High-risk security reports

A

Aneta Ouzká DiS.

chatachalupa.cz

47

Chatachalupa.cz is a Czech Republic-based vacation rental platform specializing in the rental of cottages and chalets across various regions in the Czech Republic and parts of Italy. With over 28 years of experience, the company offers a broad portfolio of more than 350 properties, targeting tourists seeking seasonal holiday accommodations. The website provides detailed search filters, regional categorizations, and additional services such as insurance and gift vouchers, positioning itself as a trusted intermediary in the hospitality sector. Technically, the website employs a mix of legacy and modern web technologies including jQuery, Alpine.js, and Laravel Livewire, hosted under the REG-WEDOS registrar. The site is mobile-optimized with good SEO practices and integrates Google Tag Manager for analytics and marketing purposes. However, some technical debt is evident with the use of older JavaScript libraries and lack of visible security headers. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism compliant with GDPR principles, though explicit privacy and terms of service documents are not found in the provided content. No incident response or vulnerability disclosure information is present, indicating room for improvement in transparency and security maturity. Overall, the website is professionally designed and functional, with moderate security posture and privacy compliance. Strategic enhancements in security headers, policy documentation, and library updates would strengthen its risk profile and user trust.

I

inside Dornbirn

inside-dornbirn.com

48

inside Dornbirn operates as a local business community platform promoting over 200 member businesses in Dornbirn, Austria. The website offers information about member companies, insider vouchers, and organizes events to stimulate local commerce. The site is built on WordPress with various plugins enhancing social media integration and business listings. The technical infrastructure is modern and mobile-optimized, with good performance and SEO practices. Security posture is adequate with HTTPS and some security best practices, but lacks explicit security headers and visible privacy or cookie policies. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, though the active and professional website presence suggests a legitimate business. Overall, the site is trustworthy but would benefit from improved privacy compliance and domain registration transparency.

S

SmartCity Dornbirn

smartcitydornbirn.com

45

SmartCity Dornbirn is a government-backed initiative focused on promoting digital innovation and smart city projects within Dornbirn, Austria. The website serves as an information hub for startups, companies, and public administration to engage with digital transformation efforts. The organization positions itself as a regional leader in smart city development, fostering innovation and community involvement. Technically, the website is built on a modern WordPress CMS platform using Elementor and Yoast SEO, ensuring good design, mobile responsiveness, and SEO optimization. Security posture is adequate with HTTPS enforced and cookie consent implemented, though there is room for improvement in DNS security and explicit security policies. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, though it lacks a terms of service page and explicit incident response information.

G

Graz Kulturjahr 2020

kulturjahr2020.at

43

The website www.kulturjahr2020.at serves as a cultural event platform centered on the theme 'Urban Future' for the city of Graz in 2020. It provides comprehensive information about events, projects, publications, and participating artists across all city districts. The site targets a general audience interested in cultural activities and urban development in Graz. The business model focuses on event promotion and cultural engagement, positioning itself as a local cultural hub. Technically, the site is built on WordPress with common plugins for SEO, multilingual support, and social sharing, indicating a moderate level of digital maturity. The design is professional and mobile-optimized, with clear navigation and relevant content.

H

Holzbaupreis Steiermark

holzbaupreis-stmk.at

46

Holzbaupreis Steiermark operates a regional award platform recognizing excellence in sustainable wood construction within the Steiermark region of Austria. The website highlights the importance of wood as a renewable building material and promotes innovative architectural projects that combine craftsmanship, sustainability, and design. The platform is supported by regional industry leaders and organizations, positioning itself as a key promoter of future-oriented building practices in the region. Technically, the website is built on WordPress using modern themes and plugins such as Astra and Elementor, with SEO optimizations via Yoast and cookie management through Borlabs Cookie. Security posture is solid with HTTPS and security headers implemented, though explicit privacy and terms policies are missing. Overall, the site is professional, well-branded, and trustworthy, targeting architects, builders, and stakeholders interested in sustainable construction.

X

XTEL s.r.o.

xtel.cz

44

XTEL s.r.o. is a Czech-based company specializing in the distribution and sale of innovative technology products such as USB card readers for electronic ID cards, document cameras, and conference phones. The company targets both individual users and businesses requiring high-quality peripherals for productive work. Their market position is niche-focused within the European Union, providing technical consultation, customer support, and warranty services alongside product sales. The website reflects a professional and consistent brand image with clear business information and contact details. Technically, the website is built on a modern WordPress CMS platform with WooCommerce for e-commerce functionality. It employs common web technologies including jQuery, Google Analytics, Facebook Pixel, and caching plugins to optimize performance. The site is mobile-optimized and includes SEO best practices such as structured data and meta tags. However, some security headers are not explicitly detected, and no dedicated security or incident response policies are published. From a security perspective, the site uses HTTPS and cookie consent mechanisms, indicating a baseline of privacy compliance. No critical vulnerabilities or exposed sensitive data were found in the HTML content. The absence of WHOIS data for the domain reduces trust somewhat, but the website content and business presence appear legitimate and professional. No signs of blocking or WAF interference were detected, allowing full content access. Overall, the website presents a trustworthy and functional online presence for a small technology distributor. Strategic improvements in security header implementation, publishing security policies, and clarifying domain registration details would enhance trust and compliance.

