Medium-risk security reports

MSD Norge operates as the Norwegian branch of Merck & Co., Inc., a global pharmaceutical company focused on improving health through innovative medicines and vaccines. The website presents a professional and comprehensive digital presence, targeting healthcare professionals and the general public with information on vaccines, clinical studies, and corporate values. The site is well-branded and consistent with the global MSD identity, emphasizing their commitment to public health and sustainability. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Google Tag Manager, ensuring good SEO and analytics integration. The site is mobile-optimized, accessible, and performs moderately well. Security practices include HTTPS enforcement and cookie consent mechanisms, though explicit security headers and policies could be enhanced. The security posture is solid with no evident vulnerabilities or exposed sensitive data. However, the absence of WHOIS data for the domain reduces transparency and trust slightly. No direct contact emails or phone numbers are published, relying instead on contact forms and pages. Privacy compliance is strong with clear policies and GDPR adherence. Overall, MSD Norge's website reflects a mature, professional healthcare entity with a strong digital presence, though domain registration transparency and explicit security policies could be improved to enhance trust and compliance.

MSD Lithuania operates as a local representation of Merck & Co., Inc., a global pharmaceutical leader focused on research, development, and distribution of medicines and vaccines. The website reflects a mature digital presence with comprehensive content targeting patients, healthcare professionals, and the general public. It highlights key therapeutic areas such as oncology, vaccines, infectious diseases, cardiovascular and metabolic disorders, and COVID-19 response. The site is professionally designed, mobile-optimized, and incorporates modern web technologies including WordPress CMS, Yoast SEO, Google Tag Manager, and OneTrust for cookie consent management. From a security perspective, the website enforces HTTPS and includes cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. The absence of WHOIS data for the .lt domain limits domain registration trust verification, though the corporate branding and external references strongly support legitimacy. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, MSD Lithuania's website demonstrates a strong business and technical foundation with room for improvement in security transparency and domain registration clarity. Strategic enhancements in security headers, incident response disclosure, and WHOIS data accuracy would further strengthen trust and compliance.

MSD Latvia operates as a regional branch of Merck & Co., Inc., a global pharmaceutical leader. The website presents a professional and comprehensive overview of the company's healthcare focus areas including oncology, vaccines, infectious diseases, cardiovascular and metabolic diseases, and Covid-19. The content targets patients, healthcare professionals, and researchers, emphasizing scientific innovation and corporate responsibility. The site is well-branded, consistent with global MSD identity, and provides clear navigation and relevant corporate information.

MSD Italia is a well-established pharmaceutical company operating in Italy for over 65 years and globally for more than 130 years. The company focuses on research, development, and commercialization of innovative therapeutic products, including vaccines and treatments for various diseases. The website reflects a strong corporate identity with comprehensive content targeting healthcare professionals, patients, and institutions. Technically, the site is built on WordPress with modern plugins and technologies, optimized for SEO and mobile devices. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response information are not publicly available. Overall, the website is professional, trustworthy, and compliant with GDPR regulations.

MSD Ireland is a subsidiary of Merck & Co., Inc., a leading multinational pharmaceutical company. The website reflects a mature and professional digital presence focused on healthcare innovation, patient education, and corporate responsibility. The company operates in the pharmaceutical and animal health sectors, targeting patients, healthcare professionals, and employees. The website is well-structured, mobile-optimized, and uses modern technologies such as WordPress and Yoast SEO to enhance user experience and search engine visibility. Security practices are solid with HTTPS enforced and domain protections in place, although DNSSEC is not enabled. Privacy and cookie policies are comprehensive and GDPR compliant, with a clear cookie consent mechanism. No critical security vulnerabilities or suspicious content were detected, and the domain registration aligns well with the company's history and legitimacy.

MSD Greece operates as a subsidiary of Merck & Co., Inc., focusing on pharmaceutical research, development, and distribution within the healthcare sector. The website serves healthcare professionals, patients, and the general public with comprehensive information on therapeutic categories, corporate responsibility, and clinical trials. The company holds a strong market position as a large multinational with a consistent brand presence and active engagement in ESG initiatives. Technically, the website is built on WordPress VIP platform, leveraging modern technologies such as Yoast SEO, Google Tag Manager, and OneTrust for cookie consent. The site demonstrates good performance, mobile optimization, and accessibility standards, supported by structured data for SEO enhancement. From a security perspective, the site enforces HTTPS, employs standard security headers, and integrates cookie consent mechanisms, reflecting a mature security posture. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the website is professional, trustworthy, and compliant with GDPR, with no detected vulnerabilities or suspicious activities. Strategic recommendations include publishing detailed security policies, vulnerability disclosure information, and DPO contacts to further enhance trust and compliance.

