Medium-risk security reports

The Schleswiger Unternehmertag website serves as a digital platform promoting a regional entrepreneurial event held in Schleswig, Germany. The event focuses on leadership, crisis management, and networking among local businesses, targeting entrepreneurs and business leaders in the Schleswig and Schleswig-Flensburg regions. The website features multimedia content including videos and images from past events, providing attendees and interested parties with insights and event highlights. The business model centers on event organization and regional business community engagement, positioning itself as a recurring and established event in the local market. Technically, the website is built on WordPress using the Elementor page builder, enhanced with Borlabs Cookie for GDPR-compliant cookie management. It integrates YouTube videos with privacy-enhanced embedding and uses modern web technologies such as jQuery. Hosting is provided by RZone, indicated by the nameservers. The site demonstrates good mobile optimization, SEO practices, and basic accessibility features, though there is room for improvement in accessibility compliance. From a security perspective, the website enforces HTTPS with a good SSL configuration and includes several security headers such as Content-Security-Policy and X-Frame-Options. The presence of a cookie consent mechanism and a comprehensive privacy policy indicates a strong commitment to privacy compliance. However, the site lacks explicit security policies, incident response contacts, and vulnerability disclosure information, which are recommended for enhanced security posture. Overall, the website is professional, trustworthy, and well-aligned with its business purpose. It does not exhibit any signs of malicious activity or content blocking. Strategic recommendations include publishing a dedicated security policy, adding incident response contact details, and considering a vulnerability disclosure policy to further strengthen trust and security transparency.

3d-berlin vr solutions GmbH is a German technology company specializing in digital wayfinding and information systems for complex buildings, operating since 2010. Their product portfolio includes solutions such as easyGuide, easyMaps, carFinder, and mapsEngine, targeting organizations requiring efficient navigation and information management within large facilities. The company maintains a professional online presence with a well-designed website hosted on Squarespace, integrating modern web technologies and multilingual support via Weglot. Security posture is solid with HTTPS and HSTS enabled, alongside a GDPR-compliant cookie consent mechanism. However, the absence of published privacy policies, terms of service, and explicit contact information limits transparency. WHOIS data is unavailable, raising concerns about domain registration legitimacy despite the company's apparent established market presence. Overall, the website reflects a mature digital infrastructure with room for improvement in compliance documentation and trust signals.

infomax websolutions GmbH is a small German company specializing in digital solutions for the tourism sector. The website primarily serves as a minimal landing page with a prominent link redirecting users to another domain (infomax-online.de), indicating limited direct content or engagement on this site. The business model appears focused on providing B2B digital services tailored to tourism industry clients. Technical infrastructure is basic, hosted on Hetzner servers, with no detected CMS or advanced technologies. The site lacks critical security and privacy features such as HTTPS, security headers, privacy policies, and contact information, which significantly impacts its security posture and trustworthiness. Overall, the website is minimalistic with poor content quality and limited user engagement features.

bookingkit is a mature, medium-sized SaaS company specializing in booking, marketing, and administration software for the European tours, activities, and attractions industry. The company positions itself as a market leader in Europe, offering a comprehensive platform that integrates booking generation, channel management, and centralized administration to simplify operations and increase sales for its customers. The website is professionally designed, multilingual, and optimized for SEO and mobile devices, reflecting a high level of digital maturity. The technical infrastructure leverages WordPress CMS with modern marketing and analytics tools such as Facebook Pixel, Hotjar, and HubSpot, ensuring robust data collection and user engagement capabilities. Security posture is strong with HTTPS, domain locking, and no visible vulnerabilities, although DNSSEC is not enabled. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms, aligned with GDPR requirements. Overall, bookingkit demonstrates a high level of business credibility and operational professionalism, making it a trustworthy platform in its niche.

Comvation AG is a Swiss digital and web agency based in Bern and Thun, specializing in developing customized digital products including web applications, websites, online shops, SEO, and consulting services. The company positions itself as a passionate and human-centric digital partner, serving businesses seeking tailored digital solutions. Their website demonstrates a professional and modern design with rich content, customer testimonials, and client references, indicating a strong market presence in their regional niche. Technically, the site leverages modern frameworks such as Astro, integrates Google Tag Manager and reCAPTCHA for analytics and security, and employs cookie consent mechanisms to comply with privacy regulations. Security posture is generally good with HTTPS enforced and secure form handling, though explicit security headers and published security policies are absent. The absence of WHOIS data for the domain introduces some uncertainty regarding domain legitimacy, but the overall business credibility and digital maturity are solid. Strategic recommendations include enhancing security headers, publishing incident response contacts, and verifying domain registration details to improve trust.

Recycling Map is a Swiss-based digital platform operated by swipe GmbH that aggregates over 12,000 recycling collection points across Switzerland. It serves as an informational resource for residents and municipalities to locate recycling stations for various materials, providing detailed data such as location, opening hours, and accepted recyclable goods. The platform supports user engagement through feedback mechanisms and favorites management, positioning itself as a niche environmental service provider within the Swiss market. Technically, the website leverages modern web technologies including Laravel backend inferred from routing patterns, Font Awesome for icons, Cookiebot for consent management, and Google Tag Manager for analytics. The site is well-optimized for mobile devices, uses HTTPS with strong security headers, and integrates a comprehensive cookie consent mechanism, reflecting a mature digital infrastructure. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, CSRF protection, and transparent cookie disclosures. However, it lacks a dedicated security policy or incident response contact information, which could be improved to enhance trust and compliance. No vulnerabilities or suspicious activities were detected in the provided content. Overall, Recycling Map presents a professional, trustworthy, and privacy-conscious web presence with strong compliance to GDPR and cookie regulations. Strategic improvements in security transparency and incident response readiness are recommended to further strengthen its security posture and user trust.

