Medium-risk security reports

DER MED is a well-established medical center in Kraków, Poland, specializing in dermatology, plastic surgery, aesthetic medicine, and related fields. With over 25 years of experience, the center offers a broad range of services tailored to both women and men across different age groups. The website reflects a professional and modern digital presence, leveraging contemporary technologies such as the Astro framework, MailerLite for marketing, and analytics tools including Google Tag Manager and Hotjar. Social media integration and multilingual support enhance user engagement and accessibility. Security posture is adequate with HTTPS enabled and no exposed sensitive data, though improvements could be made by enabling DNSSEC and adding security headers. Privacy compliance is basic, with a privacy policy present but lacking a cookie consent mechanism. Overall, DER MED demonstrates strong business credibility and digital maturity, positioning itself as a trusted healthcare provider in its market.

EOOVITA is a small family-owned business operating an e-commerce platform specializing in vegan and healthy food products, including nut butters, oils, flours, and natural sweeteners. The company emphasizes quality and health benefits, leveraging its own manufacturing capabilities to ensure product excellence. The website is well-structured and professionally designed, targeting health-conscious consumers primarily in Poland. Technically, the site uses modern web technologies and tracking tools such as Google Tag Manager and Facebook Pixel, but lacks some security headers and privacy policy transparency. The domain is registered since 2017 with a stable registration status, supporting the legitimacy of the business. Overall, EOOVITA presents a credible and trustworthy online presence in the niche vegan food market.

Małek Family Company is a small, established Polish manufacturer specializing in plastering machines, silomats, and related construction equipment. Founded in 1994, the company offers production, sales, leasing, and machine servicing, supported by CE certifications. Their digital presence is built on a WordPress platform with modern plugins and a clear focus on product showcasing and customer service. The website is well-structured, mobile-optimized, and includes essential compliance features such as cookie consent and a privacy policy. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers could be added for enhanced protection. Overall, the company demonstrates a trustworthy and professional online presence aligned with its business operations.

LANCOM Systems GmbH is a German-based technology company specializing in business network and security solutions including WAN, LAN, WLAN, firewalls, and remote/mobile access. The company targets business and public sector customers, offering a comprehensive portfolio of hardware and software products engineered in Germany. Their market position is that of an established mid-sized enterprise with a strong focus on secure and reliable network infrastructure. The website is professionally designed, multilingual, and provides detailed product and service information, reflecting a mature digital presence. Technically, the site is built on TYPO3 CMS with Bootstrap framework, employs modern tracking and marketing tools with consent mechanisms, and demonstrates good performance and mobile optimization. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although explicit incident response and vulnerability disclosure pages are absent. Overall, the site is trustworthy, compliant with GDPR, and reflects a credible business entity with strong partner ecosystems.

Solarwatt is a European solar energy provider specializing in photovoltaic panels, solar batteries, and energy management systems, targeting residential and commercial customers primarily in Spain and other European countries. The website is professionally designed using the Neos CMS platform with a modern PHP framework, supporting multiple languages and integrating advanced cookie consent mechanisms to comply with GDPR. The technical infrastructure includes Google Tag Manager and Cookiebot for analytics and privacy management, indicating a mature digital presence. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response policies are absent. Overall, the site demonstrates a solid business and technical foundation with room for improvement in privacy transparency and security documentation.

Solarwatt is a premium provider of solar energy solutions, specializing in photovoltaic systems integrated with battery storage, electric vehicle charging, and heat pump technologies. The company targets homeowners and businesses seeking clean and smart energy solutions. Their market position is that of a high-quality, innovative energy solutions provider with a focus on sustainability and smart integration. Technically, the website is built on the Neos CMS platform using the Flow PHP framework, with a modern tech stack including JavaScript and CSS. The site is mobile optimized and includes SEO best practices, although accessibility features are basic. Security posture is solid with HTTPS enforced and cookie consent managed via Cookiebot, but lacks visible security headers and explicit security policies. The absence of WHOIS registration data is a concern for domain legitimacy, though the website content and branding appear professional and trustworthy. Overall, the site demonstrates a good balance of business professionalism and technical implementation but would benefit from enhanced privacy documentation and security transparency.

Solarenergie.de is an educational and informational website focused on solar energy and photovoltaic technology, primarily targeting the German-speaking general public interested in renewable energy solutions. The site provides comprehensive information on solar power generation, energy management, electromobility, and sector coupling, positioning itself as a knowledge resource in the energy sector. The website leverages modern technologies including the Neos CMS and Flow PHP framework, with integrations such as Google Tag Manager and Cookiebot for analytics and privacy compliance. The technical infrastructure is modern and supports good mobile optimization and SEO practices, although hosting provider details are not explicitly identified. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but lacks explicit security headers and published security policies. Privacy compliance is partially addressed through Cookiebot, but the absence of a dedicated privacy policy and terms of service pages limits full compliance assurance. No direct contact information or incident response channels are provided, which could impact user trust and regulatory compliance. Overall, the website is professionally designed and safe for general audiences, with room for improvement in transparency and security documentation.

