Medium-risk security reports

Heroine.cz is a Czech online media platform specializing in education and societal topics, integrating the Eduzín magazine content to provide in-depth educational materials and commentary. The site targets Czech-speaking audiences interested in education policy, social issues, and culture, offering articles, podcasts, and newsletters. The business operates under Heroine s.r.o., a medium-sized media company with a professional online presence and e-commerce capabilities for magazine subscriptions. Technically, the website employs a modern Ruby on Rails-based infrastructure with Turbolinks, integrates multiple analytics and advertising services including Google Tag Manager, Microsoft Clarity, Gemius, and Caroda ads, and uses Cloudflare Turnstile for bot protection. The site is mobile-optimized with good SEO and basic accessibility features. Security posture is solid with HTTPS, CSRF protections, and bot mitigation, though it lacks some advanced security headers and publicly available incident response policies. Privacy compliance is strong, with clear GDPR-aligned privacy and cookie policies and consent mechanisms. However, no direct company contact emails or phone numbers are publicly listed, relying mainly on newsletter subscription forms for user interaction. Overall, the website is professional, content-rich, and trustworthy, though the absence of WHOIS data and direct contact details slightly reduce transparency. Strategic improvements in security headers, incident response disclosure, and contact information would enhance trust and compliance.

Centrum LOCIKA operates the website detstvibeznasili.cz, a Czech non-profit platform dedicated to providing direct support to children and families affected by domestic violence. The site offers chat support, educational resources, and awareness campaigns targeting children, teenagers, parents, and school professionals. It holds a strong market position within the Czech Republic's child protection sector, leveraging professional content and consistent branding to build trust. Technically, the website is built on the Webflow CMS platform, utilizing modern web technologies such as jQuery, Google Fonts, and slick carousel for UI components. It integrates Google Analytics and TikTok Pixel for analytics and marketing purposes, with a cookie consent mechanism ensuring user privacy compliance. The site is mobile-optimized, fast-loading, and accessible, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and employs cookie consent banners, but lacks advanced security headers and a public vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic but present, with GDPR-aligned policies accessible. The absence of WHOIS data due to privacy protection is justified given the sensitive nature of the organization's work. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic improvements in security headers, privacy practices, and vulnerability disclosure would further enhance its security posture and user trust.

Národní ústav duševního zdraví (NUDZ) is a Czech national institute focused on mental health research, clinical care, and education. The website serves as a comprehensive portal for their research programs, clinical services, educational offerings, and public mental health initiatives. It targets a general audience including patients, researchers, clinicians, and the public. The organization appears to be a government-affiliated or public institution with a medium-sized operational scale. Technically, the website is built on TYPO3 CMS, uses Alpine.js for interactivity, and integrates Matomo for analytics, reflecting a modern and mature digital infrastructure. Security posture is strong with HTTPS and security headers properly implemented, though some improvements in privacy compliance such as cookie consent are recommended. The absence of WHOIS data reduces domain registration trust but the website content and branding strongly support legitimacy. Overall, the site is professional, accessible, and trustworthy with room for enhanced privacy and contact transparency.

Nevypusť duši is a Czech non-profit organization dedicated to mental health education, prevention, and support primarily targeting children, youth, parents, educators, and social workers. The organization offers a range of preventive programs, support groups, and educational resources to foster open conversations about mental health and provide practical help. It has a strong partnership ecosystem and a clear mission to integrate mental health awareness into everyday life in Czech society. The website reflects a professional and well-established presence with comprehensive content and multiple communication channels.

Jednota školských informatiků (JSI) is a Czech non-profit association dedicated to supporting the effective use of digital technologies in education, primarily targeting schools and educators. Established in 2002, JSI fosters communities of teachers and ICT enthusiasts to promote digital competencies and informatics thinking among children and students. The website serves as an informational and community platform, providing news, events, and resources related to digital education in the Czech Republic. Technically, the site is built on WordPress using the Divi theme, with standard JavaScript libraries such as jQuery and Swiper.js for interactive elements. The site is moderately optimized for performance and mobile devices but lacks advanced accessibility features and comprehensive SEO optimizations. Security-wise, the website uses HTTPS but lacks several important security headers and explicit incident response contacts, which could be improved to enhance trust and compliance. Privacy and cookie policies are not present, indicating a gap in GDPR compliance. Overall, the site is trustworthy and professional in its domain but would benefit from enhanced privacy, security, and compliance measures.