K

KOPOS Elektro Kft.

kopos.hu

46

KOPOS Elektro Kft. is a well-established manufacturer and distributor of electrical installation materials based in Hungary, with a strong presence across Europe. The company emphasizes high-quality products manufactured in Kolín, Czech Republic, and targets electrical professionals and businesses. Their website offers extensive product catalogs, technical support, and training resources, reflecting a mature business model focused on manufacturing and market expansion. Technically, the site runs on Drupal 7 with common libraries and modules, providing a moderate performance and good mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, supporting the company's credibility and market position.

K

KOPOS KOLÍN a.s.

kopos.ee

48

KOPOS KOLÍN a.s. is a well-established manufacturer specializing in plastic and metal electrical installation materials, boasting a product range of over 5000 items that comply with international quality standards. The company operates globally through 10 subsidiaries across Europe, Asia, and Central America, positioning itself as a significant player in the manufacturing sector. Their website reflects a professional and multilingual platform aimed at industrial clients and distributors, providing extensive product catalogs, technical support, and training resources. Technically, the website is built on Drupal 7 with a suite of JavaScript libraries including jQuery and Google Tag Manager for analytics. The site demonstrates good mobile optimization and SEO practices, although the use of Drupal 7 indicates some legacy technology. Security measures include HTTPS enforcement and cookie consent mechanisms, but explicit security headers and incident response policies are not prominently disclosed. The security posture is solid with no evident vulnerabilities or exposed sensitive data, complemented by GDPR-compliant privacy and cookie policies. The domain registration details align well with the company's history and geographic claims, reinforcing trustworthiness. Overall, the website presents a credible and professional digital presence with room for technical modernization and enhanced security transparency.

I

ICC Werbeagentur GmbH & CoKG

icc.at

48

ICC Werbeagentur GmbH & CoKG is a small-sized digital agency based in Innsbruck, Austria, specializing in e-commerce and digital process optimization. The company offers a comprehensive range of services including web design, online shop development, SEO, marketplace management, newsletter marketing, and e-commerce consulting. Their website reflects a professional and consistent brand image, targeting businesses looking to expand or optimize their online commerce capabilities. Technically, the website is built on WordPress with modern plugins and frameworks, ensuring good mobile optimization and SEO readiness. Security posture is solid with HTTPS and cookie consent mechanisms in place, though some security headers could be improved. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

S

Státní veterinární ústav Olomouc

svuolomouc.cz

47

Státní veterinární ústav Olomouc is a well-established veterinary laboratory based in the Czech Republic, founded in 2002. The institute provides comprehensive laboratory analyses for animals, food, feed, water, pharmaceuticals, and hygiene products, alongside product certification services. It holds multiple accreditations and operates national and reference laboratories, positioning itself as a trusted authority in veterinary diagnostics and certification. The website reflects a professional and consistent brand image, targeting veterinary professionals, agricultural producers, and related stakeholders. Technically, the site is built on WordPress with modern plugins, including GDPR compliance tools and multilingual support, offering a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration data aligns well with the business claims, indicating high legitimacy and trustworthiness.

Státní veterinární ústav Jihlava is a modern veterinary laboratory based in the Czech Republic, providing comprehensive laboratory diagnostics and advisory services in animal health, food safety, feed, and water. The institution holds important accreditations and serves a diverse audience including veterinary professionals, agricultural enterprises, food producers, and government bodies. The website reflects a medium-sized government-related entity with a professional online presence, including an e-shop, customer portal, and conference center rental services. Technically, the site employs a modern technology stack with libraries such as jQuery, Bootstrap, and Google APIs, ensuring good mobile optimization and user experience. Security measures include HTTPS, Google reCAPTCHA, and a cookie consent mechanism, though explicit security headers and incident response contacts are absent. Overall, the site is trustworthy and compliant with GDPR, but the lack of WHOIS transparency and some missing security policies suggest areas for improvement.

S

SUSTAINABLE RESOURCES Verification Scheme GmbH

sure-system.org

44

SUSTAINABLE RESOURCES Verification Scheme GmbH operates the SURE certification system, which focuses on ensuring compliance with RED II sustainability requirements for biomass-based electricity, heating, and cooling production. The company provides certification services, governance information, and training workshops, positioning itself as a recognized certification scheme within the EU energy sector. The website is professionally designed using Joomla CMS and incorporates modern web technologies such as Bootstrap and jQuery, with performance and mobile optimization rated as good. Security posture is adequate with HTTPS enforced and cookie consent implemented, though improvements such as enabling DNSSEC and adding security headers are recommended. Contact information and social media presence are clear and trustworthy, supporting business credibility.

F

Fachverband Biogas

biogas-liefert.de

36

Biogas liefert is an educational and advocacy website operated by Fachverband Biogas, focusing on promoting biogas as a sustainable and flexible energy source in Germany. The platform provides informative content aimed at a general audience interested in renewable energy and the energy transition. The site is positioned as a niche player within the energy sector, leveraging official biogas branding and social media channels to reach its audience. Technically, the website uses modern JavaScript modules and SVG graphics, hosted on servers associated with kasserver.com. The site is mobile-optimized with a good user experience but lacks advanced technical frameworks or CMS indications. Security posture is basic, with no evident security headers or published policies, and no forms or data collection mechanisms are present. Privacy and cookie policies are absent, which impacts compliance and trust. Overall, the site is functional and professional but would benefit from enhanced security and privacy measures.

