Medium-risk security reports

Radiologická společnost ČLS JEP is a professional society serving radiology professionals in the Czech Republic, providing membership access to educational resources, events, publications, and professional networking. The website is well-structured, built on WordPress with Elementor, and includes modern plugins for user management and cookie compliance. The organization has a long-standing presence since 1998, supported by consistent WHOIS data and domain age. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit privacy and terms of service pages are missing. Google Analytics is used for visitor tracking with moderate user tracking levels. Overall, the site is professional, trustworthy, and targeted at healthcare professionals.

Česká pediatrická společnost ČLS JEP is a professional pediatric society in the Czech Republic providing educational resources, events, publications, and membership services to pediatric healthcare professionals. The website serves as a portal for news, congress information, and resources for both professionals and parents. Technically, the site is built on WordPress with modern integrations such as Google reCAPTCHA and The Events Calendar plugin, ensuring a functional and moderately performant user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, though additional security headers could enhance protection. The absence of WHOIS data limits full domain legitimacy verification, but the website's professional presentation and comprehensive contact information support its credibility. Overall, the site is well-structured, secure, and compliant with privacy regulations, serving its target audience effectively.

Česká Neonatologická Společnost is the official Czech Neonatology Society affiliated with the Czech Medical Society Jana Evangelisty Purkyně. The organization provides professional resources, events, and information targeted at healthcare professionals specializing in neonatology within the Czech Republic. The website serves as an official communication platform with a clear focus on the medical community. Technically, the site is built on WordPress using the Kadence theme and related plugins, hosted on AWS infrastructure, and employs modern web technologies including Google reCAPTCHA for form security. The site is well-optimized for SEO and mobile devices, offering a good user experience. Security posture is adequate with HTTPS enabled and basic form protections, but lacks explicit security policies and headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration data aligns well with the website content and business claims, indicating legitimacy and trustworthiness.

Sofokus is a Finnish digital business design and software development agency specializing in creating modern business concepts for ambitious clients. The company positions itself as a partner in digital business development, targeting businesses seeking innovative digital transformation and software solutions. The website is professionally designed, leveraging WordPress CMS and modern web technologies such as jQuery, AOS, and Google Tag Manager, indicating a mature digital infrastructure. Analytics tools like Google Analytics and Hotjar are used for user behavior insights, complemented by a comprehensive cookie consent mechanism powered by Cookiebot, reflecting attention to privacy compliance. Security posture is generally good with HTTPS enforced and no exposed sensitive data, though the absence of explicit security headers and lack of published security policies suggest room for improvement. The WHOIS data is notably missing or inaccessible, which raises questions about domain registration legitimacy despite the professional web presence. Overall, the website is trustworthy and well-maintained but would benefit from enhanced transparency in privacy and security policies and verification of domain registration details.

Kuntoutukseen.fi is a Finnish non-profit website operated by Neuroliitto ry, focusing on providing rehabilitation services information. The website targets individuals seeking rehabilitation support in Finland, offering relevant courses and service details. The domain is well-established since 2017, with transparent WHOIS data matching the organization's identity and location. Technically, the site is built on WordPress with modern plugins and analytics tools, including Google Analytics, Google Tag Manager, and Cookiebot for cookie consent management. The site is hosted behind Cloudflare nameservers, ensuring reliable performance and security. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers could be improved. No privacy policy page was explicitly found, which is a minor compliance gap. Overall, the site is professional, trustworthy, and safe for general audiences.

France Sclérose en Plaques is a well-established French non-profit foundation dedicated to supporting patients with multiple sclerosis, funding research, and raising public awareness. The organization operates a professional and content-rich website that effectively communicates its mission, services, and opportunities for public engagement such as donations and volunteering. The website demonstrates a mature digital presence with multiple social media channels and clear navigation tailored to its target audience of patients, caregivers, and healthcare professionals. Technically, the site employs modern JavaScript libraries, Google Analytics, and reCAPTCHA for security and user experience, with good mobile optimization and accessibility features. Security posture is strong with HTTPS and consent management, though some HTTP security headers could be improved. The absence of WHOIS data limits domain ownership verification but does not detract significantly from the site's legitimacy given the consistent branding and trust indicators. Overall, the site is professional, trustworthy, and compliant with privacy regulations, making it a reliable resource in the healthcare non-profit sector.

World MS Day is a globally recognized campaign coordinated by The Multiple Sclerosis International Federation, focusing on raising awareness, sharing stories, and advocating for people affected by multiple sclerosis. The website serves as a central hub for information, campaigns, and community engagement, targeting a broad audience including patients, healthcare professionals, and advocates worldwide. The organization holds a strong market position as a leading non-profit in MS awareness and advocacy. Technically, the website is built on WordPress with modern SEO and tracking tools, hosted behind Cloudflare for performance and security. The site demonstrates good digital maturity with mobile optimization, accessibility, and structured data implementation. Security posture is solid with HTTPS and domain locking, though improvements like DNSSEC and explicit security policies are recommended. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is professional, trustworthy, and effective in its mission.

