Security Directory

S

Stucon: Auf der Suche nach den besten Online Casinos in Österreich

stucon.at

12

Stucon.at is a German-language website focused on providing information and reviews about online casinos in Austria, including popular games such as roulette and slots. The site targets Austrian online gamblers seeking trustworthy casino recommendations and gaming guides. The business model appears to be content publishing with potential affiliate marketing through casino referrals. The website uses WordPress with common plugins like Yoast SEO and CAPTCHA for forms, but employs outdated JavaScript libraries which may pose security risks. The site is moderately optimized for SEO and mobile devices but lacks advanced security headers and cookie consent mechanisms. Contact information is limited to a contact form without direct emails or phone numbers. No social media presence or advertising scripts were detected in the provided content.

The website terra-navis.com is currently inaccessible, serving an HTTP 500 Internal Server Error page indicating server-side issues preventing normal content delivery. The page content is minimal and generic, lacking any business description, contact information, or privacy and cookie policies. The site includes embedded Chromium error page scripts and an offline T-Rex game, which are standard for error pages but do not provide business or security insights. Due to the lack of accessible content and absence of structured data or metadata, the business overview, market position, and key services cannot be determined. The technical infrastructure appears to be a standard web server serving error pages, with no evidence of modern CMS or analytics tools. Security posture is weak due to the server error and absence of security headers or SSL details. Overall, the site lacks transparency and trust indicators, resulting in a low credibility and security score.

Piatnik is a well-established Austrian/German board game and playing card publisher with a strong market presence in the retail sector. The company offers a broad portfolio including board games, card games, puzzles, and personalized products through its online shop. Their website reflects a mature digital presence with clear navigation, brand consistency, and community engagement features such as a club and game tester programs. Technically, the site uses modern web technologies and provides a responsive experience, though some security headers and explicit policies could be improved. The security posture is moderate with HTTPS usage and cookie consent implemented, but lacks visible advanced security policies or incident response contacts. Overall, the domain registration and website content align well, indicating a legitimate and trustworthy business.

The website starragheckert.com is currently a parked domain page with no active business content or services. It primarily serves as a domain-for-sale landing page with advertising scripts and minimal textual content. The technical infrastructure is basic, hosted on Hetzner Online with a Caddy server, but lacks HTTPS and modern security configurations. The site uses third-party ad networks such as Google Adsense Domains CAF and AdsDeli for monetization. Security posture is weak due to the absence of SSL/TLS, security headers, and compliance policies. Overall, the site presents a low trust profile and minimal business credibility.

Schlüsselbauer Technology GmbH & Co KG is a medium-sized Austrian manufacturing company specializing in the development and construction of machinery for producing concrete infrastructure components such as pipes and shafts. Established in 1964, the company positions itself as an innovation leader in machine building with a global presence including subsidiaries like Schlüsselbauer North America. Their website provides multi-language support and detailed information about their products and services targeting industrial and infrastructure sectors. Technically, the website uses Apache server with standard HTML5, CSS3, and JavaScript, likely leveraging Bootstrap for responsive design. However, the site lacks HTTPS encryption, which is a critical security gap. The absence of SSL/TLS certificates and modern security headers exposes the site to risks and reduces trustworthiness. Privacy compliance is addressed with a cookie consent manager and a privacy policy, but no explicit security or incident response policies are published. Overall, the website is professional and content-rich but requires urgent security improvements to protect user data and enhance credibility.

The Bernard Gruppe is a medium-sized, owner-managed engineering group founded in 1983, specializing in interdisciplinary engineering services across energy, industry, infrastructure, and transportation sectors. With approximately 400 employees and operations in over 40 countries, the company offers comprehensive consulting, planning, and project realization services, including specialized software and hardware solutions. The website content reflects a professional engineering firm with a broad service portfolio and international presence. Technically, the website is built on WordPress using the Avada theme and includes a cookie consent mechanism from an external provider. However, the site lacks HTTPS support and modern security configurations, which significantly impacts its security posture. Performance data is missing, and SEO and accessibility features are basic. No analytics or tracking services beyond cookie consent are detected. From a security perspective, the absence of a valid SSL certificate and HTTPS is a critical vulnerability, exposing users to potential data interception risks. The site also lacks security headers, DNSSEC, and other modern protections. No privacy policy, terms of service, or incident response information is provided, indicating gaps in compliance and security transparency. Overall, the website presents a moderate business credibility but suffers from significant security and privacy shortcomings. Strategic improvements in SSL deployment, security headers, and privacy documentation are essential to enhance trust and compliance.

T

Tiroler Sparkasse

tirolersparkasse.at

40

Tiroler Sparkasse is a well-established Austrian banking institution with a history dating back to 1822. It offers a comprehensive range of financial services including retail banking, digital banking via the George platform, savings, investments, loans, and insurance products. The website reflects a mature digital presence with modern design, structured data, and clear navigation targeting diverse customer segments such as private customers, youth, businesses, and investors. Technically, the site uses a proprietary CMS (GEM) and is hosted on AWS CloudFront CDN, employing modern web technologies and accessibility features. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts the security posture. Security headers are partially implemented, and privacy compliance is strong with clear policies and consent mechanisms. Overall, the site is professional and trustworthy but requires urgent SSL/TLS remediation to ensure secure user interactions.