F

Fachverband BIOGAS e.V.

biovollgas.de

44

Fachverband BIOGAS e.V. operates the website biovollgas.de to promote biogas as a vital component of the energy transition in Germany. The organization focuses on educating the public about the benefits of biogas, dispelling myths, and supporting climate-friendly energy solutions. The website serves as an information hub with multimedia content, social media integration, and clear contact details, positioning the association as a trusted advocate in the renewable energy sector. Technically, the website is built on the ProcessWire CMS platform, utilizing modern JavaScript libraries such as jQuery and Slick Slider, and integrates analytics tools including Matomo and Facebook Pixel. The site is hosted on servers associated with kasserver.com and employs HTTPS with a good SSL configuration. Mobile optimization and SEO practices are well implemented, though accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, explicit security headers are not detected, and no published security or incident response policies are available. No vulnerabilities or exposed sensitive data were found, indicating a solid but improvable security posture. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a reliable source for biogas information. Strategic improvements in security headers, incident response transparency, and accessibility would further strengthen its position.

B

Biopekárna Zemanka s.r.o.

biopekarnazemanka.cz

45

Biopekárna Zemanka s.r.o. is a Czech organic bakery specializing in sweet cookies and savory crackers, operating since 2006. The company targets a broad audience including adults, children, allergy sufferers, and vegans, offering a diverse product range and private label production. Their market position is that of a trusted local organic bakery with a focus on quality and sustainability. The website reflects this with clear branding, product information, and e-commerce integration via a partner domain. Technically, the website is built on Joomla CMS with modern frontend technologies such as Bootstrap, jQuery, and FontAwesome Pro. It includes a cookie consent mechanism and uses Google Tag Manager for analytics. The site is mobile optimized and has good user experience, though some SEO and accessibility improvements are possible. The SSL configuration is excellent, but security headers are missing, which could be improved. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. Privacy compliance is basic but present, with privacy and cookie policies available. However, the lack of WHOIS data for the domain reduces trust in domain legitimacy and registration transparency. Overall, the website is professional and trustworthy from a business and user perspective, but domain registration opacity is a concern. Strategic improvements in security headers and enhanced privacy disclosures would strengthen the security and compliance posture.

A

ALIKA a.s.

alika.cz

49

ALIKA a.s. is a well-established Czech family-owned company specializing in the manufacturing and distribution of roasted nuts, salty snacks, dried fruits, and oilseeds with over 30 years of experience. The company operates multiple brands and serves both B2B and B2C markets, including a dedicated e-commerce platform. The website reflects a professional digital presence built on Joomla CMS with modern web technologies and includes multilingual support. Security posture is solid with HTTPS and cookie consent mechanisms, though lacks some advanced security headers and formal privacy and terms policies. Contact information is limited to a physical address, which may impact direct customer engagement. Overall, the domain and business information are consistent and trustworthy, supporting a medium-sized manufacturing business in the Czech Republic.

L

Levandulový statek Bezděkov

levandulovystatek.cz

45

Levandulový statek Bezděkov is a Czech-based lavender farm and experiential tourism business offering a variety of services including farm visits, wellness activities, festivals, and an e-commerce shop. The website is well-structured, visually appealing, and provides comprehensive contact information and social media integration, supporting a positive user experience. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and Google Tag Manager, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and formal privacy and terms of service documentation. The absence of WHOIS data limits domain trust verification, which is a notable risk factor. Overall, the website presents a professional and trustworthy front for a small hospitality and retail business focused on regional tourism and wellness.

B

BARLEE´S

barlees.eu

40

BARLEE´S is a Czech-based company specializing in organic barley products including beverages, dietary supplements, and foods. The company emphasizes local production within the Czech Republic and offers products in BIO quality that are 100% natural. The website is built on WordPress with WooCommerce for e-commerce functionality and supports multiple languages (Czech, German, English), targeting health-conscious consumers interested in superfoods. Technically, the site uses modern web technologies and popular plugins but lacks some security headers and privacy compliance elements. Security posture is moderate with HTTPS enabled but could be improved with better header configurations and explicit privacy policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

K

Kitl s.r.o.

kitl.cz

42

Kitl s.r.o. is a Czech family-owned company founded in 2007 specializing in the production and retail of natural herbal and fruit syrups, mead, and mineral waters. The company emphasizes the use of organic and environmentally friendly raw materials. The website presents a professional e-commerce platform with a clear product catalog and multilingual support. Technically, the site uses modern JavaScript libraries and tracking tools such as Google Tag Manager and Facebook Pixel, with HTTPS enforced for secure communications. However, the absence of WHOIS data and registrant information reduces domain trustworthiness. Privacy and cookie policies are not clearly presented, which may impact compliance with GDPR regulations. Overall, the site is well-designed and functional, targeting general consumers interested in natural health products.

