High-risk security reports

M

MEGGLE BH

meggle.ba

46

MEGGLE BH operates as a prominent dairy brand in Bosnia and Herzegovina, offering a wide range of dairy products including milk, yogurts, cheeses, butters, and vegan alternatives. The website reflects a mature digital presence with multilingual support and strong branding consistency. Technically, the site is built on WordPress with modern tracking and SEO tools, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements in security headers and privacy compliance (cookie consent) are recommended. Overall, the site is trustworthy and professionally maintained, supporting MEGGLE BH's market position as a leading dairy provider in the region.

L

Lumen d.o.o.

lumen.ba

42

Lumen d.o.o. is a well-established manufacturer and wholesaler of candles, paraffin and electronic lanterns, and decorative products, operating primarily in Bosnia and Herzegovina with a subsidiary in Croatia. Founded in 1986, the company has a strong regional presence and emphasizes environmentally friendly, reusable products. The website reflects a medium-sized business with consistent branding and good content quality, targeting retail and wholesale customers in the decorative and candle product sectors. Technically, the site uses common JavaScript libraries and Google Analytics but lacks advanced security headers and explicit privacy policies, indicating room for improvement in compliance and security posture. The security stance is moderate with no critical vulnerabilities detected but missing some best practices such as security headers and incident response contacts. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

L

Lumen trgovina d.o.o.

lumentrgovina.hr

39

Lumen trgovina d.o.o. is a Croatian wholesale and retail company specializing in decorative products such as candles, lanterns, wedding invitations, and floral supplies. It operates under the umbrella of LUMEN d.o.o., a well-established manufacturer with over 35 years of experience in candle and lamp production. The company targets retailers, florists, and event planners, providing a broad product range for various decorative needs. The website reflects a medium-sized business with consistent branding and a professional online presence. Technically, the website uses a traditional tech stack including jQuery, Owl Carousel, and Google Analytics, but relies on outdated JavaScript libraries which may pose security risks. The site is moderately optimized for performance and mobile use, with basic SEO and accessibility features. No CMS or advanced frameworks were detected, indicating a custom or static site approach. From a security perspective, the site lacks visible security headers and explicit privacy or cookie policies, which lowers its compliance posture. The use of HTTPS is implied but not explicitly confirmed in the provided data. Tracking via Google Analytics and Facebook SDK is present, but privacy compliance is minimal. Contact information is clearly provided, enhancing business credibility. Overall, the website is functional and professional but would benefit from updates to its security practices, privacy compliance, and modernization of its technical stack. These improvements would enhance trustworthiness and reduce potential vulnerabilities.

A

Antonio Commerce d.o.o. Mostar

antonio-commerce.com

39

Antonio Commerce d.o.o. Mostar operates as a small retail and wholesale business specializing in office supplies, school supplies, sanitary products, banking equipment, and is an importer of Samsonite travel goods. The company targets local businesses and consumers in Mostar and surrounding regions. The website presents basic but functional content with clear navigation and a focus on product categories relevant to their market. Technically, the site uses common JavaScript libraries such as jQuery and tracking tools like Google Analytics and Google Tag Manager, but lacks advanced frameworks or CMS indications. Security posture is moderate with domain registration protections but lacks visible HTTPS enforcement and security headers. Privacy compliance is minimal with no visible privacy or cookie policies. Overall, the site is moderately trustworthy but would benefit from enhanced security and compliance features.

C

Campaign Check

campaigncheck.ie

43

Campaign Check is a niche automotive blog launched in 2025, focusing on delivering engaging and informative content about cars, innovations, and technology. The website targets car enthusiasts and general audiences interested in automotive facts and lifestyle tips. The business model centers on content publishing with potential monetization through affiliate links and advertising. Technically, the site is built on WordPress with a modern tech stack including Bootstrap and jQuery, hosted on Vultr. The site demonstrates good mobile optimization and SEO practices but lacks advanced accessibility features. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy measures.

P

Pôle Action Média

poleactionmedia.com

45

Pôle Action Média is a regional cluster and business incubator focused on creative and digital industries located in the Occitanie region of France. The organization supports startups and creative enterprises through networking, consulting, and incubation services. The website is built on WordPress using Elementor and integrates HubSpot for marketing and analytics. The technical infrastructure is modern and mobile-optimized, though performance is moderate. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks advanced DNS security and security headers. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the website presents a professional image consistent with a small regional business incubator but would benefit from enhanced privacy and security practices.

C

Créalia Occitanie

crealia.org

44

Créalia Occitanie is a regional financial organization specializing in innovation funding for businesses in the Occitanie region of France. The company offers key services such as zero-interest loans up to 100,000 euros and support for strengthening company equity. The website positions itself as a trusted partner for innovative enterprises seeking financial assistance. The business is well-established with a domain age of over 18 years, indicating stability and credibility in its market niche. Technically, the website is built on WordPress using Elementor and Yoast SEO plugins, indicating a modern and maintainable infrastructure. Hosting is provided by OVH, a reputable provider. The site demonstrates good performance and mobile optimization, with Google Analytics integrated for user tracking. However, accessibility features are basic, and some security best practices like DNSSEC and security headers are not implemented. From a security perspective, the site uses HTTPS with a good SSL configuration and domain status protections to prevent unauthorized domain changes. However, it lacks published privacy and cookie policies, incident response information, and vulnerability disclosure mechanisms, which are important for compliance and trust. No security headers were detected, and no explicit contact information was found in the provided content, which could impact user trust and regulatory compliance. Overall, the website is professional and functional with a moderate security posture. Strategic improvements in privacy compliance, security policy publication, and enhanced security headers would strengthen its trustworthiness and regulatory adherence.