Institut du monde arabe is a well-established cultural and educational institution based in France, dedicated to promoting the knowledge and understanding of the Arab world through exhibitions, language courses, library services, and cultural events. The website reflects a mature digital presence with comprehensive content, clear navigation, and multilingual support focused on French. Technically, the site is built on Drupal 10, uses modern multimedia elements, and integrates cookie consent and analytics tools responsibly. Security posture is good with HTTPS and cookie consent mechanisms, though some HTTP security headers and incident response contacts are missing. The WHOIS data is unavailable due to malformed query output, which limits domain trust verification but the website content and external links strongly indicate legitimacy. Overall, the site is professional, trustworthy, and serves a broad audience including families, professionals, educators, and researchers.

BiObernai by Alsace Bio operates a professional and content-rich website dedicated to promoting organic agriculture events and community engagement in the Alsace region of France. The site serves as an information portal for the annual BiObernai organic agriculture fair, the BiObernai Bier organic beer, and the Association SABA volunteer organization. The business targets consumers and stakeholders interested in sustainable and organic farming practices, positioning itself as a regional leader in this niche. The website demonstrates good branding consistency and content quality, with clear navigation and multimedia integration such as videos and social media links. Technically, the website employs a modern but somewhat dated technology stack including jQuery 1.12, Bootstrap, Owl Carousel, and cookie consent management via tarteaucitron.js. It integrates Google Analytics and Facebook SDK for analytics and social media functionality. The site is mobile optimized with good SEO practices but lacks explicit CMS identification and detailed hosting information. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site uses HTTPS and has implemented cookie consent and reCAPTCHA on forms, indicating awareness of privacy and security best practices. However, no explicit security headers were detected, and no published security or incident response policies are available. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and structure appear professional and trustworthy. Overall, the website presents a low-risk profile with good privacy compliance and user experience but would benefit from enhanced security measures and clearer domain registration transparency. Strategic recommendations include improving security headers, verifying domain registration status, and publishing security policies to strengthen trust and compliance.

Foires de France operates as a collective brand under Unimev, promoting and organizing a network of fairs and exhibitions across France. The website provides detailed information about upcoming fairs, socio-economic impact reports, and links to partner event sites. The business targets the general public interested in regional and national fairs, positioning itself as an important player in the French exhibition sector. Technically, the site is built on WordPress with common plugins and libraries, offering a good user experience and mobile optimization. Security posture is adequate with HTTPS and no visible vulnerabilities, but lacks advanced security headers and explicit security policies. The absence of WHOIS registration data raises concerns about domain legitimacy, which should be addressed to improve trust. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is professional and trustworthy but would benefit from enhanced security and compliance measures.

RAINBOW is a specialized web and e-commerce agency based in France, focusing on Shopify and Shopify Plus platforms. Established since 2005, it positions itself as a leading Shopify Expert Partner in France, offering UX/UI design, web development, and quality assurance services certified by OPQUAST. The website demonstrates a strong portfolio with notable clients, professional branding, and comprehensive service offerings tailored to businesses seeking high-quality e-commerce solutions. Technically, the site is built on Shopify's platform using modern web technologies, optimized for performance, accessibility, and SEO. Security posture is robust with HTTPS, captcha protections, and cookie consent mechanisms, although explicit security headers could be further verified. Privacy compliance is well addressed with clear policies and consent banners. However, the WHOIS data for the domain is missing or inaccessible, which raises concerns about domain registration transparency despite the professional appearance and operation of the website.

Fondation ManpowerGroup is a French non-profit foundation dedicated to supporting organizations that help individuals distant from employment acquire skills for workforce integration. It operates under the aegis of ManpowerGroup France, reflecting a strong market position in social inclusion and employment support. The website is professionally designed using WordPress with modern SEO and accessibility features, indicating a mature digital presence. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data limits full domain trust analysis, but the consistent branding and social media presence support legitimacy. Overall, the foundation demonstrates a responsible approach to privacy and compliance.

Generis Capital Partners is a French private equity firm specializing in impact investing with a focus on environmental and social responsibility. The company has been active for approximately 15 years and targets financing for SMEs through equity, quasi-equity, and bond loans. The website presents a professional image with detailed business descriptions and partnerships with reputable financial institutions. Technically, the site is built on a site builder platform using older JavaScript libraries and includes a cookie consent mechanism. Security posture is moderate with HTTPS enabled but lacks modern security headers and uses outdated libraries. WHOIS data is unavailable, which raises concerns about domain registration legitimacy. Overall, the website is functional and professional but would benefit from improved security practices and clearer privacy and contact information.

Fondation Entreprendre is a French non-profit foundation recognized as a public utility, dedicated to promoting entrepreneurship as a lever for social emancipation and inclusion. The foundation supports a network of associations and philanthropic partners to foster an entrepreneurial ecosystem focused on equality of opportunity and sustainable societal impact. Key services include research and innovation programs (Le Lab), collective innovation initiatives (La Réponse Collective), and strategic development support (L'Accélérateur). The foundation maintains a strong presence in the French social entrepreneurship sector with reputable partnerships and transparent financial reporting. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and uses privacy-respecting analytics via Matomo. It implements cookie consent management through Tarteaucitron.js and maintains good mobile optimization and accessibility standards. The site is served over HTTPS with no detected blocking or WAF interference, indicating a mature digital infrastructure. From a security perspective, the site enforces HTTPS and cookie consent but lacks explicit security headers and published incident response or vulnerability disclosure policies. No exposed sensitive data or vulnerabilities were detected. WHOIS data is unavailable due to privacy protection, which is typical for non-profit organizations and does not detract from the site's legitimacy. Overall, Fondation Entreprendre presents a professional, trustworthy, and privacy-conscious online presence aligned with its mission. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular audits of third-party scripts to further strengthen security posture.

