Security Directory

L

Life Style Magazin Verlags GmbH

bundeslaenderinnen.at

66

Life Style Magazin Verlags GmbH operates the website www.bundeslaenderinnen.at, a professional media publishing platform hosting nine regional lifestyle magazines targeting Austrian federal states. The company offers bundled advertising packages and regional content with international quality standards, positioning itself as a key regional media player in Austria. The website is well-branded, consistent, and provides clear contact and legal information, supporting its credibility and trustworthiness. Technically, the website leverages modern analytics tools including Google Analytics, Snowplow, and INFOnline Measurement Manager, hosted on FastCDN and built on the Instapage platform. The site is mobile-optimized with moderate performance and basic accessibility features. SEO is basic but present with proper meta tags and Open Graph data. Security posture is good with HTTPS enforced and standard security headers present. The site includes a cookie consent mechanism aligned with GDPR requirements and provides a privacy policy and terms of service documents. However, no explicit security policy or incident response information is published, which could be improved. Overall, the website presents a low risk profile with no detected vulnerabilities or suspicious content. It is suitable for general audiences with safe content focused on lifestyle and regional media. Strategic recommendations include enhancing security transparency, improving accessibility, and expanding SEO and privacy disclosures.

D

DOSON spol. s r.o.

doson.cz

43

DOSON spol. s r.o. is a Czech family-owned company specializing in commercial security services since 1993. The company offers a comprehensive range of security solutions including physical guarding, alarm system monitoring with rapid response, retail security, occupational safety audits and training, security project planning, and additional facility services such as cleaning and maintenance. The company holds NBÚ certification for access to classified information and maintains significant insurance coverage, positioning itself as a trusted security provider in the Czech Republic. The website reflects a professional and consistent brand image targeting businesses requiring property and personnel protection services. Technically, the website is built on WordPress using the Enfold theme and incorporates modern web technologies including jQuery and Google Analytics. The site is mobile-optimized and provides a cookie consent mechanism compliant with basic GDPR requirements. However, it lacks explicit privacy and terms of service pages, which are important for full compliance and user trust. The site uses HTTPS with good SSL configuration but does not implement advanced security headers, which could enhance its security posture. From a security perspective, the site demonstrates good practices such as encrypted connections and cookie consent but could improve by adding security headers and incident response contact information. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data limits domain trust assessment, but the website content and business information appear legitimate and professional. Overall, DOSON.cz is a credible and professional security services provider with a solid digital presence. Strategic improvements in privacy documentation and security headers would enhance compliance and trustworthiness.

P

Pořádková a zásahová služba s.r.o.

pazs.cz

44

Pořádková a zásahová služba s.r.o. is a medium-sized Czech security company specializing in intervention and physical security services, electronic security systems, and public order maintenance. The company operates primarily in Prague and surrounding regions, serving over 40,000 clients. Their website presents a professional image with clear descriptions of services and operational areas, including an interactive SVG map showing vehicle locations. However, the absence of WHOIS data raises questions about domain registration status, which should be verified for full trustworthiness. Technically, the website uses basic HTML and CSS without advanced frameworks or CMS, and lacks modern security headers and privacy compliance features. No analytics or tracking scripts were detected, indicating minimal user tracking. Contact information is limited but includes a company email and physical address, with a Facebook social media presence. Overall, the website is functional and professional but would benefit from enhanced security and privacy features.

4biz Consulting GmbH operates as a corporate think tank within the Peter Lieber Unternehmensgruppe, focusing on interdisciplinary research and project groups that support strategic decision-making and innovation. The company collaborates closely with partner firms specializing in enterprise architecture and UML modeling, positioning itself as a niche consulting entity in the technology sector. The website reflects a professional and consistent brand image with clear business descriptions and partner references. Technically, the website uses standard web technologies including HTML5, CSS3, and jQuery, with a moderate performance profile and good mobile optimization. However, there is no evidence of a CMS or advanced frameworks, and accessibility features are basic. SEO optimization is minimal but present. From a security perspective, the site lacks visible security headers and cookie consent mechanisms, and no HTTPS status was provided in the data. No forms with sensitive data collection were detected, reducing immediate risk exposure. Privacy policy is present and GDPR compliant, but terms of service and incident response policies are missing. WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website presents a moderate risk profile with room for improvement in security best practices and privacy compliance. Strategic enhancements in HTTPS enforcement, security headers, and cookie consent would strengthen the security posture and user trust.

S

SparxSystems Software GmbH

sparxsystems.eu

62

SparxSystems Europe operates as a professional technology company specializing in the development and distribution of the Enterprise Architect modelling tool and its associated product suite. The company targets software developers, systems engineers, enterprise architects, and business analysts, offering a comprehensive platform for modelling, project management, and collaboration. Their market position is strong, with over a million users worldwide and adoption by more than 80% of Fortune 100 companies. The business model includes software sales, cloud services, and professional training through their Academy of Professional Modelling. Technically, the website is built on a modern WordPress CMS with a well-maintained Divi theme and several professional plugins for SEO, anti-spam, and GDPR compliance. The site demonstrates good performance, mobile optimization, and accessibility. Security measures include HTTPS enforcement, bot detection, and cookie consent management, although some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. The security posture is solid with good privacy compliance, including comprehensive privacy and cookie policies and GDPR adherence. However, the absence of explicit incident response contacts and vulnerability disclosure mechanisms suggests room for improvement. The domain WHOIS data is privacy protected, which is common and justified for this business type, with no suspicious patterns detected. Overall, SparxSystems Europe presents a trustworthy, professional, and secure online presence aligned with its business objectives. Strategic recommendations include enhancing security headers, publishing a security.txt file, and providing clearer incident response contacts to further strengthen trust and compliance.