U

Up2Go International LLC

up2go.com

33

Up2Go International LLC is a small technology company founded in 2009 in Austria, focused on transforming organizational collaboration through its Responsibility-as-a-Platform™ digital solution. The company promotes non-hierarchical leadership and responsible collaboration models, targeting organizations seeking innovative operational frameworks. The website is professionally designed using Squarespace, with good content quality and consistent branding, although it lacks comprehensive privacy and terms of service documentation. Technically, the site uses modern web technologies but suffers from poor SSL/TLS configuration, lacking a valid certificate and modern protocol support, which significantly impacts its security posture. Minimal user tracking is implemented via Google Analytics, with essential cookies only, aligning with a privacy-conscious approach. Overall, the site is functional and credible but requires urgent security improvements and enhanced privacy compliance to strengthen trust and protect visitors.

T

Tyrolean Jets & Services

tjs.at

23

Tyrolean Jets & Services is a well-established private jet charter and aircraft management company based in Austria, with over 45 years of experience. The company offers premium private aviation services including luxury travel, aircraft management, and operations, targeting affluent individuals and businesses seeking exclusive and flexible travel options. Their website reflects a high level of professionalism with rich multimedia content and clear contact information, including physical addresses and social media presence. However, the technical infrastructure shows critical security weaknesses, notably the absence of a valid SSL certificate and HTTPS support, which significantly impacts the security posture and user trust. The site implements cookie consent mechanisms but lacks a visible privacy policy and terms of service, indicating gaps in privacy compliance. Overall, while the business credibility and content quality are strong, urgent improvements in security and privacy compliance are recommended to enhance trust and protect user data.

REFLECTIONS Research & Consulting is a small consulting firm based in Austria, led by Franz Kühmayer, offering expertise, consulting services, visionary insights, references, and keynote speaking. The website is minimalistic with basic content and navigation but lacks critical security and privacy features. Technically, the site runs on Apache with simple HTML and CSS, but it lacks HTTPS and modern security headers, exposing visitors to potential risks. No privacy or cookie policies are present, and no contact information is provided, which impacts trust and compliance. Overall, the website's security posture is weak, and the digital maturity is low, requiring urgent improvements to secure communications and comply with privacy regulations.

F

frhg.org

frhg.org

35

The website frhg.org is currently a parked domain with no active business content or services. It primarily displays advertisements and a message indicating the domain may be for sale, targeting domain investors or buyers. There is no identifiable company or business information, and the site lacks contact details or interactive features. Technically, the site is hosted by Bodis, a domain parking service, and uses basic HTML, CSS, and JavaScript with Google Adsense for monetization. Performance is poor with a very slow load time, and mobile optimization is minimal. Security posture is weak due to the absence of a valid SSL certificate, no HTTPS support, and lack of security headers or DNS security features. Privacy compliance is minimal with only a basic privacy policy page and no cookie consent mechanism. Overall, the site has low trustworthiness and credibility, reflecting its status as a parked domain rather than an active business website.

SisterWood appears to be a small business focused on products related to Zirbenhout (pine wood) as indicated by the website title and description. The website content is minimal, primarily consisting of images linking to an external related domain and a marketing platform. There is no visible contact information, privacy policies, or terms of service, which limits the business credibility and user trust. Technically, the website uses basic HTML and CSS with Google Fonts, hosted on a provider identified by DNS nameservers. Performance is slow despite minimal content, and mobile optimization is basic. Security posture is weak due to the absence of HTTPS and SSL certificates, lack of security headers, and disabled DNSSEC. No analytics or tracking scripts are detected, indicating minimal user tracking. Overall, the website lacks essential security and privacy features, which poses risks to user trust and compliance.

Zahnwerkstatt Selz is a small local dental workshop based in Germany, currently operating a website that is under construction. The site provides minimal information, primarily contact details including a phone number and an email address. The business appears to target local dental patients, offering dental care and workshop services. The website's market position is that of a small local dental practice with limited digital presence. Technically, the website is hosted on an Apache server with static HTML and CSS, lacking modern web technologies or CMS platforms. Performance and mobile optimization are poor, and the site lacks accessibility and SEO best practices. Critically, the website does not have a valid SSL/TLS certificate, serving content over HTTP only, which severely impacts security and trust. From a security perspective, the absence of HTTPS, security headers, and privacy policies indicates a low security posture. No vulnerabilities such as malware or phishing were detected, but the lack of basic security controls and compliance measures is a significant concern. The WHOIS data is consistent with a legitimate small business domain registration, with no suspicious patterns. Overall, the website presents a high risk due to lack of encryption and privacy compliance, minimal content, and poor technical implementation. Strategic improvements are necessary to enhance security, privacy, and user trust before the site can be considered professional or reliable.

C

Chaya Fuera

chayafuera.com

26

Chaya Fuera is a small hospitality and media business operating a high-quality event venue in Vienna, Austria, specializing in clubs, live concerts, and business events. The website provides detailed event information, including dates, pricing, and VIP reservation contacts, targeting local event attendees and business clients. The business model revolves around event hosting and ticket sales with partnerships with known brands and ticket providers. Technically, the website uses basic HTML, CSS, and JavaScript with some modern font and icon libraries but lacks advanced CMS or frameworks. Performance is slow with minimal mobile optimization and basic SEO. Security posture is weak due to the absence of HTTPS, valid SSL certificates, and security headers, exposing the site to risks. Privacy compliance is poor with no privacy or cookie policies detected. Overall, the site is functional but requires significant improvements in security and privacy to meet modern standards.

