Medium-risk security reports

The website www.oberhausen.de serves as the official digital portal for the city of Oberhausen, Germany, providing residents and visitors with comprehensive information on city life, public services, tourism, and cultural events. The site is well-structured with clear navigation and a focus on accessibility and user experience. It employs modern web technologies including Matomo for analytics and Cookiebot for GDPR-compliant cookie consent management, reflecting a mature digital infrastructure. Security posture is adequate with HTTPS enforced and privacy-conscious analytics, though explicit security policies and contact information for incident response are not evident in the provided content. Overall, the site demonstrates a professional and trustworthy presence consistent with a municipal government entity.

The website cms.muelheim-ruhr.de serves as the official digital portal for the city of Mülheim an der Ruhr, Germany. It provides comprehensive information and services related to city administration, cultural events, social services, urban development, and citizen engagement. The site targets residents, visitors, and local businesses, positioning itself as a trusted government resource with a broad range of public services and community information. The content is well-maintained, professionally presented, and highly relevant to its audience. Technically, the site is built on Drupal 11, leveraging modern web technologies such as Bootstrap 5, jQuery, and Matomo for privacy-conscious analytics. The hosting is managed via Versatel nameservers, indicating a stable and professional infrastructure. The site demonstrates good mobile optimization, accessibility, and SEO practices, ensuring a positive user experience across devices. From a security perspective, the website enforces HTTPS and employs a cookie consent mechanism via Klaro, reflecting GDPR compliance. While explicit security headers are not visible in the HTML, the platform's inherent security features and absence of exposed sensitive data suggest a solid security posture. However, the site lacks published incident response contacts and vulnerability disclosure policies, which could be improved to enhance transparency and readiness. Overall, cms.muelheim-ruhr.de is a high-quality, trustworthy municipal website with strong content, technical maturity, and privacy compliance. Strategic recommendations include enhancing security header implementation, publishing security policies, and maintaining regular updates to Drupal and third-party components to sustain security and compliance.

Gemeinde Holzwickede operates as the official municipal government website providing comprehensive information and services to residents and stakeholders of Holzwickede, Germany. The site offers access to municipal services such as online appointment bookings, service directories, contact information, and community news. It serves as a central hub for local government communication and citizen engagement. Technically, the website employs a modern technology stack including jQuery, Bootstrap, and a specialized Verwaltungsportal CMS platform. It features responsive design, accessibility options like contrast modes and font resizing, and a cookie consent mechanism compliant with GDPR. The site integrates social media channels and provides structured navigation for ease of use. From a security perspective, the website enforces HTTPS, uses captcha mechanisms to mitigate abuse, and implements detailed cookie consent with opt-in/out categories. However, it lacks publicly available security policies, incident response contacts, and security.txt files. No critical vulnerabilities or exposed sensitive data were detected in the content. Overall, the website demonstrates a solid digital presence for a small government entity with good content quality, user experience, and privacy compliance. Strategic improvements in security transparency and incident response readiness would enhance trust and resilience.

Stadt Herten operates an official municipal website providing comprehensive information and services to its citizens and visitors. The site covers a wide range of topics including citizen services, city administration, cultural events, and urban development. It targets residents and stakeholders of the city, offering online tools such as appointment scheduling and event calendars. The website is built on TYPO3 CMS and employs modern web technologies ensuring good accessibility and user experience. Security posture is adequate with HTTPS enforced and obfuscated email addresses, though it lacks explicit security policies or incident response contacts. Overall, the site is trustworthy and professionally maintained, reflecting the city's commitment to digital public service.

Stadt Herne operates an official municipal government website providing comprehensive information and services to its citizens and visitors. The site covers a wide range of topics including city life, culture, education, integration, environment, and digitalization initiatives. It maintains a strong presence with official branding, social media integration, and a citizen service portal. Technically, the website employs a mature technology stack including Bootstrap, jQuery, and specialized tools like eTracker for analytics and ReadSpeaker for accessibility. The site is well-structured, mobile-optimized, and includes cookie consent mechanisms aligned with GDPR requirements. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though improvements could be made by adding security headers and updating legacy libraries. Overall, the domain and content appear legitimate and trustworthy, consistent with a large government entity. Strategic recommendations include enhancing security headers, publishing a security policy, and modernizing JavaScript libraries to maintain security and compliance.

The website www.essen.de is the official digital presence of the city of Essen, Germany, serving as a comprehensive portal for municipal services, news, and citizen engagement. It offers a wide range of information including job opportunities, city maps, cultural events, and social services, targeting residents, visitors, and businesses within the city. The site is well-branded with consistent city identity elements and maintains a high level of professionalism and content quality. Technically, the site employs modern web technologies such as jQuery, Bootstrap, ArcGIS for mapping, and integrates accessibility tools like ReadSpeaker. The cookie consent mechanism is robust and GDPR compliant, reflecting a mature approach to privacy and user data protection. The site is mobile optimized and accessible, with good SEO practices evident in meta tags and structured navigation. From a security perspective, the site enforces HTTPS and uses standard security headers to protect users. While no explicit security policy or incident response contacts are published, the site shows no signs of vulnerabilities or exposed sensitive data. The WHOIS data is limited due to DENIC's privacy restrictions but aligns with expectations for an official government domain, supporting the site's legitimacy. Overall, www.essen.de demonstrates a strong digital maturity for a government portal, balancing user experience, privacy compliance, and security. Strategic improvements could include publishing a dedicated security policy and enhancing security headers for further protection.