Backstage PRO is a well-established German professional network platform dedicated to the music industry, connecting musicians, bands, event organizers, and related businesses. It offers a comprehensive suite of services including booking opportunities, a musician marketplace, industry news, and premium cooperation campaigns. The platform is supported by notable partners such as Musikhaus Thomann, enhancing its market credibility and reach. The website is professionally designed, content-rich, and targets music professionals seeking networking and business opportunities within the German music scene. Technically, the site employs modern web technologies including Google Analytics 4, Google Tag Manager, and cookie consent management, with a mobile-optimized experience and good SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is well addressed with accessible privacy and cookie policies and a consent mechanism. Overall, the platform demonstrates a mature digital presence with strong business credibility and user trust.

TixforGigs is an online ticketing platform specializing in event ticket sales, artist promotion, and venue information primarily targeting the German-speaking market. The website offers a comprehensive event search and ticket purchasing experience with user account management and security features such as captcha and two-factor authentication. The platform demonstrates a moderate to good level of digital maturity with a modern tech stack including jQuery and Knockout.js, and a responsive design optimized for mobile devices. Security posture is adequate with HTTPS enforced and captcha protections, though some security headers are missing, suggesting room for improvement. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and safe for general audiences, though the lack of WHOIS data slightly reduces domain trustworthiness. Strategic recommendations include enhancing security headers and improving transparency around business contact information.

Fritz-kola is an independent German beverage company established in 2003, specializing in high-quality soft drinks with a unique taste. The website reflects a medium-sized retail business with consistent branding and a focus on product quality. Technically, the site employs modern JavaScript technologies, including Usercentrics for consent management, Google Analytics for traffic analysis, and Sentry for error tracking, indicating a mature digital infrastructure. Security posture is adequate with HTTPS and domain transfer protections, but lacks advanced DNS security and security headers. Privacy compliance is partially addressed through cookie consent but lacks a visible privacy policy or terms of service. Overall, the site is professional and trustworthy but could improve transparency and security practices.

Forum Musikwirtschaft is a professional umbrella organization representing six major associations within the German music industry sector. The website serves as an informational platform to communicate the interests and activities of these associations. The site is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard JavaScript polyfills, indicating a moderate level of technical maturity. The website is mobile optimized and uses HTTPS, ensuring secure communication. However, the absence of privacy and cookie policies, contact information, and detailed WHOIS data limits the overall trust and compliance posture. Security measures such as security headers are not evident, though some scripts indicate attempts to harden fetch and XHR requests. Overall, the site is professional and relevant to its target audience but would benefit from enhanced transparency and compliance documentation.

Live DMA is a well-established European non-profit network founded in 2012 that represents live music venues, clubs, and festivals across multiple countries. The organization focuses on strengthening the live music sector through cooperation, advocacy, and knowledge sharing. Their website reflects a professional and consistent brand image, providing information about their membership, projects, and tools such as mentorship programs and audience development resources. The target audience includes live music associations and event organizers in Europe. Technically, the website is built on WordPress with modern plugins and analytics integrations, hosted by OVH SAS. While the site is performant and mobile-optimized, there is room for improvement in accessibility and security headers. Security posture is solid with HTTPS and no visible vulnerabilities, but lacks explicit incident response or security policy disclosures. Privacy compliance is partially met with a comprehensive privacy policy but no cookie consent mechanism. Overall, the website is trustworthy and professional, with a strong market position in the live music advocacy sector.

Glasmonter.se is an established Swedish e-commerce business specializing in the sale of glass showcases and cabinets primarily targeting professional customers such as companies, schools, museums, and private individuals valuing high quality and functional products. The company operates under Ad Shop AB and has been active since 2003, offering delivery and assembly services alongside standard and custom products. The website demonstrates a solid market position with trust indicators including a high credit rating and a professional online presence. Technically, the site is built on ASP.NET Web Forms with common JavaScript libraries and includes modern tracking and marketing tools with GDPR-compliant consent mechanisms. Security posture is adequate with HTTPS and reCAPTCHA usage, though it lacks advanced security headers and published security policies. The absence of WHOIS data for the domain is a notable concern that impacts trustworthiness and should be investigated further. Overall, the site provides a good user experience with clear business information and no adult or questionable content.

Skrivbord.se is a Swedish e-commerce website specializing in the sale of office desks, including height-adjustable and fixed desks for home and workplace offices. The site leverages the Shopify platform, integrating modern payment methods such as Klarna and Apple Pay, and targets consumers and businesses in Sweden seeking quality office furniture. The website is professionally designed with good content quality and user experience, optimized for mobile devices and SEO. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and ownership transparency. Security posture is generally good with HTTPS and secure payment integrations, but lacks explicit security headers and a visible cookie consent mechanism. Contact information including phone and physical address is provided, enhancing business credibility.