O

Oracle

sun.com

40

Oracle's website for hardware solutions presents a comprehensive and professional digital presence showcasing its enterprise-grade hardware products optimized for Oracle Database and cloud integration. The site targets IT professionals and enterprises seeking scalable, high-performance infrastructure solutions. The content is rich, well-structured, and supported by multimedia and customer success stories, reflecting Oracle's strong market position in technology and cloud services. Technically, the site leverages Oracle's own content management system, Akamai CDN, and modern JavaScript frameworks, ensuring good performance and accessibility. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate and HTTPS support, which significantly impacts the security posture and trustworthiness from a technical perspective. Privacy and cookie policies are well implemented with consent mechanisms, aligning with GDPR compliance. Overall, the site demonstrates high business credibility but requires urgent remediation of its SSL configuration to meet modern security standards.

The website overthefuckingtop.com serves as a login gateway redirecting users to Instagram's official login page, which is owned and operated by Meta Platforms, Inc. It primarily facilitates user authentication for Instagram services. The site exhibits professional branding consistent with Instagram and Meta, targeting Instagram users who need to log in to access their accounts. The business model revolves around social media platform user authentication, supporting Instagram's global social networking services. Technically, the site employs modern web technologies including React, JavaScript, and GraphQL, hosted on Meta's infrastructure. Performance is moderate with good mobile optimization and basic accessibility features. Security headers are well implemented, including strict content security policies and frame denial, but the absence of a valid SSL certificate is a critical vulnerability that undermines the security posture. Privacy and cookie policies are not found on this domain, which is typical for a login redirect page but limits privacy compliance. Overall, the domain is legitimate and consistent with Instagram's operations, but the lack of SSL must be addressed to ensure secure user interactions.

S

Sto SE & Co. KGaA

sto.com

33

Sto SE & Co. KGaA is a global enterprise specializing in facade systems, insulation, acoustic surfaces, and floor coatings with over 50 years of industry experience. The company targets architects, builders, and developers seeking sustainable and aesthetic building solutions. Their website reflects a mature digital presence with comprehensive content, localized contacts, and professional branding. Technically, the site uses a custom Sto framework with modern JavaScript and CSS but lacks a valid SSL certificate, resulting in insecure HTTP connections and a weak security posture. Privacy and cookie policies are well implemented with consent mechanisms, and marketing tools like Salesforce Marketing Cloud and Usercentrics CMP are integrated. Security headers are configured but undermined by missing HTTPS. Overall, the site is professional and trustworthy but requires urgent SSL/TLS implementation to improve security and user trust.

W

Wiesner-Hager Möbel GmbH

wiesner-hager.com

32

Wiesner-Hager Möbel GmbH is a medium-sized Austrian company specializing in office furniture, interior design, and office consulting services. The company targets businesses and organizations requiring innovative and sustainable office and contract furniture solutions, including hospitality and healthcare sectors. The website presents a professional and comprehensive portfolio of products and services, supported by international design collaborations and a commitment to sustainability. Technically, the website is built on the Pimcore CMS platform with modern JavaScript and CSS technologies, but suffers from a lack of HTTPS encryption, which significantly impacts its security posture. Security headers are partially implemented, but the absence of a valid SSL certificate and modern TLS protocols exposes the site to risks. Privacy compliance is well addressed with a clear privacy policy, cookie consent via Cookiebot, and GDPR adherence. The WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the website is functional and professional but requires urgent security improvements to protect user data and enhance trust.

W

www.english-teacher-college.at

english-teacher-college.at

38

The website www.english-teacher-college.at operates as a specialized media platform providing comprehensive reviews, guides, and affiliate marketing services focused on online casinos in Austria. It targets Austrian online casino players by offering detailed casino ratings, bonus information, game variety, payment methods, and customer support evaluations. The site maintains a consistent brand presence with professional content and trust indicators such as DMCA protection and author credentials. Technically, the site is hosted behind Cloudflare and uses modern web technologies including JavaScript and Google Tag Manager, but lacks a valid SSL certificate, resulting in no HTTPS support and weak security posture. This absence of HTTPS and modern TLS protocols is a critical security gap that undermines user data protection and trust. Privacy and cookie policies exist but are basic in compliance, and no direct company contact emails or phone numbers are provided, though social media channels are linked. Overall, the site is functional and content-rich but requires urgent security improvements to enhance user trust and compliance.

VGN Medien Holding GmbH is a leading Austrian magazine publisher with a broad portfolio of print and digital media brands. Founded in 1992, it serves a wide Austrian audience with content spanning politics, lifestyle, business, and entertainment. The company operates multiple media brands and offers advertising and content marketing services. Technically, the website uses modern web technologies including nginx, JavaScript, and Google Analytics, but lacks a valid SSL certificate, which is a critical security shortfall. Security headers are implemented but without proper HTTPS, the site is vulnerable to interception and trust issues. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional and content-rich but requires urgent security improvements to align with best practices and user trust expectations.

