Medium-risk security reports

die möwe is a non-profit organization dedicated to child protection in Austria, focusing on preventing violence against children and supporting affected children and youth. The website presents a professional and consistent brand image, offering services such as child protection centers, prevention seminars, and online counseling. The organization maintains an active presence on major social media platforms, enhancing outreach and engagement. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates privacy-compliant analytics and tracking mechanisms. Security posture is solid with HTTPS enforcement and client-side consent management, though some security headers could be improved. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements.

MÄNNERINFO is a non-profit crisis telephone counseling service for boys and men in Austria, operated by a consortium of men's counseling centers and organized by the Verein für Männer- und Geschlechterthemen Steiermark. The service offers anonymous, confidential, and free 24/7 telephone support, including multilingual interpreted counseling and chat services. The website is professionally designed using Drupal 10 and modern web technologies, providing good accessibility and multilingual content. Security posture is adequate with HTTPS and no visible vulnerabilities, though improvements are recommended in cookie consent and security policy transparency. Overall, the site demonstrates high trustworthiness and business credibility, supported by government funding and public endorsements.

The website gewalt-ist-nie-ok.at is a professionally developed non-profit platform managed by the Verein Autonome Österreichische Frauenhäuser (AÖF) in Austria. It provides comprehensive educational content and support resources focused on domestic violence awareness specifically targeted at children and youth. The site is multilingual and well-structured, emphasizing accessibility and user-friendly navigation. Technically, it is built on Drupal 10 with modern web technologies and includes a consent management platform ensuring GDPR compliance. Security posture is solid with HTTPS enforced, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the site demonstrates a strong commitment to privacy, compliance, and user safety.

Recisio is a medium-sized company specializing in designing, creating, and maintaining large-scale digital applications and websites for the music industry, targeting performers, teachers, musicians, and music lovers. Their mission is to spread happiness through music, serving approximately one million users monthly across 10 languages. The company operates under the KaraFun Group umbrella, indicating a solid market position with established partnerships and affiliate programs. Technically, the website employs modern web technologies such as JavaScript and CountUp.js, with good mobile optimization and SEO practices, though accessibility features are basic. Security posture is moderate with HTTPS implied but lacking visible security headers and explicit privacy or cookie policies, which impacts compliance and trust. The absence of WHOIS data for the domain is a significant concern, reducing domain legitimacy and transparency. Overall, the website is professional and content-rich but requires improvements in security, privacy compliance, and domain registration transparency.

The Kunsthistorisches Museum Wien operates as a leading cultural institution in Austria, showcasing one of the world's most significant art collections spanning 5000 years. The website serves as a comprehensive platform for visitors and art enthusiasts, offering detailed information on current and permanent exhibitions, guided tours, events, and an online shop. The museum holds a strong market position as a prestigious and historically important museum in Vienna. Technically, the website is built on the TYPO3 CMS platform, utilizing modern web technologies such as Bootstrap and htmx for dynamic content loading. The site is mobile-optimized, accessible, and SEO-friendly, with proper use of meta tags and structured content. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS, employs essential security headers, and uses nonce attributes in scripts to mitigate risks. However, there are gaps in privacy compliance, notably the absence of explicit privacy and cookie policies and consent mechanisms. No incident response or vulnerability disclosure information is provided, which could be improved to enhance trust and compliance. Overall, the website is professional, trustworthy, and content-rich, but it should address privacy compliance and contact information transparency to meet modern regulatory standards and user expectations.

Getdesigned GmbH is a Vienna-based digital agency specializing in TYPO3 and Craft CMS web design and implementation services. The company targets businesses and organizations seeking professional web-based communication solutions, offering services including web design, CMS implementation, consulting, and ongoing support. Their market position is that of an established regional agency with a strong portfolio of notable clients and projects. Technically, the website is built primarily on TYPO3 CMS with Craft CMS also mentioned, utilizing modern web technologies and providing a good user experience with mobile optimization and accessibility considerations. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some improvements in security headers and incident response disclosures are recommended. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, reflecting a mature digital presence.

The website at unapei.org is currently inaccessible, returning a 403 Forbidden error page which blocks access to any meaningful content or metadata. This prevents extraction of business, security, or compliance information from the site itself. The domain is well-established, created in 1997 and registered with Tucows Domains Inc., indicating a legitimate and longstanding entity. Hosting appears to be provided by OVH based on the name servers. Due to the lack of accessible content, no privacy, cookie, or terms of service policies are detectable, nor are any contact details or social media links. Security posture cannot be fully assessed, but the absence of DNSSEC and security headers is noted. Overall, the site is currently non-functional for external visitors, which severely limits digital maturity and trustworthiness assessments.