The website duisburg.de serves as the official digital portal for the city of Duisburg, Germany, providing residents and visitors with comprehensive information about city services, events, tourism, and administrative functions. It positions itself as a key government resource with a broad range of public service offerings and community engagement initiatives. The site demonstrates consistent branding and a professional presentation aligned with municipal government standards. Technically, the site is built on the Information Enterprise Server platform by Sitepark GmbH, utilizing modern web technologies including SVG icons, accessibility plugins, and JavaScript frameworks. The site is mobile optimized and includes accessibility features enhancing usability for diverse users. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though explicit security headers and privacy policies are not clearly present in the provided content. Analytics are conducted via Matomo, indicating moderate user tracking with some privacy compliance gaps. Overall, the site is trustworthy and well-maintained, though improvements in privacy transparency and security headers would enhance compliance and user trust.

The website www.dorsten.de serves as the official municipal portal for the city of Dorsten in Germany, providing comprehensive information and services related to local government, culture, education, social welfare, and economic development. It targets residents, visitors, and businesses within the city, offering a broad range of public services and community resources. The site is built on a modern open-source technology stack, primarily using the Neos CMS and Flow PHP framework, hosted on reputable infrastructure provided by Hetzner. The website demonstrates good digital maturity with responsive design, clear navigation, and integration of privacy-conscious analytics via Matomo. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in security headers and published security policies. Privacy compliance is moderate, with a cookie consent mechanism present but lacking an explicit privacy policy and terms of service. Overall, the site is professional, trustworthy, and safe for general audiences, reflecting the standards expected of a government entity.

The website www.castrop-rauxel.de is the official municipal portal for the city of Castrop-Rauxel in Germany. It provides comprehensive information and services for residents, businesses, and visitors, including citizen services, event news, city planning, and digital applications. The site is built on Drupal 10 with modern frontend technologies and includes accessibility and mobile optimization features. The presence of a cookie consent mechanism via Klaro and the use of Matomo analytics with DoNotTrack respected indicate a privacy-conscious approach. However, explicit privacy policy and terms of service pages were not detected in the provided content. Security posture is moderate with HTTPS implied but lacking visible security headers or published security policies. The domain WHOIS data is consistent with a legitimate government entity, and no suspicious patterns were found. Overall, the site is professional, trustworthy, and serves as a key digital interface for the city government.

Stadt Bottrop operates as the official municipal government website for the city of Bottrop, Germany. It provides comprehensive citizen services including online appointment booking, event calendars, political information, and social services. The website targets residents and citizens, offering a broad range of public sector services and information. The site is well-branded, consistent, and professionally maintained, reflecting its role as a trusted government portal. Technically, the website uses a Sitepark CMS platform with modern JavaScript libraries such as Slick Slider and TinyMCE. It integrates Matomo analytics for privacy-conscious user tracking with explicit consent mechanisms. The site is mobile-optimized, accessible, and SEO-friendly, ensuring good user experience across devices. From a security perspective, the site enforces HTTPS, uses cookie consent banners, and anonymizes analytics data. However, it lacks explicit security policies, incident response contacts, and security headers, which are recommended for enhanced security posture. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is a secure, compliant, and professional municipal portal with strong privacy practices and good user experience. Strategic improvements in security policy transparency and incident response readiness would further strengthen its trustworthiness and resilience.

The website www.bochum.de is the official digital presence of the city government of Bochum, Germany. It serves as a comprehensive portal offering citizens, businesses, and visitors access to a wide range of public services, information on politics, culture, economy, and tourism. The site is well-branded, professionally designed, and provides multiple portals for specialized services such as online appointment booking, family services, and citizen feedback mechanisms. The target audience is broad, encompassing residents, visitors, and local businesses. Technically, the site is built on the You@web CMS platform and leverages modern JavaScript libraries including jQuery 3.7.1 and Matomo for analytics, emphasizing privacy compliance. The site is mobile-optimized and includes accessibility tools such as Eye-Able, enhancing usability for diverse users. Performance is moderate, with good SEO and accessibility practices observed. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism aligned with GDPR requirements. However, explicit security headers like CSP or X-Frame-Options are not evident, and no public security policy or incident response contacts are provided. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the website demonstrates a strong commitment to privacy, accessibility, and user experience, with minor areas for security enhancement. The domain WHOIS data is minimal but consistent with a government entity. The site is trustworthy and suitable for general audiences, with no adult or questionable content detected.

