at

9

Cirio 1856 Österreich is a medium-sized retail business specializing in authentic Italian tomato and vegetable products, serving both consumers and professional food service clients primarily in Austria. The website is built on WordPress with modern technologies such as Alpine.js and Yoast SEO, indicating a moderate level of digital maturity. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and formal privacy and cookie policies, which are important for GDPR compliance. The absence of WHOIS data due to NIC.AT restrictions is typical for Austrian domains but limits transparency. Overall, the website presents a professional image with moderate trustworthiness and business credibility.

R

Robelshoes.at

robelshoes.at

58

Robelshoes.at is an Austrian e-commerce retailer specializing in branded footwear and accessories for women, men, and children. The website offers a broad selection of products with free shipping over a certain threshold and a 30-day return policy, positioning itself as a regional player with multiple country-specific domains. The site is built on the CREATIVE shop CMS platform and integrates modern technologies such as Google reCAPTCHA, Facebook Pixel, Google Tag Manager, and Sentry for error tracking, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and anti-bot measures in place, though some security headers are missing and privacy compliance could be improved. The absence of WHOIS data due to privacy protection slightly reduces transparency but is common for e-commerce businesses. Overall, the site is professional, secure, and user-friendly, targeting consumers in Austria and neighboring countries.

P

Pimcore GmbH

pimcore.com

70

Pimcore GmbH is an established Austrian technology company founded in 2009, specializing in enterprise data and experience management platforms. Their offerings include PIM, MDM, DAM, DXP/CMS, CDP, and digital commerce solutions targeting medium to large enterprises seeking rapid digitization and efficient data management. The company maintains a strong market position with global clients and partners, supported by a professional and content-rich website. Technically, the site leverages modern technologies such as HubSpot CMS, Cloudflare DNS, and integrates Google Analytics 4 and Cookiebot for analytics and privacy compliance. The website is fast, mobile-optimized, and SEO-friendly, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced, security headers present, and no exposed sensitive data, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Overall, Pimcore demonstrates high business credibility and trustworthiness with consistent WHOIS data and transparent policies.

C

Currencylayer

currencylayer.com

65

Currencylayer is a specialized financial technology company providing a free and reliable currency exchange API service. Founded in 2015 and based in Austria, it targets developers and businesses requiring real-time and historical forex data. The company positions itself as a startup-friendly and accurate currency conversion API provider, supporting 168 world currencies. The website reflects a professional and consistent brand image with clear business descriptions and client trust signals. Technically, the site uses a combination of legacy and modern web technologies including jQuery 1.11.3, Google Tag Manager, Google reCAPTCHA, and Stripe for payment processing, hosted behind Cloudflare DNS services. While the site is mobile-optimized and SEO-friendly, the use of an outdated jQuery version presents a security risk. Security posture is generally good with HTTPS enforced and client-side protections, but could be improved by updating libraries and adding explicit security headers. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR indicators. Overall, the website is trustworthy and professionally maintained, with minor technical and security improvements recommended.

F

Fixer

fixer.io

66

Fixer is a well-established API service providing real-time and historical foreign exchange rates and currency conversion data. Positioned as a market leader, it serves a broad audience including developers, SMBs, and large corporations. The service is backed by APILayer, a reputable parent company, and offers tiered subscription plans with clear pricing and features. The website demonstrates a high level of professionalism, with excellent content quality, clear navigation, and mobile optimization. Technically, it employs modern web technologies, including jQuery, Google Analytics, and Stripe for payments, hosted behind Cloudflare DNS. Security posture is strong with HTTPS, SSL encryption, and domain management best practices, although explicit security policies and incident response contacts are not published. Privacy and cookie policies are present and GDPR compliant. Overall, Fixer.io presents a trustworthy and mature digital presence suitable for enterprise and developer use.

V

Verkehrsverbund Ost-Region

vor.at

64

Verkehrsverbund Ost-Region (VOR) operates as a major public transportation network serving Vienna, Lower Austria, and Burgenland. The website provides comprehensive services including current timetables, ticket sales, route planning via the VOR AnachB app, and customer support. The organization targets public transport users in the Austrian eastern region, positioning itself as a key regional mobility provider with a large operational footprint. The site is professionally designed, mobile-optimized, and offers clear navigation and extensive user resources.