BILD.de is a leading German news media website operated by Axel Springer SE, offering a wide range of news, entertainment, sports, and video streaming services. The site targets a general audience with a comprehensive content offering including free and subscription-based (BILDplus) content. The business model relies on advertising and subscriptions, positioning BILD as a major player in the German media landscape. Technically, the website employs modern web technologies including ES6 JavaScript, CSS3, and HTML5, with a strong focus on performance and mobile optimization. Hosting is managed via Akamai, ensuring fast content delivery. The site integrates a Consent Management Platform to comply with GDPR requirements and uses various third-party scripts for analytics and advertising. From a security perspective, BILD.de enforces HTTPS and implements consent mechanisms for privacy compliance. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly visible, representing areas for improvement. The site shows no signs of WAF blocking or content restrictions, and no adult or NSFW content is present. Overall, BILD.de demonstrates a mature digital presence with strong business credibility and technical infrastructure. Strategic enhancements in transparency around privacy policies and security incident handling would further strengthen trust and compliance.

Golf and Co is a specialized e-commerce retailer focused on golf equipment and accessories, targeting golf enthusiasts primarily in Poland and Europe. The company operates under SPACEFOOT SAS, a French legal entity, with customer service based in France. The website offers a broad range of products including clubs, balls, bags, carts, shoes, gloves, clothing, and other golf-related accessories from top brands such as Taylormade, Callaway, and Srixon. The business model is retail e-commerce with a strong emphasis on brand variety and customer service. Technically, the website is built on the Magento (OpenMage) platform, integrating modern marketing and analytics tools like Google Analytics, Google Ads, and Actito marketing automation. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced, reCAPTCHA protection on forms, and GDPR compliance via AppConsent. However, the absence of explicit security policies and incident response information is noted. The WHOIS data shows an anomalous future domain creation date, which requires verification but does not currently undermine the site's legitimacy. Overall, Golf and Co presents as a professional and trustworthy online retailer with room for minor security and transparency improvements.

The website at viagogo.net currently presents no accessible content, metadata, or visible elements, indicating it is either blocked by a web application firewall, under maintenance, or otherwise inaccessible. The domain is registered since 2005 with Gandi SAS and uses Microsoft Azure DNS servers, suggesting a legitimate and established domain registration. However, the lack of any website content prevents any meaningful analysis of business operations, services, or user engagement. Technically, no scripts, frameworks, or security headers are detectable, and no privacy or cookie policies are present, indicating a poor security and compliance posture. Overall, the site is currently non-functional or blocked, resulting in a very low AI score and high risk from a security and trust perspective.

belboon GmbH operates as a leading international performance marketing and affiliate network headquartered in Berlin, Germany. Founded in 2005, the company offers comprehensive services including affiliate marketing, tracking solutions, first-party data strategies, and full funnel marketing to advertisers, publishers, and agencies. It is part of the Linehub marketing collective, enhancing its market reach and service portfolio. The website is professionally designed, multilingual, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, the site is built on WordPress with modern tools such as Yoast SEO and Borlabs Cookie for compliance and user experience. Security posture is good with HTTPS and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is strong with clear GDPR-aligned policies and cookie consent mechanisms. Contact information is transparent and includes multiple channels, supporting business credibility. Overall, belboon presents a trustworthy and professional digital footprint with room for security policy enhancements.

ASD Napoli Running is a non-profit organization dedicated to organizing running events and promoting running culture primarily in Naples, Italy. The website showcases upcoming events such as the Napoli City Half Marathon and related activities, supported by a network of institutional and commercial partners. The organization targets runners, volunteers, and the local community, emphasizing engagement and sports promotion. Technically, the website is built on WordPress with WooCommerce and uses modern JavaScript libraries and tracking tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and anti-bot measures like reCAPTCHA, though cookie consent mechanisms could be improved. The absence of WHOIS data limits domain trust verification but the site content and partnerships indicate legitimacy. Overall, the site is professional, content-rich, and well-positioned in its niche.

UniCredit Bank is a well-established financial institution in the Czech Republic offering a comprehensive range of retail banking services including accounts, loans, mortgages, savings, investments, and insurance. The website targets individual customers with a strong emphasis on digital banking solutions and convenient access to banking products. The site demonstrates a mature digital presence with modern technologies and analytics integration, supporting a seamless user experience across devices. Security posture is solid with HTTPS and Content-Security-Policy headers, though additional security headers could enhance protection. Privacy compliance is evident with clear cookie and privacy policies and consent mechanisms. Overall, the website reflects a professional and trustworthy banking brand with a strong market position in the Czech banking sector.

dm drogerie markt operates a comprehensive online retail platform focused on personal care, beauty, health, and household products in the Czech Republic. The website demonstrates a mature digital presence with a strong brand identity, extensive product offerings, and customer loyalty programs. Technically, the site employs modern web technologies, including a custom design system, responsive design, and consent management, ensuring a good user experience across devices. Security posture is robust with HTTPS enforcement and security headers, although no explicit incident response or vulnerability disclosure information is publicly available. Privacy compliance is well addressed with cookie consent mechanisms and privacy policies in place. Overall, the site reflects a professional and trustworthy e-commerce operation with minor gaps in publicly available WHOIS data.