The website ebv.com is part of Avnet's EBV Elektronik division, a mature and established technology distributor with a domain age of 29 years. The site is currently inaccessible due to a Web Application Firewall (WAF) security challenge implemented by Akamai, which blocks direct content access and requires CAPTCHA validation. This limits the ability to analyze the website's content, policies, and user experience. The domain registration is consistent with the business entity, registered transparently without privacy protection, and matches the parent company Avnet. However, the SSL/TLS configuration is critically lacking, with no valid certificate detected and no modern TLS protocols enabled, posing a significant security risk. The site uses Akamai CDN and tracking technologies such as Marketo and Salesforce for marketing and analytics purposes. Overall, the website's security posture is weak due to missing HTTPS and blocked content, while business credibility remains high due to domain maturity and corporate affiliation.

J

Jacqueline Pehlemann

jacquelinepehlemann.de

36

Jacqueline Pehlemann is a small architecture and interior design office based in Berlin, specializing in residential and hospitality projects such as apartments and hotels. The website serves as a portfolio showcasing detailed project descriptions and high-quality images, targeting clients interested in bespoke architectural and interior design services. The business operates primarily through professional service offerings with a local market focus. Technically, the website is hosted on the Cargo platform, utilizing standard web technologies including HTML5, CSS3, JavaScript, and jQuery. However, the site lacks HTTPS support, which is a critical security deficiency. Security headers are minimal, and no advanced DNS security features like DNSSEC or CAA are implemented. Privacy compliance is weak, with no cookie consent mechanisms and only a basic privacy policy page found. Contact information is not explicitly provided on the site, which may hinder user trust and engagement. Overall, the site demonstrates good content quality and professional design but requires significant improvements in security and privacy to meet modern standards.

A

ASSA ABLOY

assaabloyentrance.com

40

ASSA ABLOY Entrance Systems is a global enterprise specializing in manufacturing and supplying advanced entrance solutions including automatic, commercial, industrial, and digital doors. The company positions itself as a leader in secure and efficient access solutions, targeting businesses and industries requiring high-quality entrance systems. The website reflects a mature digital presence with a professional design and comprehensive product information, supporting its market leadership claims. Technically, the site uses modern web technologies and a proprietary CMS platform, with good SEO and mobile optimization. However, the lack of a valid SSL certificate and HTTPS support is a critical security weakness, exposing users to potential risks. Security headers are well implemented, but the absence of encryption and privacy policies reduces trust and compliance. Overall, the site demonstrates strong business credibility but requires urgent security improvements to align with best practices and regulatory requirements.

S

StreamBreak Interactive GmbH

streambreak.tv

56

StreamBreak Interactive GmbH operates a niche technology platform focused on enhancing live streaming experiences by providing interactive minigames and ads that engage viewers during breaks. The company targets streamers, eSports organizers, and advertisers, offering a dashboard for analytics and community interaction. Founded in 2017 and based in Austria, StreamBreak has established a consistent brand presence and has been recognized with awards such as the Twitch Extension Winner in 2019. Technically, the website is built using modern web technologies including Bootstrap and JavaScript, hosted on Uberspace with DNS managed by world4you.at. While the site supports modern TLS protocols and has HSTS enabled, performance is suboptimal with a slow page load time. Mobile optimization and SEO are good, but accessibility is basic. No CMS is detected, indicating a custom or static site. From a security perspective, the site employs HTTPS with strong protocols but lacks DNSSEC, CAA records, and domain protection locks, which are recommended to enhance DNS and domain security. OCSP stapling and certificate transparency are also not implemented. Privacy compliance is basic with a cookie banner and privacy policy present, but no terms of service or explicit GDPR compliance statements. Contact information is limited to an email address. Overall, the website is professional and trustworthy with minor security and performance improvements needed. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include improving DNS security, enhancing performance, and expanding privacy and security policies to strengthen compliance and user trust.

A

ANWR Norden AB

anwr.se

38

ANWR Norden AB operates as a leading organization in the voluntary shoe retail sector in the Nordic region, founded in 1919 in Hamburg, Germany. The company connects shoe retailers with top brands and offers a portfolio of services tailored to the needs of trade and industry, including financial services through its own bank, DZB Bank. The website reflects a medium-sized enterprise with a clear business model focused on membership services and retail support. Technically, the website uses standard web technologies and a consent management platform but suffers from slow load times and lacks modern CMS or frameworks. Security posture is weak due to the absence of a valid SSL certificate and modern TLS protocols, despite the presence of HSTS headers. The lack of DMARC, DNSSEC, and other DNS security features further reduces security maturity. Privacy compliance is basic with a privacy policy present but no strong GDPR indicators. Overall, the site is functional but requires significant improvements in security and performance to meet modern standards.

C

Corteva Commercial

pioneer.com

40

Pioneer.com represents the global seed brand of Corteva Commercial, a large agricultural manufacturing company. The website provides seed products, agronomic expertise, and local data support aimed at farmers and agricultural professionals worldwide. The site is built on Adobe Experience Manager and uses Adobe's digital marketing and analytics tools, indicating a moderate level of digital maturity. However, the absence of a valid SSL certificate and HTTPS support is a critical security flaw that undermines user trust and data protection. Privacy and terms pages exist but are basic, and no cookie consent mechanism is implemented, which may raise compliance concerns in regulated jurisdictions. Contact information is limited to a contact form without direct emails or phone numbers, reducing accessibility for users seeking support. Overall, the site is professional and content-rich but requires urgent security and privacy improvements.