The domain www.medtargetsystem.com is currently unregistered or inactive as indicated by the absence of WHOIS registration data and the complete lack of website content. No metadata, scripts, forms, or business information are present, making it impossible to assess the company's operations, market position, or services. The website is effectively non-existent, providing no value to users or stakeholders. From a technical perspective, the absence of any HTML content or metadata indicates no active infrastructure or digital presence. No technologies, frameworks, or hosting details can be identified. The lack of HTTPS or security headers further confirms the domain is not operational. Security posture is minimal due to the lack of any active website or domain registration. There are no vulnerabilities to assess, but the absence of HTTPS and security best practices is a critical issue. No privacy or compliance policies are present, and no contact or incident response information is available. Overall, the domain appears abandoned or unregistered, representing a high risk for trust and legitimacy. Strategic recommendations include registering the domain properly, deploying a secure website with full compliance and security policies, and establishing clear business and contact information to build credibility.

Sveučilišni računski centar (Srce) is a central academic infrastructure institution affiliated with the University of Zagreb, providing comprehensive computing, networking, identity management, data repository, and digital education services to the Croatian academic and research community. The website reflects a mature digital presence with a professional design, clear navigation, and extensive content tailored to its target audience of students, researchers, and academic institutions. Technically, the site is built on Drupal 9 with modern libraries and frameworks, ensuring good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS, cookie consent, and anti-bot measures, though explicit security headers could be enhanced. Privacy compliance is well addressed with detailed policies and consent mechanisms. Overall, the site demonstrates high business credibility and trustworthiness, despite the WHOIS data being privacy protected, which is justified for this type of institution.

Sherpas TECH, s.r.o. is a Czech-based technology and marketing company specializing in retention marketing, email marketing strategies, CRM data engineering, and advanced customer analytics. The company targets B2B clients seeking to integrate technology with marketing to improve campaign performance and customer engagement. Their website reflects a professional and consistent brand image, showcasing client references and a clear service portfolio. Technically, the site employs modern tools such as Google Analytics, Google Tag Manager, and Google reCAPTCHA Enterprise, ensuring a secure and data-driven user experience. Security posture is strong with HTTPS and form protections, although explicit security policies and incident response information are absent. Overall, the website is well-structured, GDPR-compliant with cookie consent mechanisms, and provides multiple contact channels, supporting trust and credibility.

Checkbot is a specialized software solution developed by OKsystem a.s. for real-time monitoring and management of Yaskawa robotic production lines. The product offers comprehensive features including remote monitoring, automated backups, predictive maintenance, troubleshooting alerts, and customizable dashboards. The business model is subscription-based SaaS with options for on-premise deployment, targeting manufacturing companies and automation professionals globally. The website demonstrates a strong market position supported by client testimonials, ISO certifications, and integration within the Yaskawa ecosystem. Technically, the site is built with modern web standards, employs Google Analytics and Tag Manager for analytics, and uses reCAPTCHA for form security. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is solid with HTTPS, penetration testing claims, and encrypted communications, though it lacks some explicit security headers and published incident response contacts. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. However, the absence of WHOIS domain registration data reduces domain trustworthiness and should be investigated. Overall, Checkbot presents as a professional, secure, and credible industrial software offering with room for minor security and transparency improvements.

Česká gymnastická federace is the official national governing body for gymnastics sports in the Czech Republic, providing comprehensive information, event calendars, results, and resources for multiple gymnastics disciplines including artistic gymnastics, TeamGym, aerobics, acrobatic gymnastics, trampoline, parkour, and more. The website targets athletes, coaches, referees, clubs, and gymnastics enthusiasts, offering news updates, directories, and an e-shop for gymnastics equipment. Technically, the site employs modern frontend technologies such as Bootstrap, jQuery, Flickity, and Google Analytics, with good mobile optimization and accessibility features. However, the absence of explicit privacy and cookie policies and lack of security headers indicate areas for improvement in privacy compliance and security posture. The WHOIS data is unavailable, limiting domain legitimacy verification, but the presence of official contact details and social media links supports the site's credibility. Overall, the site is professional, content-rich, and trustworthy within its domain.

Wiky s.r.o. operates a Czech-language wholesale B2B e-commerce platform specializing in toys and stationery products. With a 30-year tradition as a direct importer, the company targets business customers seeking quality products for resale. The website presents a professional and consistent brand image, providing detailed contact information and compliance with GDPR through privacy and cookie policies. Technically, the site uses legacy JavaScript libraries such as jQuery 1.11.1 and includes common UI plugins like select2 and bxSlider. While the site is accessible and functional, it lacks modern security headers and uses outdated libraries, which could pose security risks. The absence of WHOIS data reduces domain trustworthiness, but the overall business presentation and contact transparency support legitimacy. No signs of adult or questionable content are present, and the site is optimized at a basic level for mobile and accessibility.