FIDUCIAL is a well-established French company providing a wide range of business services including accounting, legal advice, payroll management, auditing, IT solutions, and office equipment. The website targets business professionals and SMEs in France, offering comprehensive solutions to support business growth and operational efficiency. The site is professionally designed with consistent branding and clear navigation, reflecting a mature digital presence. Technically, the site uses modern web technologies and integrates Google Analytics and Tag Manager for marketing and analytics purposes. Security posture is adequate with HTTPS enforced and cookie consent implemented, though security headers and explicit privacy policies are lacking. WHOIS data is not publicly available, likely due to privacy protection, but the website's professional appearance and domain usage suggest legitimacy. Overall, the site presents a trustworthy and credible business front with room for improvement in security and compliance documentation.

La Mutuelle Générale is a prominent French mutual insurance company specializing in health insurance, mutual coverage, and social protection services for individuals, professionals, and enterprises. It operates in partnership with CNP Assurances through a joint venture, positioning itself as a key player in the French social protection market. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its diverse audience segments. Technically, the site is built on Drupal CMS, employs modern JavaScript frameworks, and integrates Google Tag Manager and New Relic for analytics and performance monitoring. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response details are not publicly available. Privacy compliance is well addressed with visible cookie consent mechanisms and a comprehensive privacy policy. However, the absence of WHOIS data limits domain registration trust verification. Overall, the website demonstrates a high level of professionalism and trustworthiness, supporting the company's market position.

Interreg Caraïbes is a European Territorial Cooperation program focused on fostering regional cooperation projects among Caribbean territories including Guadeloupe, Guyane, Martinique, and Saint-Martin. The website serves as an information portal for approved projects, calls for tenders, news, and practical information related to the program. It targets operators and organizations involved in regional development and cooperation in the Caribbean region. The program is government-backed and funded by the European Union, positioning it as a key regional cooperation initiative.

Guadeloupe Énergie operates as the official regional energy policy platform for Guadeloupe, focusing on the energy transition towards renewable sources and energy independence. The website serves as a comprehensive resource for legislation, renewable energy data, and public initiatives aligned with the regional Multi-Year Energy Program (PPE). The target audience includes residents, policymakers, and energy stakeholders in the Caribbean region. Technically, the site is built on WordPress with modern plugins and analytics integrations, offering good SEO and mobile optimization. Security posture is adequate with HTTPS and cookie consent but lacks explicit security policies and incident response information. Overall, the site is trustworthy and professional but could improve privacy compliance and security transparency.

Mémorial ACTe is a French cultural institution dedicated to the history, heritage, and memory of the transatlantic slave trade, slavery, and its abolition. Positioned as a regional cultural center in the Caribbean, it offers permanent and temporary exhibitions, cultural events, and space rentals. The website reflects a professional and well-maintained digital presence with a focus on education and cultural engagement. The institution targets a broad audience including tourists, students, and researchers interested in Caribbean history and culture. Technically, the website uses modern web technologies such as Bootstrap and JavaScript, hosted by OVH, ensuring good performance and mobile responsiveness. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit security policies are absent. Overall, the website is trustworthy, compliant with GDPR, and provides clear contact and social media channels.

Recyclage & déchets is a small niche informational website focused on recycling, zero waste, and waste management topics primarily targeting French-speaking audiences, including Guadeloupe. The site provides blog articles and news related to environmental sustainability and waste reduction. The business model is content publishing aimed at raising awareness and educating the public on eco-friendly practices. Technically, the website is built on WordPress using Elementor and Astra theme, hosted on infrastructure consistent with its French domain registration. The site is mobile-optimized and SEO-friendly but lacks privacy and cookie policies, which impacts compliance. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and incident response information. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

The website www.lesilesdeguadeloupe.com serves as the official tourism portal for the Guadeloupe islands, operated by the Comité Tourisme des Iles de Guadeloupe. It provides comprehensive information on activities, beaches, accommodations, cultural events, and travel planning resources targeted at tourists and visitors. The site is multilingual, supporting French, English, and German, and is well-structured with rich media and SEO optimizations. Technically, it is built on WordPress with modern plugins and tracking tools, offering good mobile responsiveness and user experience. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit security headers and published privacy or terms policies. WHOIS data is unavailable, which raises some concerns about domain registration transparency. Overall, the site is professional and trustworthy for tourism purposes but would benefit from enhanced transparency and security documentation.

