High-risk security reports

Ö

ÖGS.barrierefrei

relayservice.at

45

ÖGS.barrierefrei operates the ÖGS Relay-Service, a specialized telephone interpreting service for deaf, hard-of-hearing, and speech-impaired individuals in Austria. Established in 2012, it provides free, barrier-free communication assistance nationwide, enabling users to communicate via sign language and German through telephone and video chat. The service is positioned as a leading non-profit organization dedicated to accessibility and inclusion for the deaf community in Austria. Technically, the website is built on a modern WordPress platform using Elementor and JupiterX theme, enhanced with performance and accessibility plugins such as WP Rocket and Accessible Poetry. The site demonstrates good mobile optimization, accessibility features, and SEO practices. Security measures include HTTPS enforcement and a Content-Security-Policy header, with cookie consent mechanisms aligned with GDPR requirements. Security posture is solid with no detected vulnerabilities or exposed sensitive data. However, the site lacks a dedicated security policy or incident response contact information, which could be improved. Privacy compliance is strong, with clear privacy and cookie policies and user consent mechanisms. Overall, the website and service present a trustworthy, professional, and user-focused platform with a strong commitment to accessibility and privacy. Strategic enhancements in security transparency and incident response readiness are recommended to further strengthen trust and compliance.

O

Opfernotruf

opfer-notruf.at

46

Opfernotruf is a government-backed non-profit initiative operated by WEISSER RING in Austria, providing support and counseling services to victims of crime and violence. The website offers multiple contact channels including a toll-free phone line, secure email forms, scheduled chat consultations, and immediate chat support, targeting victims and their families across Austria. The organization is positioned as a trusted official service with strong branding and government affiliation. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Matomo analytics, ensuring good SEO and user tracking capabilities. The site is mobile-optimized and uses HTTPS, providing a secure browsing experience. However, some improvements are needed in privacy compliance, such as implementing cookie consent mechanisms and publishing detailed privacy and security policies. From a security perspective, the site demonstrates good practices with HTTPS and secure contact forms but lacks visible security headers and public incident response information. No vulnerabilities or suspicious elements were detected in the content or external links. The absence of WHOIS data limits domain registration analysis, but the website's official nature and consistent branding support its legitimacy. Overall, Opfernotruf presents a professional, trustworthy, and secure platform for victim support in Austria, with recommendations to enhance privacy compliance and security transparency to further strengthen user trust and regulatory adherence.

M

männernotruf

maennernotruf.at

47

Männernotruf is a small Austrian non-profit organization providing 24/7 telephone crisis counseling specifically for men facing relationship, psychological, or violence-related issues. The website is professionally designed using WordPress with modern plugins and SEO optimizations, offering clear contact information and social media presence. Security posture is solid with HTTPS and cookie consent, though formal security policies and incident response details are absent. Overall, the site is trustworthy, well-branded, and serves a clear social support mission.

V

Verein Autonome Österreichische Frauenhäuser (AÖF)

gewalt-ist-nie-ok.at

49

The website gewalt-ist-nie-ok.at is a professionally developed non-profit platform managed by the Verein Autonome Österreichische Frauenhäuser (AÖF) in Austria. It provides comprehensive educational content and support resources focused on domestic violence awareness specifically targeted at children and youth. The site is multilingual and well-structured, emphasizing accessibility and user-friendly navigation. Technically, it is built on Drupal 10 with modern web technologies and includes a consent management platform ensuring GDPR compliance. Security posture is solid with HTTPS enforced, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the site demonstrates a strong commitment to privacy, compliance, and user safety.

G

GoodPlanet Belgium

goodplanet.be

43

GoodPlanet Belgium is a well-established non-profit organization dedicated to promoting sustainability and environmental education primarily in Belgium. The organization targets schools, businesses, and the general public with educational projects, training, and awareness campaigns. The website reflects a professional and consistent brand image with active social media engagement and multimedia content. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and CAPTCHA protections, though some improvements in security headers and privacy compliance are recommended. Overall, the domain appears legitimate despite WHOIS privacy restrictions, and the website provides a trustworthy and informative platform for its audience.

S

Seniorentreff im Internet

seniorentreff.de

45

Seniorentreff im Internet is a well-established German-language online community platform targeting seniors aged 50 and above. It offers a broad range of services including forums, blogs, interest groups, chats, and real-life event coordination, fostering social connections among its members. The platform operates on a free-to-use model supported by advertising and partner offers, positioning itself as a trusted and comprehensive social network for seniors in Germany. The website demonstrates consistent branding and professional content quality, appealing to its mature audience effectively. Technically, the website employs a variety of modern web technologies such as Google Tag Manager, Facebook SDK, Google Adsense, and Cookiefirst for consent management. It uses HTTPS with good SSL configuration and integrates third-party services for analytics, advertising, and social login. The site is mobile-optimized with good navigation and SEO practices, although no major CMS or hosting provider details are explicitly detected. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and uses reCAPTCHA on forms, but lacks visible security headers and a published security policy or incident response contacts. There are no detected vulnerabilities or exposed sensitive data in the provided content. Privacy compliance is strong with clear privacy and cookie policies and a consent mechanism in place, aligning with GDPR requirements. The WHOIS data is minimal but consistent, supporting the legitimacy of the domain. Overall, Seniorentreff im Internet presents a secure, privacy-conscious, and user-friendly platform with a strong focus on community engagement for seniors. Strategic improvements in security headers, incident response transparency, and technical performance could further enhance its security posture and user trust.