Scormium is a Czech-based company operating under Sense4code s.r.o., providing a modern, scalable learning management system (LMS) and learning experience platform (LXP) designed for corporate training and customer education. The platform emphasizes personalized, multimedia-rich content delivery, actionable reporting, and seamless integration with enterprise systems. It holds recognized certifications such as ISO 27001, ISO 9001, and GxP validation, underscoring its commitment to security and compliance. The company is part of the OKsystem Group, enhancing its market credibility. Technically, the website is built on Webflow CMS and leverages modern web technologies including Google Tag Manager, Facebook Pixel, Bing Ads, and LinkedIn Insight Tag for analytics and marketing. The site is well-optimized for performance, mobile responsiveness, and accessibility, with a comprehensive cookie consent mechanism ensuring GDPR compliance. Hosting and security are supported by Cloudflare services, including bot management. Security posture is strong with HTTPS enforced, penetration testing mentioned, and adherence to international standards. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. No explicit incident response or vulnerability disclosure information is provided, which could be improved to enhance trust. Overall, Scormium presents as a professional, trustworthy educational technology provider with robust technical and security foundations. Strategic recommendations include improving domain registration transparency, publishing incident response contacts, and enhancing security header implementation to further strengthen its security posture.

Checkbot is a specialized software solution developed by OKsystem a.s. for real-time monitoring and management of Yaskawa industrial robots. The platform offers comprehensive features including remote access, automated backups, predictive maintenance, alarm notifications, and detailed analytics, targeting manufacturing and automation professionals. The company maintains strong partnerships with major industrial players and emphasizes continuous improvement and security compliance. The website is professionally designed, mobile-optimized, and provides extensive client references and support resources. However, the absence of WHOIS registration data for the domain www.checkbot.com raises concerns about domain legitimacy that should be addressed. The technical infrastructure leverages modern web technologies, Google Analytics, and reCAPTCHA for security and user tracking, with GDPR-compliant privacy and cookie policies in place. Security posture is solid with HTTPS and penetration testing mentioned, but could be improved by adding explicit security headers and incident response disclosures.

OKsystem a.s. operates the OKbase platform, a comprehensive HR digitalization system targeting companies seeking to streamline HR processes such as attendance, payroll, personnel management, and catering. The company holds a strong market position in the Czech Republic and Slovakia with over 350 large implementations and more than 330,000 users. The website reflects a mature, professional B2B SaaS business model with additional outsourcing services. Technically, the site employs modern JavaScript frameworks, integrates multiple analytics and advertising tools, and implements GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS and reCAPTCHA protections, though explicit security headers and policies could be improved. Overall, the site is well-designed, mobile-optimized, and trustworthy, though the absence of WHOIS data slightly reduces domain trust. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure information to further strengthen trust and compliance.

CancanIT is a specialized online certification provider focused on professional web developers. Established in 2010, it offers a broad range of certification exams covering front-end and back-end web technologies, including HTML5, CSS3, JavaScript, PHP, MySQL, and more. The company targets freelance workers, job seekers, and career starters aiming to validate their skills and improve marketability. The website is well-structured with clear navigation and professional branding, supporting a positive user experience and trustworthiness. Technically, the site employs modern web technologies such as Bootstrap, Font Awesome, and jQuery, hosted likely via GoDaddy infrastructure. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is moderate with HTTPS enabled and domain locks in place, but lacks advanced security headers and explicit security policies. Privacy compliance is basic with visible privacy and cookie policies and a consent banner, but no detailed GDPR compliance indicators or data protection officer information. Overall, the security posture is adequate for the business type, with no critical vulnerabilities detected. The domain WHOIS data is consistent and supports legitimacy with a long registration history and no privacy protection. The site does not employ tracking or advertising technologies, indicating a privacy-conscious approach. The content is safe for general audiences, focused on education and certification without any adult or questionable material. Strategic recommendations include enhancing security headers, enabling DNSSEC, publishing incident response contacts, and improving privacy compliance transparency to strengthen trust and security culture.

The website represents the official online presence of the President of the Republic of Croatia, Zoran Milanović. It serves as a government portal providing official information, news, announcements, and contact mechanisms for citizens and stakeholders. The site is positioned as a trusted source of governmental communication and public service. Technically, the site is built on WordPress CMS with common plugins such as Yoast SEO and integrates Google Analytics and Facebook SDK for analytics and social media engagement. The hosting is managed by CARNET, a reputable Croatian academic network, which aligns with the governmental nature of the site. Security posture is adequate with HTTPS enforced and use of reCAPTCHA on forms; however, some security headers are missing and no explicit security or vulnerability disclosure policies are present. Privacy compliance is limited due to the absence of visible privacy and cookie policies. Overall, the site is professional, trustworthy, and safe for general audiences, but could improve in privacy transparency and security hardening.

IQM Destination is a medium-sized project focused on integrated quality management systems for tourism destinations. It aims to enhance service quality, provide education for tourism workers, and strengthen destination branding through a comprehensive, data-driven approach involving stakeholders and guests. The website is professionally designed using WordPress and Elementor, with good SEO and mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though additional security headers and policies could improve resilience. The domain registration is consistent with the business history, supporting legitimacy. Overall, the site presents a trustworthy and professional image in the hospitality sector.