MSD Finland is a well-established pharmaceutical company focused on the research, development, and distribution of medicines and vaccines. The website reflects the company's commitment to innovation and public health, targeting healthcare professionals and the general public. It is part of the global MSD network, with consistent branding and a professional online presence. The site provides information on key therapeutic areas such as oncology, vaccines, infectious diseases, and cardiometabolic conditions. Technically, the site is built on WordPress with modern SEO and tracking tools, including Google Tag Manager and Facebook SDK, and implements GDPR-compliant cookie consent mechanisms. Security posture is good with HTTPS enforced, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration details align well with the business identity, indicating high legitimacy.

Merck Sharp & Dohme d.o.o (MSD Croatia) is a subsidiary of the global pharmaceutical leader Merck & Co., Inc., focused on delivering prescription medicines, vaccines, and clinical research services. The website serves patients, healthcare professionals, and job seekers with comprehensive corporate information, product details, and responsibility initiatives. The site is well-branded, professionally designed, and consistent with the global MSD identity. Technically, the website is built on WordPress VIP with modern plugins such as Yoast SEO and Tiny Slider, ensuring good SEO, accessibility, and mobile responsiveness. It uses Google Tag Manager for analytics and OneTrust for cookie consent, reflecting a mature digital infrastructure. Performance is moderate with good mobile optimization. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Privacy compliance is robust with clear privacy and cookie policies, and GDPR adherence is evident. Overall, the website is trustworthy, professional, and secure, supporting MSD's market position as a leading pharmaceutical company. Strategic recommendations include publishing detailed security policies, incident response contacts, and enhancing security headers to further strengthen the security posture.

MSD Bulgaria operates as a regional presence of Merck & Co., Inc., a global pharmaceutical leader. The website reflects a professional healthcare-focused business model, emphasizing research, vaccines, and corporate responsibility. The site targets healthcare professionals, patients, and the general public with relevant content and resources. Technically, the site is built on WordPress VIP with modern plugins and tools such as Yoast SEO, Google Tag Manager, and OneTrust for cookie consent, indicating a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though lacks explicit security headers and published incident response contacts. The absence of WHOIS data is a concern but likely due to privacy protection common in corporate domains. Overall, the site is trustworthy, professional, and compliant with GDPR, serving as a credible digital asset for MSD Bulgaria.

The website at msd.com.mx is currently inaccessible, returning a 403 Forbidden error page with no visible content or metadata. This prevents any meaningful analysis of the business, technical infrastructure, or security posture. The domain WHOIS data is privacy protected, limiting transparency about the registrant and domain age. Due to the lack of accessible content, no privacy, cookie, or terms of service policies are found, and no contact information is available. The absence of security headers and SSL configuration details further limits security assessment. Overall, the site appears to be blocked or restricted, resulting in a very low trust and credibility score.

The website msdchile.cl is currently inaccessible, returning a 403 Forbidden error page with minimal HTML content. This prevents any meaningful extraction of business, technical, or security information from the site itself. The domain is registered with MarkMonitor Inc., a reputable registrar, and has been active since 2011, indicating an established presence likely related to the healthcare sector in Chile. Hosting appears to be on Amazon AWS infrastructure based on DNS records. Due to the blocked content, no privacy policies, contact information, or security policies are available for review. The security posture cannot be fully assessed, but the lack of accessible content and security headers is a concern. Overall, the site’s digital maturity and user experience are poor given the current inaccessibility.

The website corporativo.msdonline.com.br is currently inaccessible, returning a 403 Forbidden error page with no visible content. This prevents any meaningful analysis of the business, technical infrastructure, or security posture. The domain is hosted on Amazon AWS DNS infrastructure, which suggests a professional hosting environment. However, the lack of accessible content and absence of metadata, scripts, or contact information limits the ability to assess the company's market position, services, or compliance status. Security posture cannot be evaluated due to the blocked content, and no privacy or cookie policies are found. Overall, the site appears to be restricted or protected, which may be intentional for internal or corporate use.

