Medium-risk security reports

AFSOS FORM is a specialized digital training platform operated by the Association Francophones des Soins Oncologiques de Support (AFSOS), focusing on supportive oncological care education. The platform offers a variety of learning formats including e-learning modules, serious games, virtual classes, and thematic webinars aimed at healthcare professionals in oncology. The website is built on the Moodle LMS platform and hosted by Scaleway SAS, reflecting a modern and scalable technical infrastructure. The content is primarily in French, with some courses available in English, targeting a niche but important segment of healthcare education in France and French-speaking regions. Technically, the website employs a combination of Moodle, YUI, jQuery, and Bootstrap frameworks, ensuring a responsive and moderately performant user experience. The site is mobile-optimized and accessible at a basic level, with room for improvement in SEO and accessibility features. Security posture is adequate with HTTPS enforced and domain transfer protections in place, but lacks advanced security headers and DNSSEC, which are recommended for enhanced protection. Privacy compliance is basic, with a privacy policy and cookie consent mechanism present but no explicit GDPR compliance statements or detailed data retention policies. Overall, the security posture is moderate with no critical vulnerabilities detected, but improvements in security headers and DNSSEC would strengthen defenses. The business credibility is high due to the backing of a recognized association and expert validation of content. The website is safe for general audiences, with no adult or explicit content. Strategic recommendations include enhancing security configurations, expanding privacy compliance transparency, and improving SEO and accessibility to broaden reach and trust.

Eugen Korda is a creative professional specializing in design and art direction, focusing on sustainable and socially responsible branding. The website serves as a portfolio showcasing various projects including identity design, exhibitions, and campaigns. The target audience includes brands and individuals who value ethical and environmental considerations in their creative collaborations. Technically, the website is built on WordPress with modern libraries such as jQuery and Flickity, hosted by WebSupport s.r.o. The site demonstrates good mobile optimization and user experience, with moderate performance and basic SEO. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers and policies are lacking. Privacy compliance is partial, with a privacy policy page present but no cookie consent mechanism. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

Gesellschaft für Informatik e.V. (GI) is a well-established German non-profit association dedicated to the field of informatics. The organization provides a broad range of services including membership, publications, events, and educational projects aimed at informatics professionals, academics, and students. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its target audience. Technically, the site is built on TYPO3 CMS with Bootstrap, employs Matomo for privacy-conscious analytics, and demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response contacts are not published. WHOIS data aligns with the website's legitimacy, showing consistent domain registration without privacy protection, appropriate for a professional association. Overall, the website scores well on content quality, technical implementation, privacy compliance, and business credibility, making it a trustworthy and professional online presence for the GI association.

50Hertz Transmission GmbH operates as a leading transmission system operator in Germany, focusing on integrating renewable energy sources into the power grid and ensuring reliable electricity supply to approximately 18 million people in East Germany and Hamburg. The company maintains a professional and well-structured website that serves multiple stakeholders including partners, customers, investors, and the general public interested in energy transition. The business model centers on grid infrastructure development, system control, market facilitation, and customer services within the energy sector. The website content is relevant and well-organized, reflecting the company's market position and key services effectively. Technically, the website is built on ASP.NET WebForms with a modern front-end stack including jQuery, Kendo UI, and other JavaScript libraries. The site uses DNN CMS and integrates Usercentrics for cookie consent management. Performance is moderate with good mobile optimization and basic accessibility features. SEO optimization is basic but functional. The site is served over HTTPS with a good SSL configuration, though security headers are not explicitly detected. From a security perspective, the site enforces HTTPS and uses a consent management platform, indicating attention to privacy compliance. However, there is no published security policy or incident response contact, and no vulnerability disclosure or security.txt file is found. The absence of WHOIS data for the domain www.50hertz.com is a notable anomaly, potentially indicating domain registration issues or use of alternative domains. Overall, the security posture is solid but could be improved with enhanced transparency and security best practices. The overall risk assessment is moderate with a recommendation to improve domain registration transparency, publish security policies, implement security headers, and enhance accessibility and SEO. These steps will strengthen trust, compliance, and security culture, supporting the company's strategic goals in the energy sector.

XMG is a German-based company specializing in high-performance gaming laptops and desktop PCs, targeting the gaming community with a focus on quality and community-driven development. The company positions itself as a premium manufacturer with multiple service awards, emphasizing products made in Germany. The website is built on WordPress with Elementor and integrates modern web technologies, including cookie consent management via Usercentrics. The technical infrastructure supports good performance and mobile optimization, with SEO best practices implemented through structured data and meta tags. Security posture is strong with HTTPS enforced and multiple security headers present, though explicit security policies and incident response information are absent. Overall, the website is professional, trustworthy, and aligned with the company's business claims.

Spreadshop is a well-established e-commerce platform specializing in print-on-demand merchandise creation and sales, targeting creators, influencers, and small to medium businesses. The platform offers a comprehensive suite of services including custom merch shop creation, product printing, shipping, and integration with major social media and e-commerce platforms. The website demonstrates a high level of digital maturity with modern technologies such as React and Next.js, optimized for performance and mobile responsiveness. Security posture is strong with HTTPS enforcement and security headers, although explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is robust, featuring comprehensive privacy and cookie policies with consent mechanisms. The absence of WHOIS data for the domain is a notable concern but does not detract significantly from the overall legitimacy and professionalism of the site. Strategic recommendations include publishing security policies, incident response contacts, and vulnerability disclosure information to enhance trust and transparency.