F

France AutoTech

franceautotech.org

40

France AutoTech is a French non-profit association that brings together startups innovating in the automotive mobility sector. The organization focuses on promoting innovation, fostering collaboration among members, and advocating for the ecosystem with media and public authorities. The website reflects a professional and consistent brand presence, targeting startups and stakeholders in automotive technology. Technically, the site is built on WordPress with a moderate tech stack including popular plugins and Google Analytics integration. The site is hosted by OVH sas and uses HTTPS with a valid SSL certificate, though DNSSEC is not enabled. Security posture is moderate with room for improvement in security headers and published policies. Privacy compliance is basic, lacking explicit cookie consent mechanisms and detailed GDPR compliance statements. Business credibility is strong given the domain age, partnerships, and clear association identity. Overall, the website is a reliable resource for the French automotive tech startup community but should enhance privacy and security practices to improve compliance and trust.

B

BEHVA

behva.be

48

BEHVA is a Belgian non-profit association dedicated to historic vehicles, providing advocacy, information, and support to vehicle owners and enthusiasts. The website positions itself as a niche organization focused on transportation heritage within Belgium, offering services such as lobbying, regulatory guidance, and affiliation with related clubs and specialists. The digital infrastructure is built on WordPress with the Divi theme, enhanced by HubSpot marketing tools and Google Analytics for user tracking and engagement. The site demonstrates moderate technical maturity with responsive design and SEO optimizations but lacks explicit privacy and security policy disclosures. Security posture is adequate with HTTPS and some best practices but could be improved by adding security headers and incident response information. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security transparency.

S

Superscreen GmbH

superscreen.de

49

Superscreen GmbH is a Hamburg-based digital agency specializing in emotionally intelligent concepts and dynamic design using innovative technologies such as TYPO3 and Shopware. Established in 1997, it has a strong local presence and long-term client relationships, including with the Hamburger Sparkasse. The website is built on WordPress with a modern tech stack and includes SEO and analytics tools, reflecting a mature digital infrastructure. Security posture is adequate with HTTPS and cookie consent implemented, though advanced security headers and incident response policies are absent. Overall, the site is professional, trustworthy, and compliant with GDPR, serving business clients primarily in Germany.

D

DON'T DRINK AND DRIVE (DDAD)

ddad.de

40

DDAD (DON'T DRINK AND DRIVE) is a well-established German non-profit campaign focused on reducing alcohol-related traffic accidents, especially targeting young and novice drivers. The campaign has been active since 1993 and uses its website and social media channels to spread awareness and educational content. The website is built on WordPress with Elementor and The7 theme, showing a modern and responsive design with good user experience and content relevance. Social media integration is strong, supporting community engagement and outreach. However, the site lacks visible privacy and cookie policies, which is a compliance gap under GDPR. Security posture is good with HTTPS and no exposed sensitive data, but security headers and incident response policies are not published. Overall, the domain and website appear legitimate and trustworthy, serving a public safety mission.

Y

YOUCOOK

youcook-food.com

48

YOUCOOK is a German-based food retail brand specializing in delivering authentic Asian street-food style ready meals that can be prepared quickly at home or office. The company emphasizes high-quality ingredients without artificial preservatives and targets consumers seeking convenient, tasty meals. The website is built on TYPO3 CMS and integrates common web technologies such as jQuery and Slick Slider for UI enhancements. Social media presence and customer testimonials enhance brand trust. However, the absence of WHOIS data for the domain raises questions about domain registration legitimacy, although the website content and linkage to the Heristo Gruppe parent company support its authenticity. Security posture is moderate with HTTPS implied but lacking explicit security headers and cookie consent mechanisms. Privacy policies are present but basic, with GDPR compliance indicated through linked pages. Overall, the site is professional and functional but could improve security and compliance transparency.

B

Bloomwell

bloomwell.de

47

Bloomwell operates a specialized healthcare platform focused on providing online medical cannabis prescriptions in Germany. The website offers telemedicine services and educational content about medical cannabis and alternative therapies, targeting patients seeking convenient access to cannabis prescriptions. The business positions itself as a niche digital healthcare provider within the German market. Technically, the website is built on WordPress using Elementor and Yoast SEO, integrating modern tools like Google Tag Manager and Cookiebot for compliance and analytics. The site demonstrates good digital maturity with responsive design and structured data implementation. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers and policies are not evident. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site is professional, trustworthy, and compliant with GDPR, but could improve by publishing explicit security policies and incident response information.