The website www.parcel-boxy-dols.cz represents a Czech manufacturing company specializing in the production and sale of high-quality parcel boxes and mailboxes. The company offers a variety of products including wall-mounted, built-in, and free-standing parcel boxes, as well as mailboxes equipped with additional features such as doorbells and video modules. Their target audience includes homeowners, apartment complexes, and developers. The business model is focused on manufacturing and e-commerce sales, positioning the company as a reputable local manufacturer with a comprehensive product portfolio. Technically, the website employs a custom e-commerce platform (Shopion.cz) and utilizes common JavaScript libraries such as jQuery, bxSlider, and Fancybox. The site is mobile-optimized with good SEO practices and a moderate performance profile. Privacy and cookie policies are implemented with a consent mechanism, reflecting GDPR compliance. However, no explicit security headers or incident response information are present, which could be improved. From a security perspective, the site uses HTTPS with a good SSL configuration and no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data for the domain reduces trustworthiness and raises questions about domain registration legitimacy. No WAF or blocking mechanisms were detected, and the site content is fully accessible and safe for general audiences. Overall, the website is professional and trustworthy in terms of business presentation and privacy compliance but would benefit from enhanced security headers, incident response disclosures, and verification of domain registration details to improve legitimacy and security posture.

The website www.slansky.cz operates as a specialized retail e-commerce platform focused on the manufacture, sale, installation, and servicing of postal mailboxes primarily targeting customers in the Czech Republic and Slovakia. The business offers a comprehensive product catalog with detailed pricing and product images, supported by services such as free installation and sample loans. The site demonstrates a professional and consistent brand presence with clear navigation and relevant content tailored to residential and commercial clients. Technically, the website leverages a modern e-commerce platform (Eshop-rychle.cz) and integrates multiple analytics and marketing tools including Google Analytics, Google Tag Manager, Matomo, and Seznam Retargeting. The site is served over HTTPS with cookie consent mechanisms aligned with GDPR requirements, indicating a mature digital infrastructure. Performance and mobile optimization are adequate, though accessibility features could be improved. From a security perspective, the site employs HTTPS and secure login forms but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data due to privacy protection limits domain trust assessment but is justified for this business type. Overall, the website presents a low-risk profile with good privacy compliance and business credibility. Strategic improvements in security headers, incident response transparency, and accessibility would enhance the security posture and user trust.

Digitalne uspomene is a Croatian small business specializing in the professional digitalization and preservation of old VHS, VHS-C, Mini DV, DVD, and audio cassette media. The company targets individuals and families seeking to preserve precious memories by converting analog media into modern digital formats such as MP4 and MP3. Their service model includes local pickup and delivery in Rijeka and nationwide shipping options. Technically, the website is built on WordPress with Elementor, featuring embedded YouTube videos and Google Fonts, delivering a modern and responsive user experience. Security posture is solid with HTTPS and secure video embeds, though lacking some advanced security headers and explicit privacy policies. The absence of public WHOIS data is due to EURid privacy policies, which is common and justified for this business type. Overall, the website presents a professional and trustworthy front for a niche local service provider.

Stabilny.net is a Polish internet services provider specializing in hosting, domain registration, virtual and dedicated servers, and backup solutions. Established in 2013, the company targets individuals and businesses seeking reliable and secure web hosting services within Poland. Their website reflects a professional and consistent brand image, emphasizing security, technical support, and infrastructure quality. The company maintains a local data center with 24/7 administration and advanced environmental controls, positioning itself as a trustworthy provider in the local market. Technically, the website is built on WordPress using popular plugins such as Visual Composer, LayerSlider, and Contact Form 7. It integrates multiple analytics and marketing tools including Google Analytics, Smartlook, and Salesmanago. The site is mobile-optimized with good SEO practices but lacks some accessibility features. Performance is moderate, and SSL is properly configured, ensuring secure communications. From a security perspective, the site uses HTTPS and reCAPTCHA for form protection but lacks published security policies, vulnerability disclosure, and security headers. DNSSEC is not enabled, which is a recommended improvement. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is weak due to the absence of privacy and cookie policies, which should be addressed to meet GDPR requirements. Overall, stabilny.net presents a credible and professional business with a solid technical foundation and good market positioning. To enhance trust and compliance, the company should publish comprehensive privacy and cookie policies, implement security headers, and provide incident response information. These steps will improve their security posture and regulatory compliance, reducing risk and increasing customer confidence.