The EDEKA-Verbund website represents a major German retail cooperative, providing a digital platform for business information, career opportunities, and corporate responsibility initiatives. The site is professionally designed with clear navigation and multimedia content, targeting entrepreneurs, employees, and students interested in the EDEKA cooperative network. The domain registration aligns well with the business entity, reinforcing the site's legitimacy. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with video streaming capabilities and integrated search functionality powered by third-party services like TagCommander and Sitesearch360. Hosting is managed via Akamai's CDN infrastructure, ensuring reliable content delivery. Mobile optimization and SEO practices are well implemented, though accessibility features are basic. From a security perspective, HTTPS is enforced, and domain status flags indicate transfer protection and auto-renewal. However, DNSSEC is not enabled, and no explicit security headers or incident response policies are published. Privacy compliance is strong, with comprehensive privacy and cookie policies and a consent mechanism in place. No vulnerability disclosure or security.txt files were found. Overall, the website demonstrates a solid security posture and compliance with GDPR, though improvements could be made in publishing security policies and enhancing DNS security. The site is trustworthy, professional, and safe for general audiences.

The website businessdoceurope.com is currently inaccessible beyond a security verification page employing Google reCAPTCHA v3, indicating the presence of a Web Application Firewall (WAF) or bot mitigation system. Due to this, no substantive business content, contact information, or policies are available for analysis. The domain is registered with Tucows Domains Inc. since 2019 and is set to expire in August 2025, with standard domain status flags to prevent unauthorized transfers. The technical infrastructure includes Bootstrap 5.3.3 and Google reCAPTCHA but lacks DNSSEC and visible security headers, which are recommended for enhanced security. The absence of privacy, cookie, and terms of service policies, as well as contact details, limits the ability to assess compliance and business credibility. Overall, the site’s security posture shows basic bot protection but lacks comprehensive security best practices and transparency.

The website mutuelles-axa.fr represents the mutual insurance activities of the AXA group, a major global insurance and financial services company. The site provides corporate information, news, governance details, and CSR initiatives targeted at French-speaking customers interested in mutual insurance products. The business model is focused on mutual insurance services under the AXA brand, positioning itself as a trusted enterprise in the finance sector. Technically, the site is built on Adobe Experience Manager, indicating a mature and enterprise-grade CMS platform. The presence of TagCommander and Piano Analytics scripts shows a modern approach to analytics and tag management, with a cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information could be improved. Overall, the site is professional, trustworthy, and well-aligned with AXA's corporate identity.

The AXA Research Fund website represents a well-established non-profit research funding initiative under the AXA Group, focusing on advancing scientific research in health, climate & environment, and socio-economy & new technologies. The site effectively communicates its mission, grant programs, and impact, targeting researchers and academic institutions globally. The technical infrastructure is modern, leveraging JavaScript modules, CSS, and cookie consent tools, with evidence of mobile optimization and accessibility considerations. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit incident response policies are absent. Overall, the website reflects a mature digital presence aligned with its business objectives and parent company branding.

AXA Prévention is a well-established prevention platform under the AXA Group umbrella, focusing on climate risk adaptation, health, safety, and cybersecurity awareness for the French public and professionals. The website offers a broad range of free services, guides, and campaigns to educate and protect its audience. Technically, the site is built on modern web technologies including React and Next.js, with good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS, security headers, and no detected vulnerabilities. Privacy compliance is robust with clear policies and consent mechanisms. Overall, the site reflects a mature, trustworthy, and professional digital presence aligned with AXA's corporate standards.

A-WebSys, spol. s r.o. is a Czech-based technology company specializing in custom internet and mobile application development since 2003. With over 40 employees, the company offers a broad range of services including web applications, web presentations, mobile apps, and fintech solutions. Their market position is that of an established medium-sized player with a strong local presence and reputable clients. The website reflects a professional and modern digital infrastructure utilizing popular JavaScript libraries and frameworks such as jQuery, Bootstrap, and TinyMCE, alongside marketing and analytics tools like Google Tag Manager, Facebook Pixel, and Microsoft Clarity. Security posture is solid with HTTPS enforced and reCAPTCHA implemented on contact forms, though there is room for improvement in security headers and incident response transparency. The absence of WHOIS data reduces domain trust but does not detract from the overall legitimacy of the business. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism in Czech language.

The analyzed URL is a subdomain page that serves a simple 404 'Page not Found' message with minimal HTML content and no metadata or business information. The lack of WHOIS data for the subdomain indicates it is not independently registered and likely serves as a placeholder or error page within a larger domain. The technical infrastructure appears minimal with no detected scripts, forms, or external links. Security posture is weak due to absence of HTTPS and security headers, and no privacy or cookie policies are present. Overall, the site lacks business credibility and trust indicators, resulting in a low risk profile but also low utility or professionalism.

DVGW Kongress GmbH is a specialized event organizer focused on the gas and water sectors in Germany. As a wholly owned subsidiary of the reputable DVGW association, it develops and manages innovative conferences, seminars, congresses, trade fairs, and online event formats. The company holds a strong market position within the energy and water industry, targeting professionals and stakeholders with a comprehensive portfolio of events and services including agency and sponsorship offerings. The website reflects a professional and consistent brand image with excellent content quality and clear navigation. Technically, the website is built on the TYPO3 CMS platform, utilizing modern JavaScript libraries and privacy-respecting analytics via Matomo. The site is mobile optimized and demonstrates good SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website presents a trustworthy and professional digital presence aligned with its business objectives. The domain registration data is consistent with the business claims, enhancing legitimacy. Privacy and cookie policies are comprehensive and GDPR compliant, supporting strong privacy compliance. Strategic recommendations include publishing formal security and incident response policies, enhancing security headers, and maintaining regular audits of third-party scripts to further strengthen security and compliance posture.