H

HASPA Musik Stiftung

haspa-musik-stiftung.de

46

The HASPA Musik Stiftung website serves as an informational platform for a Hamburg-based non-profit foundation dedicated to supporting children and youth in their musical development. The foundation partners with various local music projects and institutions to foster musical talent and enrich the cultural landscape of Hamburg. The website content is well-structured, professionally presented, and primarily targets local community members, music enthusiasts, and potential donors. Technically, the site is built on the TYPO3 CMS platform, leveraging custom JavaScript for email obfuscation and standard CSS for styling. The site demonstrates good mobile optimization and basic accessibility features, though there is room for improvement in security headers and cookie consent mechanisms. Hosting appears professional with DNS managed by reputable providers. From a security perspective, the site uses HTTPS (implied by canonical URL), but lacks explicit security headers and cookie consent banners, which are important for GDPR compliance. No forms or direct contact emails are exposed in raw form, reducing spam risk. No vulnerability disclosures or incident response policies are published, indicating a potential area for enhancement. Overall, the website is trustworthy and professional, with a solid business credibility score. Strategic improvements in privacy compliance and security posture would enhance user trust and regulatory adherence.

D

Das WeltAuto

dasweltauto.fr

43

DasWeltauto.fr is a website associated with the Volkswagen Group's used car sales platform, Das WeltAuto. The site primarily serves as a basic landing page with minimal content and advertising blocks, targeting used car buyers in France. The business is positioned as a subsidiary brand of Volkswagen, focusing on certified pre-owned vehicles. The website's technical infrastructure is simple, relying on standard HTML, CSS, and JavaScript, with DNS hosted on Volkswagen's name servers and domain registration through 1API GmbH. While the site is accessible without any WAF or security challenges, it lacks advanced technical features such as structured data, comprehensive SEO, or accessibility enhancements. Security posture is basic, with no visible security headers or incident response information, and privacy compliance is minimal with only a basic privacy policy and no cookie consent mechanism. Overall, the site presents moderate trustworthiness due to its association with Volkswagen but requires improvements in security, privacy, and user engagement to enhance its digital maturity.

E

Ed-Vision

ed-vision.com

49

Ed-Vision is a Bosnian digital agency specializing in web development, digital marketing, and web hosting services. Established in 2012, the company targets a broad audience including bloggers, startups, and businesses of various sizes. Their service portfolio includes website creation, online store development, Google Ads campaign management, and comprehensive hosting solutions. The website demonstrates a professional design with clear navigation and good mobile optimization, reflecting a mature digital presence. Technically, the site is built on WordPress with Elementor, leveraging modern libraries and Google reCAPTCHA for security. Security posture is solid with HTTPS and spam protection, though improvements are needed in DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, Ed-Vision presents a trustworthy and credible business with room for enhancing privacy and security transparency.

K

Korint Design Studio

korint.com

41

Korint Design Studio is a small design agency based in Bosnia and Herzegovina, established in 2002. The company offers a range of creative services including graphic design, web design, visual identity, SEO optimization, and mobile application development. Their website showcases recent projects and targets businesses seeking modern and professional design solutions. The market position appears to be local or regional with a focus on small to medium-sized clients. Technically, the website uses a traditional tech stack with jQuery, Bootstrap, and various UI plugins for sliders and carousels. The site is moderately optimized for performance and mobile devices but lacks modern CMS or frameworks. SEO and accessibility features are basic. No CMS or hosting provider details are explicitly found beyond the registrar information. From a security perspective, the site lacks visible security headers and DNSSEC is not enabled, which are areas for improvement. There is no evidence of HTTPS enforcement or privacy and cookie policies, indicating compliance gaps with GDPR and general data protection best practices. No forms or data collection mechanisms were detected, reducing immediate data exposure risks but also limiting user engagement. Overall, the website is functional and moderately professional but requires enhancements in privacy compliance, security hardening, and contact transparency to improve trust and regulatory adherence.

T

Tehno Centar

kupijeftino.ba

40

KupiJeftino.ba is an e-commerce website operated by Tehno Centar, a small retail business based in Bosnia and Herzegovina specializing in the sale and servicing of electronics and household appliances. The website offers a broad product range including TVs, computers, mobile devices, and white goods, targeting general consumers in the region. The business model combines online sales with physical showroom presence and after-sales services such as delivery and installation. Technically, the site is built on Joomla CMS with VirtueMart e-commerce, utilizing common web libraries like jQuery and MooTools. While the site is functional and provides a good user experience with clear navigation and product information, it lacks advanced mobile optimization and accessibility features. Security posture is moderate with HTTPS enabled but missing important security headers and no visible incident response or security policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the website is legitimate and trustworthy but would benefit from enhanced security and privacy practices.

R

Robert Bosch GmbH

bosch-press.nl

43

The Bosch Media Service website serves as the official corporate media portal for Robert Bosch GmbH in the Netherlands, providing press releases, media content, and corporate news to journalists and business partners. The site reflects Bosch's strong market position as a leading global technology and engineering company, focusing on sectors such as energy, transportation, and technology. The platform supports Bosch's communication strategy by offering well-structured, relevant content with consistent branding and a professional design. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and Google Tag Manager for analytics and marketing. It features a custom cookie consent mechanism compliant with GDPR, ensuring user privacy and consent management. The site is mobile-optimized with good SEO practices and basic accessibility features, although some enhancements could improve compliance and user experience. From a security perspective, the site enforces HTTPS and implements cookie consent but lacks some advanced security headers and explicit incident response contacts. No vulnerabilities or exposed sensitive data were detected. The domain registration aligns well with Bosch's corporate identity, indicating high legitimacy and trustworthiness. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic recommendations include enhancing security headers, adding incident response information, and publishing terms of service to improve legal completeness and security posture.