M

mediamid digital services GmbH

mediamid.com

79

mediamid digital services GmbH is a specialized provider of Digital Asset Management solutions based in Vienna, Austria, with over 20 years of experience. Their offerings include Enterprise Digital Asset Management, Media Asset Management, Video Asset Management, and Order Management, targeting enterprises, marketing departments, archives, and NGOs. The company has a solid market position supported by industry awards and a professional online presence. Technically, the website leverages modern frameworks such as PrimeFaces and Bootstrap, integrates Google Analytics with privacy considerations, and employs CAPTCHA for form security. The security posture is strong with HTTPS enforcement and secure cookie settings, though some security headers are missing. However, the absence of WHOIS data for the domain raises concerns about domain legitimacy, which should be further investigated. Privacy compliance is limited due to missing explicit privacy and terms of service pages. Overall, the website is professional, secure, and business-focused, but domain registration transparency and privacy policy publication need improvement.

S

Schlotterer GmbH

schlotterer.com

68

Schlotterer GmbH is an Austrian company specializing in manufacturing and supplying exterior sun protection and insect protection products, including roller shutters, venetian blinds, insect screens, and textile sun protection. The company positions itself as the market leader in Austria for exterior sun protection, targeting professional partners such as the specialist trade and window manufacturers, as well as end customers. The website is professionally designed, multilingual, and powered by TYPO3 CMS, indicating a mature digital presence. Technical infrastructure includes modern JavaScript libraries and Matomo analytics for user tracking. Security posture is moderate with HTTPS usage implied but lacks explicit security headers and formal privacy or cookie policies. The absence of WHOIS data limits domain trust assessment, but the website content and branding are consistent and professional. Overall, the site is safe, business-focused, and well-structured, though improvements in privacy compliance and security transparency are recommended.

S

Schloss Wilfersdorf

liechtenstein-schloss-wilfersdorf.at

60

Schloss Wilfersdorf is a cultural and hospitality business centered around the historic Wilfersdorf Castle, serving as a regional tourism landmark in Austria. The website presents the castle as a family-friendly destination offering events, exhibitions, and wine-related hospitality services such as a Heurigenbetrieb and Vinothek. The site is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard web technologies. While the technical infrastructure is modern and mobile-optimized, the website lacks critical privacy and security policies, contact information, and WHOIS transparency. Security posture is moderate with HTTPS enabled but missing key security headers and compliance documentation. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and transparency to improve trust and security.

C

CoreShop GmbH

coreshop.org

61

CoreShop GmbH operates a professional and comprehensive website offering an open source e-commerce platform tightly integrated with Pimcore. The company targets businesses requiring customizable B2B and B2C e-commerce solutions, supported by enterprise bundles, development, consulting, and training services. Their market position is strong within the Pimcore ecosystem, supported by a developer-friendly approach and active partner program. Technically, the website is modern, mobile-optimized, and uses trusted technologies such as Google Analytics and Tag Manager, with good SEO and accessibility practices. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response information are absent. The domain WHOIS data is unavailable, which slightly reduces trust but is mitigated by the professional site and active community presence. Overall, the site is trustworthy, well-maintained, and business credible.

C

CoreShop GmbH

coreshop.com

69

CoreShop GmbH operates a professional and well-designed website offering an open source e-commerce platform enhanced by Pimcore. The company targets businesses requiring customizable B2B and B2C e-commerce solutions, supported by enterprise bundles, consulting, development, and training services. The website demonstrates a mature digital presence with strong developer and partner engagement, including active GitHub repositories and Slack community links. Technically, the site uses modern web technologies, integrates Google analytics and marketing tools, and provides a GDPR-compliant cookie consent mechanism. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response information are absent. The lack of WHOIS data for the domain is a concern and reduces trustworthiness, but the professional content and clear contact information mitigate this risk. Overall, the website is trustworthy, technically sound, and business credible, suitable for its target audience.

Miele is a globally recognized premium brand specializing in household and commercial appliances, with a strong market presence in Austria and Central and Eastern Europe. The website reflects a mature digital infrastructure utilizing modern frameworks such as Nuxt.js and Vue.js, supported by a robust CDN provider (Akamai) to ensure fast and reliable content delivery. The site is well-structured, mobile-optimized, and professionally designed, targeting consumers and professional customers seeking high-quality appliances. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although explicit security headers and incident response information are not clearly published. Privacy compliance is limited in the visible content, lacking explicit privacy and cookie policies, which should be addressed to meet regulatory standards fully. Overall, the website projects a trustworthy and professional image consistent with Miele's brand reputation.

