Medium-risk security reports

BioTechUSA Austria operates as a prominent fitness and nutritional supplement brand targeting the Austrian and German-speaking markets. The company offers a broad range of products including proteins, vitamins, collagen, and fitness apparel, supported by rich content such as articles and videos to engage their audience. Their business model integrates e-commerce with content marketing and community interaction, positioning them as a trusted regional player in the health and wellness retail sector. Technically, the website is built on WordPress with WooCommerce and enhanced by modern tools like Algolia for search and Cookiebot for consent management. The site demonstrates good mobile optimization, SEO practices, and user experience, although some accessibility features could be improved. The integration with Shopify for the shop subdomain indicates a hybrid platform approach. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy compliance is well addressed with clear privacy and cookie policies aligned with GDPR requirements. Overall, the website presents a professional, trustworthy, and user-friendly digital presence with moderate technical sophistication and good privacy practices. Strategic improvements in security headers and incident response transparency would enhance their security posture and trust further.

VolleyCountry is an established volleyball-focused e-commerce and content website, founded in 2004. The site offers volleyball products and related information targeting volleyball enthusiasts and players. Technically, the site is built on WordPress using WooCommerce for e-commerce functionality, LearnDash for learning management, and the Divi theme, indicating a mature and standard digital infrastructure. Performance and mobile optimization are moderate to good, with SEO optimizations via Yoast SEO plugin. Security posture is basic, with no evident advanced security headers or policies, and no privacy or cookie policies detected, indicating room for compliance improvements. The domain registration is consistent and long-standing, supporting business credibility. Overall, the site is functional and professional but would benefit from enhanced security and privacy compliance measures.

Livesport s.r.o. operates Flashscore.sk, a leading live sports score and news platform primarily focused on football but covering multiple sports. The website offers real-time match results, detailed statistics, and sports news, targeting sports fans and bettors in Slovakia and internationally. The business model relies heavily on advertising and affiliate partnerships with bookmakers. Technically, the site is well-implemented using modern JavaScript frameworks, SVG graphics, and cookie consent management via OneTrust, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. However, the absence of explicit privacy and terms of service pages and lack of direct contact information for security or business inquiries represent areas for improvement. Overall, the website is professional, trustworthy, and safe for general audiences.

The website hanikvolleyball.cz is a Czech-language volleyball training and informational platform primarily targeting volleyball players and enthusiasts. It offers articles, videos, and information about volleyball camps, focusing on both beginner and advanced training. The site is small-scale, with a niche market position, and has been operational since 2002, indicating a stable presence in its domain. The business model revolves around content publishing and community engagement through social media channels. Technically, the site is built on WordPress with modern plugins for SEO, document embedding, and cookie consent. It uses Google Analytics and Tag Manager with IP anonymization, reflecting a moderate level of digital maturity. Security-wise, the site benefits from HTTPS and cookie consent but lacks visible security headers and formal privacy or security policies, which are areas for improvement. Overall, the site is safe, professional, and well-structured but would benefit from enhanced compliance and security practices.

The website designme.sk represents Marek Levak, a seasoned digital product designer with over 15 years of experience and a portfolio of 400+ projects. The business focuses on UI and web design services targeting modern brands and startups, positioning itself as a small but highly professional entity within the technology sector in Slovakia. The website is built on WordPress using the Semplice theme and incorporates SEO best practices via Yoast plugin, demonstrating a moderate to high level of digital maturity. Technically, the site is well-structured, mobile-optimized, and visually appealing, though some accessibility features could be enhanced. Security posture is solid with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies, which is a notable gap. Overall, the site is trustworthy and professional but would benefit from improved privacy and security disclosures to enhance compliance and user trust.

Nadácia Orange is a Slovak non-profit foundation focused on education, community development, philanthropy, and charity, operating under the auspices of Orange Slovensko. The website presents a professional and well-structured digital presence, targeting general audiences interested in social impact and grant programs. The foundation leverages modern web technologies including WordPress and Elementor, ensuring a responsive and user-friendly experience. While the site integrates standard tracking and advertising tools such as Google Analytics and Adform, it lacks a formal cookie consent mechanism, which is a notable privacy compliance gap. Security posture is generally good with HTTPS enforced, but the absence of key security headers suggests room for improvement. Overall, the domain registration and business information are consistent and trustworthy, supporting the foundation's legitimacy.