The website www.apppp.cz represents the Asociace pracovníků pedagogicko-psychologických poraden, z.s., a professional association dedicated to supporting and developing pedagogical-psychological counseling services in the Czech Republic. The site targets specialists and professionals in the educational counseling sector, providing information about the association, its mission, and contact avenues primarily through a contact form. The business model is non-profit and focused on professional development and collaboration within the education sector. The website is well-branded and content is relevant and professionally presented in Czech language. Technically, the website is built on the Webnode platform, leveraging AWS Cloudfront CDN for hosting static assets, and uses standard web technologies including HTML5, CSS, and JavaScript. The site is mobile-optimized with moderate performance and basic SEO and accessibility features. HTTPS is enforced, ensuring secure communication. However, no advanced security headers were detected, and privacy compliance is limited by the absence of a dedicated privacy policy page. From a security perspective, the site shows a moderate security posture with HTTPS and cookie consent mechanisms in place. The lack of security headers and absence of direct contact emails or phone numbers for security or incident response reduces the overall security maturity. WHOIS data is unavailable, likely due to privacy protection or domain registration issues, which slightly impacts trustworthiness but does not contradict the professional nature of the site content. Overall, the website is a credible and professional platform for a small non-profit educational association, with room for improvement in privacy compliance, security headers, and transparency of contact information. Strategic recommendations include adding a privacy policy, implementing security headers, and providing direct contact details for enhanced trust and compliance.

The website 'Race to Chicago' is dedicated to promoting a new board game by Jim Westergren but is currently inactive and serves primarily as a placeholder with a newsletter subscription form. The business appears to be a small-scale project or startup with minimal digital presence and no active content or contact information. Technically, the site is built using the N.nu website builder platform, hosted with Cloudflare DNS, and uses HTTPS. However, it lacks modern security headers and DNSSEC, and no privacy or cookie policies are present, indicating low compliance maturity. The security posture is basic with standard domain protections but missing important headers and policies. Overall, the site has low content quality and poor user experience, with no evident business credibility signals or trust indicators.

Luris.org is a website dedicated to promoting a newly created strategy card game called Luris, developed by Jim Westergren and associated with Codalex AB. The site provides detailed information about the game's concept, rules, and strategy, targeting general audiences interested in family-friendly and accessible card games. The business is small and newly founded in 2023, with a niche market position in the card game industry. Technically, the website is built using standard HTML, CSS, and JavaScript, hosted via Cloudflare with DNS services also provided by Cloudflare. The site is mobile optimized and offers a good user experience with clear navigation and professional design. However, it lacks advanced SEO and accessibility features.

Clesto.com is a niche website dedicated to promoting and providing access to the Clesto board game, a simplified and engaging chess variant themed around jungle animals. The site offers educational content including rules, videos, notation, and an online play option, targeting children, teens, and adults interested in strategy games. The business behind the site is Codalex AB, a small entity with a domain registration dating back to 2006, indicating a stable online presence. Technically, the website is built on a simple HTML/CSS/JavaScript stack with Google Fonts and hosted behind Cloudflare DNS services. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, it lacks advanced technical frameworks or CMS beyond the N.nu generator. Performance is moderate, and accessibility is basic. From a security perspective, the site uses HTTPS but lacks DNSSEC and security headers, which are recommended for enhanced protection. No privacy or cookie policies are present, representing a compliance gap with GDPR and other privacy regulations. No contact or incident response information is provided, limiting transparency. The presence of a third-party tracking script (Redistats) indicates moderate user tracking without clear privacy disclosures. Overall, the website is functional and trustworthy with a good business credibility score but requires improvements in privacy compliance and security best practices to enhance user trust and regulatory adherence.

The Space War website represents a small indie gaming company, Codalex AB, offering a free-to-play strategic 2-player card game accessible via web browsers. The business model focuses on skill-based gameplay without pay-to-win elements, targeting competitive card game enthusiasts. The site provides community engagement through multiple social media channels and offers a seamless user experience with responsive design and fast performance. Technically, the site is built with standard web technologies and hosted behind Cloudflare DNS, but lacks advanced security headers and formal privacy or cookie policies, which are compliance gaps. The domain registration is consistent and legitimate, supporting the business's credibility. Security posture is moderate with HTTPS enabled but could be improved by adding DNSSEC and security headers. Overall, the site is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices.

Advinsula.com is the official website for a niche indie browser-based MMORPG game developed by Jim Westergren under Codalex AB. The game offers a unique daily decision-based adventure experience with AI-generated content, targeting casual and mobile gamers interested in fantasy role-playing. The website is well-designed with consistent branding and clear content describing the game mechanics, creator background, and registration process. Technically, the site uses modern web standards, Cloudflare DNS, and a custom font, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and form protections, but lacks DNSSEC and security headers, and no privacy or cookie policies are published, indicating compliance gaps. The domain registration is transparent and consistent with the business claims, enhancing trustworthiness. Overall, the site is professional and trustworthy but would benefit from improved security headers and privacy compliance documentation.

Översättare.nu is a Swedish-based online platform offering authorized translation services for both companies and private individuals. The website provides a professional and user-friendly interface to upload documents, receive free quotes, and connect with qualified translators. The business targets a niche market in Sweden, focusing on legal and official document translations with GDPR-compliant privacy practices. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and third-party services like Google Analytics and Cookiebot for analytics and cookie consent management. Security posture is strong with HTTPS and security headers implemented, though the absence of WHOIS data for the domain raises concerns about domain registration legitimacy. Overall, the site is well-structured, compliant, and trustworthy but would benefit from clearer contact information and verified domain registration details.