MSD Academy Nederland is a professional educational platform affiliated with Merck & Co., Inc., providing accredited medical education, patient support materials, and comprehensive information on therapeutic areas and MSD products targeted at healthcare professionals and patients in the Netherlands. The website demonstrates a mature digital presence with a well-structured WordPress-based infrastructure, enhanced by SEO and privacy compliance tools such as Yoast SEO and OneTrust. The platform integrates Google Tag Manager for analytics and maintains a consistent brand identity aligned with its parent company. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though DNSSEC is not enabled and some security headers could be explicitly implemented. Overall, the site is trustworthy, professionally maintained, and compliant with GDPR requirements.

Onlineafspraken.nl is a Dutch technology company specializing in SaaS-based online reservation and appointment scheduling software. Founded in 2004, it offers a comprehensive suite of products including online booking, payment processing, customer management, marketing tools, and mobile apps. The company targets businesses across multiple sectors seeking efficient and integrated scheduling and payment solutions. The website reflects a mature digital presence with professional design, clear navigation, and strong branding consistency. Technically, the site is built on Drupal 10, employs modern analytics and marketing tools, and is optimized for mobile and accessibility. Security posture is strong, evidenced by ISO 27001 certification, DNSSEC enabled domain, HTTPS enforcement, and cookie consent management. Privacy compliance is robust with clear policies and consent mechanisms. Overall, the website and domain data indicate a trustworthy and credible business with a solid market position in the Netherlands.

Coeliactive is a Dutch non-profit youth association dedicated to supporting young people aged 18-28 with coeliac disease by organizing social activities and providing community engagement opportunities. The website serves as a hub for event information, blog content, and social media integration, positioning itself as a niche community leader within the gluten-free and coeliac support ecosystem in the Netherlands. The parent organization is the Nederlandse Coeliakie Vereniging, which lends credibility and partnership support. Technically, the website is built on WordPress with common plugins such as Yoast SEO and Instagram Feed, ensuring good SEO and social media presence. The site is mobile-optimized with moderate performance and basic accessibility features. Security is well-managed with HTTPS and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is strong, leveraging the parent organization's comprehensive privacy and cookie policies. Overall, the security posture is solid for a non-profit community site, with no critical vulnerabilities or exposed sensitive data. The site lacks explicit security policies or incident response contacts, which could be enhanced. The domain registration is consistent and transparent, supporting the legitimacy of the organization. Strategically, Coeliactive should focus on enhancing security headers, adding vulnerability disclosure information, and improving accessibility to further strengthen trust and compliance.

Hollister Incorporated operates a professional and well-structured website focused on medical products for ostomy, continence, and critical care markets, targeting healthcare professionals and patients primarily in the Netherlands. The site demonstrates a mature digital presence with multi-language support, comprehensive cookie consent mechanisms, and integration of advanced analytics and marketing tools such as Google Analytics, Hotjar, and Marketo. The technical infrastructure is built on Sitecore CMS with modern JavaScript libraries and includes security best practices like HTTPS enforcement and bot detection via reCAPTCHA. However, the absence of an explicit privacy policy and terms of service pages slightly detracts from full compliance and transparency. Overall, the website is secure, professional, and trustworthy, with room for improvement in privacy disclosures and incident response information.

MSD is a leading pharmaceutical company with a strong presence in the Netherlands and globally. The company focuses on developing innovative medicines and vaccines, with a significant emphasis on oncology, infectious diseases, and chronic conditions. The website reflects a mature digital presence with comprehensive content targeting patients, healthcare professionals, and partners. Technically, the site is built on WordPress with modern SEO and privacy compliance tools, including Google Tag Manager and OneTrust for cookie consent. Security posture is solid with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

e-Captain is a Dutch software company specializing in an all-in-one software package designed for associations, clubs, and various organizations to manage memberships, invoicing, bookkeeping, communications, and website management. The company positions itself as a comprehensive SaaS provider with modular offerings and a free app to enhance user engagement. Their market niche focuses on non-profit and membership-based organizations, supported by partnerships with relevant sector bodies and payment providers. The website reflects a mature digital presence with consistent branding and professional content.

Bosman & Vos is a medium-sized Dutch organizational consultancy firm founded in 1993, specializing in serving social sector organizations including healthcare, welfare, NGOs, and local governments. Their website reflects a professional and consistent brand presence, offering services such as recruitment, organizational advice, human resources, and research & development. The company targets societal organizations seeking consultancy and staffing solutions. Technically, the website is built on SilverStripe CMS with modern front-end libraries and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though additional security headers and explicit security policies could enhance their stance. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms. Overall, the site is trustworthy and well-maintained, supporting the company's credibility in its market niche.