BioTechUSA is a Hungarian-based company specializing in fitness supplements and lifestyle content, established in 2018. The website serves as both a brand showcase and a content platform offering fitness and lifestyle tips, videos, and expert advice, targeting fitness enthusiasts primarily in Hungary. The business model combines retail with content marketing to engage and educate its audience. Technically, the website is built on WordPress, leveraging modern SEO tools and cookie consent management, indicating a mature digital infrastructure. The site is mobile-optimized and uses HTTPS with a valid SSL certificate, ensuring secure user interactions. Security posture is solid with cookie consent and CSRF protections, though additional security headers could enhance defenses. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website presents a professional and trustworthy front with good content quality and technical implementation.

StartupCafe.ro is a Romanian media platform established in 2015, operated by Webdev SRL, focusing on delivering news, information, and resources for entrepreneurs and startups. The site offers business news, funding updates, guides, and tutorials, positioning itself as a trusted source for the entrepreneurial community in Romania. The website is professionally designed with good SEO and mobile optimization, leveraging WordPress CMS and modern JavaScript frameworks. It integrates cookie consent mechanisms and partners with reputable entities like Banca Transilvania, enhancing its market credibility. Security posture is solid with HTTPS and basic best practices, though some security headers could be improved. No blocking or WAF challenges were detected, allowing full content access.

Týden.cz is a well-established Czech media company operating since 2006, providing comprehensive news coverage across various domains including domestic and international affairs, science, economy, sports, culture, health, and lifestyle. The company operates multiple magazine brands and partners with TV Barrandov, offering both online content and subscription-based magazines. The website demonstrates a mature digital presence with modern technologies such as React and Next.js, and integrates advertising and analytics tools like Google Adsense and Google Tag Manager. Privacy and cookie policies are implemented with consent mechanisms, reflecting compliance with GDPR standards. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response contacts are not publicly detailed. The absence of WHOIS data slightly reduces transparency but does not detract significantly from the site's legitimacy. Overall, Týden.cz presents a professional, trustworthy, and user-friendly platform for Czech news consumers.

PrimeGlobal is a global association of advisory and accounting firms, comprising over 300 independent member firms across more than 120 countries. The association focuses on connecting member firms to foster collaboration, knowledge sharing, and business growth. The website is professionally designed, mobile-optimized, and uses modern web technologies including Google Analytics, Hotjar, and Elfsight widgets. Security posture is adequate with HTTPS enabled, but lacks visible security headers and explicit privacy or cookie policies. WHOIS data is missing, which raises some concerns about domain registration transparency. Overall, the website presents a credible and professional business presence but would benefit from enhanced privacy compliance and security disclosures.

BizWebs is a small business-focused SaaS platform offering a free and paid website builder and online store creation service. It targets entrepreneurs and small businesses seeking an easy-to-use, no-coding-required solution with features like multi-language support, SEO tools, mobile apps, and Bitcoin payment integration. The platform emphasizes customer support and a free forever plan to attract users. Technically, the website uses modern JavaScript libraries, Google Tag Manager, and fingerprinting for analytics and tracking, with a consent-based cookie management system ensuring GDPR compliance. Security posture is good with HTTPS enforced and consent-based script blocking, though no explicit security policy or incident response information is published. Overall, the website is professional, trustworthy, and well-optimized for SEO and mobile devices, with no suspicious or adult content detected.

Energie Steiermark AG is a prominent energy provider based in Graz, Austria, specializing in sustainable energy solutions including electricity, natural gas, district heating, photovoltaics, and electromobility services. The company targets private customers primarily in the Styrian region and holds a strong market position as a top-rated electricity supplier in Austria. Their website reflects a professional and comprehensive digital presence, offering detailed product information, customer support, and interactive tools such as a photovoltaic planner and electromobility services. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes consent management for privacy compliance. Security posture is solid with HTTPS and CAPTCHA protections, though some security policies and incident response contacts are not publicly disclosed. The absence of WHOIS data is a notable anomaly but does not detract from the overall legitimacy and trustworthiness of the business. Strategic recommendations include enhancing transparency around security policies and improving WHOIS registration visibility.

Webyst is a specialized Webflow premium partner agency focused on designing and building custom websites for growing service companies and teams. Their market position emphasizes conversion-optimized, lead-generating websites launched quickly and managed easily. The website demonstrates a high level of digital maturity with modern technologies such as Webflow CMS, Google Tag Manager, Microsoft Clarity, and CookieYes for consent management. The technical infrastructure is robust, leveraging Webflow hosting and advanced marketing tools to deliver fast, mobile-optimized, and accessible user experiences. Security posture is generally good with HTTPS enforced and cookie consent implemented, though explicit security headers and privacy policies are missing. The absence of WHOIS data reduces domain trustworthiness and transparency, which is a concern for business credibility. Overall, the website is professional and trustworthy but would benefit from enhanced privacy disclosures and contact transparency.