Takeda Pharmaceutical Company Limited is a globally recognized, patient-focused biopharmaceutical company headquartered in Tokyo, Japan. The company emphasizes research and development to bring innovative healthcare solutions worldwide. Their website reflects a mature digital presence with comprehensive corporate governance, ethics, and sustainability disclosures, targeting healthcare professionals, patients, investors, and partners. The business model centers on pharmaceutical R&D, manufacturing, and clinical trials, positioning Takeda as a leading entity in the healthcare sector. Technically, the website leverages modern web technologies including React and Next.js, ensuring good mobile optimization, accessibility, and SEO practices. The site loads with moderate performance and employs standard security headers and HTTPS, indicating a strong technical foundation. Analytics usage includes Matomo and Google Tag Manager, with appropriate cookie consent mechanisms in place, reflecting good privacy compliance. Security posture is robust with enforced HTTPS, security headers, and no visible vulnerabilities or exposed sensitive data. However, the absence of a dedicated security policy or incident response contact page suggests areas for improvement. The WHOIS data is missing or unavailable, which is unusual for a major corporation, but the website's content and branding strongly support legitimacy. Overall, Takeda's website demonstrates a high level of professionalism, security, and compliance, suitable for its enterprise scale and industry. Strategic recommendations include publishing explicit security policies, incident response contacts, and vulnerability disclosure information to enhance transparency and trust.

The Oley Foundation is a well-established non-profit organization focused on supporting individuals living with home IV nutrition and tube feeding. Their website serves as a comprehensive resource offering advocacy, education, community engagement, and events tailored to patients, caregivers, clinicians, and industry partners. The organization has a strong market position as a trusted leader in this niche healthcare sector, supported by a long domain history and recognized certifications such as the Candid Platinum Seal. Technically, the website is built on the YourMembership CMS platform and leverages a variety of modern web technologies including jQuery, YUI, Google Analytics, New Relic for performance monitoring, and DataDome for bot protection. The site demonstrates good mobile optimization and user experience, though there is room for improvement in accessibility and SEO practices. From a security perspective, the site enforces HTTPS and employs bot mitigation tools, but lacks some advanced security headers and a public vulnerability disclosure policy. The WHOIS data aligns well with the organization's identity and history, reinforcing legitimacy. Privacy compliance is basic with a visible cookie consent mechanism and a privacy policy, but GDPR compliance is not explicitly indicated. Overall, the website presents a professional and trustworthy digital presence with moderate technical sophistication and a solid security baseline. Strategic enhancements in security headers, incident response transparency, and privacy compliance would further strengthen their posture and user trust.

Medonet.pl is a leading Polish health information portal operated by Ringier Axel Springer Polska Sp. z o.o., providing comprehensive medical news, advice, and lifestyle content targeted at the general public interested in health and wellness. The website enjoys a strong market position supported by professional editorial staff and recognized industry awards. Technically, the site employs modern web technologies including Google Analytics, Tag Manager, and Gemius for analytics and tracking, alongside advertising networks such as Google DoubleClick and Onet Ad Network. The site is well-optimized for desktop and mobile platforms with good SEO and accessibility features. Security posture is strong with HTTPS enforcement and appropriate security headers, though there is room for improvement in formal security policies and incident response transparency. Privacy compliance is robust with GDPR-aligned policies and consent mechanisms. Overall, Medonet.pl presents a trustworthy, professional, and secure digital presence with a high level of business credibility.

Medycyna Praktyczna is a leading Polish medical portal providing comprehensive, evidence-based medical knowledge and educational resources for healthcare professionals and patients. The website offers a wide range of services including medical articles, educational programs, webinars, podcasts, and access to medical publications. It targets primarily doctors and medical specialists, positioning itself as a trusted source of medical information in Poland. The portal demonstrates a mature digital infrastructure with modern technologies such as Bootstrap, Google Tag Manager, and multiple analytics and advertising platforms integrated with GDPR-compliant consent management. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response information are not publicly available. The absence of public WHOIS data is typical for .pl domains and does not detract from the site's legitimacy given its professional content and market presence. Overall, the website is well-designed, content-rich, and trustworthy, serving a critical role in the Polish healthcare information ecosystem.

TOTOHOST d.o.o. is a Croatian web hosting company operating since 2004, offering a range of hosting services including NVMe web hosting, business hosting, VPS cloud servers, domain registration, and reseller hosting. The company positions itself as a reliable local provider with over 5000 customers and more than 7500 registered domains. Their website is professionally designed, mobile-optimized, and provides comprehensive information about their services, pricing, and support options. Technically, the site runs on WordPress with modern technologies such as CloudLinux, LiteSpeed web servers, and Imunify360 security solutions, ensuring good performance and security. The presence of SSL, daily backups, and malware protection indicates a strong security posture, although HTTP security headers and public security policies could be enhanced. Privacy and cookie policies are present and GDPR compliant, reflecting good privacy practices. Overall, the website and business demonstrate a mature digital presence with high trustworthiness and professionalism.

Erste banka is a well-established Croatian financial institution operating since 2004, offering a broad range of banking services including accounts, loans, credit cards, investments, and insurance. The website reflects a mature digital presence with a modern tech stack, responsive design, and good SEO and accessibility practices. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although public security policies and incident response contacts are not prominently disclosed. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, Erste banka demonstrates a high level of business credibility and digital maturity appropriate for a leading bank in Croatia.