I.M. Matters from ACP is a professional medical news and information website targeting internal medicine physicians. It is affiliated with the American College of Physicians (ACP), providing news, clinical newsletters, and updates on medical policies and practices. The website serves as a trusted source for healthcare professionals with a focus on internal medicine. Technically, the site uses a modern technology stack including jQuery, Google Tag Manager, Google Analytics, and various marketing automation and tracking tools. Hosting is via Amazon AWS DNS infrastructure, and the site is mobile optimized with good navigation and content structure. Security posture is solid with HTTPS enabled and domain transfer protection, though DNSSEC is not enabled and security headers are not evident. Privacy compliance is strong with a clear privacy policy and cookie consent mechanism. Business credibility is supported by ACP affiliation and award recognition. Overall, the site is professional, trustworthy, and well maintained.

The American College of Physicians (ACP) operates the ACP Journals website, a professional platform hosting multiple medical journals including the Annals of Internal Medicine and Clinical Cases. The site serves physicians, healthcare professionals, and researchers by providing peer-reviewed medical content and educational resources. It holds a strong market position as a leading publisher in internal medicine with a large audience and a subscription-based business model complemented by open access content. Technically, the website employs modern web technologies, including Google Tag Manager, Google Analytics, and Cloudflare services, ensuring good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS enforcement, secure forms, and script nonce usage, though explicit security headers and cookie consent mechanisms could be improved. The absence of WHOIS data due to privacy protection is typical for such organizations and does not detract from the site's legitimacy. Overall, the website is professional, trustworthy, and well-maintained, with minor recommendations for enhanced privacy compliance and security transparency.

Pěkné Bydlení is a Czech online magazine operated by Časopisy pro volný čas s.r.o., focusing on home living, interior design, construction, garden care, and lifestyle inspiration. The website serves a target audience of homeowners and individuals interested in improving their living spaces. It operates a content publishing business model supported by advertising and magazine subscriptions. The company is positioned as an established media outlet within the Czech Republic, offering quality content and consistent branding. Technically, the website is built on WordPress 4.7.3 with integration of jQuery, Google Publisher Tags, Google Analytics, and Seznam retargeting services. It uses the Foundation CSS/JS framework for responsive design and is mobile optimized with good navigation and SEO practices. Performance is moderate, with room for improvement in accessibility and modernization of the CMS. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but it uses an outdated WordPress version which poses potential security risks. Advanced security headers are missing, and no explicit security or incident response policies are found on the site. The privacy policy is present and GDPR compliant, enhancing trustworthiness. Overall, the website is safe, professional, and trustworthy with moderate security posture. Strategic improvements in CMS updates and security headers would enhance its security and compliance standing.

The website finfoveskole.gov.cz is an official Czech government educational portal dedicated to supporting financial literacy and tax education for students and teachers. It is a collaborative project between the Financial Administration and Customs Administration of the Czech Republic, providing comprehensive information and resources related to taxes and customs. The site is well-structured, professionally designed, and targets primarily educational institutions and individuals seeking knowledge in financial matters. The presence of official government domains and partner links reinforces its legitimacy and authoritative position in the market. From a technical perspective, the website employs modern web technologies including HTML5, CSS3, JavaScript, Google Fonts, and integrates Cookiebot for cookie consent management and Matomo for privacy-conscious analytics. The site is mobile optimized, accessible, and demonstrates good SEO practices. However, there is no detected CMS or explicit hosting provider information. Performance is moderate, with room for optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of security headers and explicit security or incident response policies publicly available suggests areas for improvement. The lack of WHOIS data is notable but likely due to registry policies for government domains rather than malicious intent. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and improving transparency around contact information for security matters.

eEducation Austria is a well-established non-profit organization dedicated to advancing digital education across Austrian schools. The website serves as a comprehensive platform offering digital competence models, educational resources, tools, and community networking to support educators and institutions in their digital transformation journey. The organization targets schools and educators primarily within Austria, positioning itself as a key player in the national digital education landscape. Technically, the website is built on TYPO3 CMS with modern frontend technologies such as Bootstrap, jQuery, and FontAwesome, providing a responsive and user-friendly experience. While the site is well-structured and content-rich, it lacks visible privacy and cookie policies, which are critical for GDPR compliance. Security-wise, HTTPS is enforced, but additional security headers are not evident, and no explicit incident response or security policies are published. Overall, the website demonstrates a solid business credibility and technical foundation but would benefit from enhanced privacy compliance and security best practices to strengthen trust and regulatory adherence.

FOTOma.sk is a Slovak-language photography portal operated by PRO.Laika, offering a comprehensive range of content including news, reviews, galleries, forums, contests, and workshops. The site targets photography enthusiasts and professionals within Slovakia and Slovak-speaking communities. It maintains a consistent brand presence and provides regular content updates, supported by active social media channels and a newsletter subscription service. Technically, the website employs a custom CMS with modern JavaScript libraries and tracking tools such as Google Analytics, Facebook Pixel, and Hotjar, ensuring good user experience and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security policies and incident response contacts are absent. Overall, the site demonstrates a mature digital presence with moderate tracking and advertising practices, aligned with GDPR compliance. WHOIS data confirms legitimacy and consistency with the business profile.

°celseo Heizung operates a professional website focused on heating system modernization and installation services in Germany. The company connects homeowners with local heating professionals, offering consultation, configuration tools, and price comparison services. The website is built on TYPO3 CMS and integrates modern web technologies including Google Analytics and Facebook Pixel for marketing and analytics purposes. It provides clear contact options including a prominently displayed phone number and a contact page. Privacy and cookie policies are present and appear GDPR compliant. The site demonstrates good SEO practices and mobile optimization, with consistent branding and customer testimonials enhancing trust. Security posture is adequate with HTTPS enforced, though additional security headers and explicit security policies could improve it. WHOIS data is limited but does not raise concerns. Overall, the website is professional, trustworthy, and well-suited for its target audience.