Vizua s. r. o. is a Slovak boutique creative marketing agency established in 2010, specializing in branding, performance marketing, PPC advertising, social media, web development, graphic design, copywriting, and video production. The company positions itself as a quality-focused agency with a small dedicated team and holds a Google Partner certification, indicating recognized expertise in Google advertising services. Their client portfolio includes multiple Slovak businesses, demonstrating active market engagement and a niche boutique market position. Technically, the website is built on modern web technologies including Craft CMS, uses Google Analytics for tracking, and employs smooth scrolling and image loading JavaScript libraries. Hosting is provided by Websupport, a Slovak hosting provider, with DNSSEC enabled and HTTPS enforced, reflecting a solid technical foundation. However, some security best practices such as security headers and cookie consent mechanisms are missing, which could be improved to enhance compliance and security posture. From a security perspective, the site benefits from HTTPS and DNSSEC but lacks explicit security policies, incident response contacts, and cookie consent banners, which are important for GDPR compliance and user trust. No critical vulnerabilities or suspicious patterns were detected. The domain WHOIS data is consistent with the business claims, showing a well-aged domain registered since 2010 with no privacy protection, supporting legitimacy. Overall, the website presents a professional and trustworthy image with good content quality and business credibility. Strategic improvements in privacy compliance and security headers would further strengthen the security posture and regulatory adherence.

Austrotherm, s. r. o. is a medium-sized manufacturing company specializing in the production and sale of polystyrene thermal insulation products across 11 European countries, including Slovakia. The website serves as a comprehensive platform offering product information, technical documentation, and contact details, targeting construction professionals and end consumers interested in energy-saving insulation solutions. The company is part of the Koncern SIH group, indicating a solid market position within the manufacturing sector. Technically, the website is built on TYPO3 CMS with integration of modern marketing and tracking tools such as Google Tag Manager and Facebook Pixel, alongside a cookie consent mechanism compliant with GDPR. The site demonstrates good mobile optimization, clear navigation, and professional design, although some accessibility features could be enhanced. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and employs consent management for cookies, but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the legitimacy and consistency of the domain registration with the business identity. Overall, the website presents a trustworthy and professional digital presence with good privacy compliance and business credibility. Strategic improvements in security policy transparency and technical security headers would further strengthen its posture.

Kinekus, s.r.o. operates a retail business focused on garden, household, and workshop products, serving customers primarily in Slovakia through both physical stores and an online e-commerce platform. The website presents a professional and consistent brand image with good content quality and user experience. The business model centers on providing a broad product range with options for home delivery and in-store pickup, targeting general consumers interested in home and garden supplies. Technically, the website employs a moderate technology stack including jQuery, Cookiebot for cookie consent, Google Tag Manager, and various marketing and analytics tools such as MailerLite and Luigis Box. The site is hosted with Amazon Cloudfront CDN, ensuring reasonable performance and availability. Mobile optimization and SEO practices are well implemented, though accessibility features could be improved. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms compliant with GDPR. Security headers appear to be in place, and no exposed sensitive data or vulnerabilities were detected in the provided content. However, the site lacks explicit security policy and incident response documentation, which could enhance trust and compliance. Overall, the website is trustworthy and professionally maintained with a good security posture and privacy compliance. Recommendations include adding explicit security and incident response policies, updating legacy libraries like jQuery, and improving accessibility to further strengthen the site’s security and user experience.

Zeppelin SK is a well-established Slovak company specializing in the sale and rental of construction and agricultural machinery, prominently featuring Caterpillar equipment. Founded in 2004, the company operates a professional website with comprehensive content, targeting construction firms, agricultural businesses, and machinery rental clients in Slovakia. The site reflects a strong market position with consistent branding and multiple service offerings including spare parts and energy systems. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, reCAPTCHA, and live chat integrations, ensuring a functional and user-friendly experience with good mobile optimization. Security posture is solid with HTTPS enforced, reCAPTCHA on forms, and a detailed cookie consent mechanism, though some security headers could be improved. Privacy compliance is robust with clear GDPR-aligned privacy and cookie policies. Overall, the website demonstrates high professionalism and trustworthiness, with no signs of malicious activity or content safety concerns.