Game Lounge Ltd. operates as a global leader in the iGaming affiliate marketing sector, connecting online casino players with iGaming brands through a network of over 130 SEO-driven websites across more than 60 countries. The company emphasizes data-driven innovation and offers a range of services including SEO content marketing, unique player tools, brand exposure, lead generation, and data analytics. Their market position is strong within the media and affiliate marketing industry, targeting mature audiences interested in online gambling. Technically, the website is built on WordPress with modern JavaScript libraries and SEO plugins, delivering a professional and mobile-optimized user experience. Security posture is good with HTTPS and reCAPTCHA in place, though there is room for improvement in security headers and published policies. The absence of WHOIS registration data raises some legitimacy concerns, but the professional web presence and active social media mitigate these. Overall, the site is well-designed and functional, but lacks explicit privacy and cookie policies, which impacts compliance and trust scores.

Computer Sweden is a leading Swedish IT news media outlet owned by Foundry, established in 2004. The website offers daily news and in-depth articles targeting IT decision makers and professionals, supported by newsletters and advertising revenue. The site is well-branded, professionally designed, and consistently updated, reflecting a mature digital presence. Technically, it is built on WordPress with modern SEO and analytics tools, including Google Tag Manager and Permutive, and uses Cloudflare for DNS services. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and consent management for GDPR and CCPA, though DNSSEC is not enabled and some security headers are not explicitly confirmed. No critical vulnerabilities or suspicious activities were detected. Overall, the site demonstrates a high level of professionalism, compliance, and trustworthiness.

TodaysWeb Ltda. is a small technology company specializing in website development and digital marketing services, targeting business clients seeking to increase their online presence and success. The company emphasizes results and has a history dating back to 1999 through its founder, Jim Westergren, with notable media coverage enhancing its credibility. The website is professionally designed with consistent branding and clear navigation, supporting its market position as an established player in the web development sector. Technically, the site uses standard web technologies including HTML5, CSS3, Google Fonts, and JavaScript, hosted on the N.nu platform. While performance and mobile optimization are moderate, SEO practices appear well implemented. Security posture is average with HTTPS implied but lacking explicit security headers and formal privacy or cookie policies. The absence of WHOIS registration data raises concerns about domain legitimacy, although the site provides clear contact information and trust signals such as client testimonials and media references. Overall, the site is functional and business-focused but would benefit from enhanced security and compliance measures.

Kurzelinks.de is a German-based URL shortening and QR code generation service emphasizing privacy and security. The platform offers a variety of features including multilinks, email links, password protection, link expiration, and deactivation capabilities. It operates with a focus on data protection, malware and phishing scanning, and user control over shortened URLs. The website is primarily in German and targets a general audience seeking secure and privacy-friendly link management solutions. Technically, the site uses a traditional jQuery-based stack with custom JavaScript and CSS, delivering moderate performance and basic mobile optimization. Security posture is solid with HTTPS enforcement and privacy features like referrer removal, though it lacks some advanced security headers and explicit security policies. Contact is primarily via a contact form and an abuse email address, with no direct phone numbers or social media links evident. Overall, the site is trustworthy, professional, and well-aligned with GDPR requirements, though it could improve cookie consent and security header implementation.

AMBIS vysoká škola, a.s. is a private higher education institution operating primarily in the Czech Republic with campuses in Prague and Brno, and a presence in Bratislava, Slovakia. The institution offers a variety of bachelor's and master's degree programs, including distance and online learning options, targeting students interested in fields such as security management, pedagogy, psychology, economics, marketing, and tourism. The website is professionally designed, content-rich, and includes extensive student testimonials and program details, positioning the school as a reputable player in the private education sector in the region. Technically, the website is built on the Solidpixels CMS platform and utilizes modern web technologies including Google Analytics, Microsoft Clarity, and various marketing and tracking scripts. The site is mobile-optimized and accessible, with a moderate performance profile. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though the absence of certain security headers and lack of published incident response information suggest areas for improvement. The WHOIS data for the domain www.ambis.cz is unavailable, which limits the ability to fully verify domain registration legitimacy and age. Despite this, the presence of detailed contact information, privacy policies, and certifications such as the HR AWARD support the legitimacy of the institution. No WAF or blocking mechanisms were detected, allowing full content access and analysis. Overall, the website demonstrates a strong business credibility and compliance posture for a private educational institution, with recommendations to enhance security headers, publish incident response contacts, and consider adding a terms of service page to further improve trust and compliance.