ERISMANN AG Seengen is a well-established Swiss company specializing in the repair, sale, and trade of agricultural machinery and winter service equipment. With over 100 years of experience, the company serves primarily agricultural customers in Switzerland, offering hydraulic services, repairs, and a range of machinery products. The website reflects a solid regional market position with a focus on personalized customer service and quality. Technically, the website employs a moderate tech stack including jQuery, Bootstrap, and Google Analytics, indicating a reasonable level of digital maturity. However, the site lacks advanced security headers and a cookie consent mechanism, which are important for compliance and security. The security posture is adequate with HTTPS enabled but could be improved by implementing best practices such as security headers and privacy compliance features. Overall, the website is professional, trustworthy, and provides clear contact information, but should enhance privacy and security measures to align with modern standards.

M

MÁV-csoport

mavcsoport.hu

48

MÁV-csoport is the Hungarian state-owned railway group providing comprehensive passenger transport, infrastructure management, and related services. The website serves as an information and service portal targeting travelers, business partners, and the general public. It offers ticketing, schedules, news, and corporate information, positioning itself as the leading national railway operator in Hungary. The site is well-branded, consistent, and professionally maintained. Technically, the website is built on Drupal CMS with modern JavaScript libraries and responsive design, ensuring good mobile optimization and accessibility. It integrates Google Analytics and Facebook Pixel for analytics and marketing, with a clear cookie consent mechanism compliant with GDPR. Performance is moderate with room for optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though additional security headers and a public security policy could enhance trust. No incident response or vulnerability disclosure information is publicly available. Overall, the site is trustworthy, compliant, and professionally managed, reflecting the stature of a large state enterprise.

M

MOL Mercarius

mercarius.hu

46

MOL Mercarius is a Hungarian company specializing in vehicle fleet management services, boasting nearly three decades of experience in the transportation sector. The website positions the company as a reliable partner for comprehensive fleet solutions, targeting fleet owners and managers primarily in Hungary. The business model focuses on providing tailored fleet management services, leveraging its established market presence and 100% Hungarian ownership to build trust and credibility. Technically, the website is built on WordPress using the Elementor framework, incorporating modern web technologies such as jQuery and Google Tag Manager for analytics and marketing. The site demonstrates good mobile optimization and moderate performance, with proper SEO and accessibility features, although some accessibility improvements could be made. Security is well addressed with HTTPS enforced and multiple security headers present, indicating a mature security posture. However, the site lacks explicit privacy and terms of service pages, which are critical for GDPR compliance and user trust. Contact information is limited to contact forms without explicit emails or phone numbers, which may hinder direct communication. No incident response or vulnerability disclosure information is provided, representing an area for improvement in security transparency. Overall, MOL Mercarius presents a professional and trustworthy online presence with solid technical and security foundations. Strategic enhancements in privacy compliance, contact transparency, and security communication would further strengthen its digital maturity and user trust.

L

liverelations gmbh

liverelations.at

48

liverelations gmbh operates a German-language website focused on corporate magazines and event organization, targeting corporate clients primarily in Austria. The website is built on WordPress using the Enfold theme and integrates modern web technologies such as Google Fonts, YouTube embeds, and Google reCAPTCHA for bot protection. While the site is functional and moderately optimized for mobile, it lacks explicit privacy and cookie policy pages, though a cookie consent mechanism is present. Security posture is adequate with HTTPS enforced and reCAPTCHA implemented, but missing security headers and absence of a published security policy reduce overall security maturity. No contact emails or phone numbers are directly visible on the homepage, which may impact user trust and compliance. Overall, the site is a small media business with basic digital maturity and moderate security and privacy compliance.

Tagstream is a German-language technology service provider specializing in digital channel acceleration and digital transformation for businesses. Their offerings focus on process management, business integration, and measurable marketing and sales results. The website is built on WordPress with common plugins and integrates marketing tools such as Mailchimp and Payrexx for payments. The site is professionally designed, mobile-optimized, and includes GDPR-compliant privacy and cookie policies. However, no direct company contact emails or phone numbers are provided, only a contact form. The WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy despite the active and professional website presence. Security posture is moderate with HTTPS enabled but lacks security headers and published security policies. Overall, the site is functional and trustworthy for business visitors but would benefit from improved transparency and security practices.

alixon gmbh is a Swiss-based small IT solutions company specializing in software and internet services such as address management, reservation systems, cloud solutions, and web hosting. Established in 2000, it serves primarily local businesses and organizations with a focus on personalized consulting and tailored software solutions. The website reflects a professional and consistent brand image with clear contact information and product offerings. Technically, the site uses Ext JS framework and a custom CMS, with moderate performance and basic mobile optimization. Security posture is moderate but lacks advanced security headers and published privacy or cookie policies, which are compliance gaps. Remote support is offered via AnyDesk, enhancing customer service capabilities. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

M

Meinplatz

meinplatz.ch

36

Meinplatz.ch is an online platform dedicated to providing current offers in housing, work, and day structure for adult people with disabilities in Switzerland. It serves as a centralized resource for institutions offering these services and includes information about advisory centers for personalized support. The platform targets a niche audience within the disability support sector and positions itself as a trusted resource in this domain. Technically, the website leverages modern web technologies such as SvelteKit, Google Fonts, and Google Tag Manager, ensuring a responsive and accessible user experience. Security measures include HTTPS enforcement and standard security headers, contributing to a good security posture. However, the absence of visible privacy and cookie policies, as well as lack of explicit contact information, indicates compliance gaps that should be addressed to enhance trust and regulatory adherence. Overall, the website is professional and functional but would benefit from improved privacy compliance and clearer contact channels.