Spreadshop operates a print-on-demand ecommerce platform branded as Spreadconnect, enabling merchants to create and sell custom merchandise integrated with major ecommerce platforms and marketplaces such as Shopify, WooCommerce, TikTok, Amazon, and eBay. The business emphasizes fast fulfillment within 48 hours, high-quality printing, and worldwide shipping, targeting growing brands and seasoned sellers. The website is professionally designed with clear navigation, mobile optimization, and comprehensive content including FAQs and testimonials. Technically, the site uses modern frameworks like Next.js and React, with integrations for cookie consent and analytics. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. However, the domain WHOIS data is missing, which slightly reduces trustworthiness. Overall, the platform presents a mature, reliable ecommerce service with room for improvement in transparency and security communication.

ARIX CZECH HOP is a Czech-based global distributor and producer of high-quality Czech hops, specializing in the renowned Žatecký poloraný červeňák (SAAZ) variety. With nearly two decades of experience, the company operates a comprehensive production cycle from breeding and cultivation to processing and storage, serving prominent breweries domestically and internationally. The website reflects a mature digital presence built on WordPress with Elementor and WooCommerce, offering a professional and content-rich experience primarily in Czech language. Contact channels including phone, email, and a secure contact form with Google reCAPTCHA v3 are provided, supporting customer engagement and inquiries. However, the absence of publicly available WHOIS data raises concerns about domain registration transparency, which should be addressed to enhance trust. Security posture is generally good with HTTPS and reCAPTCHA, but could be improved by implementing additional security headers and explicit privacy and cookie policies. Overall, the site demonstrates a solid business and technical foundation with room for compliance and security enhancements.

OBRAZ – Obránci zvířat is a Czech non-profit organization dedicated to the protection and advocacy of animal rights. Established in 2014, the organization runs multiple campaigns aimed at improving animal welfare, educating the public, and pushing for systemic reforms. Their website reflects a mature digital presence with clear calls to action, active social media integration, and comprehensive content about their initiatives. The organization targets a general audience interested in animal protection and ethical treatment of animals. Technically, the website is built on WordPress, leveraging popular plugins for SEO, forms, and GDPR compliance, hosted via WEDOS with Cloudflare DNS services.

Marthy’s Kitchen is a small hospitality business based in Prague, Czech Republic, specializing in high-quality breakfasts and brunches served in a cozy French-style interior. The website reflects a local restaurant with a focus on quality ingredients, home-style preparation, and friendly service. The business targets general audiences seeking elegant dining experiences. Technically, the website is built on the Wix platform, leveraging modern web technologies and providing a mobile-optimized experience. However, the site lacks comprehensive privacy and cookie policies, which are important for GDPR compliance. Security-wise, HTTPS is enabled, but security headers are missing, and no incident response or vulnerability disclosure information is provided. The use of Facebook Pixel indicates moderate user tracking for marketing purposes. Overall, the website is professional and trustworthy but could improve in privacy compliance and security best practices.

BREDFORD Consulting, s.r.o. is a well-established Czech boutique consulting firm specializing in tax advisory, accounting, payroll, and recruitment services. With over 20 years of market presence and a team of more than 20 professionals, the company targets small to medium-sized businesses primarily in the Czech Republic. Their service offerings are comprehensive, covering legal tax minimization, accounting accuracy, payroll management, and recruitment support, positioning them as a trusted partner for business clients seeking reliable financial and HR services. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates Google Analytics, Google Tag Manager, and Google reCAPTCHA v3 for analytics and security. The site is mobile-optimized with good SEO practices and moderate performance. Security measures include HTTPS enforcement and CSRF tokens on forms, though some security headers are missing. From a security posture perspective, the site demonstrates good practices with encrypted connections and anti-bot protections. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms indicates room for improvement in transparency and readiness. The lack of WHOIS data reduces domain trust slightly but is offset by the professional presentation and business registration details displayed on the site. Overall, BREDFORD Consulting's website is professional, trustworthy, and compliant with GDPR and cookie regulations. It effectively communicates its business services and contact information, making it a credible online presence for their consulting business.

Film ED is an educational platform dedicated to supporting film education for educators, cultural, and educational organizations, as well as individuals interested in film education. The website offers film education activities, guides on how to start, and quizzes to engage users. It positions itself as a niche resource companion in the education sector with a multilingual approach, enhancing accessibility across several European languages. Technically, the site is built on WordPress using Elementor, enhanced with performance optimizations such as WP Rocket and lazy loading. The hosting is provided by INTERNET CZ, a.s., a reputable Czech registrar and hosting provider. Security posture is solid with HTTPS enforced and some security best practices observed, although explicit security headers and policies are missing. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Overall, the site is professional, well-branded, and trustworthy, with good SEO and user experience.