J&T BANKA is a Slovak financial institution specializing in private banking and investment services, targeting affluent clients seeking wealth management solutions. The website presents a professional and content-rich platform highlighting investment products such as bonds, funds, and investment gold, supported by a consistent brand image and clear contact channels. Technically, the site uses modern JavaScript libraries and frameworks, including jQuery, Bootstrap, and Google Tag Manager, with a CMS platform named WebJET. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit incident response contacts are missing. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements.

Orange Slovensko, a.s. is the largest telecommunications operator in Slovakia, established in 2002 and operating as a subsidiary of Orange S.A. The company offers a comprehensive range of services including mobile telephony, mobile and fixed internet, and television services targeting both consumers and business clients. The website reflects a mature digital presence with a professional design, clear navigation, and localized Slovak language content. Technically, the site is built on TYPO3 CMS and integrates modern marketing and analytics tools such as Google Tag Manager, Google Analytics, and a consent management platform (Didomi), indicating a good level of digital maturity. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a comprehensive privacy policy, cookie consent mechanisms, and GDPR adherence. However, the absence of a dedicated security policy or vulnerability disclosure page suggests room for improvement in transparency and incident response readiness. Overall, the website and business demonstrate high credibility and trustworthiness with a low risk profile.

Heineken Slovensko a.s. is a well-established Slovak brewing company with a rich history dating back to 1969. The company operates a modern brewery in Hurbanovo and markets several prominent beer brands including Heineken, Zlatý Bažant, Desperados, and Krušovice. The website reflects a mature digital presence with a focus on brand promotion, consumer engagement, and compliance with legal requirements such as age restrictions and GDPR. The target audience is adult consumers interested in beer products in Slovakia. The company benefits from being part of the global Heineken group, enhancing its market position and brand recognition. Technically, the website is built on WordPress with modern enhancements including React components, Google Analytics, and Tag Manager integration. It employs standard web technologies and plugins to deliver a responsive and user-friendly experience. The presence of an age gate and cookie consent mechanisms demonstrates attention to regulatory compliance and user privacy. However, some security best practices such as security headers and explicit incident response policies are not evident. From a security perspective, the site uses HTTPS with valid SSL, Google reCAPTCHA for form protection, and cookie consent management. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms domain legitimacy with consistent registration details and a long domain age supporting the company's operational history. Overall, the website presents a professional and trustworthy digital front for Heineken Slovensko. Strategically, the company should consider enhancing its security posture by implementing recommended HTTP security headers, publishing a formal security policy, and establishing a vulnerability disclosure program. These steps will strengthen trust and resilience against emerging threats. Continued focus on privacy compliance and transparent user communication will maintain regulatory alignment and customer confidence.

HB Reavis is a well-established international real estate developer specializing in providing personalized workspace solutions and wellbeing services. Founded in 2003 and headquartered in Slovakia, the company operates multiple brands and subsidiaries, targeting businesses and professionals seeking innovative office environments. Their market position is strong, supported by a comprehensive digital presence and multi-language website. Technically, the website is built on WordPress with modern integrations such as Google Tag Manager, reCAPTCHA, and OneTrust for cookie consent, reflecting a mature digital infrastructure. The site is mobile-optimized and SEO-friendly, though performance is moderate, indicating room for optimization. From a security perspective, the site enforces HTTPS and uses standard security practices like CAPTCHA and cookie consent. However, DNSSEC is not enabled, and some security headers are not explicitly present, suggesting moderate security maturity. No public security policies or incident response contacts were found, which could be improved. Overall, HB Reavis presents a professional and trustworthy online presence with strong business credibility. The site is safe for general audiences, compliant with GDPR, and demonstrates good privacy practices. Strategic improvements in security transparency and technical performance could further enhance their posture.

iStores is a retail business operating as an Apple Premium Partner in Slovakia, specializing in the sale of Apple products including iPhone, iPad, Mac, Apple Watch, and AirPods. The website serves consumers interested in Apple technology products within the Slovak market. The business model focuses on authorized retail sales and possibly service support for Apple devices. The website's technical infrastructure includes modern CSS grid layouts and uses Amazon Cloudfront CDN for content delivery, indicating a moderate level of digital maturity. However, the site lacks advanced CMS or frameworks and shows basic mobile optimization and SEO practices. Security posture is weak due to the absence of security headers, privacy policies, and incident response information. No WAF or blocking mechanisms were detected, and the site is accessible. WHOIS data confirms the domain's legitimacy with consistent registrant information matching the business claims. Overall, the website is functional but requires significant improvements in privacy compliance, security best practices, and contact transparency to enhance trust and compliance.