A

ARC Imaging Resources

arcsupplies.com

49

ARC Imaging Resources operates a customer supply and service portal accessible via arcsupplies.com. The website serves as a login gateway for existing customers to manage their supply orders and service requests. The business appears to be a niche supplier in the imaging resources retail sector, with a domain age consistent with its founding year of 2012, indicating a stable market presence. The portal is designed with basic but functional user experience and mobile optimization, targeting primarily existing customers requiring supply and service support. Technically, the website uses standard HTML5, CSS3, and JavaScript with a theme framework from Coderthemes. The site is hosted under a domain registered with Network Solutions, LLC, with no DNSSEC enabled and no advanced CMS detected. Performance and accessibility are moderate to good, but SEO and privacy compliance are minimal. No analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the site uses HTTPS (implied by URL), but lacks visible security headers such as Content-Security-Policy or HSTS. The login form does not show anti-CSRF tokens, and no incident response or security contact information is provided. The domain WHOIS data is consistent and trustworthy, with clientTransferProhibited status and no privacy protection, supporting legitimacy. However, the absence of privacy and cookie policies and security best practices reduces the overall security posture. Overall, the website is functional and moderately professional but lacks comprehensive privacy and security measures. Strategic improvements in security headers, privacy compliance, and incident response visibility are recommended to enhance trust and compliance.

B

Bundeszahnärztekammer

goz-honorarvereinbarung.de

49

The website goz-honorarvereinbarung.de serves as an authoritative informational platform provided by the Bundeszahnärztekammer (Federal Chamber of Dentists, Germany). It focuses on the GOZ fee agreement according to § 2 Abs. 1 & 2, offering calculation tools, templates, and argumentation aids targeted at dental professionals in Germany. The site positions itself as a trusted resource within the German dental healthcare sector. Technically, the website is built on a modern WordPress CMS infrastructure, utilizing plugins such as Real Cookie Banner for GDPR-compliant cookie consent and Matomo for privacy-friendly analytics. The site demonstrates good mobile optimization and moderate performance, with a clean and professional design that supports user experience and navigation clarity. From a security perspective, the site enforces HTTPS and implements a robust cookie consent mechanism. However, it lacks explicit security headers and published security or incident response policies, which are recommended for enhanced security posture. No vulnerabilities or suspicious activities were detected during analysis. Overall, the website exhibits a high level of trustworthiness and compliance with privacy regulations, making it a reliable resource for its target audience. Strategic improvements in security headers and incident response documentation would further strengthen its security and compliance stance.

P

Pecheur-Store : Tienda de pesca en línea

pecheur-store.es

49

Pecheur-Store is an e-commerce retailer specializing in fishing equipment, targeting Spanish-speaking customers primarily in Spain. The website offers a wide range of fishing products including rods, reels, baits, and accessories, with a focus on fast shipping and secure payment options. The brand operates multiple country-specific domains, indicating a regional market presence. Technically, the site is built on Magento (OpenMage), leveraging modern tracking and marketing tools such as Google Analytics, Google Ads, and reCAPTCHA for security and compliance. While HTTPS is enforced and some privacy consent mechanisms are in place, explicit privacy and terms of service pages were not detected in the provided content, which is a compliance gap. Security headers are missing, which could be improved to enhance security posture. Overall, the site presents a professional and trustworthy e-commerce platform with moderate technical maturity and a good user experience.

I

IT Space

itspace.uz

41

IT Space is a small technology company based in Tashkent, Uzbekistan, specializing in the development of Telegram bots, websites, mobile applications, and business utilities. The company offers a broad range of IT services including website creation (business cards, landing pages, e-commerce), bot development, branding design, and CRM integration. Their market position is that of an experienced local developer with a solid portfolio and active client engagement. Technically, the website employs modern frontend technologies such as Bootstrap 5 and jQuery, with integration of Google Analytics and Yandex Metrika for user tracking. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enabled and secure forms, but lacks published security policies and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is trustworthy and business credible but could improve in compliance and security transparency.

H

Hyundai Truck & Bus

hyundaitrucks.uz

43

Hyundai Truck & Bus operates as the official distributor of Hyundai commercial trucks in Uzbekistan, focusing on providing new truck models such as the Mighty EX8. The company emphasizes driver health and cargo safety, offering warranties and a range of services including leasing, credit, maintenance, and original spare parts. The website targets commercial vehicle buyers and businesses within Uzbekistan, positioning itself as a key player in the local transportation sector. Technically, the website uses modern frontend technologies like Bootstrap, jQuery, and Slick Carousel, and integrates analytics tools such as Google Tag Manager and Yandex Metrika. Hosting is provided by a regional provider, consistent with the domain registration data. Security posture is moderate with HTTPS usage but lacks advanced security headers and explicit privacy or cookie policies, representing compliance gaps. Overall, the website is professional and functional but would benefit from enhanced security and privacy compliance measures.