A

aberratio GmbH

aberratio.de

48

Aberratio GmbH is a Hamburg-based digital consulting agency specializing in web, marketing, and communication solutions since 2000. The company combines strategic consulting with digital agency expertise to support clients through digital transformation. Their market position is that of an established small agency with a professional portfolio and a focus on technology-driven services. The website is built on WordPress with modern plugins and demonstrates good technical maturity, mobile optimization, and SEO practices. Security posture is solid with HTTPS and cookie consent implemented, though lacking advanced security headers and explicit security policies. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, with room for improvement in security transparency and accessibility.

V

Volkswagen Losch Financial Services

vwlfs.lu

49

Volkswagen Losch Financial Services is a prominent automotive financial services provider based in Luxembourg, operating under the Volkswagen Financial Services umbrella. The company offers a wide range of leasing and mobility solutions targeted at both private and business customers, leveraging the strong brand presence of Volkswagen and its associated marques. The website reflects a professional and consistent brand image, providing clear information and multiple language options to serve its diverse audience. Technically, the site is built on TYPO3 CMS, hosted on Microsoft Online infrastructure, and integrates modern analytics and consent management tools, indicating a mature digital presence. Security posture is solid with HTTPS and privacy compliance mechanisms in place, though there is room for improvement in security headers and incident response transparency. Overall, the site is trustworthy, well-structured, and aligned with the business's market position.

V

Volkswagen Canarias

vwcanarias.com

48

Volkswagen Canarias operates as the official Volkswagen dealership and service provider in the Canary Islands, offering a comprehensive range of automotive products and services including new vehicle sales, financing, after-sales support, and accessories. The website is professionally designed, well-structured, and targets consumers in the Canary Islands interested in Volkswagen vehicles, including electric and hybrid models. The company is part of the larger Volkswagen AG group and is supported by the Domingo Alonso Group, indicating a strong market position and reputable backing. Technically, the website leverages modern web technologies such as Adobe Experience Manager CMS, React-based components, and advanced lazy loading techniques to deliver a performant and accessible user experience. Security posture is robust with HTTPS enforcement, security headers, and client-side guards against unauthorized content loading. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. However, the absence of publicly available WHOIS data and lack of explicit security policy or incident response contacts slightly reduce trust. Overall, the site demonstrates a mature digital presence aligned with corporate standards and regional market needs.

The website www.guenstiger.de is currently inaccessible due to a Cloudflare security challenge page that requires human verification via Turnstile captcha. As a result, no actual business content, metadata, or contact information is available for analysis. The domain appears to be professionally hosted using Amazon AWS DNS servers, indicating a legitimate infrastructure. However, the lack of accessible content prevents a full assessment of the business model, services, or compliance posture. Security-wise, the presence of Cloudflare's WAF and challenge mechanism suggests a proactive approach to mitigating automated threats, but no further security headers or policies are visible. Overall, the site’s risk assessment is limited by the blocked content, and strategic recommendations focus on improving transparency and accessibility once the challenge is passed.

V

VUT - Verband unabhängiger Musikunternehmer*innen e.V.

vut.de

49

VUT - Verband unabhängiger Musikunternehmer*innen e.V. is a German association representing independent music entrepreneurs and artists. The organization advocates for cultural diversity appreciation and fair competition conditions for independent music businesses regardless of size. Their key services include membership management, knowledge sharing, networking, and member benefits. The website is well-maintained, with active news updates and a clear focus on its target audience of independent music professionals in Germany. Technically, the site runs on WordPress with Oxygen Builder and integrates modern tools such as Matomo for analytics and Complianz for GDPR-compliant cookie management. Security posture is solid with HTTPS enforced and secure login forms, though explicit security policies and incident response information are absent. Overall, the site demonstrates a professional and trustworthy online presence aligned with its business mission.

Ećo Company, operating under the brand Inside, is a Sarajevo-based manufacturer and retailer specializing in custom furniture and comprehensive interior design services. The company targets both private and commercial clients, offering tailored solutions including furniture production, architectural services, and complete interior furnishing. Their market position is strong locally, supported by a professional website, active social media presence, and customer testimonials. Technically, the website employs modern web technologies such as jQuery, Bootstrap, and Google Analytics, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website reflects a credible and professional business with room for improvement in security and compliance.