Doneer Je Ervaring is a Dutch non-profit initiative operated under the umbrella of the Dutch Cancer Society (NFK) and affiliated cancer patient organizations. It focuses on collecting and analyzing experiences and opinions from cancer patients, their relatives, and healthcare providers through online questionnaires. The platform serves as a valuable tool for research and advocacy to improve cancer care and patient quality of life in the Netherlands. The website is well-branded, professionally designed, and provides clear pathways for participation and information dissemination. Technically, the site employs modern web technologies including Google Analytics with IP anonymization, Google reCAPTCHA for form protection, and media players for enhanced user engagement. While the site is performant and mobile-optimized, it lacks some advanced security headers and DNSSEC, which could be improved. Privacy compliance is strong with clear cookie and privacy policies and consent mechanisms. However, no explicit security policy or incident response contact information is provided, which could be a gap in transparency. Overall, the website demonstrates a mature digital presence with a strong focus on user privacy and data protection, aligned with its healthcare and non-profit mission.

Wij zijn MEO is a Dutch social enterprise specializing in media and backoffice services, emphasizing social inclusion by employing people with disabilities. The company positions itself as a provider of high-quality services while fostering talent development among its workforce. The website reflects a professional and consistent brand image, supported by recognized certifications such as PSO 30 and FD Gazellen. Technically, the site is built on WordPress using the Kadence theme and blocks, integrating modern analytics and consent management tools. Security posture is solid with HTTPS and some best practices, though improvements are possible in security headers and policy disclosures. Overall, the site is accessible, well-structured, and optimized for mobile, with moderate user tracking and basic privacy compliance.

Salland Zorgverzekeraar is a well-established Dutch health insurance provider with a history dating back to 1860. The company offers sustainable, accessible, and affordable health insurance products for residents of the Netherlands, including international workers temporarily residing in the country. It operates multiple brands such as Salland Zorgverzekeringen, HollandZorg, and Salland Zorgkantoor, targeting different market segments including long-term care and international workers. The website reflects a mature business with a clear market position and a focus on regional and national healthcare insurance services. Technically, the website is built on the Sitecore CMS platform using modern technologies like Bootstrap 4, Google Fonts, and integrates analytics and consent management tools such as Google Tag Manager, Hotjar, and Cookiebot. The site is mobile optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be enhanced. Performance is moderate with a professional design and clear navigation. From a security perspective, the site enforces HTTPS, implements cookie consent mechanisms compliant with GDPR, and includes some security policies such as fraud prevention. However, it lacks explicit incident response contacts, vulnerability disclosure policies, and terms of service pages, which are recommended for enhanced transparency and security posture. No critical vulnerabilities or suspicious content were detected. Overall, Salland Zorgverzekeraar's website presents a trustworthy and professional digital presence consistent with its business stature. Strategic improvements in security transparency and accessibility could further strengthen its risk profile and user trust.

The website merchorders.com is currently inaccessible due to a Web Application Firewall (WAF) protection by Incapsula, which blocks direct content access. As a result, no business content, metadata, or contact information is available for analysis. The domain is registered with GoDaddy.com, LLC since 2018 and uses AWS DNS servers, indicating a legitimate commercial intent. However, the lack of accessible content and absence of privacy or security policies limit the ability to assess the business model or market position. Technically, the site shows no evidence of modern SEO, security headers, or compliance mechanisms. Security posture is weak due to lack of visible HTTPS or security best practices. Overall, the site appears to be a small business or e-commerce platform but cannot be fully evaluated due to content blocking.

Gilston Digital SA is a Swiss-based technology company specializing in the creation of web and mobile applications, offering consulting and development services. With nearly 25 years of experience in the digital domain, the company positions itself as a trusted partner for businesses seeking effective and affordable digital solutions. Their portfolio includes diverse projects ranging from e-commerce to bespoke web applications, supported by a strong emphasis on UX design and ongoing maintenance. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates essential tools such as Google Maps and reCAPTCHA for enhanced user experience and security. The presence of a cookie consent mechanism demonstrates awareness of privacy regulations, although a formal privacy policy is not found on the site. Security posture is solid with HTTPS and reCAPTCHA usage, but could be improved by enabling DNSSEC and implementing security headers. Overall, the domain registration data aligns well with the company's Swiss identity and business claims, supporting legitimacy. Strategic recommendations include publishing a privacy policy, enhancing security headers, and establishing a vulnerability disclosure process to strengthen compliance and trust.