Kooperativa poisťovňa is a well-established insurance company operating in Slovakia, providing comprehensive life and property insurance services for over 30 years. The website reflects a professional and consistent brand presence with a focus on corporate insurance offerings. The technical infrastructure uses modern web technologies such as Bootstrap 5 and responsive design, ensuring good mobile optimization and user experience. However, the website lacks visible privacy and cookie policies, contact information, and security headers, which are critical for compliance and trust. The domain registration data is consistent with the business claims, showing a long-standing and legitimate presence. Overall, the website is functional and professional but requires improvements in security posture and privacy compliance to enhance trust and regulatory adherence.

WebLab, s.r.o. is a Slovak-based web design studio specializing in creating websites, e-shops, branding, and online marketing services. With over 19 years of experience, the company targets businesses and individuals seeking professional digital presence solutions. Their market position is that of an established local player with a solid portfolio and positive customer testimonials. Technically, the website employs modern JavaScript libraries and tracking tools such as Google Analytics and Tag Manager, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit incident response policies. Privacy compliance is basic with privacy and cookie policies present but no active consent mechanism. Overall, the website is professional, trustworthy, and content-rich, supporting the company's credibility and business goals.

GoodApps is a small, specialized SaaS company focused on developing Shopify apps that help e-commerce merchants boost sales, improve customer engagement, and optimize store operations. The company offers a suite of apps with strong user ratings and positive testimonials, positioning itself as a trusted partner for Shopify store owners. Technically, the website is built on Webflow with Cloudflare DNS, leveraging modern web technologies and delivering a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS and domain protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is basic with privacy and cookie policies present, but lacks terms of service and explicit security policies. Overall, GoodApps presents a professional and trustworthy online presence with room for enhanced security and compliance maturity.

Doody is a Slovak-based personal branding and marketing consulting business led by Renáta Dudková. The company specializes in helping entrepreneurs and small business owners build strong personal brands, clarify their marketing strategies, and develop foundational web presence. The website reflects a professional and consistent brand image with comprehensive content and client testimonials, positioning Doody as a niche expert in the Slovak market. Technically, the site is built on WordPress with modern plugins for SEO, GDPR compliance, and marketing automation, indicating a mature digital infrastructure. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations.

okto—digital is a Slovakia-based digital agency founded in 2014, specializing in mobile and cloud applications, design, WordPress and WooCommerce development, marketing, consulting, and advanced technologies such as AI, Big Data, and AR/VR. The company positions itself as a trusted partner for businesses seeking digital transformation and growth, supported by ISO 27001 certification which underscores its commitment to data security and information management. The website reflects a professional and modern digital presence with good content quality and clear service offerings. Technically, the site is built on WordPress with modern integrations including Google Tag Manager, Facebook Pixel, and reCAPTCHA, hosted on Websupport.sk. Security posture is solid with HTTPS and domain transfer protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is partially addressed with a cookie consent mechanism but lacks explicit privacy and terms of service pages. Overall, okto—digital demonstrates a mature digital infrastructure and a strong market position in the technology sector.

The website www3.podkings.de is a parked domain landing page primarily monetized through advertising networks such as Google Adsense and DoubleClick. It lacks substantive business content, contact information, or clear branding, indicating it is not an active commercial site. The technical infrastructure relies on standard HTML5 and JavaScript with third-party ad and tracking scripts loaded from multiple external domains. The site is accessible without WAF or security challenges but does not implement HTTPS enforcement or security headers, which weakens its security posture. Privacy compliance is minimal, with only a basic privacy policy linked via a popup and no cookie consent mechanism. Overall, the site presents low business credibility and trustworthiness, with a high degree of user tracking and advertising but no clear business entity or services.

The website www2.vitastik.de is a parked domain primarily used for domain resale and advertising via Sedo's domain parking service. It does not represent an active business or service provider. The site content is minimal, consisting mainly of domain sale notices and advertising placeholders. The technical infrastructure relies on Sedo's scripts and Google Ads for monetization. There is no evidence of a dedicated CMS or business platform. Security posture is weak, with no HTTPS detected and no security headers or policies present. Privacy compliance is minimal, with only a basic privacy policy hosted externally and a simple cookie consent mechanism. Overall, the site lacks business credibility and trust indicators, reflecting its status as a parked domain rather than an operational business website.