Sdružení obcí Sedlčanska is a regional association of municipalities in the Sedlčansko area of the Czech Republic, providing coordination, information, and services to local governments and citizens. The website serves as an official portal offering news, contact information, community projects, and tourism promotion. The organization positions itself as a trusted regional government entity with a focus on community engagement and public service. Technically, the website employs modern JavaScript libraries such as jQuery, Bootstrap, and Swiper.js, ensuring a responsive and user-friendly experience. The site includes a cookie consent mechanism aligned with privacy best practices, although it lacks a dedicated privacy policy and terms of service pages. Security posture is moderate with HTTPS usage implied, but no explicit security headers or incident response information are published. The absence of WHOIS data limits domain trust assessment, but the website content and contact details suggest legitimacy. Overall, the site is professionally designed, accessible, and safe for general audiences.

BCIX is a regional Internet Exchange Point based in Germany, providing essential peering and interconnection services to network operators, data centers, and enterprises. Their offerings include direct peering, bandwidth sharing via SubPeers, secure direct connections (pVLAN), private network interconnects (PNI), and connectivity to the major DE-CIX Frankfurt exchange. The company positions itself as an accessible and open peering platform, targeting a broad range of network participants. Technically, the website is built on modern frameworks such as Next.js and React, with good mobile optimization and performance. Security posture is strong with HTTPS enforcement and standard security headers, though there is room for improvement in publishing explicit security policies and incident response contacts. Privacy compliance is well addressed with clear privacy and cookie policies aligned with GDPR. Overall, BCIX demonstrates a mature digital presence suitable for its telecommunications sector role.

0cn.de is a German-based URL shortening and QR code generation service focused on privacy and security. It offers features such as malware and phishing link checks, password protection, link expiration, and deactivation links. The service targets general users seeking secure and privacy-friendly short URLs. The website is professionally designed with clear navigation and good content relevance. Technically, it uses a custom platform with jQuery and JavaScript libraries, delivering moderate performance and basic mobile optimization. Security posture is strong with HTTPS enforcement and link safety features, though some security headers and explicit policies are missing. Privacy compliance is good with a comprehensive privacy policy but lacks a cookie consent mechanism. Business credibility is supported by consistent WHOIS data and transparent service offerings.

ogy.de is a German-based URL shortening service focused on providing secure, privacy-friendly short links with integrated phishing and malware protection. The service offers a variety of features including multi-link lists, email links, QR code generation, and enterprise solutions. The website is well-structured, primarily in German, and targets general internet users and businesses seeking safe link shortening solutions. Technically, the site uses a modern JavaScript stack with jQuery and related libraries, but does not rely on a CMS. Security is well considered with HTTPS, CSRF tokens, and malware checks, though some security headers are missing. Privacy compliance is strong with a comprehensive privacy policy, but lacks a cookie consent mechanism. Contact is available via a contact form and an abuse reporting page. Overall, the site is professional, trustworthy, and well-positioned in its niche.

Kurzlink.ch is a Swiss-based URL shortening and QR code generation service emphasizing security and privacy. The platform offers free services including link shortening, multilink creation, email link generation, and QR code factory features, alongside enterprise SaaS solutions, browser extensions, and mobile apps. The service targets general internet users primarily in Switzerland and German-speaking regions, positioning itself as a secure and privacy-conscious alternative in the URL shortener market. The website content is professional, well-structured, and consistent with the brand's security focus.

Babsi operates a privacy-focused URL shortening service based in Germany, offering secure short links with phishing and malware protection. The service includes features such as multi-link lists, email links, QR code generation, and enterprise solutions. The website is well-structured, primarily in German, targeting general users seeking safe and privacy-friendly URL shortening. Technically, the site uses a modern JavaScript stack with jQuery and related libraries, hosted by OVH, a reputable provider. Security practices include HTTPS enforcement, CSRF protection, and link safety checks, though some security headers and cookie consent mechanisms are missing. The domain registration is consistent and appropriate for the business age, enhancing trustworthiness. Overall, Babsi presents a reliable and professional service with room for improvement in privacy compliance and security transparency.

The website www.cheese-press.de is currently inaccessible due to a Cloudflare Turnstile human verification challenge, which blocks direct access to its content. As a result, no meaningful business information, contact details, or policies are available for analysis. The domain appears to be hosted on the Jimdo platform, indicated by its nameservers, and protected by Cloudflare services. Due to the lack of accessible content, the technical infrastructure assessment is limited to the presence of Cloudflare and Jimdo hosting. Security posture cannot be fully evaluated, but the presence of a WAF challenge indicates some level of protection. Overall, the website's risk profile is elevated due to the absence of visible business and compliance information, and the inability to verify content or security controls.