iPRAHA13.cz is a local news and information portal serving the Prague 13 district and its surrounding community. The website offers a variety of content including news articles, event calendars, advertising opportunities, premium content, and business directories. It targets residents and local businesses, positioning itself as a key media outlet for community engagement and information dissemination. The business model relies on advertising and premium subscriptions, supported by partnerships with local organizations and sponsors. Technically, the website is built on a modern stack including Laravel Livewire and Bootstrap, ensuring a responsive and user-friendly experience across devices. The site employs HTTPS with a valid SSL certificate and includes privacy and cookie policies compliant with GDPR. However, some security best practices such as security headers are not evident, and no explicit incident response or vulnerability disclosure information is provided. From a security perspective, the site shows a good posture with encrypted connections and CSRF protection tokens. The absence of WHOIS data for the domain is a notable concern, as it limits transparency and trust in domain ownership. No signs of malicious content or adult material were found, and the site appears safe for general audiences. Overall, iPRAHA13.cz is a credible and professionally maintained local media platform with good content quality and privacy compliance. Strategic improvements in domain transparency, security headers, and contact information disclosure would enhance trust and security posture.

Koch Haustechnik GmbH, represented on the die-badgestalter.de platform, is a specialized service provider in bathroom and heating solutions located in Schmelz, Germany. The company offers personalized bathroom design, complete project management, fixed pricing, and deadline guarantees, targeting homeowners and property developers seeking high-quality bathroom and heating services. The website is part of the SHK eG cooperative network, indicating a regional market presence with trusted affiliations. Technically, the website is built on TYPO3 CMS, uses Matomo for analytics with GDPR-compliant cookie consent, and integrates Google Maps for location services. The site is well-structured, mobile-optimized, and professionally designed, reflecting good digital maturity. Security posture is solid with HTTPS enforced and privacy-respecting analytics, though it lacks explicit security policies or incident response contacts. Overall, the site is trustworthy, compliant, and serves its business purpose effectively.

Prisjakt Sverige AB operates a leading price comparison and product review platform targeting consumers in Sweden. The website aggregates product prices, expert and user reviews, and price history to assist users in making informed purchasing decisions. The platform is well-established with a strong market position in the Swedish retail and e-commerce sector. Technically, the site employs modern web technologies including React and Next.js, supported by robust hosting and CDN services likely via Cloudflare. The site is optimized for performance, mobile responsiveness, and accessibility, providing an excellent user experience. Security measures such as HTTPS and security headers are properly implemented, though explicit privacy and cookie policies are not evident in the provided content. WHOIS data for the domain queried is missing, which limits full verification of domain legitimacy. Overall, the site presents a professional and trustworthy front with room for improvement in privacy transparency and contact information.

Prisjakt Sverige AB operates a well-established price comparison and shopping advice platform primarily serving the Swedish market. The company provides consumers with tools to compare product prices, access expert guides, and discover deals and campaigns. The website demonstrates a mature digital presence with modern technologies such as React and Next.js, supported by robust analytics and advertising integrations. Privacy compliance is well addressed with clear policies and consent management mechanisms. Security posture is strong with HTTPS enforcement and security headers, although explicit security policies and incident response information are not publicly available. Overall, Prisjakt presents a professional and trustworthy online service with a focus on consumer empowerment in e-commerce.

Nova Find by RUBICON operates a leading lost and found service network across Europe, targeting public sector entities and transportation companies. The company offers software and digital platforms to streamline lost and found management, serving over 2,500 customers in seven European countries including Germany, Austria, Switzerland, and Italy. The website reflects a professional and consistent brand presence with strong references to major clients such as Hamburg Airport, Deutsche Bahn, and S-Bahn Berlin. Technically, the site is built on WordPress with Elementor and SEO optimizations, providing a good user experience and mobile responsiveness. Security posture is adequate with HTTPS enforced but lacks some security headers and explicit privacy and cookie policies. WHOIS data is unavailable due to EURid privacy policies, which is common and justified for this business type. Overall, the website is trustworthy and well-positioned in its niche.

Stiftung OJA Liechtenstein is a non-profit foundation operating under the mandate of 10 municipalities in Liechtenstein to provide open youth work and socio-cultural animation. The organization runs multiple youth centers and specialized programs to support youth independence and social engagement. The website reflects a well-structured, professional digital presence with clear navigation and relevant content targeting local youth and community stakeholders. Technically, the site uses modern frameworks such as Vue.js and jQuery, built on the concrete5 CMS, and integrates Matomo for analytics, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and no visible vulnerabilities, though improvements can be made by adding security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. Overall, the site is trustworthy and aligns well with the organization's mission and regional focus.

The domain cyclingprodata.com is currently a parked domain hosted by GoDaddy.com, LLC, with no active website content or business operations visible. The site serves as a placeholder with minimal design elements and no substantive information about any business or services. The technical infrastructure is basic, relying on GoDaddy's parking platform and standard web technologies such as JavaScript and CSS. There is no evidence of a CMS or advanced frameworks beyond React inferred from the HTML structure. Security posture is minimal with no visible security headers or policies, and DNSSEC is not enabled. Privacy and cookie policies are generic references to GoDaddy's global policies, with no site-specific compliance details. Overall, the site lacks business credibility and trust indicators beyond a Trustpilot widget referencing GoDaddy.