Version Two is a UK-based technology company specializing in event management software, primarily through its Evessio platform. The company targets event managers and organizers, offering bespoke solutions for awards, exhibitions, and conferences. Their market position is that of an innovative niche player emphasizing agility and continuous innovation. The website is professionally designed, with consistent branding and clear business messaging. Technically, the site uses modern JavaScript libraries, Google Analytics, and reCAPTCHA for bot protection, hosted partially on Amazon S3. Security posture is good with HTTPS and CSRF tokens, but lacks explicit security headers and published security policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism despite tracking scripts. Overall, the site is trustworthy and well-maintained, though improvements in security transparency and privacy compliance are recommended.

VieAmi is a Dutch non-profit foundation dedicated to supporting projects within VieCuri hospital that are not covered by standard healthcare budgets. The organization focuses on enhancing patient experience and regional healthcare quality through fundraising and community engagement. The website serves as a platform for donations, project information, and news updates, targeting patients, local community members, and healthcare supporters. Technically, the site is built on WordPress using the Enfold theme and integrates the GiveWP plugin for donations with Mollie as the payment gateway. The infrastructure demonstrates moderate digital maturity with responsive design and modern JavaScript libraries such as React. Security posture is adequate with HTTPS enabled and nonce tokens protecting forms, but lacks advanced security headers and DNSSEC, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Overall, the site is trustworthy and professional but would benefit from improved security and privacy transparency.

VieCuri is a top clinical hospital in the Netherlands focusing on providing both basic and specialized healthcare services. Their website primarily serves as a recruitment portal offering job vacancies, internships, and training opportunities to healthcare professionals and trainees. The hospital positions itself as an innovative and collaborative healthcare provider in the Noord-Limburg region. Technically, the website uses modern web technologies including Google Analytics, Tag Manager, Font Awesome, and Bootstrap Grid, with a CMS likely based on Afas software. The site is mobile optimized and has good design quality, though accessibility features could be improved. Security posture is strong with HTTPS and security headers in place, but lacks visible incident response or security policies. Privacy compliance is partial, with a comprehensive privacy policy but no cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with the business goals of recruitment and employer branding.

The website huisartsenpoedpostnoordlimburg.nl represents a newly established healthcare emergency service provider in the Noord-Limburg region of the Netherlands. It offers out-of-hours general practitioner emergency care, crisis services, pharmacy services, and collaborates with the local emergency department. The site targets patients requiring urgent medical attention and provides relevant information, contact details, and educational resources. The business is positioned regionally and is affiliated with VieCuri, a known healthcare organization. Technically, the website is built on WordPress with modern plugins and integrations such as Google Tag Manager and embedded Vimeo videos. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers and explicit incident response policies are missing. Privacy compliance is basic with privacy and cookie policies present but lacking a consent mechanism. Overall, the domain registration data aligns well with the business purpose and launch timeline, supporting legitimacy. The website is safe, professional, and trustworthy.

The Schweizer Werbe-Auftraggeberverband (SWA) is a Swiss association representing the interests of advertising clients vis-à-vis government bodies, the advertising industry, and media. The website reflects a professional and focused organization targeting members within the Swiss advertising and media sectors. The digital infrastructure is based on the Weblication® CMS platform, indicating a moderate level of digital maturity with a clean, responsive design. However, the site lacks critical privacy and cookie policies, which are essential for GDPR compliance and user trust. Security posture is moderate with no visible security headers or incident response information, suggesting room for improvement in security best practices. Overall, the website is functional and professional but would benefit from enhanced compliance and security measures.

Médias Suisses is a well-established non-profit association founded in 1921 that represents print media publishers in French-speaking Switzerland. It focuses on advocacy, social partnership, and professional training to support its approximately 40 member organizations, including major regional newspapers and media outlets. The website serves as an informational and resource platform for members and stakeholders in the Swiss media sector. Technically, the site is built on WordPress using standard libraries such as jQuery and Swiper.js, with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS and cookie consent implemented, though it lacks advanced security headers and published security policies. Privacy compliance is partial, with no visible privacy policy or terms of service pages. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional, trustworthy, and serves its niche audience effectively.