Hrvatska poštanska banka d.d. (HPB) is the largest Croatian-owned bank, offering a comprehensive range of financial services including retail and business banking, credit products, investment services, and digital banking solutions. The website reflects a mature and professional banking institution with a strong market position in Croatia. The bank emphasizes customer convenience with over 1500 cash withdrawal points and advanced mobile and internet banking platforms. Technically, the website employs modern JavaScript libraries and frameworks such as jQuery, Bootstrap 5, Swiper.js, and Flatpickr, ensuring a responsive and user-friendly experience across devices. Privacy and cookie policies are clearly presented with consent mechanisms, demonstrating compliance with GDPR requirements. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is trustworthy, well-maintained, and aligned with the bank's business objectives.

Fina is a well-established Croatian financial agency providing a broad range of digital and financial services to businesses, citizens, and public institutions. The website reflects a mature digital presence with comprehensive service offerings such as e-invoicing, digital archiving, factoring platforms, and payment systems. The company positions itself as a reliable national partner with extensive physical presence and digital accessibility. Technically, the website uses modern web technologies including Ibexa CMS, Bootstrap, and Google Tag Manager, ensuring good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security policies and vulnerability disclosure mechanisms are not publicly available. Overall, the domain registration data aligns well with the website content, confirming legitimacy and trustworthiness.

The website www.hup.hr represents the Croatian Employers' Association, an established organization founded in 2001 that advocates for employers in Croatia. The site serves as a platform for providing information and support to its members, primarily targeting business entities and employers within the country. The domain registration data aligns well with the organization's identity, reinforcing its legitimacy and trustworthiness. Technically, the website employs standard technologies including Google Analytics with IP anonymization and an accessibility widget (OmoWidget), indicating a commitment to user accessibility and some privacy considerations. The site is hosted with Azure DNS and uses HTTPS, ensuring secure communications. However, the technical implementation lacks advanced security headers and comprehensive privacy disclosures, which are areas for improvement. From a security perspective, the site is accessible without WAF or blocking mechanisms and shows no signs of vulnerabilities or malicious content. The absence of explicit privacy and cookie policies, as well as terms of service, reduces the site's compliance posture, particularly regarding GDPR requirements. Contact information and incident response channels are not clearly presented, which may impact user trust and responsiveness to security incidents. Overall, the website is moderately professional and trustworthy but would benefit from enhanced privacy compliance, security best practices, and clearer business contact information to improve its security posture and user confidence.

Flensburgjournal is a regional online magazine focused on providing news, event information, and cultural content for Flensburg and its surrounding areas in Germany. Established in 2019, it serves a local audience with a variety of categories including current news, leisure, reports, and sports. The website is built on WordPress and integrates common digital marketing and analytics tools such as Google Analytics and Google Adsense. The technical infrastructure is modern and supports responsive design for mobile and desktop users. Security posture is moderate with HTTPS enforced and some privacy-conscious settings in analytics, but lacks explicit security headers and formal privacy or cookie policies. No incident response or security contact information is provided, which is a gap in compliance and trust. Overall, the site is professional and trustworthy for its regional media role but would benefit from enhanced privacy and security transparency.

shz.de is a well-established regional news portal serving Schleswig-Holstein, Germany, providing current news in politics, economy, technology, and sports. The site targets residents and readers interested in regional news, operating primarily on a subscription and advertising business model. It holds a strong market position as a leading regional media outlet with comprehensive content and consistent branding. Technically, the website employs modern web technologies including JavaScript frameworks, consent management platforms, and paywall solutions, hosted on Basecom infrastructure. The site demonstrates good mobile optimization and SEO practices, ensuring accessibility and user engagement. Security-wise, the site enforces HTTPS, implements security headers, and uses a consent management platform, reflecting a mature security posture. However, it lacks a dedicated security policy and incident response contact information, which are areas for improvement. Overall, the website is professional, trustworthy, and compliant with GDPR, with moderate user tracking balanced by consent mechanisms.

Stadtwerke Rendsburg GmbH operates as a municipal utility network provider serving the Rendsburg region in Germany. The company manages multiple infrastructure networks including electricity, natural gas, heating, water, wastewater, and fiber optic services. It is part of a joint operation with other regional Stadtwerke under Stadtwerke SH, positioning itself as a reliable and modern infrastructure partner for local residents and businesses. The website reflects a professional municipal utility service with clear navigation and relevant service information. Technically, the site is built on TYPO3 CMS and employs Cookiebot for GDPR-compliant cookie management, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks published security policies or incident response contacts. Overall, the site is trustworthy and well-structured, though it could improve transparency by adding explicit privacy and security policy pages.