LivXp operates as an AI-driven sports experience marketplace designed to connect fans with unique sports-related experiences. Founded in 2020, the company positions itself as a niche technology platform focused on enhancing fan engagement through automated and AI-based services. The website reflects a modern, well-structured digital presence with a clear focus on sports fans and organizations as its primary audience. The platform offers services such as experience provider listings and a marketplace for fan experiences, leveraging AI to automate and personalize offerings. Technically, LivXp employs a contemporary web stack including React and Next.js frameworks, supplemented by Google Tag Manager for analytics and UserWay for accessibility enhancements. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. Hosting details are not explicitly disclosed but the infrastructure appears stable and performant with moderate loading speeds. From a security perspective, the website enforces HTTPS and includes cookie consent mechanisms aligned with GDPR requirements. However, explicit security headers are not detected, and there is no published security policy or incident response information. No vulnerabilities or exposed sensitive data were found in the HTML content. The WHOIS data confirms a legitimate domain registration consistent with the company's founding timeline, enhancing trustworthiness. Overall, LivXp presents a credible and professional online presence with a solid foundation in technology and privacy compliance. Strategic improvements in security policy transparency and enhanced contact information could further strengthen its security posture and business credibility.

The website www.eiam.swiss serves as the official portal for the Swiss Federal Administration's central identity and access management system, eIAM. It provides a unified login infrastructure for federal web applications and native mobile apps, streamlining authentication processes and reducing costs. The site targets federal employees, IT specialists, application officers, integration managers, as well as citizens and business representatives via the CH-LOGIN service. The business model is a government service focused on secure, centralized identity management within the Swiss federal ecosystem. Technically, the website employs a traditional tech stack including jQuery and JavaScript, hosted likely on government infrastructure with a CMS identified as U5 CMS. The site is moderately optimized for performance and mobile use, with basic accessibility and SEO features. Security practices include HTTPS usage and no visible vulnerabilities, though security headers and explicit privacy/cookie policies are absent. From a security standpoint, the site demonstrates a solid posture consistent with government standards but lacks some modern security headers and explicit privacy compliance disclosures. The WHOIS data is privacy protected, which is typical for Swiss government domains, and does not detract from the site's legitimacy. No signs of malicious activity or vulnerabilities were detected. Overall, the site is trustworthy, professionally maintained, and serves a critical government function. Recommendations include enhancing privacy and cookie policy transparency, implementing security headers, and improving mobile and accessibility features to align with best practices.

The website www.akai.ch represents the Ausgleichskasse Appenzell Innerrhoden, a regional government social insurance institution in Switzerland. It provides essential social security services including old-age, disability, unemployment insurance, and family allowances. The site targets residents and businesses in the Appenzell Innerrhoden canton, offering information, forms, and e-portals related to social insurance. The business model is public sector focused, serving as a trusted intermediary for social insurance administration. Technically, the website is built on the Contao Open Source CMS platform, utilizing modern JavaScript libraries such as jQuery, Swiper, and Lottie for enhanced user experience. The site is mobile optimized with good navigation and SEO practices, though accessibility features are basic. Performance is moderate with no critical technical issues detected. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks important security headers and does not provide a privacy or cookie policy, which are compliance gaps. There is no visible incident response or vulnerability disclosure information. The WHOIS data aligns well with the website’s claims, indicating legitimacy and trustworthiness. Overall, the website is professional, trustworthy, and serves its public sector function well. Strategic improvements include adding privacy and cookie policies, implementing security headers, and publishing incident response contacts to enhance compliance and security posture.

The Kantonales Gesundheitszentrum Appenzell is a public healthcare institution providing comprehensive health and elderly care services to the population of Appenzell Innerrhoden, Switzerland. The website clearly communicates its role as a central health center offering ambulatory care, short-term and transitional care, and specialized services such as telemedicine emergency practice (MEAS). The institution targets local residents and patients requiring various levels of healthcare and support. The business model is focused on delivering reliable, community-centered healthcare services with a strong local presence. Technically, the website employs modern web technologies including JavaScript, asynchronous loading of analytics scripts (Matomo, Facebook Pixel, LinkedIn Insight Tag), and Google Maps API integration. The CMS used is Pimcore, indicating a professional content management approach. The site is mobile-optimized with good navigation and SEO practices, although accessibility features are basic. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS with excellent SSL configuration, but lacks visible security headers such as Content-Security-Policy or X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial; a comprehensive privacy policy is available, but no cookie consent mechanism or terms of service page was found. Incident response and vulnerability disclosure information are absent, suggesting areas for improvement. Overall, the website is trustworthy, professional, and well-aligned with the business it represents. The domain registration data supports legitimacy and consistency with the healthcare sector. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing security and incident response policies to strengthen compliance and trust.