Zařízení služeb MZe is an official government website representing the Ministry of Agriculture of the Czech Republic. It provides informational content related to various service sections such as gastronomy, marketing, economic and operational areas, job offers, and public information disclosure. The website targets the Czech public, government stakeholders, and related service users. The business model is that of a government service provider focused on information dissemination and public service. Technically, the website is built on WordPress CMS, utilizing standard web technologies including HTML5, CSS3, JavaScript, and FontAwesome for icons. Hosting and domain registration are managed by Wedos, a Czech provider, consistent with the website's country of origin. The site shows moderate performance and basic mobile optimization but lacks advanced accessibility features and SEO optimizations. From a security perspective, the website uses HTTPS, ensuring encrypted communication. However, it lacks important security headers such as Content-Security-Policy and X-Frame-Options, which could improve protection against common web attacks. No privacy or cookie policies are present, indicating potential compliance gaps with GDPR and other privacy regulations. No contact information or incident response channels are provided, limiting transparency and user trust. Overall, the website is functional and serves its informational purpose but requires improvements in privacy compliance, security hardening, and user engagement features to enhance trust and regulatory adherence.

W

WUNSCHHAUS Architektur & Baukunst

wunschhaus.at

49

WUNSCHHAUS Architektur & Baukunst is a well-established architecture and construction firm based in Vienna, Austria, specializing in custom single-family homes with a focus on modern and classical designs. The company has a strong market position supported by a portfolio of over 569 completed houses and recognition such as the Rising Star Austria award in 2019. Their website reflects a professional and content-rich digital presence, targeting private individuals and families in the Vienna region seeking architectural services. Technically, the site is built on WordPress with modern JavaScript libraries and tracking tools, offering good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent implemented, though lacking explicit security headers and published security policies. Overall, the website is trustworthy and professionally maintained, with room for improvement in security transparency and accessibility.

G

Gustav Hummel GmbH & Co KG

hummel-stein.at

48

Gustav Hummel GmbH & Co KG is a well-established Austrian company specializing in natural stone extraction and processing, with origins dating back to 1732. The company serves architects, garden and landscape designers, and restoration projects, particularly focusing on limestone from their quarry in St. Margarethen. Their website reflects a medium-sized manufacturing business with a strong reputation for quality and reliability. Technically, the site is built on WordPress using Elementor and Yoast SEO, with Borlabs Cookie managing GDPR-compliant cookie consent. The site is mobile-optimized and performs moderately well. Security posture is good with HTTPS enforced and cookie consent implemented, though additional security headers could enhance protection. No critical vulnerabilities or exposed sensitive data were found. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. Contact information is limited to a contact form, with no direct emails or phone numbers visible. Overall, the website is professional, trustworthy, and aligned with the company's business profile.

S

SCHNEEWEISS interior

braunlockenhaus.at

48

SCHNEEWEISS interior is a medium-sized manufacturing company specializing in high-quality object furniture and interior solutions, operating primarily in Austria and Germany. The company integrates multiple established brands such as Hiller Objektmöbel, BRAUN Lockenhaus, rosconi, and MalscherSitzMöbel, offering a comprehensive portfolio from design and production to logistics and assembly. Their market position is strong within the interior furnishing sector, targeting professional and business clients seeking innovative and traditional furniture solutions. Technically, the website is built on TYPO3 CMS with modern frontend technologies including Bootstrap and jQuery. It employs Matomo analytics configured for privacy-conscious tracking and includes a cookie consent mechanism. The site demonstrates good mobile optimization, accessibility, and SEO practices, reflecting a mature digital infrastructure. From a security perspective, the site uses HTTPS and has basic security headers, though it lacks explicit security policies and incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with cookie consent present but no visible privacy policy or terms of service pages in the provided content. Overall, the website presents a professional and trustworthy digital presence with moderate security and privacy maturity. Strategic improvements in security policy transparency and privacy documentation would enhance compliance and user trust.

A

A-List

a-list.at

48

A-List is a niche Austrian lifestyle and hospitality platform providing curated local recommendations for restaurants, hotels, shopping, and cultural experiences. The website targets a general audience interested in Austrian travel and lifestyle, offering editorial content, user registration, and newsletter subscriptions. Technically, the site is built on TYPO3 CMS with integrations of Google Maps and social media SDKs, delivering a moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and secure form tokens, though lacking explicit security headers and incident response policies. Privacy compliance is basic but includes cookie consent and a privacy policy. Overall, the site is professional, trustworthy, and well-positioned in its market niche.

A

ACTIVE 24, s.r.o.

websalon.sk

42

Websalon.sk is a Slovak language blog operated by ACTIVE 24, s.r.o., focusing on web hosting, website creation, and marketing advice. It targets beginners, developers, and marketers interested in building and promoting websites. The site is positioned as a niche informational resource aligned with ACTIVE 24's hosting services. Technically, the site runs on WordPress 6.0.9 with plugins such as All in One SEO and Cookie Law Info, and uses an outdated jQuery 1.3 library, which poses some security risks. The site is moderately optimized for mobile and SEO, with a cookie consent mechanism implemented. Security posture is adequate with HTTPS enabled but lacks security headers and uses outdated libraries. No privacy policy or terms of service pages were found, indicating compliance gaps. Overall, the site is legitimate, consistent with its registrant data, and safe for general audiences.