AV MEDIA EVENTS is a Czech-based company specializing in audiovisual and IT solutions for events, with over 25 years of market presence and a strong partnership with Hilton Prague. Their services include videomapping, LED walls, live streaming, and on-site support, targeting event organizers and hospitality clients. The website is built on WordPress using Elementor, featuring modern web technologies and tracking tools such as Google Analytics and Leady. While HTTPS is properly configured, the site lacks security headers and privacy/cookie policies, which are important for compliance and security. WHOIS data is unavailable, which raises concerns about domain registration transparency. Overall, the site presents a professional image with good content quality but requires improvements in privacy compliance and security practices.

The website staromestskabrana.cz represents a real estate and hospitality development project located in Prague, focusing on urban revitalization and the operation of the Fairmont Golden Prague Hotel. It also promotes an international architectural competition named RaumScape. The site targets a general audience interested in urban development and hospitality services. The business model centers on real estate development combined with hospitality offerings, positioning itself as an emerging player in the Prague market. Technically, the website employs modern frontend technologies including Bootstrap for responsive design, FontAwesome for icons, Google Fonts for typography, and JavaScript libraries such as lazysizes for lazy loading images and scrollFX for scroll animations. The site is mobile optimized with good SEO practices but lacks backend or CMS indicators. Performance is moderate with no evident critical technical issues. From a security perspective, the site uses HTTPS (implied by canonical URLs) but lacks visible security headers and explicit privacy or cookie policies. No contact emails or phone numbers are provided, and no incident response or security policies are disclosed. The WHOIS data is missing, which raises concerns about domain legitimacy and trustworthiness. No vulnerabilities or malware indicators were detected in the provided content. Overall, the website is professionally designed and content-rich but lacks transparency in privacy, contact, and domain registration data. Strategic improvements in security posture, privacy compliance, and business credibility are recommended to enhance trust and compliance.

VOXPOT is an independent Czech media outlet specializing in in-depth reports, analyses, and podcasts that connect Czech audiences with global perspectives. The website targets a discerning audience seeking high-quality journalism and offers subscription-based club memberships to unlock premium content. The business model focuses on content creation, membership, and e-commerce through a linked shop domain. Technically, the site is built on WordPress with a modern tech stack including Alpine.js, jQuery, and various analytics and marketing tools, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though there is room for improvement in incident response transparency and security contact availability. The absence of WHOIS data reduces domain trustworthiness but does not detract from the professional presentation and content quality. Overall, VOXPOT presents a credible, well-maintained digital presence with moderate tracking balanced by user consent.

Nosto is a commerce experience platform specializing in shoppable user-generated content (UGC) that helps e-commerce businesses convert authentic customer content into commerce opportunities. The company positions itself as a trusted provider in the e-commerce technology space, offering solutions that boost click-through rates, build trust, and increase customer loyalty. The website is professionally designed, mobile-optimized, and uses modern web technologies including Google Fonts, Typekit, Swiper.js, Marketo forms, Google Tag Manager, reCAPTCHA, and Intercom for customer engagement and analytics. From a security perspective, the website enforces HTTPS and uses reCAPTCHA to protect forms, indicating a good baseline security posture. However, explicit security headers and a dedicated security policy or incident response page are not publicly available, which could be improved to enhance trust and compliance. The absence of WHOIS data limits the ability to fully verify domain legitimacy, but the professional web presence and social media links support the business's credibility. Overall, the website is well-structured, SEO-optimized, and provides a positive user experience. The business appears legitimate and focused on serving e-commerce clients with advanced marketing technology solutions. Strategic recommendations include publishing detailed security and incident response policies and improving transparency around domain registration details.

The website www.kmbm.cz represents the Kongregace sester Matky Božího milosrdeství, a small non-profit religious congregation based in the Czech Republic. The organization focuses on spiritual services, promotion of Divine Mercy, and social support such as providing starter apartments for people in need. The site content is well-structured, professionally designed, and targets religious community members and individuals seeking spiritual guidance or social assistance. Technically, the website runs on WordPress with a modern theme and common plugins, including Google Analytics for visitor tracking. The site is mobile-optimized and loads with moderate performance. Security posture is adequate with HTTPS enabled, but lacks security headers and formal privacy or cookie policies, which are areas for improvement. The absence of WHOIS data limits domain legitimacy verification, though the website content and presentation suggest a trustworthy non-profit entity. Overall, the site is safe, free of adult or explicit content, and provides relevant information for its audience.

The website t.ly is currently inaccessible due to a Cloudflare Turnstile security challenge page, which blocks access to the actual content. The domain is registered since 2010 to Libyan Spider Network, indicating a long-standing registration, but the website content is minimal and does not provide any business or contact information. The technical infrastructure relies heavily on Cloudflare services for security and performance, including the use of Cloudflare's challenge platform and insights beacon. Due to the WAF blocking, no privacy, cookie, or terms of service policies are visible, and no forms or user data collection mechanisms are present except for the hidden Turnstile response input. The website lacks SEO optimization, accessibility features, and visible security headers, limiting its trustworthiness and user experience.