B

BILTON LEDON Technology GmbH

biltongroup.com

40

BILTON LEDON Technology GmbH operates under the brand Better Light, specializing in high-quality LED lighting solutions manufactured in Austria. The company leverages its expertise from established LED brands BILTON and LEDON to offer a broad portfolio including LED strips, profiles, power supplies, and lighting management systems. Their market position is solidified by a mature domain and professional online presence targeting architects, industrial clients, and lighting professionals. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and includes Google Analytics for user tracking. However, performance is slow and security headers are minimal, indicating room for improvement in technical optimization and security hardening. The SSL certificate is valid but nearing expiration, and no advanced security features like HSTS or OCSP stapling are enabled. Privacy compliance is addressed with a GDPR-compliant privacy policy and cookie consent mechanism. Overall, the site demonstrates good business credibility and trustworthiness but would benefit from enhanced security practices and performance optimization.

CEVA Logistics is a leading global supply chain management and freight company offering a broad range of logistics services including air, ocean, ground, contract logistics, and customs brokerage. The company operates worldwide with a large workforce and is part of the CMA CGM Group. The website demonstrates a mature digital presence with comprehensive content, multiple language support, and active news and career sections. Technically, the site uses modern frameworks like Nuxt.js and Vue.js and is hosted behind Cloudflare, but critically lacks a valid SSL certificate and proper HTTPS configuration, which severely impacts its security posture. Security headers are well implemented, but the absence of TLS protocols and session resumption reduces security effectiveness. Privacy compliance is good with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional and trustworthy from a business perspective but requires urgent security improvements to protect user data and maintain trust.

SALT. Optics is a premium eyewear brand specializing in high-quality sun and optical glasses, leveraging Japanese craftsmanship and luxury materials. The company operates primarily through an e-commerce platform powered by Shopify, targeting consumers who value timeless design and superior lens technology. The website is professionally designed with clear navigation, product showcases, and informative content including blog posts and company philosophy. Technically, the site uses modern web technologies and integrates multiple marketing and analytics tools, but lacks a valid SSL certificate, which critically impacts its security posture. Security headers are well implemented, but the absence of HTTPS undermines user trust and data protection. Privacy and cookie policies are present, indicating some compliance with GDPR and related regulations. Overall, the site presents a moderate risk due to missing HTTPS, but otherwise demonstrates a solid business and technical foundation.

H

H World International

deutschehospitality.com

40

H World International is a large hospitality group operating multiple hotel brands with a focus on cultural diversity, tradition, and sustainable growth. The company targets hotel guests, business partners, franchisees, and job seekers, offering hotel accommodation, franchising, business travel, and development services. The website is professionally designed with clear navigation and good content relevance, supporting the company's market position as an established international hospitality group. Technically, the site uses standard web technologies and is hosted on Amazon AWS, but lacks a valid SSL certificate and proper HTTPS configuration, which is a critical security concern. Security headers are partially implemented, but the absence of TLS protocols and HSTS reduces the site's security posture significantly. Privacy compliance is supported by a comprehensive privacy policy, but no cookie consent mechanism is present. Contact information is clearly provided, enhancing business credibility. Overall, the site is functional and professional but requires urgent security improvements to protect user data and maintain trust.

D

dm drogerie markt

dm-drogeriemarkt.at

40

dm drogerie markt is a leading retail company in Austria specializing in drugstore products with a strong online presence. The website serves as a platform for product search, store availability, and customer engagement, targeting Austrian consumers. The technical infrastructure leverages modern JavaScript frameworks and integrates multiple third-party services for analytics, marketing, and user consent management. However, the website currently lacks a valid SSL/TLS certificate, resulting in no HTTPS support, which is a critical security concern. Security headers are well implemented, but the absence of HTTPS severely impacts the overall security posture. Privacy compliance is minimal with no detected privacy or cookie policies in the provided content. Business credibility is strong given the consistent domain registration and professional website design.

Wind Tre S.p.A. is a major Italian telecommunications operator offering a comprehensive range of services including mobile telephony, fiber and fixed internet, energy supply, and insurance products. The company targets both private consumers and business customers in Italy, positioning itself as a one-stop provider for connectivity, energy, and insurance needs. The website reflects a mature, well-established enterprise with a strong brand presence and extensive service offerings. Technically, the site is built on Adobe Experience Manager with integrations of Adobe Target and Google Tag Manager for marketing and analytics. However, the main domain lacks a valid SSL/TLS certificate and does not support HTTPS, which is a significant security concern. The site includes comprehensive legal, privacy, and cookie policies, demonstrating good privacy compliance and transparency. Contact information is clearly provided, including verified company emails, phone numbers, and social media channels. Overall, the security posture is basic due to missing HTTPS and related configurations, but the business credibility and content quality are high.

W

Weingut Michael Schroth

weingut-schroth.de

34

Weingut Michael Schroth is a small regional winery located in Grünstadt-Asselheim, Germany, specializing in a variety of wines including Winzersekt, Chardonnay, and Riesling. The website serves primarily as a digital presence showcasing the winery's offerings and regional identity. The business model focuses on wine production and sales targeted at wine consumers interested in the Pfalz region's specialties. Technically, the website uses basic HTML, CSS, JavaScript, and Adobe Typekit fonts, with jQuery for scripting. Hosting appears to be provided by Ionos, but the site suffers from slow load times and minimal mobile optimization. Security posture is weak, with no SSL/TLS certificate, no HTTPS, and absence of security headers or DNS security features. Privacy and compliance policies are missing, and no contact information is provided on the landing page, limiting user trust and regulatory compliance. Overall, the site is functional but lacks modern security and privacy standards, which poses risks to visitors and the business's credibility.