CannAbisZ operates as a specialized e-commerce retailer focusing on cannabis-derived products such as HHC, H4CBD, and CBD vape pens, alongside lifestyle and headshop accessories. The company positions itself as a leading German distributor in this niche market, emphasizing product quality through lab testing and customer satisfaction via support channels including a hotline and WhatsApp chat. The website is built on the Shopware platform, integrating modern tracking tools like Google Tag Manager and Trusted Shops widgets, reflecting a moderate level of digital maturity. Security practices include HTTPS enforcement and CSRF protection, though explicit security headers and policies are absent. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy policy or terms of service pages. Overall, the site presents a professional and trustworthy front for adult consumers interested in cannabis-related products.

Wanna Vapor is a German-based e-commerce retailer specializing in vaping products including e-cigarettes, liquids, and accessories. The website targets mature consumers interested in vaping and related merchandise. The business operates a niche online retail model with a clear product focus and structured navigation. Technically, the site uses a modern tech stack including jQuery, Bootstrap, and integrates popular payment services such as PayPal and Mollie, hosted behind Cloudflare DNS for performance and security benefits. The site is mobile optimized and provides a generally good user experience, though some SEO and accessibility features could be improved. Security posture is adequate with HTTPS and payment SDKs in use, but lacks visible security headers and formal privacy or cookie policies, which are critical for GDPR compliance. No contact or incident response information is publicly available, which may impact trust and compliance. Overall, the site is functional and professional but would benefit from enhanced privacy disclosures and security best practices.

The website represents a professional domain brokerage service specializing in the sale of premium domains such as erette.de. It offers a secure, escrow-based transaction process with multiple payment options and fast domain transfer guarantees. The platform targets businesses and individuals seeking valuable domain names, leveraging over 15 years of market experience. Technically, the site employs modern frontend technologies including Bootstrap and Google reCAPTCHA to ensure usability and security. The multi-step negotiation form collects necessary buyer information securely, enhancing user trust. Security posture is strong with HTTPS, security headers, and spam protection, though the absence of a cookie consent banner and explicit security policy pages are noted compliance gaps. Overall, the site is trustworthy, well-designed, and functional, supporting a medium-sized technology business in Germany.

ELFBAR Shop operates as the official German online retailer for ELFBAR vaping products, including disposable e-cigarettes, pods, and liquids. The website is built on the Shopify platform using the Empire theme, integrating modern e-commerce technologies and third-party services such as Trustpilot for customer reviews. The business targets adult consumers in Germany, offering free shipping for orders above a certain threshold. The site demonstrates good digital maturity with fast performance, mobile optimization, and accessibility features. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. However, explicit contact information and security policies are not prominently provided. The security posture is strong with HTTPS enforcement, security headers, and form protection via hCaptcha. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, serving a niche adult market for vaping products.

The website shop.highendsmoke.de is a German-language e-commerce platform specializing in the retail of vaping products including e-cigarettes, liquids, aromas, pod systems, and accessories. It targets adult consumers interested in vaping and nicotine products, positioning itself as a specialized online retailer with a broad product range and promotional sales. The site uses the Shopware e-commerce platform and integrates modern technologies such as jQuery, Doofinder search, Google Tag Manager, and Mollie payment services, indicating a moderate level of digital maturity and technical infrastructure. The website is mobile-optimized and provides a good user experience with clear navigation and product categorization. Security posture is adequate with HTTPS enforced and IP anonymization in analytics, but lacks visible security headers and published security policies. Privacy compliance is weak due to the absence of explicit privacy and cookie policies, and no contact or incident response information is provided. Overall, the site is functional and professional but would benefit from enhanced transparency and security practices to improve trust and compliance.

Avoria GmbH is a well-established German manufacturer and retailer specializing in E-Liquids, E-cigarettes, and related vaping products. The company positions itself as a market leader in Germany with a strong focus on quality, safety, and customer satisfaction. Their e-commerce platform is built on the Shopware CMS, leveraging modern technologies and integrations such as Google Analytics, Hotjar, Klaviyo, and Chatra for marketing, analytics, and customer support. The website is professionally designed, mobile-optimized, and provides comprehensive product information and customer engagement features including live chat and detailed FAQs. Security posture is strong with HTTPS, secure cookies, and privacy compliance mechanisms in place, although there is room for improvement in publishing dedicated security policies and incident response information. Overall, the domain registration and business information are consistent and trustworthy, supporting a high legitimacy score.