IWW Analytik und Service is a specialized service provider focused on water analytics and related consulting services, primarily serving the water management sector in Germany. The company positions itself as a competent partner in water-related environmental services, targeting professional and organizational clients. The website is professionally designed using WordPress with the Divi theme and includes modern plugins such as Yoast SEO and Borlabs Cookie for SEO and privacy compliance respectively. Hosting is provided by netcup, a German hosting provider, which aligns with the company's geographic focus. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks explicit security headers and detailed privacy or terms of service documentation. Contact information is not directly visible on the homepage, which may impact user trust and compliance. Overall, the site is functional, well-structured, and suitable for its niche audience but would benefit from enhanced privacy and security disclosures.

The DVGW-Forschungsstelle am Engler-Bunte-Institut (DVGW-EBI) is a reputable research institution affiliated with the Karlsruhe Institute of Technology, focusing on innovations in gas and water to support the energy transition. The organization provides research, testing, and certification services primarily in the energy sector, emphasizing safety, environmental protection, and technical standards. The website reflects a mature digital presence with professional design, clear navigation, and bilingual support. Technically, it leverages TYPO3 CMS and integrates privacy-conscious analytics (Matomo) alongside a robust cookie consent mechanism. Security posture is solid with HTTPS and some security best practices, though explicit security policies and incident response contacts are absent. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements.

DVGW e.V. is a well-established German association specializing in the gas and water sectors, focusing on technical standards, safety, hygiene, and environmental protection. The website serves as a portal for vocational education and training, offering events, inhouse training, and certification services to professionals in the energy industry. The organization enjoys a strong market position with approximately 14,000 members and a history dating back to 1859. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and is hosted on INWX infrastructure. It features good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the website is professional, trustworthy, and provides comprehensive educational content for its target audience.

The DVGW-Regelwerk Plus website serves as an authoritative platform for technical rules and standards in the gas and water sectors in Germany. Operated by the Deutscher Verein des Gas- und Wasserfaches e.V. (DVGW), a well-established organization founded in 1859, the site provides subscription-based access to regulatory documents and supports professionals in the energy industry. The business model centers on membership and paid access to technical standards, positioning DVGW as a key player in ensuring safety and compliance in the gas and water supply industry. Technically, the website is built on TYPO3 CMS with legacy JavaScript libraries such as jQuery 1.10.2 and Handlebars.js. The site is hosted on INWX nameservers and employs HTTPS with a cookie consent mechanism, reflecting a moderate level of digital maturity. Performance and mobile optimization are adequate but could benefit from modernization, particularly updating JavaScript libraries and enhancing accessibility features. From a security perspective, the site enforces HTTPS and uses cookie consent tools, but lacks explicit security headers and visible incident response policies. The login form uses POST method, and no sensitive data is exposed in the HTML. Analytics are handled via Matomo with moderate user tracking, aligned with privacy compliance. Overall, the security posture is good but could be improved by updating libraries, adding security headers, and publishing security policies. The overall risk assessment is low, with no signs of malicious content or suspicious domain registration. Strategic recommendations include modernizing the tech stack, enhancing security headers, publishing incident response and vulnerability disclosure information, and improving mobile and accessibility features to strengthen trust and compliance.

DVGW Service & Consult GmbH is a specialized service provider in the German energy and water sectors, offering consulting, IT services, management, and occupational safety solutions. The company operates as a subsidiary or closely affiliated entity of the DVGW association, which has a long-standing history since 1859. Their market position is that of a trusted expert providing technical and organizational support to energy and water industry stakeholders. The website reflects a professional and consistent brand image with clear service offerings and a focus on industry-specific solutions. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as jQuery and Bootstrap. It is mobile-optimized and provides a good user experience with clear navigation and relevant content. The site uses HTTPS and cookie consent mechanisms, indicating compliance with GDPR and privacy best practices. However, no explicit security policies or incident response contacts are published, which could be improved. From a security perspective, the site demonstrates a solid posture with no visible vulnerabilities or exposed sensitive data. The use of HTTPS and cookie consent scripts are positive indicators. The absence of security headers and formal security documentation suggests room for enhancement. No WAF or blocking mechanisms were detected, allowing full content accessibility. Overall, the website is trustworthy, professionally maintained, and compliant with relevant privacy regulations. Strategic recommendations include publishing formal security and incident response policies, enhancing security headers, and providing direct contact information for security incidents to strengthen trust and compliance.