H

Hotel Duo, a.s.

hotel-duo.cz

46

Hotel Duo, a.s. operates a hospitality business in Horní Bečva, Beskydy, Czech Republic, offering accommodation, wellness, dining, and event hosting services. The company targets families, corporate clients, seniors, and groups, providing a range of services including rooms, wellness packages, and recreational activities. The website is professionally designed, mobile-optimized, and includes comprehensive content and clear navigation. It leverages WordPress CMS with modern plugins for SEO, GDPR compliance, and marketing automation. The presence of social media channels and a cookie consent mechanism indicates digital maturity and privacy awareness. However, the absence of WHOIS data limits domain trust verification, which is a concern for full legitimacy assessment. Security posture is good with HTTPS and cookie consent, but could be improved by adding explicit security headers and incident response information. Overall, the website presents a trustworthy and professional image with room for security and compliance enhancements.

The website i-pronajem.cz operates as a niche real estate rental listing platform primarily targeting the Czech market. It offers listings for apartments, cottages, and chalets, catering to both private owners and commercial real estate agencies. The business model revolves around providing a platform for rental advertisements, positioning itself as a local player in the real estate sector since 2008. The site content is basic but relevant to its audience, with moderate branding consistency and limited trust indicators. Technically, the website uses standard HTML, CSS, and JavaScript without modern frameworks or CMS detected. Hosting is provided by VAS Hosting, a Czech hosting provider, which aligns with the domain's geographic focus. Performance and mobile optimization are basic, with room for improvement in accessibility and SEO. No advanced analytics or marketing tools are evident, and tracking is limited to a visitor counter pixel. From a security perspective, the site lacks visible security headers and does not provide privacy or cookie policies, indicating compliance gaps with GDPR and other regulations. No contact information or incident response channels are provided, limiting transparency and user trust. The domain registration data is consistent and legitimate, supporting the site's credibility. No WAF or blocking mechanisms were detected, and the content is safe for general audiences. Overall, the website presents a functional but basic platform with significant opportunities to enhance security posture, privacy compliance, and user engagement through improved technical implementation and transparency.

P

Plattform Baukulturpolitik

baukulturpolitik.at

46

Plattform Baukulturpolitik is a non-profit advocacy platform focused on promoting Baukultur (building culture) in Austria. The organization aims to politically anchor Baukultur to enable engaged architectural policy. Their services include information dissemination, policy advocacy, event organization, and publication of reports. The website targets Austrian citizens, architects, policymakers, and stakeholders interested in Baukultur. The platform holds a niche position within the Austrian government and non-profit sectors. Technically, the website uses a simple but effective tech stack including jQuery and Featherlight for UI elements. It is moderately performant, mobile-optimized, and SEO-friendly with proper meta tags and Open Graph data. The site implements a comprehensive cookie consent mechanism with granular user controls, reflecting good privacy compliance. However, no CMS or hosting provider details were detected. From a security perspective, the site enforces HTTPS and uses cookie consent best practices but lacks advanced security headers and incident response information. No vulnerabilities or exposed sensitive data were found. The WHOIS data is consistent with the website's Austrian non-profit identity, enhancing trustworthiness. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, though it could improve security headers and incident response transparency.

P

proHolz Austria | Arbeitsgemeinschaft der österreichichen Holzwirtschaft

proholz.at

46

proHolz Austria operates as a leading information and advocacy platform dedicated to promoting sustainable forestry, wood usage, and climate protection in Austria. The organization provides comprehensive resources, educational content, and consulting services to support the application of wood as a climate-friendly building material. Their market position is strong within the Austrian wood industry, serving a target audience of builders, planners, and industry stakeholders. The website reflects a professional and consistent brand image with extensive content and active engagement through social media channels. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies including Bootstrap and jQuery. It integrates analytics tools such as Google Analytics and Microsoft Clarity for user behavior insights. The site is mobile-optimized, accessible, and SEO-friendly, ensuring a good user experience across devices. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. Privacy compliance is well addressed with a comprehensive privacy policy, cookie consent mechanisms, and GDPR adherence. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the website is trustworthy, professionally maintained, and aligned with its business goals. The risk profile is low, with no detected vulnerabilities or suspicious content. Strategic recommendations include publishing security and incident response policies, adding a vulnerability disclosure mechanism, and enhancing transparency around data protection officer contacts.

Ö

Österreichische Gesellschaft für Architektur

oegfa.at

47

The Österreichische Gesellschaft für Architektur (ÖGFA) is a well-established Austrian non-profit organization dedicated to promoting architecture through programs, publications, initiatives, and events. The website reflects a professional and consistent brand presence with a clear focus on architecture and cultural engagement in Austria. The organization maintains partnerships with governmental and cultural institutions, enhancing its credibility and reach. Technically, the website is built on the Plone CMS platform, leveraging modern JavaScript libraries and ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in security headers and formal policies. Overall, the site is trustworthy, accessible, and serves its target audience effectively.