Morework.se is an established Swedish e-commerce business specializing in material handling, carts, and storage solutions for workplaces. It operates under the parent company A.D Shop AB and has been active since 2006, offering a broad product range with a focus on quality and fast delivery. The website targets business customers needing reliable workplace equipment and storage products. Technically, the site is built on a custom ASP.NET platform using mature JavaScript libraries and integrates Google reCAPTCHA for form security. Analytics and marketing tools such as Google Analytics, Google Ads, and LiveChat are employed to enhance user engagement and track performance. Security posture is solid with HTTPS and form protections, though improvements in HTTP security headers are recommended. The WHOIS data for the www subdomain is missing, but the overall business legitimacy is supported by consistent branding, contact information, and a strong credit rating. Privacy compliance is addressed with a GDPR-compliant privacy policy and cookie consent mechanisms.

More.nu is a Swedish retail and manufacturing business specializing in store fixtures, glass showcases, wall systems, mannequins, and office furniture. It operates as part of A.D Shop AB, targeting retail businesses and office environments with a focus on quality products and direct import. The website is professionally designed with clear navigation and mobile optimization, supporting multiple customer interaction forms protected by Google reCAPTCHA. Technically, the site uses ASP.NET WebForms with common JavaScript libraries, though some libraries are outdated. Security posture is moderate with HTTPS enabled and CAPTCHA protection but lacks advanced security headers and uses older jQuery versions. Privacy compliance is basic with a cookie consent banner and privacy policy present. The domain WHOIS data is missing, which reduces trust from a domain registration perspective but the website content and business information are consistent and professional.

Neuland visuelle Gestaltung GmbH is a professional graphic design agency based in Schaan, Liechtenstein, specializing in functional visual concepts for digital and analog applications. The company serves a diverse clientele including government bodies, cultural institutions, and private enterprises, positioning itself as a trusted local design partner. Their portfolio showcases expertise in branding, corporate design, signage, digital interfaces, and campaign development. Technically, the website is built on the concrete5 CMS and leverages modern JavaScript libraries such as jQuery, Pixi.js, and Anime.js, alongside the Foundation framework, providing a responsive and visually engaging user experience. Security posture is moderate with HTTPS presumably enabled but lacking visible security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website reflects a credible and professional business with room for improvement in security and privacy transparency.

Streetwork Liechtenstein operates as a non-profit social outreach organization focused on providing support and counseling services in public and semi-public spaces within Liechtenstein. The organization emphasizes confidentiality and flexible engagement schedules, targeting youth and community members. The website reflects a professional and consistent brand presence with clear contact points and organizational governance details. Technically, the site is built on Concrete5 CMS, leveraging modern frontend libraries such as jQuery and Foundation, and employs Matomo for privacy-conscious analytics. Security posture is solid with HTTPS enforced and email obfuscation implemented, though there is room for improvement in security headers and formal policies. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the site is trustworthy and well-positioned within its niche, with a moderate to good technical and security maturity.

Stiftung Sovort (Soziale Arbeit vor Ort) Liechtenstein is a non-profit foundation established in 2023 by 10 municipalities in Liechtenstein to consolidate youth social work services including Open Youth Work and Streetwork. The organization targets local youth and communities, providing social support under a unified foundation structure. The website reflects a regional, small-sized non-profit entity with clear business focus and community engagement. Technically, the website is built on the concrete5 CMS platform, leveraging modern JavaScript frameworks such as Vue.js and Axios, and uses the Foundation framework for responsive design. The site is mobile-optimized with good SEO practices and clear navigation, though accessibility features are basic. Security posture is solid with HTTPS enforced and email obfuscation implemented, but lacks advanced security headers and explicit security policies. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism or terms of service. Overall, the website is professional, trustworthy, and well-aligned with the organization's mission and regional scope.

Minhembio.com is a Swedish niche community platform operated by Prisjakt Sverige AB, targeting home cinema and hi-fi enthusiasts. The site offers forums, galleries, news, and reviews, serving as a meeting place for enthusiasts to share experiences and content. The business model appears to be community-driven with advertising and affiliate partnerships, notably with Prisjakt.nu and Blocket Jobb. The website content is primarily in Swedish and focuses on relevant topics for its audience. Technically, the site uses standard web technologies including JavaScript and CSS, with Google Analytics and a local analytics service for tracking. The site implements a cookie consent mechanism and provides privacy and cookie policies, indicating basic GDPR compliance. However, no explicit security policies or incident response information are publicly available.

The International Contrast Ultrasound Society (ICUS) operates a professional website dedicated to promoting the safe and effective use of contrast-enhanced ultrasound (CEUS) globally. The organization functions as a non-profit medical society providing education, advocacy, and resources to medical professionals and sonographers. Their market position is unique as the only global society exclusively focused on CEUS, offering webinars, training, protocols, and safety information. The website is built on WordPress with Elementor and integrates modern SEO and analytics tools, reflecting a moderate level of digital maturity. The site is mobile-optimized and professionally designed, facilitating good user experience and navigation. Security posture is adequate with HTTPS and domain registrar protections, but lacks DNSSEC and explicit security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and credible but would benefit from enhanced privacy and security disclosures.