Schleswiger Stadtwerke GmbH operates as a regional municipal utility network provider in Schleswig, Germany, managing electricity, gas, heat, water, wastewater, and fiber optic networks. The company is part of a partnership with Stadtwerke Schleswig-Holstein and other regional utilities, positioning itself as a reliable infrastructure partner for residents and businesses in the region. The website reflects a professional and consistent brand presence with clear information about services and partnerships. Technically, the site is built on TYPO3 CMS and employs Cookiebot for GDPR-compliant cookie consent management, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and consent mechanisms in place, but lacks explicit security policies, incident response contacts, and advanced security headers. Overall, the site is trustworthy and well-maintained but could improve transparency and security documentation to enhance compliance and user trust.

Meyer Burger Technology AG is a prominent manufacturer specializing in solar cells and solar modules, primarily serving residential and commercial markets in Germany and Europe. The company emphasizes sustainability, product quality, and regional production, offering high-performance solar modules and innovative solar roof tiles. Their business model includes direct sales and a network of certified installers and retail partners, supported by strong warranties and certifications such as VDE and KIWA PVEL Top Performer. Technically, the website is built on TYPO3 CMS, integrates Google Tag Manager and Google Maps API, and links to an external Shopify store for product purchases. The site is well-structured, mobile-optimized, and provides extensive content and navigation clarity. However, it lacks visible privacy and cookie policies, and security headers are not evident in the provided data. From a security perspective, the site uses HTTPS and shows no exposed sensitive data or vulnerable libraries. The absence of security headers and privacy compliance documentation are areas for improvement. WHOIS data is unavailable, which slightly reduces trust but the website's content and certifications support its legitimacy. Overall, Meyer Burger's website presents a professional, trustworthy, and content-rich platform for solar energy products, with recommendations to enhance privacy compliance and security headers to further strengthen its security posture.

IBC SOLAR AG is a well-established German photovoltaic system provider with over 40 years of experience, offering a comprehensive portfolio of solar energy products and services for residential, commercial, and large-scale solar park customers. The company operates a professional website powered by TYPO3 CMS, featuring modern technologies such as jQuery and Usercentrics for consent management, and integrates Google Tag Manager for analytics. The website is well-structured, mobile-optimized, and provides clear navigation and rich content relevant to its target audience. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security best practices like explicit security policies and headers could be improved. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms. Overall, the website and domain registration data indicate a trustworthy and credible business with a strong market position in the renewable energy sector.

E-parapheurs is a French-based digital signature and document validation solutions provider targeting enterprises and public sector organizations. The company offers services to simplify and secure document signing workflows, supporting both simple signatures and complex validation circuits. The website is professionally designed using WordPress and Elementor, with modern SEO and privacy consent mechanisms in place. However, the absence of WHOIS registration data raises questions about domain legitimacy, although the website content and partner ecosystem suggest a legitimate business. Security posture is good with HTTPS and cookie consent, but could be improved with additional security headers and explicit privacy policies. Overall, the site presents a moderate risk profile with recommendations to enhance transparency and security.

Dematis is a French technology company specializing in digital dematerialization solutions primarily serving public sector entities and businesses involved in public procurement and electronic document management. Established in 2003, Dematis holds a strong market position as a leader in France with multiple specialized platforms offering services such as electronic public procurement, electronic convocations, secure storage, and electronic signatures. The company emphasizes secure and legally compliant digital workflows, supported by certifications like RGS** and eIDAS. Technically, the website employs modern frameworks such as Bootstrap and jQuery, hosted by OVH sas, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and domain protection statuses, though improvements like DNSSEC and security headers are recommended. Privacy compliance is addressed with policies present but lacks active cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-aligned with its business objectives.

The website acm.cat represents the Associació Catalana de Municipis i Comarques, a regional government association in Catalonia, Spain, founded in 2006. It serves as a platform to provide information, training, consulting, and communication services to municipalities and local government entities. The site is professionally designed using WordPress CMS with common plugins such as Yoast SEO and Cookiebot for privacy compliance. The technical infrastructure is moderate in performance with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and DNSSEC. No explicit privacy policy or terms of service pages were detected, though cookie consent is present and GDPR compliant. Contact information is primarily via embedded forms, with no direct emails or phone numbers found. Overall, the domain registration data is consistent and supports the legitimacy of the organization. The site is safe for general audiences and maintains a good level of professionalism and trustworthiness.

UGT Catalunya is a regional labor union organization based in Catalonia, Spain, focused on advocating for workers' rights and social welfare. The website serves as an information portal for union members and the general public, providing updates on labor rights and union activities. The organization maintains a consistent brand presence and active social media channels, reinforcing its position as a key player in the regional labor movement. Technically, the website is built on WordPress using popular plugins such as WPBakery Page Builder, LayerSlider, Yoast SEO, and WP Rocket, indicating a modern and maintainable infrastructure. The site is secured with HTTPS and includes essential security headers, contributing to a good security posture. Performance and mobile optimization are adequate, though accessibility features could be improved. Security-wise, the site demonstrates good practices with HTTPS and security headers but lacks explicit privacy policies, terms of service, and incident response contacts, which are important for compliance and trust. No vulnerabilities or suspicious activities were detected in the content or scripts. The WHOIS data is privacy protected, which is typical for non-profit organizations. Overall, the website is professional, trustworthy, and serves its audience well. Strategic improvements in privacy disclosures and incident response transparency would enhance compliance and user trust.