ScientiaMobile, Inc. operates the WURFL.io website, providing advanced device detection technology primarily through their WURFL.js product line. Their offerings include free and commercial licenses that enable detection of smartphones, tablets, smart TVs, and game consoles, with enhanced capabilities for iPhone and iPad models in paid tiers. The company targets developers, enterprises, advertisers, and analytics professionals seeking to optimize mobile experiences and advertising effectiveness. The website reflects a mature business with consistent branding and a clear focus on technology solutions in the device detection space. Technically, the website employs AngularJS and modern JavaScript libraries, integrating Google Analytics and HubSpot forms for marketing and analytics purposes. The site is mobile-optimized and uses HTTPS throughout, though some security best practices such as explicit security headers and visible privacy/cookie policies could be improved. Performance is moderate with good user experience and navigation clarity. Analytics usage is moderate, leveraging device detection data to enhance tracking and reporting. From a security perspective, the site demonstrates a solid posture with HTTPS and no exposed sensitive data. However, the absence of security headers and explicit privacy and cookie policies reduces compliance maturity. WHOIS data is privacy protected and incomplete, but the domain aligns with ScientiaMobile’s branding and business model, indicating legitimacy. No signs of blocking or WAF interference were detected, allowing full content access. Overall, the website is professional and trustworthy, with room for improvement in privacy compliance and security hardening. Strategic recommendations include implementing comprehensive privacy and cookie policies with consent mechanisms, adding security headers, and providing clear contact information for incident response. These steps will enhance trust, compliance, and security posture, supporting ScientiaMobile’s position as a leading device detection technology provider.

D.I.SEVEN, a.s. is a well-established Czech security agency operating since 1995, providing comprehensive security and cleaning services across the Czech Republic. The company employs over 2500 professionals and serves more than 600 clients, leveraging proprietary security technologies such as a centralized protection control panel (PCO), electronic gatehouse systems, and patrol tracking solutions. Their market position is strong, supported by a significant annual turnover exceeding 1 billion CZK and active social responsibility initiatives. Technically, the website employs modern analytics and tracking tools including Google Tag Manager, Google Analytics, Facebook Pixel, and Google reCAPTCHA v3, indicating a mature digital infrastructure. The site is well-designed, mobile-optimized, and offers clear navigation and rich content. Security posture is solid with HTTPS enforced and secure form handling, though improvements are recommended in security headers and incident response transparency. The absence of WHOIS data reduces domain registration trust signals but does not detract from the evident legitimacy and professionalism of the business. Overall, the website and business demonstrate a high level of credibility and operational maturity.

3D Ouest is a French software company specializing in management solutions for local governments and public sector entities. Established in 2003, it offers a suite of SaaS applications tailored to various municipal needs such as childcare, municipal hall management, tourist tax collection, cemetery management, and scheduling. The company positions itself as a specialist provider with a strong focus on adapting to client-specific management modes and providing personalized support. The website reflects a professional and consistent brand image with clear navigation and relevant content targeting French local authorities. Technically, the website is built on WordPress with modern plugins including Yoast SEO and LayerSlider, and uses Matomo for privacy-conscious analytics. The site is hosted by OVH sas, a reputable French hosting provider. The technical implementation is solid with good mobile optimization and SEO practices, though some security enhancements like DNSSEC and security headers could be improved. From a security perspective, the site uses HTTPS and hCaptcha to protect forms, but lacks published security policies or incident response contacts. No critical vulnerabilities or suspicious content were detected. Privacy compliance is strong with clear privacy and cookie policies, and GDPR considerations are evident. Overall, 3D Ouest presents a trustworthy and professional online presence consistent with its business claims. Strategic improvements in security headers and incident response transparency would further enhance its security posture and trustworthiness.

Prisme.ai is a technology platform offering scalable AI and automation solutions primarily targeting developers and enterprises. The platform provides tools for workspace creation, app development, and API integrations, positioning itself as an innovative player in the AI platform market. The website is professionally designed using modern web technologies such as Next.js and React, indicating a mature digital infrastructure. However, some technical aspects such as security headers and explicit HTTPS enforcement are not clearly visible in the provided data, suggesting room for improvement in security posture. Privacy compliance is well addressed with a comprehensive privacy policy and GDPR adherence, though cookie consent mechanisms are lacking. Overall, the website presents a trustworthy and professional image but would benefit from enhanced security and contact transparency.

Prisme.ai is a technology company offering a scalable AI platform designed to empower developers and enterprises with customizable AI and automation workspaces. The platform emphasizes flexibility and user control, positioning itself as an innovative player in the AI SaaS market. The website reflects a modern, professional digital presence built on contemporary web technologies such as Next.js and React, indicating a mature technical infrastructure. However, some aspects like hosting provider details and CMS usage remain undisclosed. Security posture is moderate; while HTTPS is implied, explicit security headers and policies are absent, and no contact information for incident response is provided. Privacy compliance is partially addressed with a comprehensive privacy policy, but cookie consent and terms of service are missing. Overall, the website is trustworthy and professional but could improve transparency and security practices to enhance user trust and compliance.

KB Pojišťovna is a Czech Republic-based insurance company offering a broad range of life and non-life insurance products including property, travel, liability, and investment-linked insurance. The company targets individuals and families seeking comprehensive insurance coverage. The website is professionally designed, well-structured, and provides clear navigation and relevant content to support customer engagement and service delivery. Technically, the site uses modern JavaScript frameworks such as React, integrates analytics tools like Matomo and Facebook Pixel, and includes accessibility features via UserWay widget. The site is mobile optimized and SEO friendly, contributing to a positive user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although HTTP security headers are not visibly configured, and no explicit security policy or incident response information is published. WHOIS data is unavailable, which slightly reduces trust but the overall professional presentation and business information support legitimacy. The site is free from adult or questionable content and is fully accessible without WAF or blocking mechanisms. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure information to improve transparency and trust.