I

Institut für empirische Sozialforschung

ifes.at

54

Institut für empirische Sozialforschung (IFES) is an Austrian research institute specializing in empirical social research. The website serves as an informational platform primarily targeting academic and research audiences interested in social science studies. The business model appears to focus on providing research and consultancy services in the social sciences sector. The website is built on WordPress using the Divi theme, indicating a moderate level of digital maturity with basic mobile optimization and SEO features. However, the site lacks comprehensive privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security posture is minimal with no detected security headers or incident response information, suggesting room for improvement in protecting user data and ensuring regulatory compliance. Overall, the website is functional but basic in design and content quality, with moderate trustworthiness based on WHOIS data and domain legitimacy.

T

Tanja Dobart

accompany.at

39

The website accompany.at represents a small consulting and coaching business led by Tanja Dobart, focusing on organizational accompaniment, strategic advice, coaching, team development, and workshop moderation. The target audience includes private individuals, leaders, teams, and organizations primarily in Austria. The business operates a professional, well-branded website built on WordPress using the Divi theme and Yoast SEO plugin, indicating a moderate level of digital maturity. The site is well-structured, mobile-optimized, and SEO-friendly but lacks critical privacy and cookie policies, which impacts compliance and trust. Security posture is adequate with HTTPS enabled and good SSL configuration; however, the absence of security headers and incident response information suggests room for improvement. Overall, the site is safe, professional, and trustworthy but would benefit from enhanced privacy compliance and security best practices to reduce risk and improve user trust.

S

Sucht- und Drogenkoordination Wien gemeinnutzige GmbH

sdw.wien

53

Sucht- und Drogenkoordination Wien is a Vienna-based non-profit organization dedicated to providing support, advice, and prevention services related to addiction and drug use. The organization offers a range of services including prevention, counseling, treatment, and social reintegration, targeting residents of Vienna, parents, educators, and individuals affected by addiction. The website reflects a well-established entity with a domain age since 2014, consistent WHOIS data, and a clear mission aligned with public health and social support.

WEG is a global industrial company specializing in electric motors, drives, transformers, and related products. The company positions itself as a leader in energy efficiency and sustainability solutions for various industrial sectors. Their website reflects a mature digital presence with comprehensive product catalogs, multi-language support, and detailed corporate information. Technically, the site uses modern frameworks such as Bootstrap and integrates analytics and tracking tools like Google Analytics, Microsoft Clarity, and Facebook Pixel. Security posture is generally good with HTTPS enforced, but lacks visible security headers and explicit incident response information. WHOIS data is unavailable, which is unusual and slightly impacts trust but does not detract significantly from the overall legitimacy given the professional website and corporate presence. Privacy and cookie policies are present and GDPR compliant, supporting good privacy practices.

K

KARLSKRONA LC AB

karlskrona.kz

45

KARLSKRONA LC AB is a medium-sized manufacturing company based in Kazakhstan, specializing in the production and sale of pump equipment, electrical, and custom machinery primarily serving industrial clients in Central Asia. The company has an established market presence since 2010 and offers a full cycle of engineering, manufacturing, and service support. Their website reflects a professional business with clear branding and a focus on industrial products. Technically, the site runs on an older WordPress version with multiple plugins, including Yoast SEO and analytics tools such as Google Analytics and Yandex Metrika. While the site is functional and moderately optimized for SEO and mobile, it lacks modern security practices and privacy compliance features. Security posture is moderate with HTTPS enabled but outdated software and missing security headers present risks. Overall, the business appears legitimate and transparent, but improvements in security and privacy compliance are recommended.

M

Murrelektronik GmbH

murrelektronik.com

56

Murrelektronik GmbH is a global manufacturer and supplier of automation components including power supplies, cordsets, and IO systems designed to decentralize automation in machines and applications. The company targets industrial automation professionals and system integrators, positioning itself as a key player with worldwide representation. The website reflects a mature digital presence with a professional design, multilingual support, and comprehensive business information. Technically, the site is built on TYPO3 CMS, employs Matomo analytics with user opt-out, and integrates Usercentrics for consent management, indicating a strong commitment to privacy and compliance. Security posture is robust with HTTPS enforcement and security headers, though explicit security policies and incident response details are absent. Overall, the site is trustworthy and well-maintained, though the lack of WHOIS data slightly reduces domain trustworthiness. Strategic recommendations include publishing security policies, vulnerability disclosure, and enhancing transparency on data protection roles.

W

WEICON

weicontools.com

70

WEICON is a German-based manufacturer specializing in industrial tools such as cable strippers, wire strippers, and multi-purpose stripping tools, targeting industry and trade sectors including energy, transportation, and manufacturing. The company maintains a professional online presence with a well-structured website built on the Shopware 6 platform, integrating modern technologies and analytics tools. The site is optimized for mobile use and provides clear navigation and product information, although explicit privacy and cookie policies are not found in the provided content. Security posture is solid with HTTPS enforced and no exposed sensitive data, but could be improved by adding security headers and explicit incident response contacts. Overall, the domain and website appear legitimate and consistent with the business profile.

M

Murrplastik Systemtechnik GmbH

murrplastik.com

53

Murrplastik Systemtechnik GmbH is a well-established global specialist in smart cable management systems, offering a broad range of products including labeling, conduits, cable entry systems, automation solutions, and energy chains. Founded in 1963 and headquartered in Germany, the company serves diverse industrial sectors such as energy, transport, and manufacturing. Their market position is strong, supported by numerous certifications and a professional digital presence. Technically, the website is built on TYPO3 CMS with modern frameworks and includes cookie consent management, indicating a mature digital infrastructure. Security posture is good with HTTPS and privacy compliance, though some security headers and explicit security policies are missing. Overall, the website is professional, trustworthy, and well-optimized for users and search engines.