CCOO CAT is a leading labor union in Catalonia, Spain, dedicated to protecting and improving workers' rights and conditions. With a large membership base and extensive representation, it offers services including advice, training, collective agreement information, and member discounts. The website is professionally designed, mobile-optimized, and rich in relevant content, targeting workers and union members in Catalonia. Technically, it is built on WordPress with modern plugins and tracking tools, maintaining good SEO and accessibility standards. Security posture is solid with HTTPS and some security plugins, though it lacks explicit security headers and incident response contacts. Privacy compliance is strong with GDPR-aligned policies and cookie consent mechanisms. The absence of WHOIS registration data is a transparency concern but does not detract significantly from the site's legitimacy. Overall, the site is trustworthy, professional, and well-maintained.

KaffeeShop 24 GmbH operates the Sylter Teekontor online shop specializing in premium teas inspired by the island of Sylt. The company offers a wide range of teas including black, green, fruit, herbal, and specialty blends, emphasizing quality, natural ingredients, and sustainability with bio-certification. The website targets tea enthusiasts and connoisseurs seeking exclusive and high-quality tea products. Technically, the site is built on the Shopware 6 platform, uses modern JavaScript libraries, integrates PayPal for payments, and employs Google reCAPTCHA v3 for bot protection. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though no explicit security policy or incident response information is published. Overall, the site is professional, trustworthy, and compliant with GDPR, with clear contact information and legal pages.

Röhnfried, operated by Dr. Hesse Tierpharma GmbH & Co. KG, is a well-established German company specializing in animal health products, particularly supplements and pharmaceuticals for pigeons, poultry, ornamental birds, and rabbits. The company has a strong market position with a history dating back to 1959, targeting breeders and animal enthusiasts. Their website reflects a professional digital presence with multilingual support and active social media engagement. Technically, the site uses modern frameworks like Bootstrap and integrates Google Tag Manager for analytics, hosted on UI-DNS nameservers. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the website is trustworthy, compliant with GDPR, and offers a good user experience.

LOGISTIK HEUTE is a well-established German logistics magazine operated by HUSS-VERLAG GmbH, targeting decision-makers in industry, trade, and logistics services. The website offers comprehensive logistics news, expert articles, event information, and industry guides, positioning itself as a key media player in the German transportation and supply chain sector. The business model revolves around media publishing, advertising, and event hosting, supported by a professional and consistent brand presence. Technically, the site is built on Drupal 9, leveraging modern web technologies including Google reCAPTCHA, Matomo analytics, and a robust consent management system to ensure GDPR compliance. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience.

LANCOM Systems GmbH is a German-based technology company specializing in business network and security solutions including WAN, LAN, WLAN, firewalls, and remote access. The company targets business and public sector customers, offering a comprehensive product portfolio and services designed to ensure secure and reliable network infrastructure. The website is professionally designed, multilingual, and powered by TYPO3 CMS, reflecting a mature digital presence with good technical infrastructure and modern web technologies. Security posture is strong with HTTPS enforcement, cookie consent mechanisms, and no visible vulnerabilities, although some security best practices like explicit security headers and vulnerability disclosure mechanisms could be improved. Overall, the website demonstrates a high level of professionalism and trustworthiness suitable for its B2B audience.

Academia Saint-Gobain is an educational platform offering specialized courses designed as a formative journey to enhance knowledge and skills. The website is professionally designed, leveraging WordPress CMS and integrates GDPR-compliant cookie consent mechanisms. It targets professionals and learners seeking structured training programs, positioning itself as a niche educational service under the Saint-Gobain brand umbrella. Technically, the site uses modern web technologies including Google Tag Manager for analytics and Ultimate Member for user management, with moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and privacy compliance evident, though additional security headers could enhance protection. The absence of WHOIS data limits domain registration insights, but the overall digital presence and branding suggest legitimacy and trustworthiness.

OpenHandhelds.org is a niche community website dedicated to providing file archives and resources for open-source handheld gaming devices and retro gaming platforms. The site offers downloadable archives for various handheld consoles and promotes the DragonBox Shop, which sells related hardware. The website is built on an outdated Joomla! 1.5 CMS platform, which poses security risks and indicates limited recent maintenance. The technical infrastructure is basic, with minimal modern web practices such as mobile optimization and security headers. No privacy, cookie, or terms of service policies are present, and no direct contact information is provided, limiting user trust and compliance with data protection regulations. Security posture is weak due to the outdated CMS and lack of DNSSEC or security headers, though the domain registration is consistent and legitimate for a long-standing community site. Overall, the website serves its niche audience but requires significant updates to improve security, privacy compliance, and user trust.