H

HAVALning O'zbekistondagi rasmiy distribyutori

haval.uz

46

The website haval.uz serves as the official distributor platform for Haval vehicles in Uzbekistan, offering information on new car models such as H6, H9, Dargo, and Jolion. It targets automotive customers and dealers within Uzbekistan, providing services including vehicle sales, test drives, and promotional offers. The site demonstrates a moderate level of digital maturity with a modern tech stack including Firebase, Yandex Maps API, Google Tag Manager, and Yandex Metrika for analytics and tracking. The design is professional and mobile-optimized, ensuring a good user experience. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks explicit security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. Overall, the site is legitimate and consistent with its business claims, but improvements in privacy and security transparency are recommended.

«

«Roodell» MChJ

cheryauto.uz

43

Cheryauto.uz is the official website of the Chery automobile brand's authorized distributor in Uzbekistan, operated by «Roodell» MChJ. The site provides comprehensive information about Chery car models, pricing, test drive registration, dealer locations, after-sales services, and warranty programs. It targets consumers in Uzbekistan interested in purchasing or servicing Chery vehicles, positioning itself as a trusted and official source for the brand in the region. The business model revolves around automotive sales and support through a network of authorized dealers.

Z

Zuger Kantonaler Imkerverein

zugerimker.ch

49

The Zuger Kantonaler Imkerverein website serves as an informational and community platform for beekeepers in the Zug canton of Switzerland. It provides educational courses, event announcements, and resources related to beekeeping and bee health. The site targets local beekeepers and individuals interested in apiculture, operating as a small non-profit regional association. Technically, the website is built on the CMSimple platform, featuring a clean and consistent design with good navigation and mobile optimization. However, it lacks advanced technical features such as structured data and visible analytics. Security posture is moderate with no visible security headers or confirmed HTTPS status, and no cookie consent mechanism is implemented despite a privacy policy being present. Business credibility is supported by sponsor links and event information, though contact details are not clearly visible on the homepage. Overall, the site is safe and trustworthy but would benefit from enhanced security and privacy compliance measures.

M

MAF Schweiz

maf-schweiz.ch

49

MAF Schweiz is a Swiss non-profit organization specializing in humanitarian aviation, operating a fleet of small aircraft to provide access and aid to remote regions worldwide. The organization supports over 1400 partners across 24 countries, focusing on delivering essential services and relief to isolated communities. Their business model relies heavily on donations and sponsorships, supported by transparent communication and recognized certifications such as ZEWO. The website reflects a professional and consistent brand image, targeting donors, volunteers, and partners interested in mission aviation and humanitarian aid. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Maps API, and multilingual support via WPML. While the site is mobile-optimized and performs moderately well, there is room for improvement in accessibility and security headers. The Google Analytics plugin is installed but not configured, resulting in minimal user tracking. SEO and navigation are well implemented, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks several important security headers and does not publicly disclose security policies or incident response procedures. There is no vulnerability disclosure or security.txt file. The overall security posture is moderate, with recommendations to enhance header implementation and formalize security policies. Overall, MAF Schweiz presents a trustworthy and professional online presence with strong business credibility and good content quality. The site is safe for general audiences, with no adult or questionable content. The WHOIS data confirms the legitimacy and consistency of the domain registration with the organization's claims. Strategic improvements in security and privacy compliance would further strengthen the organization's digital maturity and trustworthiness.

C

Campus für Christus Schweiz

cfc.ch

42

Campus für Christus Schweiz is a Swiss-based non-profit organization dedicated to spreading Christian values and love across various societal sectors. The organization operates with a clear mission to engage communities holistically, leveraging spiritual education and social outreach. Their market position is that of a well-established religious non-profit within Switzerland, targeting a general audience interested in faith-based community activities. Technically, the website is built on WordPress using the Divi Builder framework, incorporating modern web technologies such as Google Tag Manager and Lottie animations. The site demonstrates good digital maturity with responsive design and moderate performance. Security posture is solid with HTTPS enforcement, standard security headers, and a GDPR-compliant cookie consent mechanism. However, the absence of a publicly available security policy or incident response contact limits transparency in security governance. Overall, the website is professional, trustworthy, and compliant with privacy regulations, reflecting the organization's credibility and commitment to its mission.

F

Frisbee

frisbeenet.ch

47

Frisbee is a non-profit network organization founded in 2013 that serves as the umbrella for childhood and youth organizations in the canton of Fribourg, Switzerland. It focuses on fostering collaboration, advocacy, and support for its member organizations, promoting extracurricular activities for children and youth. The website reflects a regional community-oriented mission with clear contact information and a bilingual approach (French and German). The technical infrastructure is based on standard web technologies including HTML5, CSS3, jQuery, and Google Analytics with IP anonymization, indicating moderate digital maturity. The site is mobile responsive and well-structured, providing a good user experience. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy and professionally presented, suitable for its non-profit community role.