Appenzellerland Tourismus AI operates the official tourism portal for the Appenzell region in Switzerland, providing comprehensive information on accommodations, gastronomy, events, cultural activities, and regional products. The website serves as a key resource for tourists and visitors, offering detailed event listings, booking options, and regional insights. The organization positions itself as the authoritative source for tourism in the Appenzell area, supported by consistent branding and professional content. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries such as jQuery, Slick Carousel, and Google Maps API. It integrates marketing and analytics tools including Google Tag Manager, Facebook Pixel, and Sendinblue for newsletter management. The site is mobile-optimized with good SEO practices and moderate performance, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses security headers, and implements Google reCAPTCHA on forms to mitigate spam and abuse. Privacy and cookie policies are comprehensive and GDPR compliant, with clear consent mechanisms. However, there is room for improvement by adding a security.txt file and publishing incident response contacts. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance, making it a reliable platform for regional tourism promotion. Strategic recommendations include enhancing security headers, formalizing vulnerability disclosure, and improving accessibility features to further strengthen the site's security posture and user experience.

The website 'Arbeitswelt Innerrhoden' serves as an official regional platform promoting apprenticeships and vocational training in Appenzell Innerrhoden, Switzerland. It is affiliated with the Amt für Berufsbildung und Berufsberatung, indicating a government-backed educational initiative. The site targets students, parents, apprentices, and vocational trainers, providing information, blog content, event announcements, and a newsletter subscription service. The business model focuses on information dissemination and regional educational promotion. Technically, the site is built on WordPress 6.8.3 with common plugins such as Contact Form 7 and Google reCAPTCHA for form security. It uses modern JavaScript libraries like jQuery and Slick Carousel for UI enhancements. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. Analytics are handled via Koko Analytics with minimal user tracking. From a security perspective, the site enforces HTTPS and integrates Google reCAPTCHA to protect forms. However, it lacks standard security headers and a cookie consent mechanism, which are important for GDPR compliance and enhanced security posture. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy and professional, serving its regional educational purpose effectively. Strategic improvements in privacy compliance and security headers would enhance its security posture and regulatory adherence.

The Wissenschaftsverbund Vierländerregion Bodensee EVTZmbH is a collaborative consortium of 25 universities and higher education institutions across the Bodensee four-country region. It focuses on fostering research, teaching, university development, and knowledge transfer to address regional and cross-border challenges. The organization positions itself as the largest cross-university network in Europe for this region, targeting academics, researchers, students, and regional stakeholders. Their business model is non-profit, emphasizing cooperation and regional development through thematic programs and project support. Technically, the website is built on the Webflow CMS platform, utilizing modern JavaScript libraries such as jQuery, Fancybox, and Tippy.js for enhanced user experience. Hosting is likely provided by Webflow's CDN infrastructure, ensuring fast performance and excellent mobile optimization. The site implements GDPR-compliant cookie consent with an opt-in mechanism and uses Google Analytics for visitor insights. From a security perspective, the site enforces HTTPS and employs secure third-party libraries. However, it lacks explicit security headers and published security or incident response policies, which could be improved. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is incomplete, lacking registrar and registrant details, which slightly reduces trust but is not uncommon for privacy reasons. Overall, the website is professional, trustworthy, and well-structured, serving its educational and collaborative mission effectively. Strategic recommendations include enhancing security headers, publishing security policies, and improving WHOIS transparency to further strengthen trust and compliance.

The website www.c-hochdrei.li represents a small professional service business operated by Peter Beck, offering consulting, moderation, coaching, and communication services primarily in German. The site is built using modern web technologies such as Next.js and React, indicating a contemporary digital infrastructure. The content is well-structured and professionally presented, targeting professionals and organizations seeking these services. However, the site lacks visible contact details and explicit privacy or cookie consent mechanisms on the homepage, which could be improved for better user trust and compliance. Security posture is moderate with no evident security headers or policies, and no signs of blocking or WAF interference were detected, allowing full content accessibility.

Froda Embedded is a Swedish fintech company specializing in embedded SME financing solutions. Their platform enables partners such as banks, fintechs, neobanks, payment providers, and e-commerce platforms to integrate white-label SME financing products directly into their own platforms. The company operates across multiple European markets, leveraging regulatory licenses and partnerships with entities like Visa and the European Investment Fund. Their key offerings include business loans, installment financing, and funding solutions tailored to SME needs. Technically, the website is built on modern web technologies including Webflow CMS, Google Tag Manager, and Cloudflare Turnstile for bot protection, delivering a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS, security headers, and secure forms, though explicit security policies and incident response details are not publicly available. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The absence of WHOIS domain registration data is a notable concern, slightly impacting trustworthiness. Overall, Froda Embedded presents a professional, trustworthy, and technically mature digital presence aligned with its business objectives.

The website wc3stats.com operates as a niche online platform dedicated to parsing and analyzing Warcraft III custom game replays. It provides users with detailed game and player statistics, including APM, ratings, and custom map metadata. The platform targets the Warcraft III gaming community, offering specialized analytics services that position it uniquely within the gaming statistics market. The business appears to be small and focused, founded in 2018, with no evident parent or subsidiary companies. Technically, the website employs modern web technologies such as Vue.js, Google Analytics, and Google Tag Manager, hosted on infrastructure associated with Amazon Registrar, Inc. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate, and the site uses HTTPS with a valid SSL configuration. However, DNSSEC is not enabled, and no security headers were detected, indicating room for security enhancements. From a security perspective, the site benefits from domain status locks that prevent unauthorized transfers or deletions, contributing to domain stability. No privacy or cookie policies are present, and no contact or incident response information is provided, which limits compliance with GDPR and general privacy best practices. No forms or data collection mechanisms are visible on the homepage, reducing immediate data exposure risks. The absence of a vulnerability disclosure policy or security.txt file suggests limited formal security communication channels. Overall, the website is functional, professionally designed, and trustworthy within its niche but lacks comprehensive privacy and security documentation. Strategic improvements in privacy compliance, security headers, and user contact transparency would enhance its security posture and user trust.