368MEGA is an Indonesian online gambling platform offering a wide range of gaming services including slots, live casino, sportsbook, lottery, and poker. The website targets adult users interested in online betting and gaming, positioning itself as a leading gaming site with multiple game providers and an affiliate program. The technical infrastructure includes modern tracking and analytics tools such as Google Analytics, Facebook Pixel, and TikTok Pixel, with hosting supported by Cloudflare DNS services. The website is mobile-optimized and provides a professional user experience with clear navigation and good content quality. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is functional and professional but requires improvements in privacy and security policies to enhance trust and compliance.

Google LLC is a global leader in technology, primarily known for its dominant search engine and extensive portfolio of internet-related services including advertising, cloud computing, and software products. As a subsidiary of Alphabet Inc., Google maintains a strong market position with a broad target audience ranging from individual users to enterprises worldwide. The website reflects Google's brand consistency and professionalism, offering a fast, mobile-optimized, and accessible user experience. Technically, the site employs modern web standards and technologies, ensuring high performance and SEO optimization. Security posture is robust with HTTPS enforcement and secure form handling, although explicit security headers were not detected in the provided data. Privacy compliance indicators such as privacy and cookie policies were not explicitly found in the analyzed HTML snippet, but given Google's global presence, compliance is expected. Overall, the domain is highly trustworthy and well-established, despite the lack of WHOIS data due to privacy protections.

APES (Asociace poskytovatelů energetických služeb) is a Czech association founded in 2010 that represents and promotes energy service providers focused on guaranteed energy savings. The association includes 35 key companies in the energy services sector and is recognized for its expertise and European awards. The website provides information about the association's mission, activities, and members, targeting energy service providers and public institutions in the Czech Republic and Europe. Technically, the website uses jQuery 1.9.1, Owl Carousel, and Google Analytics, with a moderate performance and good mobile optimization. Security posture is adequate with HTTPS assumed and a cookie consent mechanism implemented, but lacks explicit security headers and uses an outdated jQuery version, which could pose risks. WHOIS data is unavailable, limiting domain trust verification, but the website content and contact information appear professional and legitimate. Overall, the site scores well in content quality and business credibility but should improve privacy compliance and security practices.

gofreshleads.com is a Czech-language online platform specializing in providing detailed information, reviews, and affiliate links for online casinos licensed for Czech players. The website offers comprehensive content about casino bonuses, payment methods, legal considerations, and game types, targeting adult Czech gambling enthusiasts. The business operates primarily as an affiliate marketing site, leveraging detailed reviews and bonus offers to attract and convert visitors. Technically, the site is built on WordPress with a modern tech stack including Bootstrap and jQuery, hosted behind Cloudflare for DNS and CDN services. The site is mobile-optimized and SEO-friendly, with structured data enhancing search visibility. Security posture is solid with HTTPS enforced and domain transfer protections, though improvements like DNSSEC and CSP headers are recommended. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. No direct company contact emails or phone numbers are publicly listed, relying on contact forms instead. Overall, the site presents a professional, trustworthy, and content-rich experience for its niche audience.

The National Association of Travel Agents Singapore (NATAS) operates as a professional non-profit organization representing travel agents and related stakeholders in Singapore. The website serves as a portal for membership services, trade events, tour leader registry, and travel fairs, positioning NATAS as a key industry association with regional affiliations to ASEAN and other travel bodies. The business model focuses on membership engagement, event organization, and industry support, targeting travel professionals and consumers interested in travel fairs. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Matomo analytics, and Google Maps API, delivering a moderately performant and mobile-optimized experience. The site uses custom or unknown CMS technology and integrates several tracking and analytics tools. While the site is well-structured and professionally designed, it lacks some advanced SEO and accessibility features. From a security perspective, the site uses HTTPS and includes CSRF tokens, but lacks visible security headers such as CSP or HSTS. No critical vulnerabilities were detected, but improvements in security headers and cookie consent mechanisms are recommended to enhance compliance and protection. Overall, the domain is privacy protected in WHOIS, which is common and justified for this business type. The website content and affiliations indicate legitimacy and moderate trustworthiness. The site scores well in business credibility and content quality but has room for improvement in security posture and privacy compliance.

Resorts World Sentosa is a premier integrated resort destination in Singapore offering world-class attractions such as Universal Studios Singapore, S.E.A. Aquarium, and Adventure Cove Waterpark, alongside luxury hotels, dining, shopping, and event venues. The website reflects a mature digital presence with a modern React-based tech stack, comprehensive content, and strong branding consistency. Extensive use of analytics and marketing tools indicates a data-driven approach to customer engagement. Security posture is robust with HTTPS and security headers, though the absence of public vulnerability disclosure and incident response contacts suggests room for improvement. The lack of WHOIS data is a notable anomaly but does not detract from the overall legitimacy given the professional site and known social media presence.

Momentus Hotels & Resorts operates an upscale hospitality business focused on premier accommodations in Singapore. The website presents a professional and well-structured digital presence with integrated booking capabilities via TravelClick. Marketing and analytics tools such as Google Tag Manager and Facebook Pixel are actively used, indicating a mature digital marketing strategy. However, the absence of WHOIS registration data and lack of visible privacy policy or contact information present gaps in transparency and compliance. The security posture is strong with HTTPS and Content Security Policy implemented, but additional security headers and clearer privacy compliance documentation are recommended. Overall, the website is functional and trustworthy from a user perspective but would benefit from enhanced transparency and compliance documentation to improve business credibility and regulatory adherence.