H

Hölibu 3000

hoelibu.ch

44

The website hoelibu.ch serves as a digital paperless songbook for the Jubla Freiburg youth organization, offering members access to a curated collection of songs with features such as filtering, transposition, and night mode. It is designed as an internal club publication with controlled access via login credentials, targeting members and contributors within the community. The site uses modern web technologies including Meteor.js and SVG graphics to provide a responsive and user-friendly experience. While the site is functional and well-designed for its niche audience, it lacks publicly available privacy and cookie policies, which limits its compliance with data protection regulations. Security posture is moderate with HTTPS enforced and login access controlling content visibility, but no advanced security headers or incident response information are present. Overall, the site is a niche community tool with a good technical foundation but could improve in privacy and security transparency.

Ü

Übergang Schule-Beruf BW

uebergangschuleberuf-bw.de

49

The website 'Übergang Schule-Beruf BW' is a government-supported initiative aimed at facilitating the transition of youth from school to vocational training and employment in the Baden-Württemberg region of Germany. It provides structured programs such as career orientation, dual vocational preparation, and regional transition management to support young people, especially those with special needs. The site is professionally designed, well-structured, and targets educational institutions, youth, and regional stakeholders. Technically, it is built on TYPO3 CMS with modern responsive design elements and uses Matomo for privacy-conscious analytics. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly available. WHOIS data confirms domain legitimacy and consistency with the business purpose. Overall, the site is trustworthy, compliant with GDPR, and serves as a credible resource for its audience.

T

Training-Fit : Fitness and bodybuilding equipment

training-fit.ie

48

Training-Fit.ie is an e-commerce website specializing in fitness and bodybuilding equipment, offering a wide range of products including cardio devices, professional fitness machines, bodybuilding accessories, crossfit gear, yoga apparel, fighting sports equipment, clothing, shoes, and related accessories. The site targets fitness enthusiasts, athletes, and consumers seeking quality fitness products from well-known brands. The business model is retail-focused, leveraging online sales with fast delivery and secure payment options. The domain is newly registered in December 2023, indicating a recent market entry or brand launch. Technically, the website is built on Magento (OpenMage), utilizing modern web technologies such as Google Analytics, Google Tag Manager, Google Ads, and reCAPTCHA for security and marketing. The site is hosted with Gandi, with HTTPS enabled and a clientTransferProhibited domain status, indicating basic domain security. Mobile optimization and navigation are good, though accessibility features are basic. SEO practices are adequately implemented with proper meta tags. From a security perspective, the site uses HTTPS and reCAPTCHA, and implements a consent management platform to comply with privacy regulations. However, no DNSSEC is enabled, and security headers are missing, which are areas for improvement. No privacy policy or terms of service were found, which is a compliance gap. No contact information for security incidents or data protection officers is provided, limiting incident response readiness. Overall, the website presents a professional and trustworthy e-commerce platform with moderate security posture and technical maturity. Strategic improvements in privacy documentation, security headers, and contact transparency would enhance compliance and trustworthiness.

O

Out the Box

outtheboxthemes.com

44

Out the Box is a small technology company specializing in the development and sale of WordPress themes. Their website showcases a portfolio of responsive, well-designed themes aimed at WordPress users and developers seeking professional and customizable website solutions. The company emphasizes plugin compatibility, clear coding, and personal support, positioning itself as a niche provider in the WordPress theme market. Technically, the website is built on WordPress with common plugins such as Easy Digital Downloads and uses modern web technologies including jQuery and Google Analytics. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is generally good with HTTPS enabled and no obvious vulnerabilities, but the absence of security headers and privacy policies indicates room for improvement. The lack of WHOIS registration data raises concerns about domain legitimacy, although the active and professional nature of the website mitigates some risk. Overall, the site is trustworthy for its business purpose but would benefit from enhanced transparency and compliance documentation.

The website fram2ham.com currently serves a robot challenge screen indicating that access to the actual content is blocked by a security mechanism, likely a Web Application Firewall (WAF). The domain is newly registered in December 2024 and hosted with SiteGround DNS servers. No business or contact information, privacy policies, or terms of service are present on the accessible page. The technical implementation includes advanced JavaScript with Web Workers to solve CAPTCHA challenges, but no analytics or tracking scripts are detected. The security posture is weak with no visible HTTPS enforcement or security headers, and the domain lacks DNSSEC. Overall, the site appears to be in an initial or protected state with minimal public-facing content.

P

P2 Betriebs GmbH

parndorf-entertainment.at

48

Parndorf Entertainment Center is a small hospitality and entertainment business located in Parndorf, Austria, operated by P2 Betriebs GmbH. The center hosts multiple tenant businesses including restaurants, a trampoline park, a tattoo studio, a toy store, and bowling facilities, targeting families and local visitors seeking leisure and dining experiences. The website presents a professional and consistent brand image with clear contact information and business details. Technically, the site uses modern web standards with responsive design and optimized images, though it lacks advanced frameworks or CMS indicators. Security posture is adequate with HTTPS enforced and cookie consent implemented, but could benefit from additional security headers and explicit security policies. Privacy compliance is supported by a visible privacy policy and cookie banner, aligning with GDPR requirements. Overall, the website is functional, trustworthy, and suitable for its business purpose, with room for technical and security enhancements.