E

Eltena

eltena.ba

46

Eltena is a regional retail company based in Bosnia and Herzegovina specializing in the sale of electronics, home appliances, IT and gaming products, and related technical goods. Their website serves as a comprehensive e-commerce platform featuring a wide product catalog, customer account management, and product comparison features. The company targets consumers seeking technical and household products in the regional market. Technically, the website is built on WordPress with WooCommerce and Elementor, leveraging modern web technologies and Google Tag Manager for analytics. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and implements several security headers, but lacks publicly available privacy and cookie policies, as well as vulnerability disclosure information, which are important for compliance and trust. Overall, the website is legitimate and functional but would benefit from enhanced privacy compliance and security transparency.

Z

Zeus d.o.o.

zeusbl.com

48

Zeus d.o.o. operates as a retail e-commerce business specializing in household appliances, built-in appliances, and kitchen equipment, primarily serving customers in Bosnia and Herzegovina. The website demonstrates a solid market position as a local/regional retailer with key services including product sales, delivery, and warranty servicing up to five years. The business targets general consumers seeking household appliances with multiple payment options and customer support. Technically, the website is built on WordPress with WooCommerce and Elementor, integrating modern marketing and analytics tools such as Google Analytics, Facebook Pixel, and New Relic for performance monitoring. The site is mobile-optimized and SEO-friendly with structured data enhancing search visibility. Security posture is adequate with HTTPS enforced but lacks some security headers and explicit privacy and cookie policies, indicating room for compliance improvement. Overall, the domain registration aligns well with the business claims, supporting legitimacy and trustworthiness.

C

Casa Mia d.o.o.

casamia.ba

48

Casa Mia d.o.o. is a small business based in Bosnia and Herzegovina specializing in interior design and furniture solutions. The company focuses on creating unique, personalized living and working spaces with an emphasis on comfort and aesthetics. Their website is professionally designed using WordPress with WooCommerce and Elementor, providing a good user experience and mobile optimization. The site integrates Google Tag Manager and Google Analytics for marketing and tracking purposes and uses Google reCAPTCHA for form security. However, the website lacks visible privacy and cookie policies, which impacts its compliance posture. Security headers are not detected, though SSL is properly configured, indicating a moderate security posture. No WAF or blocking mechanisms are present, and the content is safe for general audiences.

R

R-Produkt d.o.o.

r-produkt.com

42

R-Produkt d.o.o. is a small manufacturing company based in Bosnia and Herzegovina, specializing in the production and sales of steel chains, ropes, and hydraulic equipment. The website serves as a basic informational portal with minimal content and navigation, linking to subdomains for production and salon business segments. The company has an established domain since 2009, indicating a stable presence in its market niche. Technically, the website uses legacy HTML practices with IE8 compatibility and includes jQuery as a JavaScript library. The site lacks modern security features such as HTTPS confirmation, DNSSEC, and security headers, which limits its security posture. Mobile optimization and accessibility are basic, and SEO practices are minimal. Analytics are implemented via Clicky, indicating moderate user tracking without visible privacy compliance mechanisms. From a security perspective, the absence of HTTPS and security headers, combined with no visible privacy or cookie policies, presents compliance and security risks. No contact information or forms are provided, limiting user engagement and transparency. The domain registration data is consistent and trustworthy, but the website itself requires significant improvements in security and privacy compliance. Overall, the website scores low to moderate in content quality, technical implementation, and security posture, with critical issues around HTTPS absence and privacy compliance. Strategic improvements are needed to enhance trust, security, and user experience.

R

RED COMPUTERS

red-computers.com

48

RED COMPUTERS is an established e-commerce retailer based in Bosnia and Herzegovina, specializing in a broad range of electronics and household appliances. The website offers a well-structured online shopping experience with multiple product categories, including computers, smartphones, white goods, and gaming equipment. The business appears to target regional consumers seeking digital lifestyle products and home appliances. Technically, the site is built on WordPress with WooCommerce and Elementor, leveraging modern web technologies and plugins to deliver a responsive and user-friendly interface. Security-wise, the site uses HTTPS and standard e-commerce security plugins but lacks advanced security headers and explicit privacy or cookie policies, which are important for compliance and trust. The domain is mature and registered with a reputable registrar, indicating legitimacy. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security hardening.

PCC WebShop is a Bosnia and Herzegovina-based e-commerce retailer specializing in electronics and household appliances. The website offers a broad product catalog including computers, laptops, monitors, printers, televisions, and small appliances, targeting general consumers in the region. The platform supports user accounts, shopping cart functionality, and promotional deals, positioning itself as a local online electronics retailer. Technically, the site employs common web technologies such as jQuery, Slick Slider, Facebook SDK, Google Tag Manager, and Google Analytics, indicating a moderate level of digital maturity. The website is mobile-optimized with a good user experience and clear navigation. Security-wise, the site uses HTTPS and includes anti-forgery tokens in login forms, but lacks visible security headers and published privacy or cookie policies, which are areas for improvement. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. The site does not contain adult or NSFW content and maintains a safe content rating.