dampftbeidir.de is a German e-commerce retailer specializing in vaping products including e-cigarettes, liquids, bases, aromas, and hardware. Established in 2014, the company has built a strong market presence supported by over 12,000 positive customer reviews and a Trusted Shops certification, indicating a reputable and trusted online business. The website targets adult consumers interested in vaping, with appropriate age verification mechanisms in place. Technically, the site is built on the JTL Shop platform, leveraging modern JavaScript libraries such as jQuery, Bootstrap, and Slick Slider, and integrates Google Analytics 4 and Google Tag Manager for analytics and marketing purposes. The site is hosted behind Cloudflare, ensuring reliable performance and security. Security posture is good with HTTPS enforced and cookie consent mechanisms implemented, though explicit security headers and published security policies are lacking. Privacy compliance is basic with cookie consent but no clearly found privacy policy page. Overall, the website is professional, trustworthy, and well-optimized for its target market, with room for improvement in privacy transparency and security documentation.

ZAZO is a German-based e-commerce retailer specializing in vaping products including e-cigarettes, e-liquids, aromas, and accessories. Established since 2011, it positions itself as a trusted vape shop with a broad product range and reliable shipping services. The website is professionally designed, mobile-optimized, and provides a secure login mechanism with CSRF protection. However, explicit privacy and terms of service policies are not found in the provided content, which is a compliance gap. The cookie consent mechanism is implemented, supporting GDPR compliance to some extent. Security posture is good with HTTPS and secure forms, but incident response and vulnerability disclosure policies are absent. Overall, the site is legitimate, well-branded, and targets mature audiences interested in vaping products.

The website at profdata.my.site.com is a Salesforce-hosted login portal primarily designed for authenticated users to access services related to Profdata. The site leverages Salesforce Lightning technology and integrates multiple third-party payment processors such as Stripe, PayPal, and Adyen, as well as analytics tools like Google Analytics and Mixpanel. The platform appears to be targeted at professional users requiring secure access to business services. The absence of public business information and contact details on the login page suggests it is intended for existing customers or employees rather than the general public. Technically, the website demonstrates a moderate level of digital maturity, utilizing modern frameworks and cloud hosting on Salesforce infrastructure. The Content-Security-Policy header is well-defined, restricting resources to trusted domains, and HTTPS is enforced, indicating a strong security baseline. However, the site lacks additional security headers and explicit privacy or cookie policies, which are important for compliance and user trust. From a security perspective, the site shows good practices with HTTPS and CSP but could improve by adding more comprehensive security headers and reducing reliance on 'unsafe-inline' scripts. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is unavailable for the subdomain, which is typical for Salesforce-managed domains, and does not raise immediate concerns. Overall, the site is secure and professionally implemented for its purpose as a login portal but lacks public-facing business and compliance information. Strategic improvements in privacy disclosures and security headers would enhance trust and compliance posture.

Kartenkiosk Bamberg is a well-established regional event ticketing and concert organization service operating primarily in northern Bavaria, Germany. The company, Veranstaltungsservice Bamberg GmbH, has over 30 years of experience and offers ticket sales, event organization, and customer support services. The website is professionally designed with clear navigation, mobile optimization, and integrates modern frontend technologies such as Bootstrap and jQuery. It also includes comprehensive legal documentation including privacy policy, terms of service, and cookie consent mechanisms, demonstrating a strong commitment to compliance and user privacy. Social media integration and active marketing tools like Google Analytics and Facebook Pixel are used responsibly with user consent.

The Klimaschutzportal website serves as a comprehensive climate protection information platform for the Landkreis Neumarkt region in Germany. It provides detailed content on renewable energy sources, energy consulting, funding programs, and community events, positioning itself as a trusted local government affiliated resource. The site targets residents and stakeholders interested in sustainable energy and climate initiatives. Technically, the website is built on WordPress using Elementor and several specialized plugins for event management and GDPR compliance, reflecting a modern and maintainable infrastructure. Security posture is solid with HTTPS enforced and privacy-respecting analytics via Matomo, though some security headers could be improved. Privacy and cookie policies are clearly presented with an opt-in consent mechanism, demonstrating good compliance with GDPR. Overall, the site is professional, trustworthy, and well-structured, supporting its mission to inform and engage the local community on climate protection.