P

pharmaxlab.com

pharmaxlab.com

45

Pharmaxlab.com is a specialized pharmaceutical e-commerce platform that offers a wide range of pharmaceutical products including injectables, tablets, post cycle therapy (PCT), erectile dysfunction treatments, and human growth hormone. The company emphasizes product quality through laboratory testing by an independent GMP-certified laboratory and provides product verification and dealer verification services to ensure authenticity and trust. The website is built on WordPress with WooCommerce and Elementor, reflecting a modern and functional digital infrastructure suitable for e-commerce operations. The site is secured with HTTPS and domain registration protections but lacks advanced DNS security features such as DNSSEC and does not publish privacy or cookie policies, which are important for compliance and user trust. Overall, the security posture is moderate with room for improvement in security headers and privacy compliance. The website content is professional, relevant, and safe for general audiences, targeting pharmaceutical product consumers and resellers. Strategic recommendations include implementing privacy and cookie policies, enabling DNSSEC, adding security headers, and publishing incident response and vulnerability disclosure information to enhance trust and compliance.

F

FENOZA s.r.o.

fenozashop.sk

49

FenozaShop SK is a Slovak-based e-commerce retailer specializing in industrial cutting tools and machinery, including band saws, circular saws, saw blades, and accessories for metal, wood, and concrete. The company targets professional and industrial customers requiring specialized cutting equipment. The website is built on the Prestashop platform and features a well-structured catalog with clear navigation and product categorization. The business appears to be a small-sized entity with a focused niche market in Slovakia. Technically, the website employs modern e-commerce technologies including Prestashop CMS, Font Awesome icons, Google Tag Manager, Google Ads remarketing, and Smartsupp live chat. The site is mobile-optimized and uses structured data markup to enhance SEO. Performance is moderate with good SEO and basic accessibility features. From a security perspective, the site enforces HTTPS, uses standard security headers, and implements a cookie consent mechanism compliant with GDPR. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and compliant with basic privacy regulations. The main risks relate to the absence of detailed security policies and incident response information. Strategic improvements in these areas would enhance trust and security posture.

F

FENOZA s.r.o.

fenoza.cz

45

FENOZA s.r.o. is a Czech Republic-based specialist company focused on supplying and servicing high-production metal cutting technologies, including band saws and circular saws primarily from the Everising and Pilana brands. The company offers a comprehensive portfolio of products and services including carbide saw blades, cutting lines with automation and robotics, and consulting services to optimize cutting efficiency. Their market position is that of a niche specialist with exclusive supplier relationships and a strong focus on industrial customers in metal manufacturing sectors. Technically, the website employs a moderate technology stack with legacy jQuery and modern tracking tools like Hotjar and Google Analytics. The site is accessible, well-structured, and SEO optimized but lacks some modern security headers and cookie consent mechanisms. Security posture is good with HTTPS enforced but could be improved by updating libraries and adding security headers. WHOIS data is unavailable, indicating privacy protection or registration issues, which slightly reduces trust but does not negate the professional presentation and business legitimacy. Overall, the website and business appear credible and well-positioned in their niche with room for security and privacy compliance improvements.

The website parking-crew.com is a parked domain primarily serving advertising content with no substantive business information or services presented. The domain has been registered since 2011 through a reputable registrar but lacks any clear business identity or contact details on the site. The technical infrastructure relies on basic HTML, CSS, and JavaScript with third-party advertising and tracking scripts from Google Adsense, DoubleClick, and Youseasky. There is no evidence of HTTPS usage or security headers, and no forms or user inputs are present. Privacy compliance is minimal with only a basic privacy policy accessible via a JavaScript popup and no cookie consent mechanism. Overall, the site appears to be a placeholder domain monetized through ads rather than an active business website.

G

Getaround

getaround.com

75

Getaround is a well-established peer-to-peer carsharing platform founded in 2003, offering instant car rentals with app-based unlocking technology and trip liability insurance included. The company targets consumers and car owners in the United States, positioning itself as a market leader with a strong digital presence and high user ratings. Their business model leverages proprietary cloud and in-car Connect® technology to enable contactless carsharing experiences. Technically, the website employs a modern tech stack including JavaScript frameworks, Google Tag Manager, Stripe for payments, and Mapbox for mapping, hosted behind Cloudflare for performance and security. The site is mobile-optimized, fast, and accessible with good SEO practices. Security posture is strong with HTTPS enforcement, clientTransferProhibited domain status, and cookie consent mechanisms, though DNSSEC is not enabled and explicit security policies are not published. Overall, the website is professional, trustworthy, and compliant with GDPR and privacy standards, with no signs of malicious activity or content safety concerns.

F

FAMILY OF POWER

familyofpower.com

65

FAMILY OF POWER operates a regional e-Carsharing service in Austria, focusing on sustainable mobility solutions powered by 100% renewable energy. The company targets municipalities, businesses, residential communities, and private individuals, offering flexible and affordable electric car sharing with transparent pricing and cooperative business model elements. Their services include e-Carsharing vehicle rental, renewable energy communities, and investment opportunities through POWER participation. The website is professionally designed with good content quality and clear navigation, supporting user engagement and service promotion. Technically, the website employs modern frontend technologies such as jQuery, Foundation framework, lazy loading, and Google Maps API with privacy-conscious consent mechanisms. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and published security policies. The WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy despite the active and professional website presence. Privacy and cookie policies are not found, indicating compliance gaps with GDPR and related regulations. Contact information is clearly provided, but no social media presence or incident response details are published. Overall, the website presents a credible and professional business front for a small regional cooperative in the energy and transportation sectors, but improvements in privacy compliance, security transparency, and domain registration clarity are recommended to enhance trust and reduce risk.