R

Red Service

redserviceac.cl

49

Red Service is an official Bosch technical service provider and authorized distributor of original Bosch spare parts in Chile. The company offers certified repair, preventive maintenance, installation, and sales of Bosch accessories, targeting Bosch appliance owners across Chile. The website positions Red Service as a trusted partner with certified technicians and official Bosch backing, emphasizing quality and warranty. Technically, the website is built on WordPress with WooCommerce and Elementor, hosted on HostGator, and uses modern web technologies including Google Tag Manager for analytics and marketing. The site is mobile-optimized and SEO-friendly with structured data and Open Graph tags. Security posture is good with HTTPS enabled and no visible vulnerabilities, but lacks explicit security headers and public security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

G

Gamecity Hamburg

gamecity-hamburg.de

49

Gamecity Hamburg is a well-established organization founded in 2003 that supports and connects the games ecosystem in Hamburg, Germany. It acts as a regional hub offering funding programs, incubator support, events, and networking opportunities to game developers, startups, and industry professionals. The website reflects a professional and consistent brand aligned with its parent organization, Hamburg Kreativ Gesellschaft. Technically, the site uses a modern tech stack including ProcessWire CMS, Matomo analytics with privacy-conscious settings, and a cookie consent mechanism via PrivacyWire. The site is mobile-optimized and well-structured, providing a good user experience. Security posture is solid with HTTPS and cookie consent but lacks explicit security headers and published security policies. Overall, the site is trustworthy and compliant with GDPR, though it could improve transparency around incident response and security policies.

D

Design Zentrum Hamburg

design-zentrum-hamburg.de

40

Design Zentrum Hamburg is a prominent non-profit initiative dedicated to supporting and promoting the design industry in Hamburg. It serves as a hub for events, exhibitions, workshops, and funding programs aimed at fostering creativity and professional growth within the local design community. The organization operates under the umbrella of the Hamburg Kreativ Gesellschaft, positioning itself as a key player in Hamburg's creative ecosystem. The website reflects a professional and well-structured digital presence, offering clear navigation and comprehensive information about its services and initiatives. Technically, the site leverages modern web technologies including Matomo for analytics, Google Maps API, and PrivacyWire for cookie consent management, all hosted on a CMS platform identified as ProcessWire. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust, featuring a comprehensive privacy policy, cookie consent mechanisms, and GDPR adherence. However, the site lacks a publicly available security policy or incident response contact details, which could enhance trust and preparedness. Overall, the domain registration data is limited but consistent with the business identity, supporting the legitimacy of the website. The site is safe for general audiences, with no adult or questionable content detected.

О

ООО "БСХ Бытовые Приборы"

bosch-home.by

43

ООО "БСХ Бытовые Приборы" operates as the official service provider for household appliances of major brands Bosch, Siemens, Neff, and Gaggenau in Russia. The website serves as a customer support portal offering repair order placement, spare parts ordering, service center locations, and user manuals. It targets Russian consumers seeking authorized after-sales service for these brands. The business model focuses on service and maintenance, positioning itself as a trusted intermediary between customers and the global BSH group brands. Technically, the website employs modern web standards including HTML5, CSS3, JavaScript, and Bootstrap for responsive design. The site is accessible, well-structured, and optimized for mobile devices. However, no CMS or hosting provider details are evident. The site lacks visible analytics or tracking scripts, indicating a privacy-conscious approach. Performance is moderate with good SEO and accessibility basics. From a security perspective, the site uses HTTPS (implied by external image URLs), but no explicit security headers were detected in the provided data. Cookie consent is implemented with a clear mechanism, and a comprehensive privacy policy is available, indicating GDPR compliance. No incident response or security policy pages were found. No vulnerabilities or exposed sensitive data were identified in the HTML content. Overall, the website presents a professional and trustworthy front for the official appliance service business in Russia. The lack of WHOIS data limits domain registration insights but does not detract from the site's legitimacy. Strategic improvements in security headers and incident response transparency would enhance the security posture and trust further.

D

Deutsche Ölwerke Lubmin GmbH

dol-oil.de

47

Deutsche Ölwerke Lubmin GmbH is a modern German company specializing in the development, production, and marketing of quality lubricants with a strong focus on private label manufacturing. Founded in 2013 and part of the RAVENOL Group, it offers full-service solutions from product conception to worldwide marketing. The company targets businesses seeking customized lubricant products under their own brand. Technically, the website is built on the Contao CMS platform, uses modern JavaScript libraries such as jQuery and Video.js, and integrates Google Analytics for user tracking with IP anonymization. The site is mobile optimized and well-structured, providing a professional user experience. Security-wise, the site uses HTTPS with good SSL configuration and cookie consent mechanisms but lacks explicit security headers and public incident response policies. WHOIS data is consistent and transparent, supporting the legitimacy of the domain and business. Overall, the website demonstrates a solid digital presence with room for improvement in security transparency and incident response readiness.