R

Rīgas satiksme

rigassatiksme.lv

47

Rīgas satiksme is the primary public transportation provider in Riga, Latvia, offering comprehensive services including trams, trolleybuses, buses, and night transport. The website serves as an information hub for route schedules, ticketing, parking, and company news, targeting residents and visitors of Riga. The business operates under municipal partnership, positioning itself as a key player in the city's transportation infrastructure. Technically, the website employs a traditional tech stack with jQuery and related libraries, hosted partially on Cloudfront. The site is moderately optimized for performance and mobile use, with basic accessibility features and good SEO practices. The content is well-structured and professionally presented, supporting a positive user experience. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, but lacks visible advanced security headers and explicit security policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is supported by a cookie policy and GDPR-aligned consent, though a dedicated privacy policy page is basic. Contact information is clearly provided, enhancing business credibility. Overall, the website is trustworthy, functional, and aligned with its public service mission. Strategic improvements in security headers, incident response transparency, and enhanced mobile optimization could further strengthen its posture.

H

Hunger auf Kunst und Kultur | Der Kulturpass für die Steiermark

hakuk.st

43

The website hakuk.st serves as a cultural promotion platform for the Steiermark region in Austria, focusing on providing information about a cultural pass and related events. The site is built on WordPress using the Divi theme, indicating a moderate level of digital maturity with standard web technologies and integrations such as Google Fonts and Jetpack analytics. While the site offers good design quality and user experience, it lacks critical privacy and security disclosures such as privacy policies, cookie consent mechanisms, and incident response information. The absence of security headers and vulnerability disclosure policies suggests room for improvement in security posture. Overall, the site is accessible and safe for general audiences but would benefit from enhanced compliance and security practices to improve trust and regulatory adherence.

Z

Zentralvereinigung der Architekt:innen Österreichs

zv-architekten.at

49

The Zentralvereinigung der Architekt:innen Österreichs is a well-established professional association representing architects in Austria. The website serves as a platform to promote architectural culture, organize awards such as the Bauherr:innenpreis, and provide information on events, exhibitions, and publications relevant to the Austrian architecture community. The organization targets architects, building owners, and architecture enthusiasts within Austria, operating primarily as a non-profit entity focused on cultural and professional development in architecture. Technically, the website is built on the Plone CMS platform, utilizing modern frontend technologies including JavaScript libraries like Slick Slider and Leaflet for interactive content. The site is mobile-optimized and presents a good user experience with clear navigation and professional design. However, some accessibility features could be improved. Performance is moderate, with asynchronous loading of scripts enhancing responsiveness. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks several security headers and does not provide explicit privacy or cookie policies, nor does it offer vulnerability disclosure or incident response information. These gaps represent areas for improvement to enhance user trust and compliance with data protection regulations. Overall, the website is trustworthy and professional, reflecting the organization's reputable standing in the Austrian architectural sector. Strategic recommendations include implementing comprehensive privacy and cookie policies with consent mechanisms, adding security headers, and publishing vulnerability disclosure and incident response contacts to strengthen security posture and regulatory compliance.

V

vai Vorarlberger Architektur Institut

v-a-i.at

49

The vai Vorarlberger Architektur Institut is a well-established non-profit organization based in Austria, focused on architecture, building culture, education, and cultural events. It serves architects, educators, students, and the local community with exhibitions, publications, tours, and educational programs. The website reflects a consistent brand and professional content aligned with its mission. Technically, the website is built on the Plone CMS platform, utilizing modern JavaScript libraries such as Leaflet.js and Slick Slider for interactive content. It employs HTTPS with strong security headers, ensuring a secure browsing experience. However, some areas like privacy compliance and accessibility could be improved. Security posture is strong with HTTPS and security headers, but the absence of explicit privacy and cookie policies, as well as lack of incident response or vulnerability disclosure information, indicates room for compliance and transparency enhancements. Overall, the website presents a trustworthy and professional front for the organization, but should address GDPR compliance gaps and improve user privacy transparency to strengthen its security and legal posture.

N

Nový Web s.r.o.

hotelzameksvijany.cz

46

Hotel & Zámek Svijany is a small hospitality business located in the Czech Republic offering unique castle-style accommodation combined with brewery experiences and leisure activities. The website is professionally designed with good content quality, clear navigation, and mobile optimization. Technically, it uses modern JavaScript libraries and Google services for analytics and tag management. Security posture is adequate with HTTPS and CAPTCHA protection on forms, but lacks some HTTP security headers. Privacy compliance is well addressed with GDPR and cookie consent mechanisms. However, the absence of WHOIS data reduces domain trustworthiness. The site also contains embedded promotional content related to online casinos, which may affect content safety ratings. Overall, the website is functional and trustworthy for its business purpose but could improve security and transparency aspects.