Uniworld is a luxury river cruise company offering curated travel experiences across Europe, India, Vietnam, Cambodia, Peru, and Egypt. The website positions itself as the world's most renowned river cruise line, targeting travelers seeking intimate cultural and historical experiences. The business model focuses on high-end hospitality services with a global reach. Technically, the website employs modern marketing and analytics tools such as Google Tag Manager and Cookiebot for cookie consent management, indicating a mature digital marketing infrastructure. However, there is no visible privacy policy or terms of service in the provided content, which is a compliance gap. Security posture is moderate with cookie consent implemented but lacking visible security headers or detailed security policies. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for commercial entities. Overall, the website is professional and trustworthy but could improve transparency and security documentation.

The Travel Corporation (TTC) is a well-established enterprise in the transportation and travel industry, founded in 1995. The company focuses on sustainable travel experiences and targets travelers who are passionate about exploring the world responsibly. The website uses WordPress with the Divi theme and integrates marketing tools such as Google Tag Manager and Google Adsense, indicating a mature digital presence. SEO is enhanced via the Yoast SEO plugin, and the site is mobile-optimized with good user experience and navigation clarity. Security posture is moderate with HTTPS enabled and domain transfer protections in place; however, DNSSEC is not enabled and security headers are not evident, representing areas for improvement. Privacy compliance is basic, with a cookie policy and consent mechanism present but lacking a clear privacy policy or terms of service on the homepage. Contact information is not readily visible, which may impact user trust and compliance. Overall, TTC's website is professional and trustworthy but could benefit from enhanced privacy disclosures and security hardening.

Avalon Waterways is a well-established river cruise operator specializing in luxury river cruises across Europe and Asia. The company offers Suite Ships® featuring spacious Panorama Suites designed for spectacular views, targeting travelers seeking premium river cruise experiences. The website reflects a professional and consistent brand image aligned with the travel and hospitality industry. Technically, the site employs modern web technologies including Angular framework, Google Tag Manager for analytics, and Osano for cookie consent management, indicating a mature digital infrastructure. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security-wise, the website enforces HTTPS and uses cookie consent mechanisms, though it lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. WHOIS data is privacy protected, which is typical for this business type, and no suspicious registration patterns were found. Overall, Avalon Waterways presents a trustworthy and professional online presence with room for improvement in security transparency and incident response readiness.

StarDream Cruises operates a luxury cruise vacation website offering family, Caribbean, and Mediterranean cruises. The site targets general consumers interested in upscale travel experiences. The technical infrastructure leverages modern web technologies including Ionic and Angular frameworks, hosted on AWS infrastructure with multiple DNS servers for redundancy. The site is mobile optimized and includes tracking pixels from major platforms such as Facebook and TikTok, indicating a focus on marketing and user analytics. Security posture is moderate with HTTPS enabled but lacks explicit security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. WHOIS data shows suspicious inconsistencies, notably a future domain creation date, which raises concerns about domain legitimacy. Overall, the website is functional and professional but requires improvements in security and compliance to enhance trust and regulatory adherence.

Centrum pro komunitní práci střední Čechy is a Czech non-profit organization focused on community work and development in the Central Bohemia region. The website presents the organization as a regional community support entity offering educational, consulting, and networking services to local stakeholders. The site is built on WordPress using the Divi theme, indicating a moderate level of digital maturity with a professional design and good mobile optimization. However, the absence of WHOIS data and lack of explicit privacy and cookie policies suggest gaps in transparency and compliance. Security posture is basic with no detected security headers or incident response information, which could be improved to enhance trust and protect user data. Overall, the website is functional and safe for general audiences but would benefit from enhanced security and compliance measures.

KUPODIVU is a Czech-based small web development and branding agency specializing in custom professional website creation, branding, webdesign, and SEO optimization primarily on the WordPress platform. The company has a mature domain registered since 2010, indicating a stable presence in the market. Their portfolio showcases various client projects, reflecting a focus on quality and client satisfaction. Technically, the website is built on WordPress with Elementor and Boldnote theme/plugins, leveraging modern web technologies and fonts. The site is mobile optimized and SEO friendly but lacks some accessibility features and has minor video playback issues. Security posture is adequate with HTTPS enabled, but the absence of security headers and privacy/cookie policies indicates room for improvement. No contact emails or phone numbers are explicitly listed, which may impact user trust and compliance. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

DOK Leipzig is an established international festival specializing in documentary and animation films, held annually in Leipzig, Germany. The website provides comprehensive information about the festival's program, industry events, ticketing, and accessibility, targeting both general audiences and industry professionals. The festival is supported by notable partners including local government and European cultural programs, reflecting a strong market position in the media and cultural sector. Technically, the website is built on Drupal 9 with modern web technologies such as lazy loading images and JavaScript libraries for enhanced user experience. Hosting is provided by Hetzner, a reputable German hosting provider. The site is mobile-optimized, accessible, and SEO-friendly, with multilingual support for German and English. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place. However, explicit security headers are not visibly set in the HTML and could be improved. No public security policy or incident response information is available, which is common for cultural event sites but could be enhanced for transparency. Overall, the website is professional, trustworthy, and compliant with GDPR regulations, providing a safe and informative experience for visitors. The domain registration data aligns well with the website content and hosting, indicating legitimacy and consistency.