KB Pojišťovna is a Czech Republic-based insurance company offering a broad range of life and non-life insurance products including property, travel, liability, and investment-linked insurance. The website presents a professional and consistent brand image targeting individuals and families seeking insurance solutions. The company maintains a strong digital presence with clear contact information and social media channels, enhancing customer engagement and trust. Technically, the website is built on modern frameworks including Kentico CMS and React, with integrated analytics and accessibility tools, ensuring a good user experience and compliance with privacy regulations. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response details are absent, representing an area for improvement. The absence of WHOIS data limits domain legitimacy verification, but the overall business credibility and digital maturity suggest a trustworthy entity. Strategic recommendations include publishing security policies, enhancing security headers, and providing vulnerability disclosure information to further strengthen trust and compliance.

inSPORTline, operated by SEVEN SPORT s.r.o., is a large European e-commerce business specializing in the manufacturing and retail of fitness equipment and related sporting goods. The website presents a professional and comprehensive product catalog including fitness machines, e-bikes, moto gear, outdoor equipment, and health and beauty products. The company targets fitness enthusiasts and general retail customers across multiple European countries, positioning itself as a leading brand in its sector. The digital infrastructure leverages modern web technologies such as jQuery, Bootstrap, and Swiper.js, integrated with Google Analytics and marketing tools like Targito and SmartSupp Chat, indicating a mature digital marketing and analytics setup. Security posture is solid with HTTPS enforced and no visible critical vulnerabilities, though some security headers could be improved. Privacy and cookie policies are present and indicate GDPR compliance, supporting trust and regulatory adherence. Overall, the website is well-designed, user-friendly, and trustworthy, with a good balance of content quality and technical implementation.

The website www.e-insportline.pl represents a large-scale e-commerce platform specializing in fitness and sports equipment retail and wholesale in Poland. The company behind the site is SEVEN SPORT s.r.o., positioning itself as the largest producer and seller of fitness equipment in Poland. The site offers a broad catalog of products, promotions, and customer support, targeting consumers interested in fitness and sports gear. The business model is primarily online retail with wholesale capabilities, serving a Polish-speaking audience with consistent branding and professional presentation. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google Tag Manager, Google Analytics, Microsoft Clarity, and several marketing and retargeting tools such as Persoo and Targito. The site is mobile-optimized, accessible, and SEO-friendly with structured data markup enhancing search engine visibility. Performance is moderate, with lazy loading and deferred script loading implemented to improve user experience. From a security perspective, the site enforces HTTPS with good SSL configuration and includes standard security headers. Forms use POST methods and no sensitive data is exposed in the HTML. However, the site lacks a publicly visible security policy or incident response information, and no vulnerability disclosure or security.txt file is present. Privacy compliance is basic, with a privacy policy and cookie consent mechanism in place, but could be enhanced with explicit GDPR statements. Overall, the website is professional, trustworthy, and safe for general audiences. The absence of WHOIS data reduces transparency but is common for commercial sites using privacy protection. No adult or questionable content is present. Strategic recommendations include publishing a security policy, incident response contacts, and vulnerability disclosure information to improve trust and compliance.

SC SPORT BRANDS DISTRIBUTION SRL operates the inSPORTline.ro website, a Romanian e-commerce platform specializing in sports equipment and articles. The company offers a wide range of fitness and sports products, targeting general consumers interested in sports and fitness. The website is well-structured, professionally designed, and provides clear navigation and product categorization. It supports customer engagement through loyalty programs, authorized service, and warranty offerings. Technically, the site is built on the PrestaShop CMS platform, utilizing modern JavaScript libraries and analytics tools such as Google Analytics and Facebook SDK. The site is mobile-optimized and implements GDPR-compliant cookie consent mechanisms. Security posture is good with HTTPS enforced and secure cookie practices, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the website presents a trustworthy and professional online retail presence.

The website www.insportline.si is an established e-commerce platform specializing in fitness and sports equipment retail, targeting primarily the Slovenian market. Operated by SEVEN SPORT s.r.o., the domain has been active since 2010, reflecting a mature business presence. The site offers a broad range of products including fitness machines, sports gear, outdoor equipment, and health and beauty items, supported by promotional campaigns and a structured product catalog. The business model is retail-focused with a clear online sales channel and regional sister sites across Europe. Technically, the site employs modern web technologies such as jQuery, Bootstrap, and Swiper.js, integrated with Google Analytics and Facebook Pixel for marketing and analytics purposes. The site is mobile-optimized with good SEO practices and structured data enhancing search visibility.

inSPORTline.hu is a well-established e-commerce and retail platform specializing in premium sports equipment and fitness products. Operated by SEVEN SPORT s.r.o., the website targets general consumers interested in sports, fitness, and outdoor activities primarily in Hungary and surrounding Central European markets. The company maintains a strong regional presence with sister sites in multiple countries, offering a broad product range and customer support services. The website features a professional design, clear navigation, and comprehensive product information, supporting a positive user experience.