S

SNOW CZ s.r.o.

skipasomat.cz

44

Skipasomat.cz is an established Czech online platform specializing in discounted ski passes, bike park passes, and leisure activity tickets such as aquaparks and wellness centers. Operating since 2011 under SNOW CZ s.r.o., it serves a niche market of winter sports enthusiasts and tourists seeking cost-effective access to regional recreational services. The website demonstrates a consistent brand presence aligned with its parent company and partner sites like snow.cz. Technically, the site uses a legacy but functional tech stack including jQuery and Zend Framework components, with standard advertising and tracking integrations such as Google Tag Manager and ADOcean. Security posture is adequate with HTTPS enforced and cookie consent implemented, though improvements in security headers and modern JS libraries are recommended. Privacy compliance is basic but present, with clear cookie consent and links to privacy and terms pages. Overall, the site is professional, trustworthy, and well-positioned within its market segment.

MINI Czech Republic operates as the official localized website for the MINI automotive brand, offering new and used vehicles, financing options, servicing, and accessories. The site is well-positioned within the automotive sector in the Czech market and benefits from its association with the BMW Group, enhancing its market credibility and reach. The website targets consumers interested in premium compact vehicles, including electric models, and provides comprehensive product information and digital services such as the MINI Connected app. Technically, the website is built on Adobe Experience Manager, leveraging modern JavaScript libraries and Adobe's analytics and tag management tools. The site demonstrates strong digital maturity with fast performance, mobile optimization, and good accessibility features. Security is robust with HTTPS, security headers, and no visible vulnerabilities, although explicit incident response and security policy disclosures are absent. Overall, the website presents a professional and trustworthy digital presence with clear business information, privacy compliance, and user-friendly navigation. The lack of WHOIS data is a minor concern but is mitigated by the brand's strong trust signals and official status. Strategic recommendations include publishing a security.txt file, enhancing incident response transparency, and maintaining regular security audits to uphold trust and compliance.

The website holbaci.cz is currently inaccessible, returning a 404 Not Found error with no meaningful content or metadata. The domain is registered since 2018 under a Czech registrar with nameservers pointing to a Czech hosting provider. There is no evidence of business information, contact details, or security and privacy policies on the site. The technical infrastructure appears minimal with no HTTPS or security headers detected, indicating a low level of digital maturity and security posture. Due to the lack of content and security measures, the overall risk is elevated, and the site does not present itself as a trustworthy or professional business presence at this time.

F

Fachverband Biogas e.V.

biogas.org

49

Fachverband Biogas e.V. is a prominent German industry association dedicated to the biogas sector, providing advocacy, information, and member services. The organization maintains a professional and content-rich website powered by TYPO3 CMS, featuring comprehensive resources including publications, events, and a members-only portal. Their market position is strong within the renewable energy sector in Germany, supported by partnerships and certifications such as the SURE scheme. Technically, the website employs modern frameworks like Bootstrap and FontAwesome, ensuring good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data limits domain trust verification but the overall digital presence and content quality indicate a legitimate and professional entity.

Podpůrný a garanční rolnický a lesnický fond, a.s. (PGRLF) is a Czech financial institution specializing in providing financial support, loan guarantees, and insurance subsidies primarily to the agriculture, forestry, and food production sectors. The organization operates multiple programs aimed at reducing interest burdens, supporting insurance, and offering investment loans to farmers, foresters, and food producers. PGRLF positions itself as a leading entity in the Czech Republic with over 30 years of experience and close ties to government agricultural policy. The website is professionally designed using WordPress and the Divi theme, featuring comprehensive program information and user-friendly navigation.

S

Svaz spedice a logistiky České republiky

svazspedice.cz

42

Svaz spedice a logistiky České republiky is a Czech national association representing freight forwarding and logistics companies. The website serves as an information hub providing industry news, event calendars, documents, and member services. The organization targets logistics professionals and companies within the Czech Republic, positioning itself as an important industry association. Technically, the site is built on WordPress using common plugins and themes, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and explicit security policies. The absence of WHOIS data reduces transparency but the website content and contact details suggest a legitimate and professional entity. Overall, the site is functional, informative, and trustworthy for its intended audience.

The website seiermonitoring.at is currently inaccessible, returning a 403 Forbidden error page served by an Apache server. Due to this access restriction, no meaningful content, metadata, or business information is available for analysis. The lack of accessible content prevents evaluation of the company's services, market position, or technical infrastructure. The domain appears to be privacy protected, limiting insights into registrant details and domain age. Security posture is minimal with no security headers or privacy policies detected. Overall, the site presents a low trust profile due to blocked content and absence of publicly available information.

A

afo architekturforum oberösterreich

afo.at

48

afo architekturforum oberösterreich is a well-established non-profit organization dedicated to promoting architecture and building culture in Upper Austria. The website serves as a comprehensive platform for events, exhibitions, residencies, and publications related to architecture. It targets architects, planners, cultural institutions, and the general public interested in architectural discourse and urban development. The organization maintains strong partnerships with regional and national architecture networks, enhancing its market position as a key cultural player in the region. Technically, the website is built on the Plone CMS platform, utilizing modern JavaScript libraries such as Leaflet.js and Moment.js for interactive features. The site is served over HTTPS with appropriate security headers, indicating a good security posture. Performance is moderate with good mobile optimization and basic accessibility features. SEO is well addressed through meta tags and structured navigation. Security-wise, the site demonstrates good practices including HTTPS enforcement and security headers. However, it lacks a cookie consent mechanism and published security or incident response policies, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is adequate with a comprehensive privacy policy, but cookie consent and GDPR explicit mechanisms could be enhanced. Overall, the website is professional, trustworthy, and content-rich, supporting the organization's mission effectively. Strategic recommendations include implementing cookie consent, publishing security policies, enhancing accessibility, and maintaining vigilance on third-party scripts to sustain security and compliance.