C

Caruso Carsharing

carusocarsharing.com

56

Caruso Carsharing is a well-established Austrian carsharing service specializing in electric vehicles, primarily serving the regions of Vorarlberg and Salzburg. The company offers flexible, app-based vehicle rental solutions for both private individuals and business clients, emphasizing sustainability and cost-effectiveness. Their business model includes short-term carsharing and longer-term rentals under the 'caruso plus' program. The website reflects a professional and modern digital presence with comprehensive content and clear navigation, targeting environmentally conscious users seeking alternative mobility options. Technically, the website is built on WordPress with a modern tech stack including jQuery, Ion.RangeSlider, and animation libraries, optimized for mobile devices and SEO. The infrastructure is stable with HTTPS enforced and domain security measures in place, although DNSSEC is not enabled. The site integrates cookie consent mechanisms and complies with GDPR requirements, demonstrating a mature approach to privacy and user data protection. From a security perspective, the site shows good practices such as HTTPS, domain locking, and no visible vulnerabilities or exposed sensitive data. However, there is room for improvement by enabling DNSSEC, publishing a formal security policy, and adding a vulnerability disclosure channel. Overall, the risk profile is low, and the site appears trustworthy and professionally managed. Strategically, Caruso Carsharing is positioned as a regional leader in sustainable mobility with a growing footprint and diversified offerings. The company maintains active engagement through social media and news updates, enhancing customer trust and market visibility.

F

Free2move

free2move.com

73

Free2move operates as a comprehensive mobility service provider offering car sharing, car rental, parking space booking, and business mobility solutions across multiple countries. The website demonstrates a strong market presence with a large customer base and extensive service coverage. Technically, the site employs modern frameworks such as Vue.js and Bootstrap, integrates a consent management platform, and uses Google Tag Manager for analytics, indicating a mature digital infrastructure. Security posture is generally good with HTTPS enforced and privacy compliance mechanisms in place; however, the absence of explicit security headers and published security policies suggests room for improvement. The missing WHOIS data introduces some uncertainty regarding domain registration legitimacy, though the professional website and branding mitigate concerns. Overall, the site is well-designed, user-friendly, and trustworthy, serving a broad general audience with safe content.

D

Die Österreichische Postbus Aktiengesellschaft

postbus.at

65

Die Österreichische Postbus Aktiengesellschaft ist das größte Busunternehmen in Österreich und Teil der ÖBB-Personenverkehrs AG. Mit einem umfangreichen Fuhrpark und fast 4.000 Mitarbeitern befördert Postbus jährlich über 200 Millionen Reisende, vor allem im ländlichen Raum, und bietet vielfältige Dienstleistungen wie Regionalverkehr, Shuttle-Services und Busvermietung an. Die Website präsentiert sich professionell, mit klarer Navigation und gut strukturierten Inhalten, die auf Deutsch und Englisch verfügbar sind. Technisch nutzt die Seite moderne Webstandards und Matomo Analytics für datenschutzfreundliches Tracking. Die Sicherheitslage ist solide mit HTTPS und keiner erkennbaren Schwachstelle, jedoch fehlen einige Sicherheitsheader und eine explizite Cookie-Zustimmung, was die Datenschutzkonformität beeinträchtigen könnte. Insgesamt ist die Website vertrauenswürdig und gut positioniert, mit klaren Partner- und Tochtergesellschaftsbeziehungen. Es wird empfohlen, die Datenschutz- und Sicherheitsmaßnahmen weiter zu verbessern, insbesondere durch die Implementierung eines Cookie-Banners und die Veröffentlichung einer Sicherheitsrichtlinie.

1

1. Villacher Funktaxiverein

taxi28888.at

55

1. Villacher Funktaxiverein is a regional taxi and shuttle service provider based in Villach, Austria, operating the largest taxi central in the city. The company offers a range of transportation services including airport transfers, shuttle services, courier deliveries, and a dedicated taxi app for convenient booking and payment. Their market position is strong locally with a focus on both general public and business clientele. Technically, the website is built on WordPress with modern plugins and frameworks, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, though some security headers and vulnerability disclosures are missing. Overall, the domain registration and business information are consistent and trustworthy, supporting a legitimate business presence.

W

World-Direct Ebusiness Solutions Gmbh

taxi2244.at

56

Taxi2244.at is a regional taxi service website based in Austria, developed and powered by TYPO3 CMS and managed by World-Direct Ebusiness Solutions Gmbh. The website provides transportation services targeting local customers and uses modern web technologies including jQuery, Owl Carousel, and FontAwesome. The site implements a comprehensive cookie consent mechanism via Cookiebot, ensuring GDPR compliance and user privacy preferences management. However, explicit contact information such as emails or phone numbers is not directly visible on the homepage, which may impact user trust and ease of communication. The website is well-structured with good design quality and mobile optimization, providing a professional user experience.

T

Taxi40100

taxi40100.at

56

Taxi40100.at is a local Austrian taxi service offering fixed-price rides available 24/7 with booking options via phone or app. The website is built on TYPO3 CMS and incorporates modern web technologies such as jQuery and Owl Carousel. It features a comprehensive cookie consent mechanism powered by Cookiebot, ensuring GDPR compliance and user privacy. The site provides privacy and legal disclosures, enhancing trustworthiness. Technically, the site is well-implemented with HTTPS and security headers, though it lacks explicit security policy and incident response information. Overall, the site presents a professional and user-friendly experience suitable for its target audience.