Hawesko is a leading German online retailer specializing in wines, champagnes, and spirits, boasting over 60 years of experience and a large catalog of more than 8,500 products. The company positions itself as Germany's number one wine dealer, targeting mature consumers interested in quality alcoholic beverages. The website demonstrates a high level of professionalism with excellent design, clear navigation, and comprehensive content relevant to its business model. Technically, the site employs modern web technologies, including Cloudflare for DNS and CDN services, Google Tag Manager for analytics, and a custom frontend stack. Mobile optimization and accessibility are well addressed, contributing to a positive user experience. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers and incident response information are not evident. Privacy compliance is robust, with clear privacy and cookie policies aligned with GDPR requirements. Overall, the domain registration data aligns well with the business claims, indicating a legitimate and trustworthy online presence.

Tchibo is a well-established German retail company offering a diverse range of products including coffee, fashion, furniture, and mobile communications. The website reflects a retail and e-commerce business model targeting a general audience in Germany. The technical infrastructure is based on modern frontend technologies such as Vuetify and likely Vue.js, providing a responsive and moderately optimized user experience. However, the website lacks visible privacy and cookie policies, contact information, and security headers, which are critical for trust and compliance. The domain registration data is consistent with a legitimate business, supporting the website's credibility. Overall, the site is functional but could benefit from enhanced security and privacy features to improve user trust and regulatory compliance.

Douglas is a Canadian mattress retailer specializing in direct-to-consumer sales of award-winning, Canadian-made cooling gel foam mattresses. The company positions itself as a premium mattress brand offering free shipping, a 365-night trial, and a 20-year warranty, targeting Canadian consumers seeking quality sleep products. The website is built on WordPress with WooCommerce, integrating modern marketing and analytics tools such as Google Analytics 4, Facebook Pixel, TikTok Pixel, and Affirm payment services. The technical infrastructure reflects a mature digital presence with good mobile optimization, SEO, and accessibility. Security posture is strong with HTTPS enforced and appropriate security headers, though the site lacks a publicly visible security policy or incident response information. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent management. Overall, the site demonstrates a high level of professionalism and trustworthiness, though WHOIS data is unavailable, likely due to privacy protection or subdomain configuration.

Hír FM, operated by Karc FM Média Kft., is a Hungarian regional news radio station and digital media platform launched in 2023. It offers live radio streaming, podcasts, and news content targeting Hungarian-speaking audiences. The company is affiliated with Mediaworks Hungary Zrt., a major media group, and benefits from governmental support, positioning it as a credible regional media outlet. The website is professionally designed with consistent branding and good content quality, serving a general audience with responsible content management including age verification for restricted categories. Technically, the website is built on WordPress CMS using modern front-end technologies such as Bootstrap, jQuery, and Swiper. It integrates Google Tag Manager and a consent management platform to ensure GDPR compliance. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Performance is moderate, with room for improvement in hosting and optimization. From a security perspective, the site enforces HTTPS and uses a consent management platform for privacy compliance. However, explicit security headers are not clearly detected, and no published security policy or incident response contacts are found. No vulnerabilities or exposed sensitive data were identified in the analysis. Advertising is managed through reputable ad networks with transparent consent mechanisms. Overall, the website presents a low-risk profile with good privacy compliance and business credibility. Strategic improvements in security headers, incident response transparency, and accessibility could enhance its security posture and user trust.

Quoka.de is a prominent German online classifieds platform offering free and paid listings across a wide range of categories including real estate, pets, vehicles, jobs, electronics, and more. The platform targets German-speaking users seeking local and nationwide classified ads, providing a user-friendly interface with mobile app support. The business model centers on free ad postings with optional paid promotion services, positioning Quoka as a well-established player in the German e-commerce classifieds market. Technically, the site leverages Cloudflare for DNS and CDN services, integrates Google Analytics and Tag Manager for analytics, and employs a consent management platform to comply with GDPR requirements. The website demonstrates good mobile optimization, SEO practices, and a consistent brand presence.

The website publi24.ro is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block, which prevents any meaningful content or business information from being retrieved or analyzed. The domain is registered since 2009 with a reputable registrar and uses Cloudflare for DNS and security services. Due to the block, no privacy policies, contact information, or business details are available. The technical infrastructure relies on Cloudflare, but no further technology stack details can be determined. Security posture cannot be fully evaluated given the lack of accessible content, but the presence of Cloudflare indicates some level of protection. Overall, the site’s risk assessment is limited by the block, and strategic recommendations focus on resolving access issues and improving transparency.