Leadpages is a well-established SaaS company specializing in landing page creation and lead generation solutions. The company targets businesses and marketers aiming to optimize their marketing efforts and increase conversions. With a large customer base and millions of leads collected monthly, Leadpages holds a strong market position in the marketing technology sector. The website demonstrates a high level of digital maturity, utilizing modern frameworks such as Next.js and React, and integrating multiple marketing and analytics tools including Facebook Pixel, LinkedIn Insight, and Hotjar. Security posture is robust with HTTPS enforced and implied security headers, though explicit header confirmation is recommended. Privacy compliance is addressed with comprehensive privacy and cookie policies and consent mechanisms. However, the absence of WHOIS data and registrant information introduces some uncertainty about domain registration details. Overall, Leadpages presents a professional, secure, and user-friendly online presence with minor areas for improvement in transparency and security header explicitness.

Carbon6 operates as a provider of Amazon seller tools and business analytics solutions, targeting e-commerce businesses seeking to scale their Amazon operations. The website presents a professional and consistent brand image, with a focus on delivering SaaS-based analytics and management services. The technical infrastructure leverages WordPress CMS with integrations of popular marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Marketo, indicating a mature digital marketing approach. Security posture is adequate with HTTPS enabled, but lacks visible security headers and formal security policies, which could be improved to enhance trust and compliance. Privacy compliance is limited on the analyzed page, with no explicit privacy or cookie policies detected, suggesting room for improvement in GDPR and data protection adherence. Overall, the website is functional, professional, and credible, but would benefit from enhanced transparency and security best practices.

CADD Microsystems operates the CADD Community website, providing industry professionals with specialized CAD training and productivity tools. The platform targets users seeking to enhance their skills and efficiency in CAD-related fields. The website demonstrates a modern technical infrastructure using React and SVG graphics, delivering a responsive and visually consistent user experience. However, the site lacks visible privacy and cookie policies, which are critical for compliance with data protection regulations. Security posture is moderate, with no evident security headers or detailed SSL information, suggesting room for improvement in hardening the site against threats. Overall, the domain is a subdomain of the parent company with no separate WHOIS data, which is typical but reduces transparency. The content is professional and safe for general audiences, with no adult or questionable material detected.

TTA Personal GmbH is a German-Spanish personnel recruitment company specializing in the placement of Spanish professional bus and truck drivers in Germany. Established in 2011, the company positions itself as a market leader with a large database of over 20,000 drivers and offices in Berlin, Munich, Granada, and Valencia. Their services include recruitment, language training, and placement of various transport-related professions. The website is professionally designed using WordPress and Elementor, with good SEO practices including structured data. However, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and incident response information. Overall, the company appears credible and trustworthy with a solid digital presence but should enhance privacy and security transparency.

DALTEN media s.r.o. operates the website realitnibalicek.cz, offering a comprehensive package of services tailored for real estate agencies, brokers, and developers in the Czech Republic. Their offerings include a popular real estate portal RealityMIX.cz, real estate software iRest.cz, and various web presentation services for properties, agencies, and brokers. The company leverages over 20 years of experience and maintains a strong market presence with partnerships across multiple related domains. Technically, the website employs modern JavaScript libraries, Google Fonts, and a cookie consent management system, ensuring a responsive and user-friendly experience across devices. Security posture is solid with HTTPS enforced and GDPR-compliant cookie consent, though explicit security headers and incident response policies are not published. Overall, the site is professional, trustworthy, and well-optimized for its target audience.

RMIX MLS is a Czech Republic-based B2B platform designed to serve real estate agents by providing a comprehensive Multiple Listing Service (MLS) ecosystem. The platform enables agents to share property listings, including public and non-public offers, and facilitates collaboration to accelerate property sales and rentals. The business is operated by DALTEN media s.r.o., a company with over 20 years of experience in real estate software development, positioning RMIX MLS as a credible and established player in the Czech real estate market. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content tailored to its target audience of real estate professionals. Technically, the website employs modern JavaScript libraries including jQuery and Google Tag Manager for analytics and marketing purposes. It uses HTTPS with good SSL configuration and implements a comprehensive cookie consent mechanism compliant with GDPR. However, the site lacks explicit security headers and a dedicated security policy page, which are areas for improvement. The contact information is clearly presented, including phone, email, physical address, and a contact form, enhancing business credibility. From a security perspective, the site demonstrates good practices such as encrypted connections and consent-based tracking, with no visible vulnerabilities or exposed sensitive data. The WHOIS data aligns well with the business information, showing consistent registration details and domain age appropriate for the company's founding year. No WAF or blocking mechanisms were detected, allowing full content accessibility. Overall, RMIX MLS presents a trustworthy and professional online presence with solid technical and privacy compliance foundations. Strategic enhancements in security headers and incident response disclosures would further strengthen its security posture and trustworthiness.