RunCzech Store is a Czech Republic-based e-commerce retailer specializing in running shoes, apparel, and official race merchandise, primarily featuring the adidas brand. The website targets runners and sports enthusiasts, offering a comprehensive product catalog with a professional and consistent brand presentation. The business operates on the Shoptet e-commerce platform, leveraging modern web technologies and marketing tools such as Google Analytics and Facebook Pixel. The site is well-optimized for mobile devices and provides clear navigation and user experience. Security measures include HTTPS enforcement and CSRF protection on forms, though some outdated libraries present potential risks. Privacy compliance is robust with visible cookie consent and a comprehensive privacy policy. However, the absence of WHOIS registration data raises concerns about domain legitimacy, warranting further verification. Overall, the site demonstrates a solid digital presence with moderate security posture and good privacy practices.

Reservanto s.r.o. operates a mature and well-established online reservation system tailored for various business sectors, including small entrepreneurs, professional service providers, corporations, and public administration. The company has a strong market presence in the Czech Republic with over 10,000 customers and offers a SaaS model with integrated payment and customer management features. The website reflects a professional and user-friendly design with clear navigation and comprehensive content in Czech. Technically, the site uses modern JavaScript libraries and tracking tools, hosted likely by Active24, and implements HTTPS with good security practices such as reCAPTCHA on forms. However, explicit security policies and incident response contacts are not published, which could be improved. Overall, the site is secure, compliant with GDPR, and trustworthy, with no signs of malicious content or blocking mechanisms.

The website ex1tp.com appears to be a minimal online presence for a business related to exit popup services, indicated by the site title and displayed text. The content is very limited, with no detailed business description, policies, or multiple contact methods. The domain is relatively new, registered in 2022, and uses Cloudflare for DNS and CDN services. The technical infrastructure is basic but includes modern elements such as Google Fonts and mobile optimization. Security posture is minimal with no detected security headers or privacy policies, and DNSSEC is not enabled. There is no evidence of active WAF blocking or security challenges, allowing full access to the site content. Overall, the site lacks comprehensive compliance and trust indicators, which limits its credibility and security maturity.

LOUPE is a specialized compliance management solution provider focusing on whistleblowing, anti-corruption, integrity management, and risk assessments. The company targets businesses needing to fulfill regulatory requirements such as the Corporate Sustainability Due Diligence Directive. Their market position is niche but professional, supported by ISO 27001 certification, indicating a strong commitment to information security. The website is well-designed, mobile-optimized, and uses modern technologies like Nuxt.js and Vue.js, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and a comprehensive cookie consent mechanism, although explicit incident response and vulnerability disclosure information are absent. Overall, the website and business present a trustworthy and professional image with moderate user tracking balanced by GDPR-compliant privacy practices.

Overtracking is a privacy-first web analytics platform launched in 2023, positioning itself as an easy-to-use alternative to Google Analytics with a focus on respecting user privacy by avoiding cookies. The company targets website owners and digital marketers who require accurate, GDPR-compliant analytics including heatmaps, real-time visitor tracking, and Core Web Vitals measurement. The business operates on a SaaS model with a free tier and paid plans based on monthly pageviews. Technically, the website is modern, fast, and mobile-optimized, leveraging Cloudflare DNS and custom JavaScript analytics scripts. Security posture is solid with HTTPS enforced and no exposed sensitive data, though DNSSEC is not enabled and security headers are missing. Privacy compliance is strong, with clear privacy policy and no cookie consent mechanism needed due to cookie-free tracking. Overall, the site is professional, trustworthy, and well-branded, though it lacks explicit security and incident response policies.

The website www.innsbruck.at serves as the official digital presence for the city of Innsbruck, Austria, encompassing municipal services, tourism promotion, and marketing activities. It targets residents, visitors, and businesses, providing authoritative information and links to related official sites. The business model is governmental and tourism-oriented, positioning itself as a trusted source for local information and services. Technically, the site is built on the Webflow platform, utilizing modern web technologies such as HTML5, CSS3, JavaScript, and jQuery. It integrates Matomo analytics for user tracking, reflecting a privacy-conscious approach. The site demonstrates good mobile optimization and user experience, though accessibility and SEO could be further enhanced. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and a cookie consent mechanism, which are important for GDPR compliance and security hardening. No incident response or security policy information is published, indicating room for improvement in transparency and preparedness. Overall, the website is professional, trustworthy, and well-aligned with its governmental role. Strategic improvements in privacy compliance and security practices would enhance its risk posture and user trust.