K

Kering Eyewear S.p.A.

keringeyewear.com

40

Kering Eyewear S.p.A. is a prominent luxury eyewear company operating under the global Kering Group umbrella. Established in 2014 and headquartered in Italy, it designs, develops, and distributes eyewear for a portfolio of 14 prestigious brands, including proprietary and licensed luxury houses. The company positions itself as a market leader in the luxury eyewear segment, targeting discerning consumers and industry partners. The website reflects a high level of professionalism with rich multimedia content, clear navigation, and consistent branding across multiple languages and regions. Technically, the site leverages modern JavaScript libraries, Google Tag Manager for analytics, and OneTrust for cookie consent, hosted on Microsoft Azure infrastructure. However, the absence of a valid SSL certificate and HTTPS implementation is a critical security gap that undermines user trust and data protection. Privacy and cookie policies are well implemented, indicating good GDPR compliance. Contact information is available, though no phone numbers are explicitly provided. Overall, the site demonstrates strong business credibility but requires urgent security improvements to meet modern standards.

A

Austria Wirtschaftsservice Gesellschaft mbH

awsg.at

40

Austria Wirtschaftsservice Gesellschaft mbH (aws) is the official Austrian federal promotional bank dedicated to fostering innovation and economic growth within Austria. The website serves as a comprehensive portal for Austrian entrepreneurs and companies seeking funding, subsidies, and advisory services. It offers a broad range of programs targeting startups, SMEs, and established companies, with a strong emphasis on energy, sustainability, and internationalization. The site is well-branded, professionally designed, and provides clear navigation and rich content in German, targeting primarily Austrian businesses and innovators. Technically, the website is built on TYPO3 CMS and uses Apache as the web server. It integrates Matomo analytics for privacy-compliant user tracking and employs modern web technologies including CSP and various security headers. However, the SSL/TLS configuration is currently invalid or missing, which is a critical security concern. Performance metrics are not available, but the site appears mobile-optimized and accessible. From a security perspective, while several security headers are implemented, the lack of a valid SSL certificate and disabled TLS protocols significantly reduce the security posture. No explicit security or incident response policies are found on the site. Privacy compliance is strong, with a clear cookie consent mechanism and a comprehensive privacy policy in place, aligned with GDPR requirements. Overall, the site is a credible and professional government service platform with excellent content and user experience but requires urgent remediation of its SSL/TLS configuration to ensure secure communications and improve trustworthiness.

K

Kontron Technologies GmbH

secureguard.eu

23

Kontron Technologies GmbH is a medium-sized Austrian technology company specializing in Industrial IoT, digitalization, and smart energy solutions. With over 20 years of experience, they provide tailored software development, workforce management, and expert services to optimize business processes. The website is professionally designed, content-rich, and targets B2B clients seeking innovative technology solutions. Technically, the site runs on Drupal 10 with Apache but lacks a valid SSL certificate, exposing it to security risks. Cookie consent and privacy policies are well implemented, ensuring GDPR compliance. However, the absence of HTTPS and modern TLS protocols significantly weakens the security posture. Overall, the domain registration data aligns well with the business claims, indicating legitimacy. Strategic improvements in SSL deployment and security headers are recommended to enhance trust and protect user data.

BMW Group Careers website serves as a global recruitment portal for the BMW Group, a leading enterprise in the automotive transportation sector. The site offers extensive information about career opportunities worldwide, highlighting the company's commitment to innovation in autonomous driving, e-mobility, and AI. The website is well-branded, professionally designed, and targets job seekers globally with a focus on technology and automotive professionals. Technically, the site is built on Adobe Experience Manager and uses Akamai CDN and Google Maps API, reflecting a mature digital infrastructure. However, a critical security gap exists as the site lacks HTTPS, exposing users to potential risks. Privacy and cookie policies are comprehensive and GDPR compliant, with consent mechanisms in place. The absence of direct contact emails or phone numbers is noted, but social media channels are official and active. Overall, the site demonstrates strong business credibility but requires urgent security improvements to protect user data and maintain trust.

NEVEON Holding GmbH is a large, leading integrated foam manufacturer specializing in polyurethane flexible and composite foams with a broad portfolio serving comfort, mobility, and specialty sectors. The company operates globally with 44 locations across 13 countries and is part of the Greiner Group. The website is professionally designed using TYPO3 CMS and hosted behind Cloudflare, offering good mobile optimization and accessibility. However, the absence of a valid SSL certificate and HTTPS significantly weakens the security posture. Security headers are partially implemented, but critical SSL/TLS configurations are missing, exposing the site to potential risks. Privacy compliance is well addressed with clear privacy and cookie policies, and contact information is readily available. Overall, the site demonstrates strong business credibility and content quality but requires urgent security improvements to protect user data and enhance trust.