I

Initiative Pro Recyclingpapier

gruener-beschaffen.de

34

The website 'Grüner beschaffen' is operated by the Initiative Pro Recyclingpapier, a German non-profit organization dedicated to promoting sustainable paper procurement using recycled paper certified with the Blue Angel eco-label. The initiative targets public sector entities, educational institutions, municipalities, SMEs, and associations, encouraging them to adopt environmentally responsible paper purchasing practices. The site offers educational content, campaigns, recognition programs, and practical resources to support climate and resource protection efforts. Technically, the website is built on WordPress 6.8.3 with jQuery and uses the Easy Fancybox plugin for media display. It is hosted on servers associated with kasserver.com and employs Matomo analytics configured to disable cookies, reflecting a privacy-conscious approach. The site is mobile-optimized with good navigation and SEO practices, though accessibility features are basic. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and uses minimal necessary cookies with user consent. However, it lacks explicit security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were found. The domain WHOIS data is consistent with the website's purpose and hosting, indicating legitimacy. Overall, the security posture is solid but could be improved with additional headers and formal policies. The website content is safe for general audiences, focusing on environmental sustainability without any adult or questionable material. Contact information including email, phone, and physical address is clearly provided, enhancing trust. The site maintains partnerships with reputable organizations such as the German Environment Agency and the Kompetenzstelle für nachhaltige Beschaffung, reinforcing its credibility.

MediaMarkt is a leading German consumer electronics retailer with a strong market presence in Germany and Europe. The company operates both physical stores and an online platform offering a wide range of electronic products and related services. The website analyzed is currently inaccessible due to a Cloudflare security challenge page, which prevents direct access to the main content and business information. This limits the ability to fully assess the website's technical and security posture. Technically, the site uses Cloudflare's WAF and Akamai DNS services, indicating a mature infrastructure designed to protect against attacks and ensure availability. However, the presence of a security challenge page without visible privacy, cookie, or contact information reduces transparency and user experience. No analytics or marketing scripts were detected beyond the security challenge mechanisms. From a security perspective, the site benefits from enterprise-grade DNS and WAF protection but lacks visible security headers or policies on the challenge page. The absence of accessible privacy and cookie policies and contact information limits compliance assessment. The domain WHOIS data is consistent with a legitimate enterprise, showing no suspicious patterns. Overall, the website's risk is low given the brand and infrastructure, but the current blocking by Cloudflare WAF significantly restricts analysis and user access. Strategic recommendations include allowing access to main content for analysis, publishing clear privacy and cookie policies, and improving transparency to enhance trust and compliance.

A

Adplorer

adplorer.de

43

Adplorer is a technology company specializing in local marketing automation platforms designed primarily for agencies and multi-location businesses such as franchises. The company offers a comprehensive suite of tools including campaign management, sales enablement, bulk campaign editing, multi-channel optimization, and integrated invoicing. Their market position is strong with multiple certifications and partnerships, targeting B2B clients in the marketing technology sector. Technically, the website is built on WordPress with modern plugins and integrations, providing a professional and responsive user experience. Security posture is good with HTTPS, reCAPTCHA, and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the website and business present a credible and trustworthy profile with clear contact information and global office presence.

A

Adplorer

adplorer.fr

43

Adplorer is a specialized technology company offering a comprehensive SaaS platform for local digital marketing automation, primarily targeting marketing agencies and franchise networks. The platform integrates campaign management across Google, Bing, and Facebook, providing tools for campaign creation, optimization, reporting, and billing. The company positions itself as a leader in local marketing automation with a strong presence in Europe and the USA. Technically, the website is built on WordPress with modern plugins and integrates multiple marketing and analytics tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and CAPTCHA protections, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-optimized for its target audience.

B

Bundesvereinigung der Fahrlehrerverbände e. V.

fahrlehrerverbaende.de

41

The Bundesvereinigung der Fahrlehrerverbände e. V. (BVF) is a German national association representing 18 regional driving instructor associations, covering the entire country. The organization serves the majority of German driving school owners and employed driving instructors. The website provides information about the association, its tasks, projects, and events, targeting driving instructors and related stakeholders in Germany. The business model is non-profit and focused on advocacy, information dissemination, and member services. Technically, the website uses a moderate technology stack including Bootstrap 4, Google Tag Manager, and SixCMS as the content management system. Hosting is provided by Hetzner, a reputable German hosting provider. The site is mobile-optimized with good SEO practices and structured navigation, although accessibility features are basic. Performance is moderate with no critical technical issues detected. From a security perspective, the website uses HTTPS but lacks visible security headers and explicit cookie consent mechanisms. No security or incident response policies are published, and no vulnerability disclosure or security.txt files are found. Google Tag Manager is used for analytics, indicating moderate user tracking. Overall, the security posture is adequate but could be improved by implementing security headers, cookie consent, and publishing security policies. The overall risk assessment is low, with no signs of malicious content or suspicious domain registration. Strategic recommendations include enhancing privacy compliance, adding security headers, publishing security policies, and improving transparency around data protection and incident response.

The website cebra.online presents a minimal placeholder page with only a logo displayed and no substantive content or business information. The domain is registered with IONOS SE since 2020, indicating a relatively new or small-scale operation. There is no metadata, no privacy or cookie policies, no contact information, and no forms or interactive elements, which limits the ability to assess the business or its services. The technical infrastructure is basic with no advanced frameworks or CMS detected, and no analytics or tracking scripts are present. Security posture is minimal with no DNSSEC enabled and no security headers detected. Overall, the site lacks transparency and trust signals, which impacts its credibility and compliance standing.