Sportoló Nemzet is a Hungarian government-supported sports promotion platform launched in 2023. It targets Hungarian sports enthusiasts and club members by offering membership benefits such as discounts on sports facilities, events, and equipment. The website is built on WordPress using Elementor and several popular plugins, reflecting a modern and maintainable technical infrastructure. The site demonstrates good SEO, accessibility, and GDPR compliance with a comprehensive privacy policy and cookie consent mechanism. Security posture is solid with HTTPS and nonce usage, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected. Overall, the platform presents a professional and trustworthy digital presence aligned with its business goals.

The website www.debrecen.hu is the official online presence of the Municipality of Debrecen, Hungary. It serves as a comprehensive portal providing information and services for residents, tourists, and business stakeholders. The site offers access to local government services, tourism guides, business investment information, and public announcements, positioning itself as a key digital resource for the city. The target audience includes local citizens, visitors, and investors, reflecting a government service model focused on public administration and community engagement. Technically, the website employs a custom CMS with a technology stack that includes jQuery, jQuery UI, Google Fonts, and lazy loading libraries. It demonstrates good mobile optimization and accessibility features, although SEO optimization is basic. The site loads with moderate performance and uses multiple third-party analytics and marketing tools, all integrated with a clear cookie consent mechanism, indicating a mature digital infrastructure. From a security perspective, the site enforces HTTPS and implements cookie consent in compliance with GDPR. However, it lacks publicly available security policies and incident response contacts, and security headers are not explicitly detected in the provided data. No vulnerabilities or exposed sensitive data were found in the content. The domain registration is consistent with the official municipality, enhancing trustworthiness. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its role as a government portal effectively. Strategic improvements could include publishing security policies, enhancing SEO, and adding incident response information to strengthen security posture and user trust.

Magyar Telekom Nyrt. is a leading telecommunications provider in Hungary, offering a wide range of services including mobile telephony, internet, TV, and device sales targeted primarily at residential customers. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to its audience. The company is a subsidiary of Deutsche Telekom AG, reinforcing its strong market position and enterprise scale. Technically, the site employs modern web technologies such as Vue.js and Google Tag Manager, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement and appropriate security headers, though explicit security policy and incident response information are not publicly detailed. Overall, the site demonstrates high trustworthiness and compliance with GDPR and cookie regulations, supporting a positive user experience and business credibility.

MG Motor Europe operates a professional and well-branded website targeting Finnish and broader European markets with a focus on electric and hybrid vehicles. The site offers detailed model information, configurators, test drive requests, and dealer locators, indicating a mature digital presence aligned with automotive industry standards. The technical infrastructure leverages modern web technologies including Google Tag Manager, Imgix CDN, and Swiper.js for UI components, supported by SEOmatic CMS meta generation. Security posture is strong with HTTPS enforced and no visible sensitive data exposure, though security headers and explicit privacy policies are lacking. The absence of direct contact information and incident response details suggests room for improvement in transparency and compliance. Overall, the site is trustworthy and professionally maintained, suitable for its business domain.

Adolf Würth GmbH & Co. KG operates a professional and comprehensive website focused on assembly and fastening technology products for industrial and craft users. The company is positioned as a leading manufacturer and supplier in its sector, offering over 100,000 products including screws, dowels, tools, and safety equipment. The website targets professional users such as workshops, construction sites, and various tradespeople. Technically, the site uses a modern CMS (FirstSpirit), Bootstrap framework, and integrates Visual Website Optimizer for analytics and A/B testing. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enabled and no visible vulnerabilities, but lacks explicit security headers and incident response information. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but could improve transparency and compliance aspects.

The website at gorenje.com is currently inaccessible due to a 403 Forbidden error caused by an SSL handshake failure with the remote server. This indicates that the site is likely behind a Cloudflare proxy or WAF that is blocking access. Consequently, no business content, metadata, or contact information is available for analysis. The domain is well-established, created in 1997, and registered through a reputable registrar without privacy protection, suggesting legitimacy. However, the lack of DNSSEC and the SSL issues represent security weaknesses. Overall, the site’s digital maturity and security posture cannot be fully assessed due to the blocked content, resulting in a low AI score and limited insights.

Grundfos Holding A/S is a global leader in water pump manufacturing and water technology solutions, serving industrial, commercial, and residential markets worldwide. The company emphasizes sustainability and innovation in water management. The website reflects a mature digital presence with extensive use of Adobe Experience Manager, Microsoft Azure hosting, and multiple integrated marketing and analytics tools. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although no explicit vulnerability disclosure or incident response contacts were found. Overall, the site is professional, trustworthy, and compliant with GDPR and privacy standards.