P

Pure Paros Studios

pure-paros-studios.com

48

Pure Paros Studios operates a luxury apartment rental service focused on a high-end studio apartment experience on the Greek island of Paros. The website presents a professional and visually appealing platform targeting tourists seeking comfort and elegance. The business offers additional personalized services such as airport pick-up and local guides, positioning itself as a niche hospitality provider. Technically, the site uses modern web standards with HTTPS and Matomo analytics, indicating a moderate level of digital maturity. However, the absence of privacy and cookie policies and lack of security headers highlight compliance and security gaps. The WHOIS data is missing, which raises concerns about domain legitimacy despite the active and professional website presence. Overall, the site is safe and trustworthy for users but would benefit from improved transparency and security practices.

Ö

Österreichisches Rotes Kreuz Landesverband Oberösterreich

missionhumanity.at

49

MissionHumanity is a social engagement platform operated by the Austrian Red Cross Upper Austria branch, focusing on youth and community-driven social projects since 2020. The website serves as an information hub, project submission portal, and news outlet to foster community participation and social responsibility. It maintains a strong regional presence with partnerships in education and corporate sectors. Technically, the site uses modern web technologies including responsive design, JavaScript libraries like Owl Carousel, and privacy-focused Matomo analytics. Security posture is solid with HTTPS and basic security practices, though some security headers could be enhanced. Privacy compliance is well addressed with clear cookie consent and a GDPR-aligned privacy policy. Contact information is transparent and professional, reinforcing trust. Overall, the site is well-positioned as a credible non-profit platform with good digital maturity and community impact.

I

igm Robotersysteme AG

igm-group.com

38

igm Robotersysteme AG is an Austrian manufacturer specializing in industrial robotic welding systems, primarily for arc welding applications. The company operates internationally, offering products, customer service, training, and demonstration centers. Their market position is supported by membership in industry groups and a parent company affiliation with Global Welding Technologies Group. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content for industrial clients. Technically, the website uses modern JavaScript libraries and Google Analytics for tracking. It is served over HTTPS with good performance and basic accessibility features. However, some security best practices such as security headers and cookie consent mechanisms are missing. The WHOIS data for the domain is unavailable, which raises concerns about domain registration transparency but does not directly contradict the legitimacy of the business based on website content and social presence. Security posture is generally good with encrypted connections and secure form usage, but improvements are recommended in security headers and incident response disclosures. Privacy compliance is partially met with a privacy policy page but lacks cookie consent banners. Overall, the website presents a trustworthy and professional image with moderate risk due to missing WHOIS data and some compliance gaps. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing vulnerability disclosure policies, and improving accessibility to strengthen trust and compliance.

R

Rogy und Rogy Wirtschaftsprüfungs- und Steuerberatungs GmbH

rogyundrogy.at

48

Rogy und Rogy Wirtschaftsprüfungs- und Steuerberatungs GmbH is a well-established, family-run tax consulting and auditing firm based in Vienna, Austria, with over 40 years of experience. The company offers a broad range of financial services including tax declarations, social insurance consulting, business advisory, auditing, and specialized services for small and micro-entrepreneurs. Their market position is that of a trusted local expert catering primarily to small and medium-sized enterprises and self-employed individuals. The website is professionally designed, content-rich, and compliant with GDPR and cookie regulations, targeting German-speaking Austrian clients. Technically, the website uses a proprietary CMS (Internetkonzepte.at CMS) and incorporates modern JavaScript libraries such as jQuery and Owl Carousel for UI enhancements. The site is mobile-optimized with good SEO practices and moderate performance. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit incident response policies are missing. Overall, the security posture is good with no detected vulnerabilities or exposed sensitive data. The WHOIS data aligns well with the business claims, showing consistent registration details and domain age appropriate for the business history. No WAF or blocking mechanisms interfere with content access. The strategic recommendation includes enhancing security headers, publishing a security policy, and improving accessibility features to further strengthen trust and compliance. The website demonstrates a high level of professionalism and trustworthiness suitable for its business domain.

R

Reisebüro Pregesbauer e.U

sonderwunsch-reisen.at

49

Reisebüro Sonderwunsch, operated by Manuela Severing under Reisebüro Pregesbauer e.U, is a specialized travel agency based in Austria focusing on personalized travel experiences and special requests. The website offers detailed information about various thematic travel options including honeymoon trips, golf trips, cruises, and sustainable travel accommodations. The business targets private and business travelers seeking bespoke travel planning and consultation services. Technically, the website employs modern JavaScript libraries and analytics tools such as Matomo and Google Tag Manager, with a responsive design optimized for mobile devices. Security posture is solid with HTTPS enforced, though improvements can be made by adding security headers and cookie consent mechanisms. Contact information is comprehensive and clearly presented, enhancing business credibility. No blocking or WAF challenges were detected, allowing full content accessibility.