T

traffic3 GmbH

traffic3.net

25

traffic3 GmbH is a specialized online marketing agency based in Vienna, Austria, focusing on performance marketing services such as Google Ads, SEO, web analytics, video and social ads, programmatic advertising, and conversion optimization. The company holds reputable certifications including Google Ads Premier Partner and Google Analytics Certified Service Partner, positioning it as a trusted player in the digital marketing sector. The website content is rich, professionally designed, and targets businesses seeking expert online marketing solutions primarily in Austria. Technically, the website employs modern JavaScript and consent management tools but lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security shortfall. Performance is slow, with a page load time exceeding 14 seconds, which may affect user experience. Privacy compliance is well addressed with comprehensive policies and a consent mechanism in place. Contact information is clearly presented, enhancing business credibility. Overall, the site demonstrates strong business legitimacy but requires urgent security improvements.

L

Lidl Österreich

lidl.at

40

Lidl Österreich operates a comprehensive retail website offering a wide range of products including food, household items, garden supplies, fashion, and more. The site features extensive promotional content, including weekly offers and loyalty programs such as Lidl Plus. The company holds a strong market position in Austria as a leading discount supermarket chain, supported by a consistent and professional brand presence. Technically, the website employs modern technologies like Vue.js and is hosted on a robust infrastructure with Akamai DNS services. However, a critical security issue is the absence of a valid SSL certificate, resulting in no HTTPS support, which significantly impacts the site's security posture. Despite this, the site implements several security headers and content security policies, indicating a focus on security best practices. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms. Overall, the site is professional and trustworthy but must urgently address the SSL deficiency to ensure secure user interactions.

I

Istmobil

istmobil.at

35

Istmobil.at is an independent informational website focused on providing detailed reviews, guides, and affiliate referrals related to mobile casinos and online gambling targeted at Austrian players. The site offers comprehensive content on casino apps, bonuses, payment methods, and gaming options, positioning itself as a niche media player in the online gambling affiliate space. Technically, the site is hosted behind Cloudflare and uses standard web technologies including HTML5, CSS3, and JavaScript, with Google Fonts for typography. However, the site lacks a valid SSL certificate and does not support HTTPS, which is a critical security deficiency. This significantly impacts the site's security posture and user trust. Privacy compliance is minimal, with no visible cookie consent mechanism and only basic privacy and terms of service pages linked in the footer. The site uses Matomo analytics and affiliate marketing links to partner casino domains. Overall, while content quality and business credibility are moderate to good, the lack of HTTPS and modern security practices present a major risk. Strategic improvements in security and privacy compliance are essential to enhance trust and protect users.

B

Breitenfeld Edelstahl AG

breitenfeld.at

40

Breitenfeld Edelstahl AG is a well-established Austrian manufacturer specializing in high-quality stainless steel and forged products, serving metal processing companies primarily in the manufacturing, energy, and transportation sectors. The company emphasizes environmentally friendly steel production using electric steelmaking processes and holds recognized certifications such as EN 9100, ISO 9001, and ISO 14001. Their digital presence is built on the HubSpot CMS platform, leveraging Cloudflare for hosting and content delivery. While the website is professionally designed with good content quality and navigation, there is a critical security gap due to the absence of a valid SSL certificate and HTTPS enforcement, which poses risks to user data confidentiality and trust. Privacy compliance is basic, with no visible cookie consent mechanisms or detailed privacy policies on the main site. Overall, the business credibility is high, supported by certifications and a consistent brand presence, but technical and security improvements are necessary to enhance trust and compliance.

D

Deutsche Lufthansa AG

ltt.aero

40

Lufthansa Technical Training (LTT) is a well-established aviation technical training provider affiliated with Deutsche Lufthansa AG. The company offers a broad range of training services including vocational, basic, and type training for aviation professionals worldwide. Their business model targets both individual trainees and corporate clients, leveraging customized training solutions to meet specific needs. The website reflects a professional and consistent brand image with comprehensive content and strong trust indicators such as EASA certification and Lufthansa Group affiliation. Technically, the site is built on the Scrivito CMS platform and hosted on Amazon S3 with CloudFront CDN, but suffers from a critical lack of HTTPS due to an invalid or missing SSL certificate, which severely impacts security posture. Privacy and cookie policies are well implemented and GDPR compliant, with moderate user tracking via Google Analytics and marketing tools like Intercom and Usercentrics. Overall, the website provides a good user experience and clear navigation but requires urgent security improvements to enable HTTPS and strengthen SSL/TLS configurations.

O

Omya International AG

omya.com

38

Omya International AG is a leading global producer and distributor of industrial minerals and specialty materials, primarily focusing on calcium carbonate and dolomite-based products. With a strong presence in over 50 countries and 160 plants, Omya serves diverse industries including adhesives, agriculture, building and construction, polymers, and water treatment. The company emphasizes sustainability and innovation, operating 17 dedicated laboratories and holding over 325 patent families. The website is professionally designed, content-rich, and well-structured, targeting industrial customers and partners worldwide. Technically, the site is built on Adobe Experience Manager with modern web technologies and includes consent management for privacy compliance. However, a critical security issue is the absence of a valid SSL certificate and enabled TLS protocols, which significantly impacts the site's security posture. Privacy policies and terms of service are present and comprehensive, supporting GDPR compliance. Overall, Omya's digital presence reflects a mature, credible industrial business but requires urgent security improvements to protect user data and enhance trust.