SEVEN SPORT s.r.o. operates the inSPORTline.de website, positioning itself as the largest manufacturer and seller of fitness equipment in Germany. The company offers a broad range of fitness, sports, moto, outdoor, health, beauty, and children's products through an e-commerce platform targeting German-speaking customers. The website features extensive product listings, promotional banners, and news articles relevant to fitness and sports enthusiasts. Technically, the site employs modern web technologies including jQuery, Bootstrap, Swiper.js, and Google Tag Manager, with performance optimizations such as lazy loading and deferred script loading. Hosting is provided by forpsi.cz, consistent with the company's Czech origins, while the site targets the German market. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies are absent. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy or terms of service pages detected. Overall, the site is professional, trustworthy, and well-structured, serving a large retail audience in the fitness sector.

SEVEN SPORT s.r.o. operates the inSPORTline brand, the largest manufacturer and retailer of fitness equipment in Slovakia. The company offers a broad range of fitness, sports, outdoor, and health-related products through a professional e-commerce platform supported by physical stores. Their market position is strong within Slovakia and supported by sister sites in multiple European countries. The website demonstrates a mature digital infrastructure with modern technologies such as jQuery, Bootstrap, Google Analytics, and personalization tools like Persoo. Security is well implemented with HTTPS, security headers, and secure forms. Privacy and cookie policies are present and GDPR compliant, reflecting good regulatory adherence. Overall, the business is credible, well-branded, and trustworthy.

Salle Gaveau Paris is a well-established concert hall and event venue located in the 8th arrondissement of Paris, France. The venue offers concert hosting, event privatisation, ticket sales, and café services, positioning itself as a key player in the Parisian hospitality and entertainment sector. The website reflects a professional and consistent brand image, targeting cultural audiences and event organizers. Technically, the site is built on WordPress with common plugins such as Yoast SEO and Slider Revolution, hosted by OVH sas, a reputable provider. The site is mobile-optimized and SEO-friendly, though performance is moderate. Security posture is adequate with HTTPS enabled and domain protection flags set, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is basic, with a cookie consent mechanism present but no visible privacy or terms of service pages. Overall, the site is trustworthy and professional but could improve in privacy transparency and security hardening.

ASIO TECH, spol. s r.o. is a Czech-based manufacturer and service provider specializing in water and air treatment technologies, including wastewater treatment plants for municipalities and family homes, water purification, and air cleaning solutions. Established in 1993, the company has a strong international presence in 32 countries and offers a comprehensive portfolio of products and services focused on sustainability and environmental responsibility. The website is professionally designed, multilingual, and provides detailed information about the company's offerings, references, and educational activities. Technically, the website uses a modern technology stack including jQuery, Fancybox, Rellax, Tiny-slider, and FsLightbox, managed via the Topinfo CMS platform. It integrates Google Tag Manager and Hotjar for analytics and user behavior tracking. The site is mobile-optimized and SEO-friendly but lacks explicit security headers and detailed privacy policies. From a security perspective, the site uses HTTPS and does not expose sensitive data in the HTML. However, the absence of WHOIS data and security headers reduces the overall security posture. No critical vulnerabilities or adult content were detected. Contact information is clearly presented, enhancing business credibility. Overall, the website is trustworthy and professional but would benefit from improved transparency in privacy policies, enhanced security headers, and WHOIS data availability to strengthen domain legitimacy and compliance.

Energyshobby is a Czech-based brand specializing in premium animal feed products for poultry, rabbits, sheep, and other farm animals. It operates under the umbrella of the international group De Heus, leveraging extensive research and expertise to deliver quality and safe feed products. The website is professionally designed, multilingual, and targets farmers and animal breeders in multiple countries. The technical infrastructure is modern, built on WordPress with integrations for analytics and marketing automation. Security posture is adequate with HTTPS and cookie consent implemented, though some security headers and policies could be improved. The absence of WHOIS data reduces domain trustworthiness, but the business association and content quality suggest legitimacy. Overall, the website presents a credible and professional digital presence with room for enhanced privacy and security transparency.

Xella.cz represents a Czech manufacturing company specializing in construction materials or related products, as inferred from the domain and branding. The website is built using modern web technologies such as Angular and integrates cookie consent management via Usercentrics, indicating compliance awareness with GDPR. However, the website content in the provided snapshot is minimal, likely due to client-side rendering, and lacks visible contact information, privacy policy, or terms of service pages. The WHOIS data is unavailable, which raises concerns about domain registration transparency and trustworthiness. Technically, the site uses Google Tag Manager for analytics and has a moderate performance and mobile optimization level. Security headers and explicit SSL configuration details are not visible in the provided data, limiting the security posture assessment. Overall, the site appears legitimate but would benefit from improved transparency and security practices.

KupniSila.cz is a Czech media portal operated by GTO Solutions, s.r.o., providing economic news, purchasing power analysis, price information, and consumer advice targeted at Czech citizens. The website leverages WordPress CMS with a modern theme and plugins, including Yoast SEO and Google Adsense for monetization. It maintains a professional design with good content quality and clear navigation. Security posture is adequate with HTTPS enabled and secure login forms, though some security headers are missing. Privacy and cookie policies are present and GDPR compliant, supporting user trust. Overall, the site is legitimate and well-maintained, though WHOIS data is privacy protected, which is common for small media sites.