The Schweizerischer Handball-Verband (SHV) operates as the national governing body and competence center for handball in Switzerland. The website serves as an information hub for players, clubs, fans, and stakeholders, providing match schedules, league data, player profiles, and event information. The organization holds a strong market position as the official federation for handball in Switzerland, focusing on sport governance and promotion. Technically, the website is built on the Umbraco CMS platform, leveraging modern JavaScript libraries and integrations such as Google Tag Manager, HubSpot, and Cookiebot for analytics and compliance. The site demonstrates good digital maturity with responsive design and SEO optimization. Security posture is solid with HTTPS enforcement, security headers, and anti-CSRF protections, although explicit security and incident response policies are not publicly detailed. Privacy compliance is well addressed through a comprehensive privacy policy and cookie consent mechanism. Overall, the website is professional, trustworthy, and aligned with the organization's mission.

The Magyar Kézilabda Szövetség website serves as the official digital presence of the Hungarian Handball Federation, providing comprehensive information about handball activities, news, competitions, and organizational details in Hungary. It targets handball players, fans, sports professionals, and the broader Hungarian sports community. The site is well-positioned as a national governing body with authoritative content and strong brand consistency. Technically, the website employs modern web technologies including Vue.js, jQuery, and various analytics tools such as Microsoft Clarity, Google Analytics, Hotjar, and Facebook Pixel. The site is mobile-optimized with good performance and SEO practices, although accessibility features could be enhanced. Hosting details are not explicitly identified but the site uses HTTPS with strong security headers. From a security perspective, the site demonstrates good practices with enforced HTTPS, cookie consent mechanisms, and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policies, incident response information, and vulnerability disclosure mechanisms, which could be improved to enhance trust and compliance. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. It effectively supports the federation's mission and provides a positive user experience. Strategic recommendations include publishing security and incident response policies, adding terms of service, and enhancing accessibility compliance.

The Österreichischer Handballbund operates as the official Austrian Handball Federation, providing governance, promotion, and organization of handball activities within Austria. The website serves as an information hub for players, fans, and clubs, offering news, event details, and resources related to handball. It holds a strong national position as the authoritative body for the sport in Austria. Technically, the website employs a modern technology stack including jQuery, Owl Carousel, Font Awesome, and a proprietary CMS by Internetkonzepte.at. It integrates Google Analytics and Google Tag Manager for analytics, alongside Adition for advertising and Cookiebot for GDPR-compliant cookie consent management. The site is mobile-optimized with moderate performance and good SEO practices. From a security perspective, the site enforces HTTPS, uses standard security headers, and implements a comprehensive cookie consent mechanism aligned with GDPR. However, it lacks publicly available security policies or incident response contacts, which could be improved to enhance trust and compliance. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its audience effectively. Strategic improvements in security transparency and accessibility could further strengthen its posture.

EHFTV.com is the official streaming platform of the European Handball Federation, providing live and on-demand handball competition content to fans worldwide. The platform offers a subscription-based model with free registration, enabling personalized fan experiences. It holds a strong market position as the primary digital destination for EHF competitions, supported by consistent branding and comprehensive content offerings. Technically, the site leverages modern web technologies including Next.js, cloud CDN services, and integrates multiple analytics and marketing tools while maintaining good performance and mobile responsiveness. Security posture is solid with HTTPS enforcement and domain transfer protection, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Privacy compliance is robust, with comprehensive policies and cookie consent mechanisms implemented via Iubenda. Overall, EHFTV.com demonstrates a mature digital presence with high trustworthiness and professional execution.

The European Handball Federation (EHF) operates a comprehensive and professionally designed website serving as the central hub for European handball competitions, news, media, and fan engagement. The site offers extensive information on club and national team competitions, development programs, and services such as media accreditation and ticketing. The EHF positions itself as the authoritative body for handball in Europe with a strong digital presence and multiple linked domains supporting its ecosystem. Technically, the website employs modern JavaScript frameworks including Vue.js, integrates advanced analytics tools like Segment and Google Tag Manager, and uses a robust cookie consent mechanism via Iubenda, ensuring GDPR compliance. The site is mobile-optimized, accessible, and SEO-friendly, providing a positive user experience. From a security perspective, the site enforces HTTPS and implements cookie consent with per-purpose control, though explicit security headers could be more visible. No vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data for the domain is a notable anomaly that slightly impacts trustworthiness, though the professional nature of the site mitigates concerns. Overall, the EHF website demonstrates a mature digital infrastructure with strong content quality and privacy compliance. The main risk lies in the missing WHOIS data, which should be monitored. Strategic recommendations include enhancing security header implementation, improving contact information visibility, and regular audits of third-party scripts to maintain security posture.