cinetixx GmbH is a German technology company specializing in cinema ticketing and management software solutions. With over 21 years of experience and a customer base of more than 400 cinemas, the company offers a comprehensive SaaS platform that integrates ticket sales, management, kiosk sales, and customer loyalty programs. Their market position is solid within the cinema technology sector, targeting cinema chains, medium-sized operators, and arthouse cinemas. The website reflects a professional and consistent brand image with clear service offerings and customer testimonials. Technically, the website is built using modern frameworks such as Astro and hosted on Amazon AWS infrastructure, ensuring reliability and scalability. The site includes Google Tag Manager for analytics and Zendesk for customer support chat, indicating a mature digital infrastructure. Mobile optimization and SEO practices are well implemented, although accessibility could be improved. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks some security headers and does not publish a dedicated security policy or vulnerability disclosure. Cookie consent is implemented in compliance with GDPR, and contact information is transparent. The WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website and business demonstrate a strong security posture and professional digital presence with minor areas for improvement in security headers and incident response transparency. The risk level is low, and the company appears trustworthy and credible.

EnterERP is a Turkish cloud-based ERP software provider offering a comprehensive suite of business management applications including sales, CRM, finance, accounting, inventory, e-commerce, and more. The platform targets a broad range of industries such as manufacturing, retail, healthcare, and transportation, positioning itself as Turkey's fastest and most comprehensive cloud ERP solution with over 10,000 business users. Technically, the website is built on modern frameworks like Next.js and React, with integrations for Google Analytics, AdRoll, and CookieYes for cookie consent management. The site is well-optimized for mobile and SEO, providing a professional user experience. Security posture is good with HTTPS enforced and cookie consent implemented, but lacks visible security headers and explicit security policies. WHOIS data is missing, which slightly reduces domain trustworthiness. Overall, the website is professional and credible but could improve transparency with privacy and security documentation.

Nodal Exchange operates as a specialized derivatives exchange focused on power, natural gas, and environmental futures and options contracts in North America. It holds a leading market position by offering the largest set of locational power and environmental contracts, supporting over 1,000 power contracts and 120 environmental products. The exchange leverages its clearing house, Nodal Clear, to provide portfolio margining and risk management advantages to participants. The website is professionally designed, content-rich, and optimized for SEO and mobile use, reflecting a mature digital presence. Technically, it is built on WordPress with modern plugins and security measures such as HTTPS and Google reCAPTCHA on forms. However, the absence of WHOIS registration data and lack of explicit security headers are areas for improvement. Overall, the security posture is strong with no visible vulnerabilities, but publishing formal security policies and incident response information would enhance trust. The business credibility is high, supported by press coverage and clear service offerings.

European Energy Exchange AG (EEX) operates a leading energy exchange platform specializing in power, natural gas, emission allowances, freight, agricultural products, and guarantees of origin. The company serves energy market participants and traders primarily in Europe with expanding global reach through subsidiaries such as Nodal Exchange and EPEX SPOT. The website reflects a professional and comprehensive digital presence, built on TYPO3 CMS, offering detailed market data, trading resources, and regulatory information. The technical infrastructure is modern and mobile-optimized, though some security best practices like security headers and published incident response contacts are missing. WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but does not detract from the overall legitimacy indicated by the website content and corporate branding. The site implements cookie consent and uses etracker analytics, showing moderate privacy compliance. Overall, EEX presents a credible and professional online presence aligned with its business operations in the energy sector.

Hybrid Societies is an academic research initiative based in Germany, focusing on the interdisciplinary study of human-machine interaction and hybrid societies. The website serves as a platform for disseminating research, organizing conferences, and providing career opportunities in this niche academic field. The target audience includes researchers, academics, and students interested in technology and society. The organization appears to be a small, specialized entity founded in 2018, with a consistent and professional online presence. Technically, the website is built on WordPress with standard web technologies and moderate performance and mobile optimization. Security posture is basic, with HTTPS enabled but lacking advanced security headers and DNSSEC. Privacy compliance is weak, with no visible privacy or cookie policies or consent mechanisms. Contact information is limited to a contact form, with no direct emails or phone numbers found. Overall, the website is professional and safe but could improve in privacy and security practices.

Spreadshop operates a mature and well-established ecommerce print-on-demand platform branded as Spreadconnect, enabling merchants to create and sell custom merchandise integrated with major ecommerce platforms such as Shopify, WooCommerce, TikTok, and others. The platform emphasizes fast fulfillment, high-quality printing, and worldwide shipping, targeting both growing brands and seasoned sellers. The website demonstrates a high level of digital maturity with modern web technologies including React and Next.js, supported by Adobe Experience Manager for content delivery. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response details are not published. Privacy compliance is robust with comprehensive privacy and cookie policies and consent mechanisms. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the professional presentation and extensive trust signals. Strategic recommendations include publishing security policies, adding vulnerability disclosure information, and enhancing direct contact options for security and data protection inquiries.