N

nextbike business

nextbike.at

59

Nextbike business operates as a leading European bike-sharing service provider, offering tailored mobility solutions including both station-based and stationless bike-sharing systems. The company positions itself as a market leader in Europe, supported by a professional website with multilingual capabilities and strong branding aligned with its parent company, TIER Mobility. The website demonstrates a modern technical infrastructure built on WordPress with SEO optimization and mobile responsiveness. Security posture is adequate with HTTPS enforced, but lacks visible security headers and formal security policies. The absence of WHOIS domain registration data raises concerns about domain legitimacy, although the website content and social media presence support business credibility. Privacy and cookie policies are not clearly presented, indicating compliance gaps. Overall, the site is professional but would benefit from enhanced transparency and security documentation.

C

City Bike Linz Rental Service GmbH

citybikelinz.at

53

City Bike Linz Rental Service GmbH operates a city bike sharing platform in Linz, Austria, offering environmentally friendly and flexible urban mobility solutions. The service is integrated with the nextbike network, allowing users to rent and return bikes at 50 stations within the city and access bikes in over 200 cities across 26 countries. The website provides comprehensive information about registration, usage, pricing, and station locations, targeting residents and visitors seeking convenient transport alternatives. Technically, the website employs modern tracking and analytics tools including Google Tag Manager, Facebook Pixel, Google Analytics, and Plausible Analytics, alongside cookie consent management to ensure GDPR compliance. The site is mobile-optimized with good accessibility and SEO practices, featuring interactive elements such as Lottie animations and embedded nextbike reservation iframes. From a security perspective, the site enforces HTTPS and includes CSRF tokens, but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or suspicious content were detected. Privacy compliance is strong with clear cookie consent and privacy policy documentation. Overall, the website demonstrates a mature digital presence with strong business credibility and user trust. Recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen the security posture and user confidence.

B

Blue Jay Transit, Inc.

bird.co

62

Bird (Blue Jay Transit, Inc.) operates a leading micro-mobility platform offering electric scooters and bikes across hundreds of cities worldwide. The company positions itself as an eco-friendly urban transportation provider with a strong market presence and NYSE listing under BRDS. The website reflects a mature digital infrastructure built on WordPress with modern JavaScript libraries and integrated analytics. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though dedicated security and incident response policies are not publicly detailed. Overall, the site demonstrates professionalism, compliance with privacy regulations, and a trustworthy brand image.

D

Dott

ridedott.com

58

Dott is a European micromobility company founded in 2018, providing electric scooter and bike rental services aimed at creating pollution-free cities designed for people rather than cars. The company has established a solid market presence with a professional and well-structured website that supports multiple languages and integrates modern tracking and analytics tools. Technically, the site is built on WordPress with a modern tech stack including Google Tag Manager, Google Maps API, and advanced UI libraries, delivering a good user experience with excellent mobile optimization and SEO. Security-wise, the site uses HTTPS with domain protections in place but lacks some advanced security headers and explicit security policies. Privacy compliance is strong, with comprehensive privacy and cookie policies and a visible Data Protection Officer contact. Overall, the website reflects a mature digital presence with moderate security posture and good compliance, suitable for its business model and audience.

R

Rail & Drive

railanddrive.at

66

Rail & Drive is a mobility service operated under the Austrian Federal Railways (ÖBB) umbrella, offering integrated travel solutions combining rail journeys with car rentals at multiple locations across Austria. The service targets both private customers and companies, providing flexible vehicle options, fair pricing based on usage, and 24/7 support. The website is professionally designed with consistent branding and clear navigation, supporting user registration, booking, and information dissemination. Technically, the site uses modern web components and JavaScript frameworks, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and incident response information are missing. Privacy compliance is generally good with a comprehensive privacy policy, but lacks a cookie consent mechanism. Overall, the domain registration and WHOIS data align well with the business claims, indicating a trustworthy and legitimate operation.

City Airport Train operates as a specialized transportation service providing the fastest nonstop train connection between Vienna Airport and the city center. The company targets travelers seeking efficient and comfortable airport transfers, offering ticket sales, additional travel packages, and city transport combinations. The website reflects a strong market position as a leading airport express train service in Vienna, supported by positive customer reviews and partnerships with recognized platforms like GetYourGuide and Saferpay for payment processing. Technically, the website is built on modern frameworks such as Vue.js and Nuxt.js, ensuring a responsive and mobile-optimized user experience. The integration of secure payment gateways and use of security headers demonstrate a mature digital infrastructure. However, the absence of a visible cookie consent mechanism indicates a gap in privacy compliance, which should be addressed to meet GDPR standards fully. From a security perspective, the site enforces HTTPS, employs security headers, and integrates CAPTCHA to protect forms, reflecting good security hygiene. No critical vulnerabilities or exposed sensitive data were detected. The lack of WHOIS data is a notable anomaly, suggesting either privacy protection or recent domain registration, which slightly impacts trust but is mitigated by the professional site content and social media presence. Overall, the website presents a low-risk profile with strong business credibility and technical implementation. Strategic improvements in privacy compliance and transparency around security policies would enhance trust and regulatory adherence.

M

Mobilitätsverbünde Österreich

mobilitaetsverbuende.at

66

Mobilitätsverbünde Österreich is a consortium of seven regional transport associations in Austria focused on ensuring sustainable and comprehensive public mobility across all Austrian regions. The website serves as an informational platform promoting their collaborative efforts and sustainable transport initiatives. Technically, the site is built on WordPress with modern plugins such as Elementor and Yoast SEO, providing good SEO and mobile responsiveness. Security posture is adequate with HTTPS and cookie consent implemented, but lacks explicit privacy policies, terms of service, and security headers. No direct contact information or incident response channels are visible, which could be improved to enhance trust and compliance. Overall, the site is professional and trustworthy but could benefit from enhanced privacy and security disclosures.