The website hostedpiwik.de serves as a login portal for the Matomo hosted analytics platform, a free/libre web analytics service. It primarily targets website owners and administrators who use Matomo for tracking and analyzing web traffic. The business model is SaaS-based, providing hosted analytics services leveraging the Matomo platform. The site is technically built using AngularJS and jQuery, hosted on German infrastructure, and employs HTTPS for secure communications. However, the site content is minimal, focusing solely on user authentication without public-facing business or legal information. From a security perspective, the site enforces HTTPS and includes basic anti-framing measures to prevent clickjacking. The login form uses POST method and includes nonce tokens, indicating some protection against CSRF. However, the absence of security headers and visible privacy or cookie policies indicates room for improvement in security posture and compliance. No WAF or blocking mechanisms were detected, and no vulnerabilities were apparent from the content. Overall, the site demonstrates a moderate level of technical maturity but lacks comprehensive privacy, security, and business transparency information. This limits trust and compliance confidence. Strategic improvements in security headers, privacy disclosures, and contact information would enhance the site's credibility and compliance stance.

AIM Partner AB is a Swedish digital marketing agency specializing in SEO, SEM, AI-driven marketing, and GEO marketing services. Established in 2011, the company has grown to a medium-sized enterprise with over 40 employees and serves more than 10,000 clients annually. Their market position is strong within Sweden, offering tailored digital marketing solutions to businesses seeking to enhance their online presence and lead generation capabilities. The website reflects a professional and modern digital infrastructure, leveraging Next.js, React, and Prismic CMS, hosted with Cloudflare DNS and CDN services. The site is well-optimized for SEO, mobile responsiveness, and user experience, with clear navigation and comprehensive content.

Måns Gullberg operates as an SEO expert and entrepreneur primarily through his company Modifinder AB, founded in 2013. The business focuses on providing affordable and quality search engine optimization services to Swedish companies, with a strong track record of success and client satisfaction. The website presents a professional image with clear business information, social media presence, and published SEO-related content, positioning the company as a credible player in the Swedish SEO market. Technically, the website is built on a modern stack including HTML5, CSS3, and JavaScript, with integration of Google Analytics and Tag Manager for tracking. The site is mobile optimized and accessible, with good SEO practices implemented. Security-wise, HTTPS is enforced, but the site lacks advanced security headers and published security policies. The absence of privacy and cookie policies is a notable compliance gap. The WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy despite the professional website content. Overall, the site scores well on content and technical implementation but needs improvements in privacy compliance and domain registration transparency.

Spådam.se is a Swedish website offering professional psychic and medium services including tarot readings, spiritual guidance, and coaching. The business targets adults interested in spiritual and psychic consultations, operating primarily through paid phone lines and online services. The website presents a professional and consistent brand image with clear navigation and multiple contact phone numbers for different service lines. Technically, the site uses a modern tech stack including Materialize CSS, jQuery, and Cookiebot for cookie consent management, with integrations for Google Analytics and Facebook Pixel. Security posture is adequate with HTTPS enforced and cookie consent implemented, though explicit security headers are not clearly detected and no incident response or security policy pages are found. WHOIS data for the www.spadam.se subdomain is missing, which slightly reduces trustworthiness, but the main domain spadam.se is presumably registered. Overall, the website is compliant with GDPR cookie consent requirements and provides a good user experience with moderate tracking and advertising transparency.

Jim Westergren's website presents a portfolio of his entrepreneurial projects primarily in the technology sector, focusing on web development, SEO tools, online games, and charitable activities. The site targets internet entrepreneurs, developers, and individuals interested in personal growth and gaming. The business model revolves around product offerings and services with a niche leadership position in Sweden for website building and SEO analytics. Technically, the site uses a custom CMS (N.nu), modern web standards, and caching technologies like Redis, delivering fast performance and good mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though it lacks explicit security headers and formal privacy or cookie policies. The absence of WHOIS data for the domain reduces trust verification, though the website content is professional and consistent. Overall, the site scores well on content quality and business credibility but needs improvements in privacy compliance and security best practices.

Modifinder AB operates as a specialized SEO agency based in Malmö, Sweden, focusing on search engine optimization services for local businesses. The website demonstrates a professional approach with a clear business focus on SEO consulting and strategy. The technical infrastructure is built on WordPress with Elementor and related plugins, indicating a modern and flexible digital presence. However, the absence of WHOIS data for the domain www.modifinder.se raises concerns about domain registration legitimacy and transparency. Security posture is limited by the lack of visible security headers and privacy policies, which are critical for compliance and trust. Overall, the website is functional and well-designed but requires improvements in security and compliance documentation to enhance trustworthiness and regulatory adherence.

Malmö Flyttjänst operates as a local moving company based in Malmö, Sweden, providing reliable moving and relocation services primarily targeting residential and commercial customers in the Malmö area. The website is built on WordPress and leverages modern web technologies including Google Tag Manager and Cookiebot for analytics and cookie consent management. The technical infrastructure is hosted by One.com A/S, with a domain registered since 2016, consistent with the business's operational timeline. Security posture is adequate with HTTPS enabled and reCAPTCHA implemented on forms, but lacks advanced security headers and DNSSEC. Privacy compliance is partial, with cookie consent present but no visible privacy policy or terms of service pages. Overall, the website is professional, well-designed, and provides relevant content for its target audience.