Donauinselfest.at is the official website for the Donauinselfest, a large free music festival organized by SPÖ Wien in Vienna, Austria. The site serves as an information and promotional platform for the event, showcasing partners, sponsors, and providing news and contact options. The business operates as a non-profit event organizer with strong local government and corporate partnerships, positioning itself as a major cultural event in the region. The website is well-branded, consistent, and targets a broad general audience interested in music and community events. Technically, the website is built on WordPress with Bootstrap and jQuery frameworks, integrating modern web technologies including FontAwesome icons, Google APIs, and Matomo analytics for user tracking. The site includes a cookie consent mechanism compliant with GDPR, and uses CAPTCHA for form submissions, indicating a moderate level of digital maturity and privacy awareness. Performance and mobile optimization are good, though some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and employs a cookie consent banner with granular options. While explicit security headers are not fully confirmed, no critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's claims, showing transparency and legitimacy. No incident response or security policy pages were found, which could be an area for improvement. Overall, the website presents a professional and trustworthy front for the Donauinselfest event, with good privacy compliance and a solid technical foundation. Strategic recommendations include enhancing security headers, adding explicit security policies, and improving accessibility to further strengthen the site's security posture and user experience.

Look! is a German-language online media platform specializing in fashion, beauty, lifestyle, and related content primarily targeting German-speaking audiences in Austria. The website offers a variety of articles, news, and features across multiple lifestyle categories, supported by advertising revenue. The platform uses WordPress CMS with a professional Newspaper theme and integrates advertising and cookie consent plugins to manage monetization and privacy compliance. Technically, the site employs modern web technologies including jQuery, Google Fonts, and Google Tag Manager, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and some security plugins detected, though security headers could be improved. Privacy compliance is partial, with cookie consent present but no explicit privacy policy or terms of service found in the analyzed content. Contact information is not clearly provided, which may affect user trust. Overall, the site represents a small media outlet with consistent branding and good content quality but could enhance transparency and security practices.

liverelations gmbh operates a German-language website focused on corporate magazines and event organization, targeting corporate clients primarily in Austria. The website is built on WordPress using the Enfold theme and integrates modern web technologies such as Google Fonts, YouTube embeds, and Google reCAPTCHA for bot protection. While the site is functional and moderately optimized for mobile, it lacks explicit privacy and cookie policy pages, though a cookie consent mechanism is present. Security posture is adequate with HTTPS enforced and reCAPTCHA implemented, but missing security headers and absence of a published security policy reduce overall security maturity. No contact emails or phone numbers are directly visible on the homepage, which may impact user trust and compliance. Overall, the site is a small media business with basic digital maturity and moderate security and privacy compliance.

Werbehelden GmbH is a small Austrian marketing agency specializing in below-the-line marketing, ambient media, promotions, and sampling campaigns. The company offers comprehensive 360-degree promotional services including concept creation, planning, execution, and documentation. Their market position is that of an established regional player with award-winning campaigns and a strong focus on experiential marketing. The website is professionally designed, mobile-optimized, and provides clear navigation and rich content in German targeting business clients seeking direct marketing solutions. Technically, the site uses modern JavaScript libraries, Matomo and Google Analytics for tracking, and implements a detailed cookie consent mechanism with GDPR compliance. Security posture is good with HTTPS enforced and privacy-conscious analytics configurations, but lacks some HTTP security headers and a published security policy or incident response contacts. The WHOIS data is missing or inaccessible, which raises concerns about domain registration legitimacy despite the active and professional website presence. Overall, the site scores well on content quality, technical implementation, and privacy compliance but is slightly penalized for WHOIS inconsistencies and minor security header omissions.

Wiener Kaiserwiesn is a well-established event organizer hosting the annual Oktoberfest-style festival in Vienna, Austria. The website provides comprehensive information about the event, including schedules, ticket sales, partner acknowledgments, and multimedia content. The business targets local and international visitors interested in traditional and party music festivals. Technically, the website is built on WordPress with a modern theme and plugins, supporting multilingual content and SEO best practices. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies are absent. Overall, the site is professional, trustworthy, and well-maintained, supporting a medium-sized hospitality business.

RunCzech s.r.o. operates as the largest organizer of running events in the Czech Republic, including the Prague International Marathon and Prague Half Marathon. The company targets runners and running enthusiasts, providing event organization, registration, and results services. The website is professionally designed, mobile-optimized, and rich in relevant content, reflecting a mature digital presence. Technically, the site is built on WordPress with modern plugins and tracking tools, ensuring good SEO and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response information are lacking. The absence of WHOIS registration data is a concern for domain legitimacy verification but is mitigated by the professional site and consistent branding. Overall, the site demonstrates a strong business and technical foundation with room for improvement in security transparency and contact information availability.