D

Dr. Isabella Eberl

notarin-eberl.at

35

The website represents a small professional notary office led by Dr. Isabella Eberl located in Taxenbach, Salzburg-Land, Austria. It offers a broad range of notarial services including testament and inheritance law, real estate transactions, family law, and corporate legal services. The site is well-structured with clear service descriptions and contact information, targeting private individuals and businesses in the local region. Technically, the site uses a Mono CMS platform with various external scripts for fonts, tracking, and consent management. However, the site lacks a valid SSL certificate and HTTPS support, which is a critical security deficiency. Privacy and cookie policies are present with a consent mechanism, but no terms of service or explicit security policies are found. The site uses Google Analytics and Herold Tracker for analytics and marketing purposes. Overall, the site is professional but requires urgent security improvements to protect user data and enhance trust.

E

Endress+Hauser AG

endress.com

40

Endress+Hauser AG is a global leader in industrial measurement instrumentation and automation solutions, serving diverse sectors including energy, chemical, life sciences, water treatment, and oil & gas. The company offers a comprehensive portfolio of products and services, including flow, level, liquid analysis, optical analysis, pressure, and temperature measurement devices, alongside software and system products. Their website reflects a mature digital presence with extensive product information, customer support, and training resources, targeting industrial process engineers and related professionals worldwide. Technically, the website employs modern web technologies such as JavaScript, CSS, JSON-LD structured data, and utilizes Tealium for analytics and tag management. The site is hosted on reliable infrastructure, likely Amazon AWS, and demonstrates good mobile optimization, accessibility, and SEO practices. However, performance metrics indicate slow loading times, which may impact user experience. From a security perspective, the site has critical deficiencies: it lacks a valid SSL certificate and does not enable HTTPS or modern TLS protocols, severely impacting its security posture. While some security headers are present, the absence of proper SSL/TLS configuration is a major risk. Privacy and cookie policies are well implemented with consent mechanisms, and contact information is clearly provided, enhancing trust. Overall, the site is professionally designed and content-rich but requires urgent security improvements to protect user data and maintain trust. Strategic recommendations include immediate SSL certificate installation, enabling HTTPS and modern TLS versions, and enhancing security headers and session management. These steps will significantly improve the site's security score and user confidence.

T

TAUERN SPA World Betriebs GmbH & Co KG

tauernspakaprun.com

32

TAUERN SPA Kaprun is a mature, well-established 4-star superior resort located in the Austrian Alps, offering a comprehensive spa and wellness experience combined with high-quality accommodation and culinary services. The business is part of the VAMED Vitality World group, indicating strong market positioning in the hospitality and wellness sector. The website is professionally designed with rich content, clear navigation, and strong trust signals including multiple awards and certifications. Technically, the site uses Pimcore CMS and integrates modern tracking and consent management tools, but suffers from a critical security weakness due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts its security posture. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

T

Triumph Intertrade AG

triumph.com

38

Triumph Intertrade AG operates a mature and well-established e-commerce platform specializing in lingerie and related apparel, primarily targeting the German market. The website demonstrates a high level of professionalism, rich content, and strong brand consistency, supported by a comprehensive customer loyalty program and active social media presence. The technical infrastructure leverages modern e-commerce technologies including Salesforce Commerce Cloud and Cloudflare for hosting and delivery, with integrated marketing and analytics tools such as Google Tag Manager and CQuotient. However, the absence of a valid SSL/TLS certificate on the main domain significantly undermines the site's security posture, exposing users to potential risks. Additionally, a subdomain takeover vulnerability on blog.triumph.com presents a notable security concern. Privacy and cookie policies are present and indicate GDPR compliance, with clear contact information and incident response channels available. Overall, the site is functional and credible but requires urgent security improvements to protect user data and maintain trust.

G

Gerhard Trittenwein

bindertrittenwein.com

37

Gerhard Trittenwein operates a specialized IT consulting and project management business focused on complex IT, change management, and digital transformation projects. The company emphasizes lean and agile methodologies to deliver early and visible results, targeting organizations facing challenging IT projects. The website presents a professional image with clear service offerings and contact information, supported by over 30 years of experience. Technically, the site uses Mono CMS with external CDNs and integrates Google Analytics and ConsentManager for tracking and cookie consent. However, the absence of a valid SSL certificate and HTTPS support is a critical security flaw, exposing visitors to risks and undermining trust. Privacy policies and cookie consent mechanisms are in place, indicating GDPR awareness, but no security policy or incident response information is provided. Overall, the business appears legitimate and consistent with its domain registration and DNS records, but urgent improvements in security posture are needed.

Docolution GmbH is a specialized Austrian company providing tailored document management and output management solutions, focusing on quality assurance, accessibility, and customer communication. Their business model targets organizations requiring professional document handling and communication services, supported by consulting and software development. The website reflects a professional presence with clear service offerings and contact information, but lacks some standard compliance documents such as privacy policy and terms of service. Technically, the site uses modern web technologies including JavaScript, jQuery, and Google Analytics, and is mobile optimized with good accessibility features. However, the absence of HTTPS and a valid SSL certificate is a critical security shortfall, exposing users to risks and undermining trust. Security headers are minimal, and no advanced security policies or incident response contacts are published. Overall, the site is functional and credible but requires urgent improvements in security and privacy compliance to meet modern standards.