Handla Digitalt AB operates a Swedish e-commerce platform specializing in sport optics and outdoor hunting equipment. The website offers a wide range of products including binoculars, scopes, night vision devices, thermal cameras, airguns, and related accessories, targeting consumers interested in hunting, shooting, and outdoor activities in Sweden. The business positions itself as having one of the largest assortments in the Swedish market for these product categories. Technically, the website employs common web technologies such as jQuery and Google Fonts, with a moderate level of mobile optimization and SEO. Security posture is moderate with HTTPS assumed but lacking visible security headers and cookie consent mechanisms, which may impact GDPR compliance. The absence of WHOIS data for the domain queried reduces trustworthiness from a domain registration perspective, though the presence of trust badges and payment logos supports legitimacy. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.

The website represents Bädergesellschaft Ahlen, a municipal company under Stadtwerke Ahlen, providing public swimming pools, sauna, and related leisure services in Ahlen, Germany. It targets local residents and visitors seeking recreational bathing and sauna experiences. The business operates with a clear local focus and offers key services including Parkbad, Parksauna, Freibad, and an online shop. The website is professionally designed with consistent branding and good content quality, supporting a positive user experience. Technically, the site is built on the Neos CMS platform using PHP and JavaScript frameworks, including Flow and Bot Framework Webchat. It integrates Matomo analytics for privacy-conscious visitor tracking and employs a cookie consent mechanism compliant with GDPR. Hosting appears stable with legitimate nameservers. The site is mobile optimized and accessible, with good SEO practices. From a security perspective, the site uses HTTPS and has implemented cookie consent, but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or suspicious content were detected. WHOIS data aligns well with the business claims, showing a consistent and legitimate registration. Overall, the website demonstrates a solid digital presence with good privacy compliance and business credibility. Strategic improvements could include enhancing security headers and publishing a vulnerability disclosure policy to further strengthen trust and security posture.

Tandvårdcentralen Akut Mottagning Malmö AB operates a professional dental care website targeting patients in Malmö and Landskrona, Sweden. The company offers quality dental services including emergency care, positioning itself as a local trusted provider. The website is built on WordPress with Elementor, indicating a modern and maintainable technical infrastructure. It integrates common marketing and analytics tools such as Google Analytics, Google Tag Manager, and Google Ads, alongside a robust cookie consent mechanism via Cookiebot, demonstrating awareness of privacy compliance requirements. Security posture is solid with HTTPS enabled and no exposed sensitive data, though improvements can be made by enabling DNSSEC and adding security headers. Overall, the site is professional, trustworthy, and compliant with basic GDPR requirements, but lacks explicit privacy and terms of service pages. Strategic recommendations include enhancing security headers, publishing a privacy policy, and establishing an incident response contact to improve trust and compliance.

Consulting 22 is a small Czech marketing and advertising agency specializing in strategic marketing, offering a comprehensive range of services including marketing strategy development, analysis, content marketing, production, process management, training, corporate diagnostics, and interim/crisis management. The website is professionally designed with good content quality and clear navigation, targeting businesses seeking expert marketing consultancy primarily in the Prague region. Technically, the site uses established libraries such as jQuery and Bootstrap, Google Fonts, and Google Tag Manager for analytics, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS implied, but lacks explicit security headers and documented incident response policies. Privacy compliance is well addressed with a detailed GDPR policy and cookie consent mechanism. However, the WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy and should be investigated further. Overall, the site presents a trustworthy and professional business front with room for security and transparency improvements.

Ed. Züblin AG is a leading German construction and engineering company specializing in high and civil engineering projects, including tunnel construction, bridge building, and infrastructure development. The company positions itself as the number one in the German market, offering a broad range of services from turnkey construction to sustainable building solutions. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to expert and professional audiences. Technically, the site leverages modern JavaScript libraries, Bootstrap framework, and is hosted on AWS infrastructure, indicating a robust and scalable platform. Security-wise, the website enforces HTTPS, employs cookie consent mechanisms compliant with GDPR, and uses Matomo for analytics, demonstrating a good security posture. However, there is room for improvement in implementing additional security headers and publishing explicit security policies. Overall, the site is trustworthy, compliant, and well-maintained, supporting the company's enterprise-level stature.

Ed. Züblin AG is a leading German construction company specializing in high and civil engineering projects, including tunnel construction, bridge building, and infrastructure development. The company holds a strong market position as the number one in German high and civil engineering construction, offering a comprehensive range of services to its professional and expert target audience. The website reflects a mature digital presence with a professional design, clear navigation, and consistent branding aligned with its enterprise status and industry sector. Technically, the site is built on an IBM Domino backend with modern frontend technologies such as Bootstrap and jQuery, hosted on AWS infrastructure, and integrates privacy-compliant analytics tools like Matomo and eTracker with OneTrust cookie consent management. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in security headers and explicit incident response information. Overall, the site demonstrates high professionalism, GDPR compliance, and trustworthy business credibility, making it a reliable digital asset for the company.