OpenWHO.org is a reputable online learning platform operated by the World Health Organization, focusing on public health emergency preparedness and response. It serves a global audience of health professionals and the public, providing authoritative training resources. The platform is well-branded, professionally designed, and leverages modern web technologies including React and Kaltura for media delivery. The domain registration is consistent with WHO ownership and the platform's founding date. Technically, the website demonstrates good digital maturity with responsive design, accessibility considerations, and integration of media analytics. However, there is room for improvement in security posture, notably the absence of DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is limited by the lack of explicit privacy and cookie policies in the analyzed content. Overall, the security posture is moderate with no critical vulnerabilities detected, but improvements in security headers and privacy disclosures would strengthen trust. The platform does not engage in advertising or affiliate marketing, focusing solely on educational content. The website is safe for general audiences with no adult or questionable content. Strategic recommendations include enabling DNSSEC, implementing comprehensive security headers, publishing clear privacy and cookie policies, and enhancing incident response contact visibility to improve compliance and security transparency.

The website vdvo.de represents the Verband der Veranstaltungsorganisatoren e.V., a German industry association focused on innovation within the MICE (Meetings, Incentives, Conferences, and Exhibitions) sector. The organization provides startup support, education, political advocacy, and sustainability initiatives tailored to the event industry. The site positions itself as a niche player supporting MICE innovation with a clear target audience of industry professionals and startups. The business model revolves around membership, education, and sector advocacy, with a small organizational size and a strong German regional focus. Technically, the website is built on the Squarespace platform, leveraging modern web technologies such as Google Fonts, Google Tag Manager, and reCAPTCHA for security and analytics. The site demonstrates good mobile optimization, a professional design, and clear navigation, although accessibility features are basic. Performance is moderate, typical for a CMS-based site. Structured data in JSON-LD format enhances SEO and provides clear organization and local business information. From a security perspective, the site enforces HTTPS with HSTS enabled, uses Google reCAPTCHA to protect forms, and includes security headers. However, it lacks explicit security policies, vulnerability disclosure mechanisms, and comprehensive privacy and cookie consent implementations, which are areas for improvement. No critical vulnerabilities or suspicious patterns were detected. The WHOIS data is minimal but consistent enough with the website's claims, supporting legitimacy. Overall, vdvo.de is a professionally presented, secure, and credible website for a specialized industry association. Strategic recommendations include adding explicit privacy and cookie consent policies, implementing a security.txt file, enhancing accessibility, and maintaining regular security audits to uphold compliance and trust.

isdv e.V. is a professional association representing self-employed and freelance service providers in the event industry in Germany. The organization serves as a lobby and voice for various professions within the event sector, including technical, logistical, and creative roles. The website is well-structured, professionally designed, and provides comprehensive information about the association's mission, services, and news updates. Technically, the site is built on WordPress with Elementor, uses HTTPS, and integrates Google Analytics and Tag Manager for visitor tracking. Privacy and cookie policies are detailed and GDPR-compliant, with active consent mechanisms. However, no explicit security or incident response policies are publicly available, and WHOIS data for the domain is missing, which raises some concerns about domain registration transparency. Overall, the site demonstrates a solid digital presence with room for improvement in security transparency and domain legitimacy verification.

Ferro Recycling is a Swiss non-profit association dedicated to promoting the recycling of steel packaging. The website serves as an informational platform targeting a general audience interested in environmental sustainability and recycling practices. It positions itself as a niche player within the Swiss recycling sector, focusing on awareness and stakeholder engagement rather than commercial activities. The site is multilingual, primarily in German, with French and Italian versions, reflecting its Swiss market focus. Technically, the website is built on WordPress, leveraging popular plugins such as Yoast SEO for search optimization and Real Cookie Banner Pro for privacy compliance. The inclusion of WPML enables multilingual content delivery, enhancing accessibility for diverse Swiss audiences. The site integrates YouTube video content with appropriate consent mechanisms, demonstrating attention to privacy regulations.

SENS eRecycling is a Swiss non-profit foundation specializing in the sustainable recycling of electrical and electronic equipment. The organization operates a well-established take-back system that facilitates environmentally friendly disposal for both private individuals and business partners across Switzerland. Their website reflects a mature market position with comprehensive services including collection, recycling, awareness campaigns, and a partner network. The content is professionally presented, multilingual, and targets a broad audience concerned with environmental sustainability. Technically, the website employs modern web technologies including Magnolia CMS, JavaScript frameworks, and integrates multiple analytics and marketing tools such as Google Tag Manager, Facebook Pixel, TikTok Pixel, and Intercom. The site is mobile-optimized, fast-loading, and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and secure form handling, though some improvements are recommended in security headers and explicit policies. The security evaluation shows no critical vulnerabilities or blocking mechanisms, indicating a trustworthy and stable platform. However, the absence of a cookie consent mechanism and formal security policies suggests room for compliance enhancement. Overall, the website demonstrates a high level of professionalism and trustworthiness suitable for its non-profit environmental mission. Strategic recommendations include implementing cookie consent banners, publishing security and incident response policies, adding vulnerability disclosure information, and enhancing security headers to further strengthen the security posture and regulatory compliance.