1blu GmbH operates a professional web hosting and server services platform primarily targeting business and professional customers in Germany. Their offerings include web hosting packages, VPS, dedicated servers, domain registration, and a website builder. The company emphasizes performance with NVMe SSD technology and managed hosting options. The website is well-structured, professionally designed, and provides clear pricing and service information. Technical infrastructure appears modern with use of Bootstrap and JavaScript frameworks, hosted in their own German data center in Frankfurt/Main. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacks published security policies or incident response contacts. Overall, the site is trustworthy and compliant with GDPR, with transparent business operations and no suspicious indicators.

Fenster zum Sonntag Talk is a Swiss Christian media website focused on TV talk shows broadcast on SRF channels. It provides viewers with insights into personal life stories and the role of faith. The site is professionally designed using WordPress and modern web technologies, with a consistent brand presence and good content quality. The technical infrastructure includes multiple analytics platforms and a cookie consent mechanism, reflecting a mature digital presence. Security posture is strong with HTTPS enforcement and security headers, though some compliance areas like terms of service and incident response policies could be improved. Overall, the site is trustworthy and well-maintained, serving a general audience interested in religious and social topics.

Life Channel is a Swiss-based Christian media broadcaster offering 24/7 radio programming, podcasts, music streaming, and news content focused on faith and constructive journalism. The website is professionally designed with consistent branding and targets German-speaking Christian audiences. Technically, it is built on WordPress with modern libraries and frameworks such as UIkit and JW Player, and integrates multiple analytics platforms including Matomo, Plausible, Google Tag Manager, and Facebook Pixel. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though advanced security headers and explicit security policies are absent. Overall, the site demonstrates good compliance with GDPR and provides clear privacy and cookie policies. The domain registration data aligns well with the website's claims, supporting legitimacy.

ERF Medien Schweiz operates Radio ERF Plus, a Christian 24-hour radio station providing inspirational content for listeners in Switzerland. The website serves as a platform to promote the radio service, offer downloadable programming, newsletters, and facilitate donations to support broadcasting costs. The organization positions itself as a niche media provider focused on faith-based content with a clear target audience of Christian listeners. The business model is non-profit, relying on donations and community support. Technically, the website is built on WordPress with modern libraries and analytics tools, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS, cookie consent, and multiple tracking protections, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR regulations, reflecting a mature digital presence for a small media entity.

Compassion Switzerland operates a professional non-profit website focused on child sponsorship and charitable donations. The platform provides users with account management features including sponsorship tracking, donation history, and communication with sponsored children. The website is built on the Odoo CMS platform and incorporates modern web technologies such as JavaScript, FontAwesome, and Google Analytics for tracking. The site is well-branded, mobile-optimized, and provides multi-language support, targeting donors and sponsors primarily in Switzerland. Security measures include HTTPS enforcement and CSRF protection on login forms, though some security headers are missing. Privacy and cookie policies are not explicitly found, indicating room for compliance improvement. Overall, the website presents a trustworthy and professional front for Compassion Switzerland's charitable activities.

World Evangelical Alliance is a global non-profit organization focused on strengthening local churches through national alliances and grassroots leadership coordination. The website reflects a mature digital presence with a WordPress CMS, modern SEO practices, and integration of Google Analytics for user tracking. The organization has a consistent brand and clear mission targeting evangelical Christian communities worldwide. Technically, the site uses popular frameworks and plugins such as Elementor and Astra theme, hosted with DNS managed by Cloudflare and domain registered via NameCheap. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is weak due to absence of privacy and cookie policies, which should be addressed to meet GDPR and other regulations. Overall, the website is professional, trustworthy, and safe for general audiences, but could improve in privacy transparency and security hardening.

Help Scout is a well-established technology company specializing in customer support software solutions, including shared inboxes, help centers, and live chat tools. The company targets businesses seeking efficient customer communication management and operates primarily on a SaaS business model. With a strong market position and certifications such as ISO 27001 and SOC 2 Type II, Help Scout demonstrates a commitment to security and compliance. The website reflects a mature digital infrastructure using modern technologies like React, Gatsby, and Contentful CMS, ensuring fast performance and excellent mobile optimization. Security best practices are evident through HTTPS enforcement, comprehensive security headers, and clear incident response contacts. Privacy policies and cookie consent mechanisms align with GDPR requirements, supporting user trust and regulatory compliance. Overall, the website presents a professional, trustworthy, and secure platform for its users.