T

Tierklinik Perchtoldsdorf Ost

tierklinik-perchtoldsdorf-ost.at

47

Tierklinik Perchtoldsdorf Ost is a veterinary clinic located in Perchtoldsdorf, Austria, serving the Vienna surrounding area with a comprehensive range of animal healthcare services. The clinic offers 24/7 emergency services, advanced diagnostic imaging such as CT and MRI, and specialized treatments including orthopedics, dermatology, cardiology, and physiotherapy. The website reflects a well-established regional veterinary provider with clear contact information and active engagement through social media and blog content. Technically, the site uses modern JavaScript libraries and analytics tools, is mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS and secure forms, though it lacks explicit security policies or vulnerability disclosure mechanisms. Privacy compliance is well addressed with a GDPR-compliant privacy policy and cookie consent banner. Overall, the website and business present a trustworthy and professional image suitable for their target audience of pet owners in the region.

K

Kunsttrans Spedition GesmbH

kunsttrans.com

41

Kunsttrans Spedition GesmbH is a specialized Austrian company focused on the transportation, storage, and handling of art. Their services cater to art collectors, museums, galleries, and institutions requiring expert logistics solutions for valuable and delicate artworks. The company emphasizes secure, tailored transport and sustainable practices, positioning itself as a trusted niche provider in the art logistics sector. The website is professionally designed, bilingual (German and English), and provides comprehensive service descriptions and contact information, supporting a medium-sized business profile. Technically, the website employs modern web technologies including HTTPS, Matomo analytics for privacy-conscious tracking, and the June Framework for form handling. The site is mobile-optimized with good SEO and accessibility features, though some improvements in security headers and cookie consent mechanisms are recommended. The WHOIS data is notably missing or unavailable, which raises concerns about domain registration legitimacy despite the active and professional online presence. From a security perspective, the site benefits from HTTPS and secure form handling but lacks visible security headers and explicit incident response or vulnerability disclosure policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially addressed with a privacy policy page but lacks a cookie consent mechanism. Overall, the site demonstrates a solid security posture with room for enhancement in compliance and transparency. The overall risk assessment is moderate due to the missing WHOIS data and minor compliance gaps. Strategic recommendations include verifying domain registration, implementing security headers, adding cookie consent, and publishing security policies to enhance trust and compliance.

G

Gruber Sauna

gruber-sauna.at

49

Gruber Sauna is a well-established Austrian company specializing in the design and construction of high-quality wellness solutions including Massivholz-Saunas, Infrarotkabinen, Dampfbäder, and Home Spa installations. With a tradition spanning approximately 50 years, the company serves private customers, hotels, and commercial clients, emphasizing custom craftsmanship and personalized service. The website reflects a mature digital presence with clear navigation, good content quality, and multiple physical locations enhancing customer trust. Technically, the site employs modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and Matomo, and uses HTTPS with good SSL configuration. However, it lacks some security headers and a cookie consent mechanism, which are areas for improvement. No critical security vulnerabilities or suspicious content were detected, and the WHOIS data aligns well with the business claims, supporting legitimacy.

F

Franz Neubauer Ges.m.b.H.

mercedes-benz-werkstatt.at

46

Franz Neubauer Ges.m.b.H. operates as an authorized Mercedes-Benz and smart vehicle service center located in Vienna, Austria. The company provides comprehensive automotive repair, maintenance, bodywork, and parts sales services, targeting Mercedes-Benz vehicle owners seeking quality and authorized service. The website reflects a small-sized, family-owned business with a clear focus on automotive transportation services. Technically, the site uses a CMS from Internetkonzepte.at and common JavaScript libraries such as jQuery and Modernizr, delivering a moderately performant and mobile-optimized experience. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and published security policies. Privacy compliance is basic but present, with a GDPR-compliant privacy policy and cookie banner. Overall, the website is professional, trustworthy, and well-structured, supporting the business's credibility and customer engagement.

R

Rechtsanwalt Ing. Mag. Thomas Benda

rechtsanwalt-benda.at

47

Rechtsanwalt Ing. Mag. Thomas Benda is a small legal practice based in Austria, specializing in process representation, legal enforcement, contract drafting, and comprehensive legal advice. The website clearly targets individuals and businesses seeking legal services, emphasizing integrity, client-focused solutions, and professional legal support. The firm has been established since 2007 and operates independently since 2012, positioning itself as a trusted local legal advisor. Technically, the website employs standard web technologies including HTML5, CSS, and JavaScript, with a responsive design optimized for mobile devices. The site loads at a moderate speed and includes proper meta tags for SEO. However, no advanced frameworks or CMS platforms are detected, indicating a custom or lightweight implementation. Accessibility is basic but functional. From a security perspective, the website uses HTTPS with excellent SSL configuration, secure form submission, and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security headers and publicly available security or incident response policies. Privacy compliance is well addressed with a GDPR-compliant privacy policy and cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the website presents a professional, trustworthy, and secure online presence for a small legal practice. There are no critical security issues or content safety concerns. Strategic improvements could include adding security headers, publishing security policies, and enhancing accessibility features to further strengthen the security posture and user trust.