B

Beton Dialog Österreich

betondialog.at

45

Beton Dialog Österreich is a prominent Austrian industry association representing cement, precast concrete, and ready-mix concrete manufacturers. The organization focuses on promoting sustainable, innovative, and climate-neutral concrete solutions, targeting engineers, architects, private individuals, and industry stakeholders. The website is professionally designed using WordPress and Elementor, with strong SEO and structured data implementation, reflecting a mature digital presence. Security posture is solid with HTTPS and cookie consent management, though some security headers could be improved. Privacy and terms of service pages are not readily visible, which slightly impacts compliance scores. Overall, the site is trustworthy and well-positioned within its sector.

The website documedia.at is currently inaccessible beyond a security challenge page indicating it is under protection by a Web Application Firewall (WAF) or similar security mechanism. This prevents access to any substantive content, business information, or user interaction elements. The site appears to be protected by a generic WAF that performs browser verification before granting access. Due to this, no privacy policies, cookie notices, contact information, or business descriptions are available for analysis. The domain is privacy protected in WHOIS, which is common but limits transparency. The lack of accessible content and metadata results in a very limited technical and security assessment. Overall, the site currently presents as low trust and low content quality due to the blocking mechanism.

Creative Commons Česká republika operates as the official Czech chapter of the global Creative Commons organization, providing authoritative information and official Czech translations of Creative Commons licenses. The website serves authors, users, educators, and legal professionals interested in copyright and open licensing within the Czech Republic. It functions primarily as an informational and advocacy platform promoting open access and copyright awareness. Technically, the website is built on WordPress 5.7.12 with common plugins and uses Google Analytics and Google Tag Manager for visitor tracking. The site demonstrates moderate performance and good mobile optimization but lacks advanced security headers and explicit privacy or cookie policies. The WHOIS data for the domain is unavailable, which raises concerns about domain registration transparency. From a security perspective, the site uses HTTPS (implied by URLs) but does not show evidence of security headers or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is minimal, with no visible GDPR or cookie consent mechanisms. Overall, the site is trustworthy based on content and affiliation but would benefit from improved security and privacy practices. The overall risk is moderate due to missing WHOIS data and privacy policies. Strategic recommendations include implementing security headers, publishing privacy and cookie policies with consent mechanisms, and verifying domain registration details to enhance trust and compliance.

I

iNDiGO multimedia s.r.o.

indigo.cz

41

iNDiGO multimedia s.r.o. is a small Czech Republic-based technology company specializing in bespoke mobile and web-based solutions tailored to client needs. The website presents a basic but clear business overview with contact information and social media links, targeting business clients seeking customized software solutions. The company has been established since 2005, indicating a stable market presence. Technically, the website is simple, built with basic HTML and CSS, hosted on Forpsi servers as inferred from the nameservers. There is no evidence of modern frameworks, CMS, or analytics tools. The site is accessible without WAF or security challenges but lacks advanced technical features such as security headers, HTTPS confirmation, or performance optimizations. From a security perspective, the site does not display privacy or cookie policies, security policies, or incident response information. No security headers or vulnerability disclosures are present, and no forms or scripts that could pose risks are detected. The domain registration data is consistent with the business claims, supporting legitimacy. Overall, the security posture is basic and could be improved significantly. The overall risk is moderate due to the lack of security and privacy compliance features, but no critical vulnerabilities or suspicious indicators were found. Strategic recommendations include implementing HTTPS, publishing privacy and cookie policies, adding security headers, and establishing incident response contacts to enhance trust and compliance.

N

Neovize s.r.o.

neovize.cz

49

NeoVize s.r.o. operates a professional ophthalmology clinic in Prague and Brno, Czech Republic, specializing in laser eye surgeries, cataract operations, and treatment of various eye diseases. The company has been active since 2008 and holds multiple accreditations including ISO 9001:2015 and Ministry of Health certifications, positioning it as a reputable healthcare provider in the region. The website is well-designed, mobile-optimized, and provides comprehensive information about services, team, and patient testimonials, targeting patients seeking advanced eye care. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and integrates multiple marketing and analytics tools including Google Tag Manager, Facebook Pixel, and Bing Ads. The site uses HTTPS with good SSL configuration but lacks visible security headers in the HTML source. Some suspicious URL parameters suggest potential injection testing, indicating a need for improved input sanitization and security hardening. From a security perspective, the site demonstrates good practices like HTTPS enforcement and no exposed sensitive data, but could improve by adding security headers and CSRF protections. Privacy and cookie policies are present and GDPR compliant, enhancing user trust. However, the absence of WHOIS data limits domain legitimacy verification, which slightly reduces overall trust. Overall, NeoVize's website reflects a mature healthcare business with strong branding and user experience, moderate technical sophistication, and a generally good security posture with room for improvement in vulnerability management and domain transparency.