D

DEG - Deutsche Investitions- und Entwicklungsgesellschaft

deginvest-investments.de

47

DEG - Deutsche Investitions- und Entwicklungsgesellschaft operates as a development finance institution focused on financing, promoting, and supporting companies investing in developing and emerging countries. The website presents a professional investment database with extensive filtering options by region, country, sector, year, and customer, indicating a mature and data-driven business model. The target audience includes investors and companies seeking development financing in emerging markets. The company is positioned as a key player in development finance with a strong focus on emerging economies. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, and integrates Usercentrics for cookie consent management, reflecting compliance with privacy regulations. The site uses HTTPS and SVG-based interactive maps for data visualization. Performance and mobile optimization are moderate to good, with basic accessibility features. From a security perspective, the site enforces HTTPS and uses a consent management platform, but lacks visible security headers and published privacy or terms of service documents. No contact information or incident response contacts are found, which could be improved. No WAF or blocking mechanisms are detected, and no vulnerabilities are apparent from the provided data. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance documentation, security header implementation, and clearer contact information to improve user trust and regulatory adherence.

The website www.ticketmaster.com is currently inaccessible due to a security or anti-bot challenge page that blocks normal content access. Ticketmaster is a globally recognized e-commerce platform specializing in ticket sales for live entertainment events such as concerts, sports, and theater. The site uses advanced bot detection technologies including Google reCAPTCHA Enterprise and Google Tag Manager. However, the lack of accessible content, privacy policies, and contact information on the presented page limits the ability to fully assess the website's compliance and security posture. WHOIS data is unavailable, which is unusual for a major brand domain and slightly reduces trustworthiness. Overall, the site demonstrates strong security controls via WAF but lacks transparency in publicly accessible information.

The website todaysveterinarypractice.com is currently inaccessible, returning a 403 Forbidden error page. Due to this restriction, no meaningful content, metadata, or business information is available for analysis. The site appears to be blocked or restricted, preventing assessment of its business model, technical infrastructure, or security posture. Without access to the actual website content, it is impossible to evaluate privacy compliance, security policies, or contact information. The lack of accessible content results in a very low AI score and limits the ability to provide actionable insights or recommendations beyond suggesting that access issues be resolved.

The website todaysveterinarynurse.com is currently inaccessible, presenting a 403 Forbidden error page that blocks access to any substantive content. The domain is registered since 2015 with Network Solutions, LLC and uses SiteGround name servers for DNS hosting. Due to the access restriction, no business information, contact details, or privacy policies are available for analysis. The lack of content and metadata severely limits the ability to assess the website's technical maturity, security posture, or compliance status. The site does not display any scripts, analytics, or tracking technologies, indicating minimal digital footprint in its current state. Security headers and SSL configuration details are not available, and no forms or user input mechanisms are present.

The website todaysveterinarybusiness.com is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. The domain is registered since 2016 with Network Solutions, LLC and uses SiteGround name servers. No business, contact, or policy information is available on the page, and no scripts or analytics are detected. The lack of HTTPS and security headers further reduces the security posture. Overall, the website appears to be either restricted or misconfigured, preventing proper analysis of its business or technical maturity.

I

IT-Recht Kanzlei Keller-Stoltenhoff, Keller

fairness-im-handel.de

43

Fairness im Handel is a German initiative website operated by IT-Recht Kanzlei Keller-Stoltenhoff, Keller, focused on promoting fair and abmahn-free online trade among e-commerce merchants. The site offers legal safety packages and fosters a community of over 20,000 participants to reduce legal risks and encourage open communication. The business model centers on providing legal compliance services and community membership benefits to online retailers, primarily in Germany. Technically, the website is built on WordPress using the Enfold theme, with Yoast SEO plugin for optimization and MediaElement.js for media playback. Hosting is provided by Schlund Technologies, a reputable German hosting provider. The site is mobile optimized and demonstrates good SEO practices, though accessibility features are basic. Security posture is solid with HTTPS enforced and no exposed sensitive data, but lacks some security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional, trustworthy, and well-positioned within its niche, but could improve in privacy and security transparency.

Team inHRLEM is a Dutch small business specializing in collaborative WordPress website development, SEO, and graphic design services targeted at small and medium-sized enterprises. Their business model focuses on empowering clients to maintain control over their websites without recurring fees, emphasizing teamwork and clear communication. The website is professionally designed with good SEO practices and integrates Google Analytics for performance tracking. Technically, the site uses WordPress with modern themes and plugins, ensuring mobile responsiveness and moderate performance. Security posture is adequate with HTTPS and DNSSEC enabled, though security headers and formal policies are lacking. Overall, the site is trustworthy and well-positioned in its niche but could improve privacy compliance and security transparency.

The website sek.es is currently inaccessible to the public, returning a 403 Forbidden error page that blocks access to any meaningful content. The WHOIS data for the domain is also unavailable due to IP authorization restrictions imposed by Red.es, the Spanish domain registry authority. This lack of access prevents any detailed analysis of the business, its services, or its digital presence. The site does not provide any contact information, privacy policies, cookie policies, or terms of service, which are critical for compliance and trust. Technically, the site uses minimal external resources, primarily Google Fonts, and lacks any detectable CMS, analytics, or security headers. Overall, the digital maturity and security posture are very low due to the absence of accessible content and security best practices.