Sliač Hájniky is a Slovak real estate project focused on new residential housing development. The website serves as an informational platform showcasing different housing units (Dom A, B, C, D) with sections for exterior, interior, and project details. The target audience is general consumers interested in purchasing new homes in the Sliač area. The business model revolves around property development and sales, positioning itself as a local real estate offering. Technically, the site is built on WordPress using the Divi theme and Smart Slider 3 plugin, with integration of Facebook Pixel for marketing tracking. The site is mobile optimized and has good SEO practices via Yoast SEO plugin, but lacks full analytics configuration. Security posture is moderate with HTTPS enabled but missing key security headers and no visible privacy or cookie policies, indicating compliance gaps. No incident response or vulnerability disclosure mechanisms are present. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security hardening.

piXel relations GmbH is a well-established digital agency based in Cologne, Germany, specializing in digital strategies, web design, development, and online marketing services. With approximately 20 years of experience, the company targets businesses seeking comprehensive web solutions including SEO, eCommerce, and social media marketing. The website reflects a professional market position with clear service offerings and a strong local presence. Technically, the website is built on the webEdition CMS platform, utilizing modern frameworks such as UIkit and FontAwesome for UI elements. Analytics are implemented via Matomo and Microsoft Clarity, indicating a moderate level of digital maturity and user tracking. The site is mobile-optimized and SEO-friendly with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS and includes CSRF protection on its contact form. However, it lacks visible security headers and an explicit cookie consent mechanism, which are areas for improvement. No security policy or incident response information is published, limiting transparency in security governance. Overall, the website is trustworthy and professional with a solid business foundation. The security posture is adequate but could be enhanced by implementing additional headers, visible consent mechanisms, and publishing security policies. The risk level is low, but attention to GDPR cookie compliance and security best practices is recommended.

mobile.de GmbH operates a prominent online vehicle marketplace primarily serving the German market, targeting private users, commercial sellers, and dealers. The company provides vehicle listings and data access services, with a clear business presence in Berlin, Germany. However, the website content is currently inaccessible due to an access denied page likely triggered by automated access detection or a web application firewall (WAF), limiting direct content analysis. The technical infrastructure includes AWS DNS hosting and custom font usage, but lacks visible security headers or privacy policies on the analyzed page. The absence of analytics scripts and tracking pixels suggests minimal data collection on this particular page. The website branding is consistent, but the content quality and user experience are poor due to the access restriction. Security posture is weakly observable due to the blocked content, but the presence of a WAF indicates some level of security enforcement. No explicit vulnerabilities or compliance information is available. Overall, the site demonstrates legitimacy through consistent WHOIS data and company information but requires improved transparency and accessibility for automated analysis. Strategic recommendations include enhancing security header implementation, publishing clear privacy and cookie policies, and providing vulnerability disclosure and incident response contacts to improve trust and compliance.

AutoScout24 GmbH operates the largest online automotive marketplace in Europe, offering a comprehensive platform for buying and selling new and used vehicles, motorcycles, commercial vehicles, and related services such as leasing and financing. The website targets consumers and dealers primarily in Germany and other European countries, providing a user-friendly and well-branded digital experience. The company maintains a strong market position with extensive vehicle listings and dealer networks. Technically, the website employs modern web technologies including React, service workers, and integrates with major analytics and advertising platforms such as Google Tag Manager, Facebook Pixel, and Bing Ads. Hosting is managed via Amazon AWS, ensuring reliable infrastructure. Security posture is robust with HTTPS enforcement, reCaptcha Enterprise integration, and GDPR-compliant consent management. However, explicit public security policies and incident response information are not found, representing an area for improvement. Overall, the website is professional, secure, and compliant, with a high trustworthiness rating.

Automobile Tierhold GmbH operates as an authorized Kia automobile dealership based in Augsburg, Germany. The company offers a wide range of new and used Kia vehicles, including electric and hybrid models, and provides services such as test drive bookings, vehicle configurators, leasing options, and business vehicle solutions. The website reflects a professional local dealership with consistent Kia branding and a focus on customer engagement through online tools and offers. Technically, the website is built on Adobe Experience Manager CMS, utilizing modern JavaScript libraries like jQuery and Adobe DTM for analytics and tag management. It employs Google Tag Manager and OneTrust for cookie consent management, indicating a moderate level of digital maturity. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks explicit security headers and published security or incident response policies, which are areas for improvement. The WHOIS data is minimal but does not raise immediate concerns, though more transparency would enhance trust. Overall, the website is well-structured, user-friendly, and compliant with basic privacy requirements, serving its target audience effectively.