Spread Group is a global e-commerce company specializing in customized apparel and lifestyle products through print-on-demand technology. It operates multiple brands including Spreadshirt, Spreadshop, TeamShirts, and SPOD, targeting both B2B and D2C markets. The company emphasizes personalization, sustainability, and innovation in fashion technology. The website reflects a mature digital presence with professional branding and comprehensive content about their business and sustainability commitments. Technically, the site is built on WordPress with React components, uses modern media hosting via Cloudinary, and implements cookie consent via OneTrust. Security posture is generally good with HTTPS and privacy compliance, but lacks visible security headers and explicit incident response information. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, though the website content and social media presence support legitimacy. Overall, the site is professional, user-friendly, and trustworthy, with room for improvement in security disclosures and domain registration transparency.

Schenker Technologies GmbH is a German company specializing in customized high-performance laptops and desktop PCs, operating since 2002. The company markets its products under the brands XMG and SCHENKER, targeting customers who require tailored computing solutions. The website is professionally built on WordPress using Elementor, with good SEO and mobile optimization. The technical infrastructure includes Cloudflare DNS services and HTTPS encryption, ensuring secure and reliable access. However, the website lacks visible privacy and cookie policies, as well as explicit contact information, which impacts privacy compliance and user trust. Security posture is adequate with HTTPS but could be improved by adding security headers and formal security policies. Overall, the website presents a credible business with room for improvement in compliance and security transparency.

LeFx GmbH is a specialized development studio based in Leipzig, Germany, focusing on advanced real-time visualizations including AR, VR, and 3D solutions primarily for the automotive, pharmaceutical, and energy sectors. Established in 2011, the company offers a range of services such as interactive storytelling, virtual training, product visualization, and game development, positioning itself as a trusted partner with a strong regional presence and reputable clients like Volkswagen and Audi. The website reflects a professional and consistent brand image with comprehensive content and clear navigation. Technically, the website is built on WordPress with modern libraries such as jQuery, Bootstrap, and Slick Slider, hosted by Goneo. It features good mobile optimization, SEO practices, and a cookie consent mechanism compliant with GDPR, implemented via Borlabs Cookie. The site uses HTTPS with secure cookie settings, indicating a solid security foundation. Security posture is strong with no visible vulnerabilities or exposed sensitive data. The presence of TISAX certification further underscores their commitment to security standards. However, the site lacks explicit security policy and incident response information, which could enhance trust and preparedness. Overall, the website is trustworthy, well-maintained, and compliant with privacy regulations, serving its business audience effectively. Strategic improvements in security transparency and accessibility could further strengthen its position.

Swoogo LLC operates a sophisticated event management software platform designed for in-person, virtual, and hybrid events. The company targets event professionals and organizers, offering a comprehensive SaaS solution that includes registration, data insights, event logistics, marketing, and mobile applications. Positioned as an enterprise-ready platform, Swoogo emphasizes flexibility and ease of use to reduce event busywork and enhance attendee experiences. The website reflects a mature digital presence with consistent branding and professional content, supporting its market position as a trusted event technology provider. Technically, the website leverages modern web technologies including WordPress CMS, Google Tag Manager, PostHog analytics, and Osano for cookie consent management. The infrastructure supports fast performance, mobile responsiveness, and accessibility best practices. Integration of third-party services like Wistia for video and Cloudinary for media management further enhances the user experience. The site employs strong SEO and metadata practices, including comprehensive Open Graph and JSON-LD structured data that clearly define the business entity and its social profiles. From a security perspective, the site enforces HTTPS with excellent SSL configuration and implements multiple security headers to protect users. The presence of a consent management platform indicates attention to privacy compliance, including GDPR. No exposed sensitive data or vulnerabilities were detected in the analyzed content. However, the absence of publicly available WHOIS data due to privacy protection is noted, which is common for commercial SaaS businesses and does not detract from overall legitimacy. Overall, Swoogo demonstrates a high level of professionalism, security maturity, and privacy awareness. The business is well-positioned in the event management technology sector with a clear value proposition and strong digital footprint. Strategic recommendations include enhancing incident response visibility, formalizing a vulnerability disclosure policy, and maintaining continuous security audits to sustain trust and compliance.

Teeinblue is a specialized SaaS provider offering a product personalization tool tailored for print-on-demand merchants on the Shopify platform. The company positions itself as a leading solution in this niche, enabling merchants to add customizable options such as images, text, and maps to their products. The website reflects a professional and consistent brand image, targeting Shopify merchants seeking enhanced product customization capabilities. Technically, the site leverages Shopify's infrastructure, integrates multiple analytics and marketing tools, and employs modern JavaScript frameworks and third-party services like Crisp chat and PageFly builder. Security posture is solid with HTTPS enforced and domain status protections, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. Overall, the website is functional, professional, and trustworthy but would benefit from enhanced privacy and security disclosures.