S

Salzburger Verkehrsverbund GmbH

salzburg-verkehr.at

57

Salzburger Verkehrsverbund GmbH operates as the regional public transportation authority for the Salzburg region in Austria, providing ticketing services, schedules, and mobility solutions. The company offers a variety of ticket types including single rides, time-based passes, and special offers for students, seniors, and tourists. Their digital presence includes a comprehensive website with integrated ticket shop, timetable widgets, and mobile applications for Android and iOS, targeting public transport users in Salzburg. The company maintains active social media channels and provides clear contact and service information, positioning itself as a trusted regional transport provider. Technically, the website is built on WordPress with modern plugins such as Yoast SEO Premium and Easy Digital Downloads, ensuring good SEO and e-commerce capabilities. The site uses HTTPS and includes structured data for enhanced search engine understanding. Mobile optimization and accessibility are adequately addressed, though some improvements in accessibility could be made. Performance is moderate, with a well-structured navigation system and clear content presentation. From a security perspective, the site enforces HTTPS and uses secure plugins, but lacks explicit security headers and publicly available incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. The domain registration is consistent with the business identity, enhancing trustworthiness. Overall, Salzburger Verkehrsverbund GmbH's website demonstrates a solid digital maturity with good business credibility and privacy compliance. Strategic improvements in security headers, incident response visibility, and accessibility would further strengthen their security posture and user trust.

O

Oberösterreichischer Verkehrsverbund

ooevv.at

60

Oberösterreichischer Verkehrsverbund (OÖVV) operates as the regional public transportation authority for Upper Austria, providing comprehensive services including timetable information, ticket sales, real-time travel updates, and mobile applications for route planning and ticket purchasing. The website is professionally designed, multilingual, and targets public transport users within the region and visitors. It maintains a strong market position as a key regional transport provider with a large user base. Technically, the site is built on TYPO3 CMS, employs modern JavaScript libraries, and integrates analytics via Matomo, reflecting a mature digital infrastructure with good performance and accessibility. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities, though a dedicated security policy and incident response contact are absent. Privacy compliance is strong, featuring a comprehensive privacy policy, cookie consent mechanisms, and GDPR adherence. Overall, the website is trustworthy, user-friendly, and well-maintained, supporting the organization's mission to facilitate public transportation in Upper Austria.

I

Innsbrucker Verkehrsbetriebe und Stubaitalbahn GmbH

ivb.at

71

Innsbrucker Verkehrsbetriebe und Stubaitalbahn GmbH (IVB) operates as a regional public transportation provider serving Innsbruck and its surrounding areas. The company offers a comprehensive range of mobility services including bus, tram, regional trains, ticketing solutions, and mobility support such as bike sharing and Park & Ride facilities. The website reflects a well-established regional operator with a clear focus on serving public transport users in Austria. Technically, the site is built on TYPO3 CMS, leveraging modern JavaScript libraries and third-party widgets for real-time transport information, indicating a mature digital infrastructure. The presence of GDPR-compliant cookie consent and privacy policies demonstrates attention to regulatory compliance. Security posture is solid with HTTPS enforcement and standard security headers, though the absence of a dedicated security policy or incident response contact suggests room for improvement. Overall, the site is professional, accessible, and trustworthy, supporting the company's market position as a key regional transport operator.

D

domainname.de

lake-cup.de

58

The website ts.domainname.de/lake-cup.de serves as a professional domain brokerage landing page offering the premium domain lake-cup.de for sale. The business operates as a domain broker with a history dating back to 2005, providing secure and fast domain transfers with escrow payment processing. The platform targets individuals and businesses interested in acquiring premium domains, emphasizing trust and security through verified domain badges and multiple payment options. Technically, the site employs modern web technologies including Bootstrap 5, FontAwesome, and Google reCAPTCHA to ensure usability and spam protection. The site is mobile optimized and presents a clear, professional user experience. Security posture is good with HTTPS enforced and secure forms, though some security headers are missing. Privacy compliance is adequate with a comprehensive privacy policy and terms of service linked, but lacks a cookie consent mechanism. WHOIS data is privacy protected under DENIC, typical for domain brokers, and no suspicious patterns were detected. Overall, the site is trustworthy and professionally maintained, suitable for its domain brokerage business model.

G

Error

grow-hs-albsig.de

45

The website at grow-hs-albsig.de is currently a placeholder Wix error page indicating that the domain is not connected to an active website. There is no business information, contact details, or content beyond instructions for connecting the domain to a Wix site. The technical infrastructure is based on Wix hosting and uses AngularJS and jQuery libraries typical for Wix error pages. Security posture is minimal with no detected security headers or privacy policies. The site lacks any analytics or advertising scripts and does not collect user data. Overall, the site is non-functional as a business or service platform and provides no trust or credibility signals.

Technologiewerkstatt is a regional German platform supporting startups, entrepreneurs, and businesses with coworking spaces, event venues, and technological education. The website presents a professional and consistent brand image, targeting a local audience in the Zollernalbkreis region. Their business model focuses on service provision including room rentals, workshops, and startup consulting. Technically, the site is built on the Contao CMS with modern JavaScript libraries and integrates Google Analytics and reCAPTCHA for user tracking and form security. Security posture is solid with HTTPS and anonymized analytics, but lacks some advanced security headers and explicit incident response policies. Privacy compliance is good with GDPR-aligned newsletter subscription but missing a cookie consent banner. Overall, the site is trustworthy and well-maintained with room for security and compliance improvements.