INOBAT is a Swiss organization responsible for collecting and managing advance disposal fees related to batteries and accumulators. It serves as a key player in Switzerland's battery recycling ecosystem, providing information, education, and support to consumers, manufacturers, importers, and recycling partners. The website is well-structured, professionally designed, and offers comprehensive content relevant to its mission. Technically, the site uses modern web technologies including Bootstrap and JavaScript frameworks, with a cookie consent mechanism ensuring GDPR compliance. Security posture is strong with HTTPS enforced and no evident vulnerabilities, though some security headers could be improved. Overall, the domain registration and WHOIS data align well with the organization's claims, indicating legitimacy and trustworthiness.

IGORA-Genossenschaft für Aluminium-Recycling Schweiz operates as a cooperative focused on the collection and recycling of aluminium packaging in Switzerland. The organization emphasizes environmental protection by promoting aluminium recycling, which significantly reduces energy consumption and greenhouse gas emissions compared to new aluminium production. The website positions IGORA as a key player in the Swiss aluminium recycling sector, targeting both consumers and businesses interested in sustainable waste management. Technically, the website is built on WordPress and integrates modern technologies such as Google reCAPTCHA for security, Google Maps for location services, and EmbedSocial for social media content integration. The site employs a professional cookie consent mechanism compliant with GDPR and Swiss data protection laws, indicating a mature digital infrastructure. Performance and mobile optimization are adequate, supporting a good user experience. From a security perspective, the site enforces HTTPS, uses multiple security headers, and manages user consent effectively. No critical vulnerabilities or suspicious activities were detected. However, the absence of a dedicated security policy or incident response page suggests room for improvement in transparency and preparedness. Overall, IGORA's website reflects a trustworthy and professional organization with a solid security posture and compliance framework. Strategic enhancements in security documentation and accessibility could further strengthen its digital maturity and stakeholder trust.

metronom Eisenbahngesellschaft mbH operates regional passenger rail services primarily in the German states of Niedersachsen, Hamburg, and Bremen. The company positions itself as a friendly and reliable transportation provider under the motto "Unterwegs mit Freunden" (Traveling with Friends). It offers multiple regional train lines (RE2, RE3, RB31, RE4, RB41) and provides comprehensive travel planning tools, real-time updates, and ticketing options including integration with the Deutschland-Ticket and Niedersachsentarif. The website reflects a medium-sized transportation company with a strong regional presence and a parent company, Netinera, supporting its operations. The target audience includes commuters, tourists, and day travelers in Northern Germany.

The website www.lausanne.ch is the official municipal portal for the City of Lausanne, Switzerland, serving as a comprehensive resource for residents, visitors, and businesses. It provides extensive information on municipal services, cultural events, social assistance, urban planning, and public participation. The site is well-branded and professionally designed, reflecting its authoritative government status. Technically, it employs modern web technologies including jQuery, Bootstrap Icons, Google Maps API, and Matomo analytics, indicating a mature digital infrastructure. Security measures such as HTTPS enforcement, security headers, and CSRF protections are in place, contributing to a strong security posture. However, explicit privacy policies, terms of service, and incident response information are not clearly linked or found, representing areas for improvement. Overall, the site is trustworthy, user-friendly, and well-optimized for mobile and accessibility standards.

Berliner Verkehrsbetriebe (BVG) operates as the primary public transportation provider in Berlin, Germany, offering comprehensive services including route planning, ticketing, subscriptions, and mobile applications. The website serves a broad audience including residents and tourists, providing timely service updates, ticket purchase options, and customer support. BVG holds a strong market position as the leading transit operator in Berlin with a large operational scale. Technically, the website is built on modern frameworks such as React and Next.js, hosted likely by Cronon, and managed via Magnolia CMS. It demonstrates excellent performance, mobile optimization, and accessibility features, reflecting a mature digital infrastructure. The site employs standard SEO and metadata practices, including Open Graph tags and structured JSON data. From a security perspective, the site enforces HTTPS, includes standard security headers, and implements a robust cookie consent mechanism compliant with GDPR. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. No critical vulnerabilities or suspicious patterns were detected. Overall, the website is professional, trustworthy, and user-friendly, with strong privacy compliance and business credibility. Strategic recommendations include publishing detailed security policies, providing direct security contact information, and establishing a vulnerability disclosure program to enhance transparency and trust.

CFL is the national railway company of Luxembourg, providing passenger and freight transport services along with mobility solutions such as carsharing, bicycles, tram, and funicular. The website serves as a comprehensive travel portal offering timetable searches, ticket bookings (both national and international), travel packages, and customer services. The company holds a strong market position in Luxembourg's transportation sector with a large operational scale and multiple subsidiaries. Technically, the website employs modern frameworks like Bootstrap and FontAwesome, integrates Google Tag Manager and Matomo for analytics, and is optimized for mobile and accessibility. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are not found. Privacy compliance is good with privacy and cookie policies and consent mechanisms in place. Overall, the website is professional, trustworthy, and user-friendly, though the lack of WHOIS data slightly reduces trustworthiness from a domain registration perspective.