The website ymq.cool is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block, which prevents any meaningful content from being retrieved or analyzed. The domain WHOIS data is unavailable due to TLD restrictions and privacy protections, limiting the ability to verify ownership, registration dates, or legitimacy. Consequently, no business information, contact details, or policies are publicly accessible. The site appears to be either under active protection or inactive, with no visible content or metadata to assess its purpose or audience. From a technical perspective, the site is protected by Cloudflare, indicating some level of security infrastructure, but the lack of accessible content and metadata prevents evaluation of the technology stack, performance, or SEO. Security posture cannot be fully assessed beyond the presence of Cloudflare WAF. No security headers or SSL configuration details are available from the provided data. Overall, the risk assessment is elevated due to the lack of transparency and accessibility. The absence of business and compliance information, combined with the WHOIS privacy and WAF block, suggests caution. Strategic recommendations include enabling controlled access for legitimate users, publishing essential business and compliance information, and improving transparency to build trust.

The Bundesverband IT-Mittelstand e.V. (BITMi) is Germany's largest professional association exclusively representing medium-sized IT companies. The organization focuses on promoting digital sovereignty 'Made in Germany' and advocates for the interests of over 2,500 IT SMEs. Their business model centers on industry representation, certification services, events, and political lobbying. The website is professionally designed, content-rich, and well-structured, targeting IT companies and stakeholders in the German digital economy. Technically, the site runs on WordPress with modern plugins and frameworks, including Yoast SEO and Events Manager, ensuring good SEO and event management capabilities. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit privacy policies are missing. Overall, the site is trustworthy, credible, and serves as a key information and networking hub for the German IT SME sector.

Vergleich.org is a German-language independent test and comparison portal operated by VGL Publishing AG, based in Berlin. The site offers consumers detailed product comparisons and tests across various categories, leveraging affiliate marketing as its primary business model. It maintains a professional and consistent brand presence with comprehensive privacy and cookie policies, including GDPR compliance and a designated data protection officer contact. Technically, the website is built using modern frameworks such as Nuxt.js and Vue.js, with performance optimizations and mobile responsiveness. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit security policies and incident response information are not publicly available. The absence of WHOIS data due to a malformed response slightly impacts trust but does not detract significantly from the overall legitimacy and professionalism of the site.

SD Software-Design GmbH is a German IT company specializing in custom software development, including web portals, cloud software, cross-platform mobile apps, and data-driven systems. With over 13 years of experience, the company serves a diverse clientele including SMEs, startups, public sector entities, and associations primarily in Germany, Austria, and Switzerland. Their offerings extend to IT consulting, digital marketing, and data analysis, supported by multiple certifications and memberships that reinforce their market credibility. The website reflects a professional and comprehensive digital presence with clear service descriptions and strong trust signals. Technically, the site employs modern web technologies, is mobile-optimized, and demonstrates good SEO and accessibility practices. Security posture is robust with HTTPS, security headers, and privacy compliance, although no explicit incident response or vulnerability disclosure policies were found. Overall, the company presents a mature, trustworthy, and client-focused IT service provider profile.

Carlsberg Group is a globally recognized brewery enterprise established in 1847, offering a wide portfolio of beer and beverage brands. The company maintains a strong market position with extensive global subsidiaries and a focus on sustainability and innovation. The website reflects a mature, professional digital presence with comprehensive investor relations and corporate governance information. Technically, the site uses modern JavaScript libraries and is built on the Umbraco CMS platform, delivering good performance and mobile optimization. Security posture is solid with HTTPS enforcement and clientTransferProhibited domain status, though DNSSEC is not enabled and no explicit vulnerability disclosure policy is published. Overall, the site is trustworthy and well-maintained, targeting a mature audience due to its alcohol-related content.

Delical is a French healthcare company specializing in nutritional solutions aimed at combating malnutrition, particularly among seniors and at-risk individuals. The website presents a professional and consistent brand focused on providing nutritional products, advice, and recipes to reconcile nutrition with pleasure. The company appears to have been active since at least 2019 and targets both consumers and healthcare professionals. Technically, the website is built on WordPress with modern plugins such as LearnPress and Yoast SEO, and it employs Google Tag Manager and analytics tools for marketing and tracking purposes. Security measures include HTTPS enforcement and standard security headers, although explicit privacy and terms of service pages are missing. The absence of WHOIS data limits domain trust verification, but the website content and technical setup suggest a legitimate business. Overall, the site is well-designed, mobile-optimized, and provides a good user experience with moderate privacy compliance.

Bioparhom is a French company specializing in medical devices for body composition analysis using bioimpedance technology. Their flagship product, the Z-Métrix, is designed for healthcare professionals, nutritionists, and sports professionals to provide precise body composition measurements. The company emphasizes research, development, and quality service including training and after-sales support. The website is professionally designed, multilingual, and uses WordPress with WooCommerce for e-commerce capabilities. It integrates modern analytics and marketing tools while maintaining GDPR compliance through cookie consent and privacy policies. However, the absence of WHOIS registration data raises concerns about domain legitimacy, though the website content and contact information strongly support the company's authenticity. Security posture is good with HTTPS and no exposed sensitive data, but could be improved by adding security headers and incident response information.