F

Forum Werteorientierung in der Weiterbildung e. V.

forumwerteorientierung.de

48

Forum Werteorientierung in der Weiterbildung e. V. is a German non-profit organization dedicated to promoting ethical and value-oriented practices in the continuing education sector. The organization provides a quality seal and a professional code of conduct to its member organizations, aiming to enhance transparency and integrity in the education market. The website serves as an informational platform showcasing members, partners, sponsors, and providing updates on seminars and news relevant to the sector. Technically, the website is built on WordPress with common plugins and libraries such as jQuery and Owl Carousel, hosted on rzone.de servers. It demonstrates moderate performance and good mobile optimization. Security-wise, the site uses HTTPS and implements a cookie consent banner, but lacks advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected. Overall, the site is professional, trustworthy, and compliant with basic privacy regulations, though it could improve in security policy transparency and technical security hardening.

V

VBT - Vereinigung der Business Trainer Österreich

business-trainer.at

44

The Vereinigung der Business Trainer Österreich (VBT) is a professional association dedicated to business trainers in Austria, offering a platform for networking, professional development, and exclusive member benefits. The website reflects a well-established organization with a clear focus on education and community building within the business training sector. It maintains a strong market position by providing quality certifications, workshops, and cross-border membership advantages with the German BDVT. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Real Cookie Banner, ensuring good SEO and privacy compliance. The presence of Facebook Pixel and Plausible Analytics indicates moderate user tracking balanced with privacy considerations. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although explicit security policy documentation is absent. Overall, the site is professional, trustworthy, and compliant with GDPR, serving its target audience effectively.

B

Basket-Center

basket-center.com

41

Basket-Center is a specialized e-commerce retailer focused on basketball and American sports equipment and apparel. Established in 2015, it serves a broad audience of basketball players, fans, and sports enthusiasts primarily in the US and Europe. The company offers official brand merchandise from well-known manufacturers such as Adidas, Nike, Wilson, and Mitchell & Ness, positioning itself as a trusted distributor with fast delivery and secure payment options. The website reflects a professional and consistent brand image with clear navigation and comprehensive product categorization. Technically, the website is built using modern technologies including SvelteKit, Cloudflare CDN, and integrates Google Analytics and Google Ads for marketing and tracking. It is well optimized for mobile devices and demonstrates good performance and accessibility standards. The presence of a consent management platform indicates attention to privacy compliance, particularly GDPR. From a security perspective, the site enforces HTTPS, employs standard security headers, and maintains a secure domain registration status. No critical vulnerabilities or exposed sensitive data were detected. However, enabling DNSSEC and publishing a formal security policy or vulnerability disclosure could further enhance trust and security posture. Overall, Basket-Center presents a low-risk profile with strong business credibility, good technical implementation, and solid privacy compliance. Strategic improvements in DNS security and formal security disclosures are recommended to maintain and improve trustworthiness.

V

Vélo-Store

velo-store.co.uk

36

Vélo-Store is a specialized online retailer focused on bicycle parts, cycling gear, and related equipment, targeting cyclists primarily in the UK and Europe. The business operates multiple country-specific domains, indicating a strategic international presence. Their e-commerce platform offers a broad product catalog with competitive pricing and emphasizes fast delivery and secure payment options. The website demonstrates a professional and consistent brand image with clear navigation and relevant content for cycling enthusiasts. Technically, the site leverages modern web technologies including SvelteKit, Google Analytics, Google Tag Manager, and a consent management platform to ensure GDPR compliance. Hosting appears to be via Cloudflare, contributing to fast performance and robust security. The website is mobile-optimized and SEO-friendly, though accessibility features could be enhanced. The use of multiple tracking and advertising tools is balanced with user consent mechanisms, reflecting a mature digital marketing approach. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. However, there is no dedicated security policy or incident response contact information published, which could be improved. No vulnerabilities or exposed sensitive data were detected. Overall, the security posture is solid but could benefit from formalized policies and vulnerability disclosure mechanisms. The overall risk assessment is low, with the website appearing trustworthy and professionally managed. Strategic recommendations include publishing a security policy, adding incident response contacts, implementing security.txt, and enhancing accessibility. These steps would further strengthen compliance and user trust while maintaining a strong market position.

T

Trek-Expert

trek-expert.co.uk

41

Trek-Expert is a UK-based e-commerce retailer specializing in outdoor and sports equipment, offering products such as hiking shoes, clothing, and gear with discounts up to 70%. The company operates multiple country-specific websites and targets outdoor enthusiasts primarily in the UK and Europe. The website demonstrates a modern technical infrastructure using SvelteKit, integrates Google Analytics and advertising platforms, and employs GDPR-compliant cookie consent mechanisms. Security posture is strong with HTTPS, security headers, and secure payment options, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is professional, trustworthy, and well-optimized for performance and mobile use.

P

PrellballProjekt Berlin

prellballprojektberlin.de

48

PrellballProjekt Berlin is a small non-profit organization dedicated to promoting the sport of Prellball among youth in Berlin and northern Germany. The website serves as a community hub providing information about training, events, and tournaments, supported by local clubs and volunteers. The organization has a clear focus on youth engagement and sports development, with active social media channels and regular blog updates. Technically, the site is built on WordPress with common plugins for forms and GDPR compliance, hosted by netcup. Security posture is adequate with HTTPS and reCAPTCHA, but lacks advanced security headers and a vulnerability disclosure policy. Privacy compliance is addressed with a privacy policy and cookie consent mechanism. Overall, the site is professional, trustworthy, and well-maintained for its niche audience.