Hail is a New Zealand-based technology company offering a digital content consolidation platform that integrates websites, publications, AI chatbots, integrations, and email campaigns. The website is professionally designed using WordPress and Elementor, targeting sectors such as schools, sports clubs, and community organizations. The platform emphasizes long-term support and ease of digital content management. Technically, the website employs modern web technologies and analytics tools like Google Analytics and Microsoft Clarity, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and some sanitization libraries but lacks explicit security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy but could improve transparency and security documentation.

HugeDomains operates a professional domain marketplace specializing in premium domain name sales, including GrowthRepublic.com. The website offers transparent pricing, payment plans, and a 30-day money back guarantee, targeting businesses and individuals seeking quality domain names. The platform is established since 2005 and has a solid market position with thousands of satisfied customers. Technically, the site uses modern web technologies including jQuery, Google Analytics, and Google reCAPTCHA, with SSL encryption ensuring secure transactions. Cookie consent mechanisms are in place, supporting privacy compliance. Security posture is good with HTTPS and bot protection, though explicit security headers and incident response policies are not published. Overall, the site is trustworthy, professional, and user-friendly, with clear contact channels and customer testimonials enhancing credibility.

d.labs is a technology, strategy, and design studio specializing in developing digital products for companies aiming to rapidly succeed in their markets. Established since 2010, the company partners with high-growth ventures and investors to deliver tailored solutions combining technology, design, and strategic insight. Their key services include strategic product development, product discovery, fractional leadership, and lean product teams, serving sectors such as fintech, SaaS, digital marketplaces, AI-powered products, and media and publishing. The website reflects a professional and consistent brand with strong client testimonials and a portfolio of recognized partners. Technically, the website is built on the Webflow CMS platform, leveraging modern web technologies including Google Tag Manager and Google Analytics for tracking and marketing. The site is mobile-optimized with good SEO and accessibility basics, though some accessibility features could be enhanced. Performance is moderate, typical for a Webflow-hosted site with rich media content. From a security perspective, the site enforces HTTPS and implements cookie consent via Iubenda, indicating good privacy compliance. However, it lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data is privacy-protected and incomplete, which is common for technology service providers, but no suspicious patterns were found. Overall, the website presents a credible and professional digital presence with moderate to good security posture and privacy compliance. Strategic recommendations include implementing additional security headers, publishing terms of service and security policies, and enhancing accessibility and incident response transparency to further strengthen trust and compliance.

iakoe is a specialized Shopify agency focused on delivering design-led e-commerce solutions, balancing brand identity, user experience, and store optimization to create effective shopping experiences. Founded in 2019, the company targets design-conscious brands seeking Shopify development, UX design, SEO, CRO, and migration services. The website demonstrates a strong market position with notable client logos and positive testimonials, indicating trust and professionalism. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Splide.js, and integrates analytics and marketing tools such as Google Analytics, HubSpot, and Crazy Egg. The site is mobile-optimized, accessible, and SEO-friendly, hosted via GoDaddy with a Craft CMS backend. Performance is moderate with good responsiveness and user experience. Security posture is solid with HTTPS enforced, CSRF protection on forms, and no exposed sensitive data. However, the absence of DNSSEC, security headers, and published security or privacy policies indicates room for improvement. Privacy compliance is limited due to missing privacy and cookie policies, which could pose regulatory risks. Overall, the website is professional, trustworthy, and technically competent but would benefit from enhanced security policies and privacy compliance to strengthen its risk posture and regulatory adherence.

Airbrake is a technology company specializing in error monitoring, performance monitoring, and deployment tracking solutions for software developers and DevOps teams. Positioned as a developer-centric SaaS provider, Airbrake offers tools that enable faster bug detection and resolution, helping organizations deploy software fearlessly. The company is a subsidiary of LogicMonitor and serves over 1600 organizations including major brands like Netflix and Adobe. The website is professionally designed, mobile-optimized, and rich in content, providing clear calls to action and extensive resources such as blogs, documentation, and customer stories. Technically, the website leverages modern web technologies including Webflow CMS, JavaScript libraries, Google Analytics, and Google Tag Manager. It integrates Airbrake's own browser notifier for error tracking. The site performs well with fast loading times and good accessibility features. However, some security best practices such as explicit security headers and cookie consent mechanisms could be improved. The WHOIS data is unavailable due to query failure or privacy protection, but the website's branding and association with LogicMonitor support its legitimacy. From a security perspective, the site uses HTTPS and does not expose sensitive data in its HTML content. There is no visible security policy or incident response page, and no security.txt file was found. The site uses tracking scripts for analytics and marketing but maintains a good level of privacy compliance. Overall, the security posture is solid but could benefit from enhanced transparency and additional security headers. The overall risk assessment is low with strong business credibility and technical maturity. Strategic recommendations include implementing cookie consent banners, publishing a security policy, adding security headers, and providing a vulnerability disclosure mechanism to further enhance trust and compliance.