K

Karrierebörse Albstadt-Sigmaringen – Berufsorientierung & Ausbildung

karriereboerse-albsig.de

53

The website 'Karrierebörse Albstadt-Sigmaringen' serves as a regional platform focused on career orientation, training, and education opportunities in the Albstadt-Sigmaringen region of Germany. It aims to connect companies with young talents and students seeking apprenticeships and study programs. The platform is positioned as a niche regional service with a clear target audience of students and local businesses. Technically, the site is built on WordPress using the Kadence theme and several plugins including directory and block plugins, with Typekit fonts enhancing typography. Hosting is provided by webgo.de, a known German hosting provider. The site demonstrates good mobile optimization and SEO practices but lacks some accessibility features and comprehensive privacy documentation. Security-wise, HTTPS is enabled and cookie consent is managed via Borlabs Cookie, but security headers and incident response contacts are missing, indicating room for improvement. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security best practices to improve trust and regulatory adherence.

C

CORE Association

corenic.org

63

CORE Association is a well-established not-for-profit registry service provider based in Switzerland, operating more than 25 top-level domains (TLDs) since 2001. The organization offers comprehensive services including registry management, registry software, consultancy, and brand development tailored to various types of TLDs such as open, community, geographic, brand, IDNs, and ccTLDs. Their clientele includes Fortune 500 companies, intergovernmental organizations, governments, and grassroots non-profits, positioning CORE as a trusted and experienced player in the domain registry industry. Technically, the website is built on WordPress CMS, utilizing standard web technologies such as jQuery and Google Tag Manager for analytics. The site demonstrates good mobile optimization, clear navigation, and professional design quality. Performance is moderate, with opportunities for improvement in accessibility and SEO. The technical infrastructure appears stable and appropriate for the organization's needs. From a security perspective, the site enforces HTTPS and domain registration statuses that prevent unauthorized changes. However, it lacks DNSSEC and important security headers, which are recommended to enhance DNS and web security. No critical vulnerabilities or exposed sensitive data were detected. Incident response contact is provided via a dedicated abuse/legal email address, but no formal security policy or vulnerability disclosure program is present. Overall, the website and domain registration data indicate a high level of legitimacy and professionalism. The absence of privacy and cookie policies is a notable compliance gap, especially under GDPR. Strategic improvements in security headers, DNSSEC, and privacy compliance would strengthen the organization's security posture and trustworthiness.

I

Ing. Kateřina Srncová

grafikawebsrnka.cz

53

The website www.grafikawebsrnka.cz represents a small business or individual service provider specializing in graphic design and web development services, including corporate logos, business cards, flyers, and websites. However, the site is currently under construction and contains only a placeholder page with minimal content. The business appears to be operated by Ing. Kateřina Srncová, but no further company details or contact information are provided. The market position and business scale cannot be determined from the available data. Technically, the website is built on WordPress using a free under construction plugin, Bootstrap for styling, and Font Awesome for icons. The site shows basic mobile responsiveness and SEO metadata but lacks advanced technical features or performance optimizations. No hosting provider or infrastructure details are discernible. Security measures are minimal, with no security headers detected and no visible HTTPS verification from the data provided. From a security perspective, the absence of WHOIS registration data is a significant concern, suggesting the domain may be unregistered, recently registered, or privacy-protected with no public data. No privacy, cookie, or terms of service policies are present, and no contact or incident response information is available. The site does not use analytics or tracking technologies, which limits data privacy concerns but also reduces business intelligence capabilities. Overall, the security posture is weak, with recommendations to implement HTTPS, security headers, and proper policies. The overall risk assessment is moderate to high due to the lack of transparency, minimal content, and missing registration data. Strategic recommendations include completing the website content, publishing privacy and cookie policies, securing the domain registration, and enhancing security configurations to build trust and comply with regulations.

ELKO EP operates the website www.inels.ro as a Czech manufacturer specializing in smart wiring and smart home control systems. The company targets residential, commercial, hospitality, and smart city sectors, offering a range of automation products designed to improve efficiency and comfort. The website reflects a medium-sized business with a professional online presence, including social media integration and live chat support. Technically, the site employs modern JavaScript libraries, Google services for analytics and tag management, and security measures such as HTTPS and reCAPTCHA to protect user interactions. Security posture is solid with no visible vulnerabilities, though some security headers could be improved. Privacy compliance is basic but present, with GDPR references and cookie consent mechanisms. WHOIS data is privacy protected by ROTLD, which is standard and justified for this business type. Overall, the website is trustworthy, well-structured, and serves as a credible digital front for ELKO EP's smart home solutions.

V

VERTICAL

vertical-development.com

61

VERTICAL is a specialized leadership development company offering neuroscience-based transformative training programs designed to help leaders and teams achieve peak performance and personal growth within 90 days. The company targets individual professionals and organizations seeking to enhance leadership capabilities through holistic and data-driven approaches. The website is built on modern Webflow infrastructure, leveraging multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, LinkedIn Insight Tag, and Hotjar, indicating a mature digital marketing strategy. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though the absence of explicit security headers and incident response information suggests room for improvement. The lack of WHOIS data and registrant information raises some concerns about domain legitimacy, though the professional website content and trust signals mitigate these concerns somewhat. Overall, the site is well-designed, mobile-optimized, and provides a positive user experience with clear navigation and rich multimedia content.

A

ASFINAG

asfinag.net

62

ASFINAG operates as a major Austrian government-owned corporation specializing in the financing and management of highways and expressways. The website serves as an information platform providing technical planning manuals, guidelines, procurement documents, and other resources primarily for registered users and professionals involved in transportation infrastructure. The company holds a strong market position in Austria's transportation sector with a focus on infrastructure development and maintenance. Technically, the website employs modern JavaScript libraries such as jQuery and FontAwesome, and uses Matomo for privacy-conscious analytics. The site is mobile-optimized with good navigation and content structure, although some accessibility features could be improved. The absence of CMS identification suggests a custom or proprietary platform. Security posture is solid with HTTPS enforced and no exposed sensitive data. However, DNSSEC is not enabled and security headers are missing, indicating room for improvement. Privacy compliance is good with a clear privacy policy and disabled cookies in analytics, but lacks a cookie consent mechanism. Contact information is readily available via multiple company emails. Overall, the website is professional, trustworthy, and well-aligned with the business's operational needs. Strategic enhancements in security headers, cookie consent, and incident response disclosures would further strengthen the security and compliance posture.