Codalex AB is a newly founded Swedish family-owned technology company specializing in web services, game development, and SEO consulting. The company operates several web services including a website builder and a web analytics platform, alongside multiple game projects. The website serves as a temporary landing page providing clear business and contact information but lacks comprehensive privacy and cookie policies. Technically, the site is built with standard HTML, CSS, and JavaScript, hosted behind Cloudflare DNS services, and includes a JavaScript-based analytics tracking system. Security posture is moderate with HTTPS enabled and domain transfer protections in place, but lacks DNSSEC and security headers. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

The Kiel Institute for the World Economy is a prominent German research institute specializing in globalization and global economic affairs. It serves as a leading academic and policy-impact institution in Europe, offering extensive research, datasets, expert analysis, and public events. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content targeting researchers, policymakers, and the public interested in economic globalization. Technically, the site is built on TYPO3 CMS with Bootstrap framework and uses Matomo for analytics, indicating a privacy-conscious approach. Security posture is adequate with HTTPS and consent mechanisms but lacks explicit security policies and headers. Overall, the site is trustworthy and authoritative in its domain.

Spotler is a Netherlands-based marketing cloud software provider founded in 2014, offering user-friendly data-driven marketing solutions to help businesses unlock data and craft personalized campaigns. The company targets marketers and businesses seeking integrated marketing tools to improve engagement and results. The website demonstrates a mature digital presence with multi-language support and strong SEO implementation. Technically, the site is built on WordPress, leveraging Cloudflare for DNS and CDN services, and integrates modern libraries such as Google Tag Manager and Cookiebot for analytics and compliance. Security posture is strong with HTTPS enforcement, security headers, and domain transfer protections, though DNSSEC is not enabled. Privacy compliance is robust with clear cookie consent mechanisms and GDPR-aligned policies. Overall, Spotler presents a professional, trustworthy, and technically sound online presence suitable for its business domain.

Spotler is a medium-sized technology company founded in 2014, specializing in marketing cloud software that enables marketers to unlock data and create personalized campaigns. The company positions itself as a user-friendly, data-driven marketing software provider targeting marketing professionals and teams. The website demonstrates a mature digital presence with modern technologies such as WordPress CMS, Google Tag Manager, Cookiebot for consent management, and Cloudflare DNS services. The site is well-optimized for SEO and mobile devices, providing a professional user experience with clear navigation and comprehensive content. Security posture is strong with HTTPS enforced, clientTransferProhibited domain status, and cookie consent mechanisms, although DNSSEC is not enabled and no explicit security.txt or incident response contacts are published. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

Het-menu.nl is a Dutch online restaurant guide offering users the ability to search menus and prices across over 150,000 restaurants in the Netherlands. The platform targets general consumers looking for dining options and provides location-based search functionality. The website is professionally designed with consistent branding and good content quality, supporting a positive user experience. Technically, the site employs modern web technologies including JavaScript, CSS, and integrates a Consent Management Platform to ensure GDPR compliance. Analytics are conducted via Hotjar, enabling user behavior insights. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though formal security policies and incident response contacts are absent. Overall, the site is legitimate, trustworthy, and well-positioned in its hospitality niche.

StayFriends.se is a Swedish social networking platform focused on reconnecting users with their old school friends and accessing class photos. Operated by Klassträffen Sweden AB, the website offers services such as searching for schoolmates, viewing thousands of class photos, and planning reunions. The platform targets Swedish users and has sister sites in Germany, Switzerland, Austria, and France, indicating a regional presence in Europe. The business model revolves around membership and social networking within the education and nostalgia niche. Technically, the website employs a modern JavaScript stack including jQuery, Bootstrap, and Font Awesome, with integration of Google Tag Manager and advertising scripts from Ströer and Yieldlove. The site is served over HTTPS with good SSL configuration, though it lacks some recommended security headers. Performance is moderate with basic mobile optimization and accessibility features. SEO is well addressed with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS and uses privacy management tools to comply with GDPR. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. However, the absence of security headers and incomplete WHOIS data for the exact domain are points of concern. Privacy and cookie policies are present and comprehensive, supporting regulatory compliance. Overall, StayFriends.se presents a trustworthy and professional online presence with a clear business focus. The lack of WHOIS data for the domain www.stayfriends.se suggests it may be a subdomain or alias, which slightly reduces trustworthiness but does not indicate malicious intent. Strategic improvements in security headers and transparency of domain registration would enhance the site's credibility and security posture.