The website webnem.cz is operated by DALTEN media s.r.o. and offers specialized web presentation services for real estate properties, enabling clients to create dedicated websites for individual properties with marketing and SEO benefits. The business targets real estate professionals and property sellers primarily in the Czech Republic, leveraging over 20 years of experience and partnerships with multiple real estate platforms. Technically, the site uses modern JavaScript libraries including jQuery and Google Analytics, with a responsive design optimized for mobile devices. Security posture is solid with HTTPS enforced and consent-based cookie management, though some security headers are missing. Privacy compliance is evident through GDPR consent mechanisms and a linked privacy policy hosted on a partner site. Contact information is comprehensive and prominently displayed. Overall, the site is professional, trustworthy, and well-aligned with its business objectives.

DALTEN media s.r.o. operates the Web Makléře platform, providing real estate agents in the Czech Republic with customizable personal websites integrated with their RealityMIX.cz profiles. The service offers fast setup, professional templates, and hosting, targeting real estate professionals seeking to enhance their online presence. The company leverages over 20 years of experience in real estate software development and maintains partnerships with major real estate portals, positioning itself as a trusted provider in the local market. Technically, the website uses modern JavaScript libraries, Google Fonts, and cookie consent management, with responsive design and moderate performance. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though security headers could be improved. Privacy compliance is good, linking to a GDPR-compliant privacy policy on a partner domain. Contact information is clear and comprehensive. Overall, the website is professional, trustworthy, and well-aligned with its business goals.

iRest.cz is a Czech Republic based SaaS provider offering comprehensive real estate management software tailored for real estate agencies and brokers. The company, DALTEN media s.r.o., founded in 2006, positions itself as an established player with over 250 agencies using its platform. The website presents tiered subscription models with clear pricing and features, emphasizing efficiency and cost savings for clients. The business model focuses on software subscriptions integrated with real estate listing portals and web presentation services. Technically, the website employs modern JavaScript frameworks, asynchronous script loading, and responsive design, ensuring a good user experience across devices. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers and explicit security policies are lacking. Overall, the site is professional, trustworthy, and compliant with GDPR through linked policies. Recommendations include enhancing security headers, publishing terms of service, and formalizing incident response contacts to improve trust and compliance.

Reimo operates an established e-commerce platform specializing in camping accessories, motorhome parts, and camper van materials primarily targeting camping enthusiasts and vehicle owners in Germany. The website is built on the Shopware platform and demonstrates a good level of digital maturity with responsive design, multi-language support, and integration of customer review widgets. Security posture is adequate with HTTPS enforcement and CSRF protections, though some security headers and explicit policies are missing. The absence of WHOIS registration data is a concern but does not currently undermine the professional presentation and trust signals on the site. Overall, the business appears credible with room for improvement in privacy and security transparency.

The website gubagoo.io is currently inaccessible, returning a 403 Forbidden error page with no visible content, metadata, or interactive elements. This prevents a comprehensive analysis of the site's content, privacy policies, security posture, and business operations. The domain is registered to Gubagoo Inc., a US-based technology company founded in 2015, with a consistent and legitimate WHOIS record. Hosting appears to be on Amazon AWS infrastructure, but no further technical details or technologies can be confirmed due to the blocked content. Security posture cannot be fully assessed; however, the lack of accessible content and security headers is a concern. No privacy or cookie policies, contact information, or social media links are present, indicating poor transparency and user engagement on the website. Overall, the site currently provides no usable information or services to visitors, resulting in a low AI score and high risk for user trust and engagement.

The website www.customerconnections.io is currently inaccessible due to a Cloudflare Turnstile human verification challenge page, which blocks direct access to any meaningful content. The WHOIS data is unavailable, showing only registry policy text, indicating privacy protection or query failure. No business, contact, or compliance information is present on the site. The technical infrastructure relies on Cloudflare services for security and performance, but no further details about the underlying platform or CMS can be determined. The security posture cannot be fully assessed due to the lack of accessible content and metadata. Overall, the site appears to be protected by strong WAF mechanisms but lacks transparency and publicly available information, which limits trust and credibility assessments.

The analyzed website is a login portal for a service branded as iCC, likely related to Interact Cloud Control or a similar business platform. The page is minimalistic, focused solely on user authentication, with no additional business or policy information presented. The technical infrastructure includes modern web technologies such as Bootstrap, jQuery, and ASP.NET Core (.NET 6.0), indicating a contemporary development stack. The site is accessible without any web application firewall or security challenge blocking, allowing full content analysis. Security measures include the use of anti-forgery tokens and password input best practices, but lack visible security headers and privacy policies, which are areas for improvement. The absence of WHOIS data for the subdomain is typical and does not indicate risk, but limits domain trust assessment. Overall, the site is functional but basic in content and security posture.