B

Baxter

baxter.at

67

Baxter is a well-established global healthcare company specializing in renal care and acute therapies, recently spinning off these business units into a new entity named Vantive. The website serves multiple audiences including healthcare professionals, patients, partners, and investors, providing comprehensive corporate information, product details, and career opportunities. Technically, the site is built on Drupal 10, uses modern video delivery via Brightcove, and is hosted with Cloudflare DNS and CDN services, ensuring fast and reliable performance. The security posture is strong with HTTPS, security headers, and GDPR-compliant cookie consent mechanisms in place. No critical vulnerabilities or suspicious activities were detected. Overall, the site reflects a mature digital presence consistent with an enterprise healthcare provider.

H

Hillrom

hillrom.at

77

Hillrom is a global medical technology company specializing in connected care solutions that improve the lives of patients and healthcare providers. The company offers a broad portfolio of products including smart beds, patient monitoring systems, safe lifting and transport solutions, and clinical workflow tools. Positioned as a subsidiary of Baxter International, Hillrom targets healthcare institutions and professionals with innovative medical equipment and integrated digital solutions. The website reflects a professional and enterprise-grade digital presence with consistent branding and comprehensive content tailored to healthcare audiences. Technically, the website is built on Adobe Experience Manager with React.js components, leveraging modern web technologies and analytics platforms such as Matomo and Google Tag Manager. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security is well addressed with HTTPS, security headers, and secure form validations, although explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS data due to privacy protection limits domain registration insights, but the overall digital footprint, including structured data and external domain relationships, supports the legitimacy of the business. Privacy compliance is strong with GDPR-aligned policies and cookie consent mechanisms. No adult or unsafe content is present, making the site suitable for general audiences. Overall, Hillrom's website presents a mature, secure, and professional platform that aligns with its enterprise healthcare market position, though improvements in transparency around security policies and incident response would enhance trust further.

A

Angelini Pharma Austria GmbH

harmoniamentis.at

70

HarmoniaMentis is a specialized healthcare information platform operated by Angelini Pharma Austria GmbH, focusing on brain health topics such as epilepsy and depression. The website provides medically scientific content tailored for both healthcare professionals and interested patients, including articles, videos, and event information. The platform integrates a secure login and registration system for medical professionals, indicating a controlled access to specialized content. Technically, the website employs modern JavaScript libraries and analytics tools, including Piwik PRO for user behavior tracking, and is built on the Umbraco CMS platform. The site is mobile-optimized with good design and navigation clarity. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response policies are not evident. WHOIS data is unavailable, which slightly reduces transparency but does not detract significantly from the site's legitimacy given the strong corporate branding and professional content. Overall, the website presents a trustworthy and professional digital presence for Angelini Pharma Austria GmbH in the healthcare education sector.

Ö

Österreichische Gesellschaft für Klinische Pathologie und Molekularpathologie

oegpath.at

10

The website represents the Österreichische Gesellschaft für Klinische Pathologie und Molekularpathologie (ÖGPath), a professional Austrian medical society dedicated to clinical and molecular pathology. It serves as an information and service portal for members and the wider pathology community, offering event information, educational resources, and quality management guidelines. The site is well-structured, professionally designed, and primarily targets medical professionals in Austria. Technically, it is built on WordPress with modern plugins and uses HTTPS, ensuring secure communications. However, it lacks some advanced security headers and a cookie consent mechanism, which are recommended for GDPR compliance. The WHOIS data aligns well with the organization's identity, supporting legitimacy. Overall, the site is trustworthy and functional but could improve privacy and security features.

O

Ofa Bamberg GmbH

ofaaustria.at

58

Ofa Austria is a branch of Ofa Bamberg GmbH, a well-established manufacturer specializing in medical compression stockings, bandages, and orthopedic products. The company emphasizes innovation, quality, and medical efficacy, targeting healthcare professionals and patients with venous and lymphatic conditions. The website is professionally designed, content-rich, and provides comprehensive product and health-related information. Technically, the site uses modern JavaScript libraries and HubSpot CMS, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and privacy compliance, though explicit security headers and incident response contacts are missing. The absence of WHOIS data limits domain trust verification but does not detract significantly from the overall legitimacy. Strategic recommendations include enhancing security headers, providing direct contact information, and maintaining privacy compliance.

A

Angelini Pharma

angelinipharma.at

66

Angelini Pharma is a medium-sized pharmaceutical company operating primarily in Austria with a strong focus on brain health, oncology, pain management, and consumer health products. The company maintains a professional and content-rich website that serves healthcare professionals and patients, providing information on therapeutic areas, research, and corporate responsibility. The website demonstrates a moderate level of digital maturity with modern JavaScript libraries and analytics tools such as Piwik PRO, but lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is generally good with HTTPS enabled and no visible vulnerabilities, though security headers are missing and contact information is not clearly provided. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.