BECK AND PARTNERS Kft. is a well-established Hungarian recruitment and executive search firm with nearly two decades of experience. The company specializes in comprehensive HR services including executive search, headhunting, and rapid recruitment solutions across multiple sectors such as finance, sales, engineering, logistics, manufacturing, IT, construction, and chemical industries. Their market position is strong as one of Hungary's largest recruitment agencies, supported by a Bisnode rating and a professional online presence. Technically, the website employs modern JavaScript libraries, Google services, and implements security best practices such as HTTPS and reCAPTCHA. Privacy compliance is well addressed with clear GDPR-aligned privacy and cookie policies, including consent mechanisms. However, no explicit terms of service or security policy pages were found. The security posture is solid but could be improved by adding security headers and incident response information. Overall, the website is professional, trustworthy, and well-optimized for its target audience.

Jobline.hu is a well-established Hungarian job portal operated by HVG Kiadó Zrt., providing job listings, employer job posting services, career advice, and downloadable CV templates. The site targets job seekers and employers primarily within Hungary, leveraging its strong brand association with the HVG media group to maintain a reputable market position. The platform offers a comprehensive user experience with good content quality, clear navigation, and mobile optimization. Technically, the site uses a custom CMS with a modern tech stack including Google Analytics, Tag Manager, Gemius, Hotjar, and Criteo for analytics and advertising. Security posture is solid with HTTPS enforced and cookie consent implemented, though some recommended security headers are missing. Privacy compliance is strong with clear policies and GDPR adherence. Contact information is clearly provided, enhancing business credibility.

Cvonline.hu is a well-established Hungarian job portal offering a comprehensive platform for job seekers and employers. It provides extensive job listings, resume management, job alerts, and employer services, positioning itself as a key player in the Hungarian employment market. The website targets primarily Hungarian-speaking users seeking employment opportunities and employers looking to post job ads. Technically, the site is built on Drupal CMS with modern JavaScript libraries and integrates multiple advertising and analytics services managed through Google Tag Manager and Usercentrics for GDPR compliance. The site demonstrates good mobile optimization and SEO practices. Security-wise, the site enforces HTTPS, implements security headers, and uses a consent management platform, though it lacks a publicly available security policy or incident response information. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a reliable resource for its audience.

CVDB.hu is a Hungarian job search platform operated by Jobinfo.hu Kft., offering job seekers a streamlined way to create profiles, upload CVs, and access a wide range of job listings. The platform integrates a prize draw incentive to encourage detailed profile completion, targeting primarily Hungarian job seekers. The website is professionally designed with consistent branding and features partnerships with reputable companies, enhancing its market credibility. Technically, the site employs modern web technologies including Bootstrap, jQuery, Google Analytics, and reCAPTCHA, ensuring a responsive and interactive user experience. However, there is room for improvement in security headers and privacy transparency. Security posture is moderate with HTTPS enforced and anti-bot measures in place, but lacks explicit security policies and incident response contacts. Overall, the site is safe, compliant with GDPR, and trustworthy for its intended audience.

The University of Macedonia (Πανεπιστήμιο Μακεδονίας) is a well-established public higher education institution in Greece, offering a wide range of academic programs including economics, business administration, informatics, music, and international studies. The website reflects a strong market position as a recognized academic and research hub in Northern Greece, targeting students, academics, and researchers. The digital infrastructure is built on modern web technologies such as jQuery and accessibility tools, with a focus on user experience and compliance with privacy regulations. Security posture is solid with HTTPS and cookie consent mechanisms, though some improvements in security headers and incident response transparency are recommended. Overall, the site is professional, trustworthy, and serves its educational mission effectively.

Politécnico de Castelo Branco (IPCB) is a well-established public higher education institution in Portugal, founded in 1980. It offers a broad range of academic programs across six specialized schools, serving a diverse student body and engaging in research and innovation activities. The website reflects a professional and comprehensive digital presence, targeting students, researchers, and the academic community. The institution maintains a strong regional position with partnerships and international programs. Technically, the website uses modern libraries such as jQuery, Bootstrap, and Swiper, and implements good mobile optimization and accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit incident response contacts are missing. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the site is trustworthy, professional, and safe for general audiences.