The analyzed URL from the domain www.zueblin.de returns an error page indicating that the requested document is not found, resulting in no accessible website content. Due to this, no business information, metadata, or contact details are available for extraction or analysis. The domain is hosted on Amazon AWS DNS servers, suggesting a professional hosting environment, but the lack of content severely limits the ability to assess the company's market position, services, or digital maturity. Security posture evaluation is constrained by the absence of accessible content and security headers, with no evidence of HTTPS or privacy compliance mechanisms. Overall, the website is currently non-functional or content-blocked, resulting in a low AI score and high risk for users seeking information or services from this URL.

The website at the provided URL is currently inaccessible, returning an error message indicating no document found for the requested resource. This prevents extraction of any meaningful business, technical, or security information from the site content. The domain is hosted on AWS infrastructure as indicated by the DNS nameservers, suggesting a professional hosting environment. However, the lack of accessible content, metadata, or contact information severely limits the ability to assess the company's market position, services, or compliance posture. Security posture cannot be evaluated due to missing content and absence of security headers or SSL details. Overall, the site appears to be either misconfigured or the resource is removed, resulting in a critical accessibility issue that must be resolved to enable further analysis.

Ed. Züblin AG is a leading German construction and engineering company specializing in high and civil engineering projects. The company holds a strong market position as the number one in its sector in Germany, offering a wide range of services including PPP projects, turnkey construction, sustainable building, tunnel construction, and specialized engineering disciplines. The website reflects a mature digital presence with a professional design, clear navigation, and compliance with GDPR through integrated cookie consent mechanisms. Technically, the site uses a combination of modern JavaScript libraries such as jQuery and Bootstrap, hosted on AWS infrastructure, and employs privacy-respecting analytics tools like Matomo. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Overall, the site is trustworthy and well-maintained, supporting the company's enterprise-level operations.

Ed. Züblin AG is a leading German construction company specializing in high-rise and civil engineering projects. Positioned as the number one in the German market, it offers a broad range of services including tunnel construction, steel construction, and environmental technology. The website reflects a mature enterprise with consistent branding and a comprehensive navigation structure representing various regional and specialized divisions. Technically, the site employs a modern tech stack with Bootstrap, jQuery, and FontAwesome, hosted on AWS infrastructure, and uses IBM Domino CMS. Privacy compliance is robust with a clear GDPR-compliant privacy policy and cookie consent mechanism. Security posture is good with HTTPS enforced and reputable analytics tools integrated with consent management. No critical vulnerabilities or suspicious indicators were found, though some security headers could be improved. Overall, the site demonstrates a professional and trustworthy digital presence aligned with its enterprise status.

Dualoo is a Swiss-based company specializing in applicant management software tailored for small and medium-sized enterprises (KMUs). Their platform offers intuitive e-recruiting solutions that simplify the hiring process, focusing on features such as job posting creation, applicant tracking, analytics, and integrations. Positioned as a leading solution for training companies in Switzerland, Dualoo targets businesses seeking efficient and GDPR-compliant recruitment tools. The website is professionally designed, multilingual, and optimized for performance and mobile use, reflecting a mature digital presence. Technically, the website is built on WordPress using Elementor and WPML for multilingual support, enhanced by NitroPack for performance optimization. It integrates marketing and analytics tools such as Google Tag Manager, Salesforce CRM, and Intercom chat, indicating a well-rounded digital marketing and customer engagement strategy. The site employs HTTPS with strong SSL configuration, though explicit security headers could be improved. From a security perspective, the site demonstrates good practices including HTTPS enforcement, cookie consent management, and no visible vulnerabilities or exposed sensitive data. However, it lacks a published security policy or incident response contact, which could enhance trust and preparedness. The absence of WHOIS data from the .com registry suggests privacy protection or alternative registration, but the professional site and compliance measures support legitimacy. Overall, Dualoo presents a secure, compliant, and user-friendly platform for applicant management, with strong business credibility and technical infrastructure. Strategic improvements in security transparency and explicit header implementation would further strengthen their posture.

Recepty prima nápadů is a Czech online media platform operated by Jaga Media, focusing on content related to home, garden, cooking, and lifestyle. The site offers articles, video tutorials, and advice targeting homeowners and hobbyists in the Czech Republic. It maintains an active presence on social media and provides clear contact information, indicating a professional media operation. Technically, the website is built on WordPress with common SEO and advertising plugins, including Yoast SEO, Google Analytics, and Advanced Ads. The site is mobile-optimized and uses HTTPS, with a GDPR-compliant cookie consent mechanism in place. Security posture is adequate but could be improved by adding security headers and publishing explicit security policies. The absence of WHOIS data reduces domain registration trustworthiness, but the website content and business information appear legitimate and consistent with a medium-sized media company. Overall, the site is well-maintained, user-friendly, and compliant with privacy regulations.