Trombi.com is a French online platform dedicated to helping users reconnect with former school friends, access a large archive of class photos, and organize class reunions. The website targets alumni and former students primarily in France, offering free registration and a searchable database of over 13 million users. The business operates in the education sector with a social networking focus, leveraging advertising as a primary revenue stream. The site is professionally designed with consistent branding and provides comprehensive privacy and cookie policies compliant with GDPR regulations. Technically, Trombi.com uses a moderate technology stack including jQuery, Bootstrap, and Google Tag Manager, with some older frameworks but overall functional and moderately optimized for performance and SEO. Security posture is adequate with HTTPS usage and privacy consent mechanisms, though security headers and explicit incident response information are lacking. The absence of WHOIS data for the domain introduces some uncertainty about domain registration legitimacy, but the active and professional website presence supports a moderate trust level. Overall, Trombi.com presents a solid business offering with room for technical and security improvements.

StayFriends.at is an established Austrian social networking platform focused on connecting former school friends, viewing class photos, and organizing reunions. It operates under Ströer Connections GmbH and is part of a broader network with sister sites in Germany, Switzerland, France, and Sweden. The platform targets alumni and former students in Austria, offering a freemium model with free registration and premium features. The website content is professionally presented, relevant, and consistent with its business purpose.

StayFriends.ch is a Swiss online social networking platform focused on reconnecting former school friends, viewing class photos, and organizing reunions. It serves a niche educational social network market with over 1.3 million members. The platform offers a freemium business model targeting former students in Switzerland, providing region-specific school search and member directories. The website is professionally designed with consistent branding and clear navigation, supporting a good user experience for its target audience. Technically, the site uses modern JavaScript libraries such as jQuery and Bootstrap, integrates Google Tag Manager for analytics, and employs privacy management scripts to comply with GDPR. Security posture is solid with HTTPS enforced and secure form handling, though some security headers and explicit incident response contacts are missing. The WHOIS data aligns well with the business claims, indicating a trustworthy domain registration. Overall, the site demonstrates a mature digital presence with moderate advertising and tracking practices balanced by privacy compliance mechanisms.

The Allergieinformationsdienst website is a scientifically oriented information portal operated by Helmholtz Zentrum München, a reputable German research institution focused on health and environmental research. The site provides comprehensive, up-to-date, and scientifically validated information on allergies, including diagnosis, therapy, prevention, and research news. It targets the general public, patients, and healthcare professionals seeking reliable allergy-related knowledge. The business model is non-profit, emphasizing education and research dissemination, supported by government funding and institutional partnerships. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies and structured data (JSON-LD) for SEO and accessibility. The site demonstrates good performance, mobile optimization, and accessibility features. It uses Matomo for analytics, ensuring privacy-conscious user tracking. The design is professional, with clear navigation and consistent branding aligned with Helmholtz Munich's identity. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a cookie consent mechanism and a publicly available security or incident response policy are areas for improvement. The WHOIS data and DNS configuration confirm the domain's legitimacy and institutional affiliation. Overall, the website presents a low-risk profile with strong credibility and professionalism. Strategic recommendations include implementing GDPR-compliant cookie consent, publishing security policies, and considering a vulnerability disclosure framework to enhance transparency and trust.

The website 'Pollen Science - Aktuelle Daten' appears to be an informational platform focused on providing current data related to pollen science. The content is primarily scientific and targeted at users interested in environmental and pollen-related data. The technical infrastructure is based on modern web technologies such as Bootstrap 4.4.1 and FontAwesome, ensuring basic mobile optimization and responsive design. However, the site lacks comprehensive privacy, cookie, and terms of service policies, as well as contact information, which limits its business credibility and privacy compliance. Security posture is minimal with no detected security headers or incident response contacts. Overall, the site is accessible and safe but would benefit from enhanced security and compliance measures.

The Internationale Bodensee-Konferenz (IBK) is a regional political cooperation organization focused on cross-border collaboration in the Bodensee region. The website serves as an information and communication platform for stakeholders, partners, and the public, providing news, events, project information, and resources related to regional cooperation. The organization operates as a non-profit entity with strong ties to governmental bodies and European Union programs, positioning itself as a key facilitator of regional development and cooperation. Technically, the website employs a mix of legacy and modern web technologies including AngularJS, jQuery, and Matomo analytics, hosted on a secure HTTPS platform. The site demonstrates good mobile optimization, accessibility features, and privacy-conscious tracking practices. However, some JavaScript libraries are outdated, which could pose security risks if not regularly updated. From a security perspective, the website enforces HTTPS and includes cookie consent mechanisms aligned with GDPR requirements. While no explicit security policies or incident response contacts are published, the site avoids exposing sensitive data and disables cookies in analytics tracking to enhance privacy. The absence of WHOIS data limits domain registration transparency but does not detract from the apparent legitimacy of the organization based on content and external references. Overall, the IBK website presents a professional, trustworthy, and well-maintained digital presence suitable for its governmental and non-profit audience. Strategic improvements in security headers, updated libraries, and enhanced transparency around security policies would further strengthen its posture.