Advantage Consulting, s.r.o., operating the website www.acjobs.cz, is a leading Czech personnel agency established in 2002. The company specializes in helping job seekers find employment and offers recruitment services to employers. The website reflects a professional business model targeting both job seekers and companies within the Czech Republic, positioning itself as the largest personnel agency in the country. The site provides a broad range of job offers and related content, including blogs and partner employer listings. Technically, the website employs a modern technology stack including Vue.js, Bootstrap, jQuery, and various JavaScript libraries for enhanced user experience and interactivity. It is mobile-optimized with good SEO practices and uses HTTPS to secure communications. The presence of cookie consent mechanisms and privacy policies indicates a commitment to GDPR compliance and user privacy. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, CSRF token usage, and cookie management. However, explicit security policies and incident response information are not publicly available, which could be improved. No critical vulnerabilities or security issues were detected in the analysis. Overall, the website is trustworthy and professional, though the absence of WHOIS data limits domain registration transparency. Strategic recommendations include enhancing security headers, publishing a formal security policy, and improving WHOIS data visibility to strengthen trust and compliance further.

STARKL is a well-established family gardening business operating since 1912, specializing in the cultivation and sale of plants suitable for the Czech climate. The company operates both physical garden centers and an e-commerce platform, serving customers primarily in the Czech Republic and neighboring EU countries. Their brand is recognized with the prestigious Superbrands award, indicating strong market presence and trust. Technically, the website uses a traditional tech stack with jQuery and Google Tag Manager, and it is well-optimized for mobile and SEO. Security measures include HTTPS and Google reCAPTCHA, but could be improved with additional security headers and explicit incident response policies. The absence of WHOIS data reduces transparency but does not negate the company's legitimacy given the rich content and certifications. Overall, the website is professional, secure, and compliant with GDPR, serving its target audience effectively.

THAI MICE CONNECT operates as a specialized online marketplace platform dedicated to the MICE industry in Thailand, connecting various business categories such as accommodations, event venues, organizers, and government agencies. The platform offers automated event planning tools and promotional campaigns, targeting event organizers and corporate clients within the Thai MICE sector. Technically, the website employs a traditional tech stack including jQuery, Bootstrap, and various JavaScript libraries, hosted behind Cloudflare for DNS and CDN services. While the site is mobile-optimized and integrates modern analytics tools like Google Analytics and Facebook Pixel, it uses an outdated jQuery version and lacks some modern security headers, which could pose security risks. The domain registration is consistent with the business history, and no blocking or WAF challenges were detected, allowing full content accessibility. Privacy and cookie policies are present with consent mechanisms, but GDPR compliance is basic. Overall, the website demonstrates a moderate to good level of digital maturity and business credibility.

TeroAsia is a Thai media company operating a digital news and entertainment portal focused on delivering timely content related to news, sports, entertainment, and cultural programming, particularly associated with Channel 7HD. The website demonstrates a moderate level of digital maturity, leveraging modern web technologies such as Next.js and React, and integrates advertising and tracking tools like Google Tag Manager and Google Ad Manager. While the site is well-structured and mobile-optimized, it lacks critical privacy and cookie policies, which impacts its compliance posture. Security measures such as HTTPS and domain protection are in place, but additional security headers and vulnerability disclosures are absent, indicating room for improvement in security maturity. Overall, the site is legitimate and serves a broad Thai-speaking audience with relevant media content.

Nanxia is a French software development agency specializing in creating customized software solutions and digital platforms for various sectors including event management, construction project tracking, energy optimization, and artisan web services. The website showcases multiple partner projects and platforms, indicating a diversified portfolio and a focus on B2B clients. The company positions itself as a specialized agency delivering tailored software products to professional audiences. Technically, the website employs modern frontend technologies such as Bootstrap 4.3.1 and jQuery 3.3.1, with Google Analytics integrated for visitor tracking. The site is mobile responsive and well-structured, though it lacks advanced accessibility features and explicit privacy or cookie policies. The absence of security headers and WHOIS data reduces the overall security posture and trustworthiness. From a security perspective, the site uses HTTPS (implied by URL), but no explicit security headers were detected. There are no visible forms collecting sensitive data, reducing immediate risk, but the lack of privacy and cookie consent mechanisms is a compliance gap. The WHOIS query returned no registration data, which is unusual and warrants further investigation to confirm domain legitimacy. Overall, Nanxia's website is professional and business-focused with good content quality and technical implementation. However, improvements in security headers, privacy compliance, and domain registration transparency are recommended to enhance trust and security posture.

SPEDIDAM is a well-established French collective rights management organization founded in 1959, dedicated to protecting and managing the intellectual property rights of performing artists. The website serves as an information and service portal for artists, music users, and creators of spectacles, offering rights management, legal advice, and cultural aid programs. The organization has a significant market presence with over 115,000 rights holders and a large associate base. Technically, the website is built on WordPress with a modern tech stack including jQuery, Owl Carousel, and Swiper Slider, hosted by OVH. The site is moderately performant, mobile-optimized, and SEO-friendly, though some accessibility features could be improved. Security posture is adequate with HTTPS enabled and domain protections in place, but lacks some security headers and explicit privacy and cookie policies. Overall, the website is professional, trustworthy, and content-rich, targeting a general audience interested in artists' rights and cultural management. However, compliance with privacy regulations could be enhanced by adding clear privacy and cookie policies and consent mechanisms. No WAF or blocking mechanisms were detected, allowing full content access and analysis.