Université de Picardie Jules Verne (UPJV) is a large public university based in France offering a broad range of multidisciplinary degree programs from undergraduate to doctoral levels. The institution is positioned as a regional leader in higher education and research within the Hauts-de-France region, providing extensive academic services and fostering research excellence. The website reflects a mature digital presence with comprehensive content, clear navigation, and consistent branding aligned with its educational mission. Technically, the site is built on Drupal 10, employs Matomo for analytics, and demonstrates good mobile optimization and accessibility standards. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some advanced security headers and policies could be improved. The absence of WHOIS data from AFNIC is noted but does not detract from the legitimacy of the site given the official branding and content. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

Poczta Polska is the national postal operator in Poland, providing a wide range of postal, courier, financial, and logistics services to both individual and business customers. The website reflects a mature digital presence with comprehensive service information, modern design, and clear navigation. The company operates multiple subsidiaries and partner services, enhancing its market reach and service portfolio. Technically, the site is built on WordPress with Bootstrap and jQuery, optimized for SEO and accessibility, and uses Google Analytics for user insights. Security posture is strong with HTTPS and secure form handling, though some security headers could be explicitly verified and enhanced. The absence of WHOIS data is likely due to registry policies rather than suspicious activity, and the website content strongly supports legitimacy. Overall, the site demonstrates a professional, secure, and user-friendly digital platform aligned with a large government entity.

MensaHome.eu is a Polish e-commerce website specializing in high-quality kitchen and home accessories, including porcelain, glassware, cutlery, and decorative items. The site targets general consumers interested in premium home products and operates primarily in the retail sector within Poland. The business model is focused on online retail with a well-structured product catalog and a user-friendly shopping experience. The website demonstrates consistent branding and a professional design, supporting a positive market position in its niche. Technically, the site employs a modern technology stack including jQuery, Google Tag Manager, Google Analytics 4, and third-party widgets such as Trusted Shops and Doofinder for search functionality. The hosting and domain registration are managed by home.pl S.A., a reputable Polish provider. The site is mobile-optimized and shows good SEO practices, although accessibility features are basic. Performance is moderate, with room for optimization. From a security perspective, the website uses HTTPS with strong SSL configuration and implements a comprehensive cookie consent mechanism that complies with GDPR requirements to some extent. However, it lacks visible security headers and does not publish explicit privacy or security policies, which are areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the business profile, indicating legitimacy. Overall, MensaHome.eu presents a trustworthy and professional online retail platform with a solid technical foundation and good business credibility. Enhancing privacy disclosures and security headers would further strengthen its compliance and security posture.

Przedsiębiorstwo Wielobranżowe AKNA is a Polish-based e-commerce retailer and wholesaler specializing in a broad range of animal care, pest control, and gardening products. Operating for over 15 years, the company offers products from both domestic and international manufacturers, targeting retail and wholesale customers. The website is professionally designed, providing clear navigation, comprehensive product categories, and customer support features. Technically, the site leverages the IdoSell platform with integrations for Google Analytics, Google Ads, and Ceneo reviews, ensuring a modern e-commerce experience with moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though DNSSEC is not enabled and some security headers are missing. Overall, the site demonstrates good privacy compliance and business credibility with transparent contact information and policies.

Incore Bank AG is a Swiss-based, FINMA-regulated B2B bank specializing in traditional and digital asset banking services. The company offers a modular and innovative banking platform tailored for banks, financial intermediaries, and companies, emphasizing technology integration and secure financial services. Their key offerings include Bank as a Service, multi-currency accounts, brokerage and custody, digital asset banking, embedded finance, and business process outsourcing. The website reflects a professional and modern digital presence built on TYPO3 CMS, with clear navigation, comprehensive content, and strong trust signals such as client testimonials and industry memberships. Technically, the site employs modern web technologies, including Google Tag Manager and Cookiebot for analytics and consent management, and enforces HTTPS with appropriate security headers, indicating a strong security posture. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, the website is well-structured, secure, and compliant with privacy regulations, serving its target audience effectively.

The website flixx.ch is currently inaccessible due to a Cloudflare security challenge page requiring human verification via Turnstile captcha. No actual business content, metadata, or contact information is accessible. The site appears to be protected by Cloudflare's WAF, preventing automated access and analysis. Due to this, no meaningful business overview, technical infrastructure details, or security posture evaluation can be performed. The lack of accessible content also means no privacy, cookie, or terms of service policies are detectable. Overall, the site cannot be evaluated for trustworthiness or compliance in its current state.

The website convertiser.pl is currently inaccessible, returning a 400 Bad Request error with minimal HTML content. Due to the lack of accessible content, no meaningful business description, contact information, or security policies can be extracted. The domain is registered with OVH SAS since 2012 and is valid until 2026, indicating a legitimate registration history. However, the absence of website content and metadata severely limits the ability to assess the company's market position, services, or technical infrastructure. The security posture cannot be evaluated due to missing data, but the lack of HTTPS and security headers is a concern. Overall, the site appears non-functional or misconfigured, resulting in a low trust and quality score.