Rhiblok is a community-focused climbing hall project scheduled to open in autumn 2026 in Liechtenstein, operated by the Liechtensteiner Alpenverein. The website presents detailed information about the facility, including climbing and bouldering routes, and serves as a communication platform for the local climbing community. The technical infrastructure is based on the concrete5 CMS with modern JavaScript libraries such as jQuery, Swiper.js, and Anime.js, providing a responsive and visually engaging user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and cookie consent mechanisms indicates room for improvement in compliance and security best practices. Overall, the website is professional, trustworthy, and well-aligned with its business purpose.

Safe Swiss Cloud is a Swiss-based cloud computing and managed IT services provider specializing in sovereign, secure, and compliant cloud infrastructure. Their offerings include Private AI solutions, managed IT operations, security services, and cloud computing platforms based on VMware, Openstack, and Kubernetes. The company targets enterprises and multinational organizations in sectors such as banking, finance, healthcare, software, and manufacturing. They emphasize security certifications like ISO 27001/17/18 and renewable energy usage certified by TÜV. The website is professionally designed, well-structured, and optimized for SEO and mobile use, reflecting a mature digital presence. Security posture is strong with HTTPS, domain transfer protection, and certifications, though some security headers and cookie consent mechanisms could be improved. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

ITX Norge is a Norwegian technology company specializing in cloud-based contact center solutions that integrate telephony, email, SMS, chat, and social media into a unified platform. The company positions itself as a leading provider in Norway, offering a SaaS model with local data storage and support. Their platform targets businesses seeking efficient, multichannel customer service solutions. Technically, the website is built on WordPress with modern plugins like Elementor and Yoast SEO, and employs various marketing and analytics tools including Google Analytics, Google Tag Manager, and Adform tracking. Security posture is solid with HTTPS and cookie consent mechanisms, but lacks explicit security headers and published security policies. Overall, the website is professional, well-branded, and trustworthy, though it could improve privacy compliance by publishing privacy and terms of service documents.

Změna k lepšímu is a Czech business platform focused on sustainability, connecting companies aiming for positive change. The platform emphasizes public affairs, community engagement, and education as its core strategic interests. The website is built on the Wix platform, leveraging modern web technologies and multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, Microsoft Clarity, and LinkedIn Insight Tag. The technical infrastructure is moderate in performance and well-optimized for mobile devices. Security posture is adequate with HTTPS enforced and some security hardening scripts in place, but lacks explicit security headers and formal privacy or cookie policies. The absence of WHOIS data suggests privacy protection or domain registration issues, which slightly reduces trustworthiness. Overall, the site presents a professional and consistent brand image targeting Czech businesses interested in sustainability.

HugeDomains operates as a leading online marketplace specializing in the sale of brandable domain names. The website offers competitive pricing, flexible payment plans, and a 30-day money back guarantee, positioning itself as a trusted intermediary for domain buyers and entrepreneurs. The platform targets businesses and individuals seeking premium domain names with a straightforward purchasing process and secure payment options. Technically, the site employs modern web technologies including jQuery, Google Analytics, and Cloudflare services to ensure performance, security, and user tracking. The presence of cookie consent mechanisms and GDPR-compliant privacy policies reflects a mature approach to privacy and regulatory compliance. Security posture is strong with HTTPS enforced, bot management, and reCAPTCHA integration, although explicit security headers could be more visible. The absence of public WHOIS data is consistent with privacy protection practices common in domain reselling, and does not detract from the site's legitimacy. Overall, HugeDomains presents a professional, secure, and user-friendly platform for domain acquisition.

otris software AG operates a professional customer portal at otris.software, providing access to software product documentation, update information, and product news primarily targeting their German-speaking customer base. The portal is built on a WordPress CMS with modern web technologies including jQuery, Google reCAPTCHA v3 for security, and WPBakery Page Builder for content management. The website demonstrates a good level of digital maturity with secure HTTPS implementation and user authentication mechanisms. Security posture is solid with no visible vulnerabilities or exposed sensitive data, although additional security headers and a formal vulnerability disclosure policy could enhance the security framework. Privacy compliance is generally good with a clear privacy policy and GDPR adherence, but the absence of a cookie consent mechanism is a minor compliance gap. Overall, the domain and website present a trustworthy and professional image consistent with a medium-sized technology company in Germany.

Bloggproffs.se is a Swedish free blogging platform operated by TodaysWeb, offering users the ability to create personal blogs with custom subdomains. The platform targets general users interested in blogging, providing a simple and free service with a long operational history since 2007. The website is built on an older WordPress CMS version with standard plugins and uses Cloudflare for DNS services. While the site is functional and provides basic blogging services, it lacks modern security and privacy features such as cookie consent and security headers. The absence of updated software and security best practices poses potential risks. Overall, the site maintains moderate trustworthiness due to its domain age and consistent business model but requires technical and security improvements to enhance user safety and compliance.