A

ASFINAG

go-maut.at

68

The website go-maut.at is the official portal for the Austrian GO-Maut toll system operated by ASFINAG, a government entity responsible for toll collection and road infrastructure management. It provides comprehensive information about the toll system, payment options, device management (GO-Box), and user self-service through a dedicated SelfCare portal. The site targets transport companies and vehicle owners subject to tolls in Austria, positioning itself as a key national infrastructure service provider. Technically, the website employs modern web technologies including jQuery, Matomo analytics for user tracking, and mtCaptcha for form security. The CMS appears to be Umbraco, indicating a mature content management environment. The site is mobile-optimized, accessible, and SEO-friendly with proper meta tags and multilingual support. From a security perspective, the site enforces HTTPS, uses CAPTCHA to protect forms, and implements a cookie consent mechanism compliant with GDPR principles. However, explicit privacy, terms of service, security policies, and incident response contacts are not clearly published, which could be improved to enhance transparency and compliance. Overall, the website is professional, trustworthy, and well-aligned with its business purpose. The risk level is low, but strategic improvements in privacy and security disclosures are recommended to strengthen user trust and regulatory compliance.

I

iNELS s.r.o.

inels-home.com

56

Inels Home is a Czech Republic based smart home technology provider specializing in affordable and easy-to-install home automation products. Their product portfolio includes mini bridges, switching devices, blinds control, detectors, and kits designed for seamless smart home integration. The company targets homeowners and smart home enthusiasts seeking quality smart home solutions without complex installation requirements. The website is built on WordPress with WooCommerce and Elementor, providing a modern e-commerce platform with good design and user experience. Contact information and social media presence are clearly provided, enhancing business credibility. Security posture is moderate with HTTPS and reCAPTCHA implemented, but lacks some security headers and formal security policies. Privacy compliance is basic with no cookie consent mechanism detected. Overall, the website is professional and trustworthy but could improve in security and privacy transparency.

E

ELKO EP, s.r.o

inels.cloud

55

ELKO EP, s.r.o operates the Inels Cloud platform, a cloud-based application focused on energy or smart home management solutions. The website serves as a login portal for users to access the Inels cloud app, indicating a business-to-business and business-to-consumer hybrid target audience. The company has maintained the domain since 2016, reflecting a stable presence in the energy technology sector. The platform leverages modern web technologies including React and is hosted on DigitalOcean, ensuring a scalable and reliable infrastructure. Technically, the website demonstrates moderate digital maturity with a modern tech stack, mobile optimization, and use of Google Tag Manager for analytics. However, the absence of DNSSEC and security headers indicates room for improvement in security hardening. The website enforces HTTPS, which is a critical security baseline. Privacy and cookie policies are not present on the login page, which may impact compliance with GDPR and other privacy regulations. From a security perspective, the site shows basic best practices but lacks advanced security headers and vulnerability disclosure mechanisms. No contact information or incident response channels are visible, which could hinder user trust and incident handling. The domain WHOIS data is consistent and transparent, registered to ELKO EP, s.r.o in the Czech Republic, with no privacy protection, supporting legitimacy. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, improved security headers, and clearer user support/contact information to strengthen trust and regulatory adherence.

Ö

Österreichischer Fertighausverband (ÖFV)

akademie-fertighaus.org

58

The Fertighausakademie website represents the official training institution of the Österreichischer Fertighausverband (ÖFV), an Austrian quality association for prefabricated houses. The site offers educational programs including seminars, workshops, and certification courses targeted at professionals such as Fertighausberater, Bauleiter, and Sachverständige, as well as consumers interested in building prefabricated homes. The business is positioned as a trusted authority in the Austrian prefabricated housing sector, emphasizing quality standards like the ÖNORM B2310 certification. Technically, the website is built on WordPress with Elementor, ensuring a modern and responsive design with good SEO and accessibility features. Security posture is solid with HTTPS and GDPR-compliant cookie consent, though some security headers and explicit policies could be improved. No critical vulnerabilities or blocking mechanisms were detected, and the WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the site is professional, trustworthy, and well-suited for its educational mission.

ELKO EP Hungary Kft. operates the iNELS.hu website, specializing in smart home and building automation solutions. The company targets residential, commercial, hospitality, and smart city sectors, offering integrated control systems that enhance energy efficiency and user convenience. The website reflects a medium-sized, established technology business with a strong regional presence and international references. Technically, the site employs modern JavaScript libraries, Google Analytics, and Zoho SalesIQ for marketing and customer engagement, with a responsive design optimized for mobile devices. Security measures include HTTPS enforcement and Google reCAPTCHA on contact forms, though security headers are not implemented. Privacy compliance is robust, with clear GDPR-aligned policies and cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-maintained, supporting the company's market position effectively.

A

AULA - Coworking Space Graz | Leoben

aula.space

54

AULA is a well-established coworking space provider operating primarily in Graz, Leoben, and Vienna, Austria. Founded in 2016, it offers flexible workspace solutions including desk rentals, virtual offices, meeting rooms, and community networking services. The company positions itself as a community-driven coworking provider with additional services such as postal handling and design support. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the site is built on WordPress with a modern tech stack and integrates multiple marketing and analytics tools while maintaining GDPR compliance through a comprehensive cookie consent mechanism. Security posture is good with HTTPS enforced and no visible critical vulnerabilities, though some security headers could be improved. Overall, the domain registration and business information are consistent and trustworthy, supporting a high legitimacy score.