Medium-risk security reports

HiPay is a well-established European payment solution provider founded in 2004, offering a comprehensive suite of services including payment management, fraud protection, and conversion optimization tailored for retailers and businesses. The website demonstrates a modern technical infrastructure utilizing React and Next.js frameworks, supported by Cloudflare DNS and analytics tools such as Matomo and Google Analytics. Security posture is strong with HTTPS and Content-Security-Policy headers, though there is room for improvement in privacy compliance and explicit security policies. Overall, the site is professional, trustworthy, and well-positioned in the finance and e-commerce sectors.

beIN MENA operates as a global sports and entertainment media group, offering 44 channels across multiple continents and languages, serving over 50 million subscribers. The company focuses on subscription-based broadcasting and online streaming services, targeting sports and entertainment consumers worldwide. The website reflects a large, established media entity with consistent branding and professional content. Technically, the site is built on WordPress with modern frontend technologies including Bootstrap and jQuery, and integrates multiple third-party analytics and advertising tools. Security posture is generally good with HTTPS enforced, but lacks visible security headers and formal privacy or cookie policies. WHOIS data is unavailable, which raises some concerns about domain registration transparency, though the site content and external references support legitimacy. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security disclosures.

ParisHotelsfr.com operates as an online hospitality platform focusing on hotel listings and tourism information primarily for Paris and the Bourgogne region, including the Communauté d’agglomération de l’Auxerrois. The website provides rich cultural and economic insights about the Auxerrois area alongside extensive hotel listings with direct links, targeting tourists and business travelers. Technically, the site uses modern web technologies such as Leaflet.js for mapping and is served over HTTPS, ensuring secure connections. However, the absence of WHOIS data and security headers indicates areas for improvement in transparency and security hardening. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the site is functional and professional but would benefit from enhanced security and compliance features.

MASMOVIL is a major Spanish telecommunications company offering mobile telephony, fiber optic internet, fixed telephony, and television services. The company targets general consumers and businesses in Spain with a business model focused on simple, flexible tariffs and competitive pricing. The website reflects a strong market position with clear branding and comprehensive service offerings. Technically, the site is built on modern frameworks such as Next.js and React, integrated with Contentful CMS and various marketing and payment platforms, ensuring a robust and scalable digital presence. Security posture is solid with HTTPS, security headers, and anti-bot measures like reCAPTCHA, though explicit security policies and incident response details are not publicly available. Overall, the site is professional, user-friendly, and trustworthy, with good privacy compliance and clear contact information. However, WHOIS data is inaccessible, limiting domain legitimacy verification.

Defi Mode is an organization dedicated to supporting and accelerating the development and transformation of actors in the French fashion and apparel industry. The website presents a professional and consistent brand image, targeting industry stakeholders and professionals in France. The business model appears to be that of a non-profit or industry support entity, with a medium-sized presence established since at least 2016. Technically, the site is built on WordPress using modern plugins such as Yoast SEO, Divi Builder, and Cookie Law Info, indicating a mature digital infrastructure with good SEO and mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit privacy policies are lacking. Overall, the site is trustworthy and safe, with no adult or questionable content detected.

The website www.regionguadeloupe.fr is the official digital presence of the Regional Council of Guadeloupe, serving as a comprehensive portal for regional aids, services, news, and public transport information. It targets a broad audience including local residents, businesses, students, and public sector entities. The site leverages TYPO3 CMS and integrates common web technologies such as jQuery, Google Analytics, and social media SDKs to deliver content and track engagement. While the site is well-structured and professionally designed, it lacks a publicly accessible privacy policy and shows accessibility non-compliance, which are areas for improvement. Security posture is moderate with HTTPS enabled but missing some security headers. WHOIS data is unavailable, which slightly impacts trust but the official .fr domain and consistent content support legitimacy.

Réseau Entreprendre® is a well-established non-profit organization focused on supporting entrepreneurs and business leaders through personalized mentoring and community engagement. The organization operates internationally with a strong presence in France and partners with numerous reputable companies and institutions. The website reflects a professional and comprehensive digital presence, leveraging WordPress and modern web technologies to deliver content effectively. Privacy and cookie policies are in place, indicating GDPR compliance. Security posture is good with HTTPS and recaptcha protections, though some security headers and explicit incident response information are absent. The lack of WHOIS data limits domain registration trust assessment, but the website's content and partner ecosystem support legitimacy. Overall, the site is a credible resource for entrepreneurship support and community building.

Ma planète BIO is a regional event organizer focused on organic agriculture, sustainable living, and related cultural activities in South Alsace, France. The website promotes an annual event held at Parc Expo Mulhouse, targeting enthusiasts and professionals interested in organic farming and eco-friendly lifestyles. The business is relatively new, founded in 2022, and operates primarily in French. The website provides event information, exhibitor details, conference schedules, and visitor guidance, positioning itself as a key regional player in the organic agriculture event space. Technically, the website uses a combination of jQuery, Bootstrap, Owl Carousel, and cookie management via tarteaucitron.js. It integrates Google Tag Manager and Facebook SDK for analytics and marketing purposes. The site is hosted by OVH sas, a reputable hosting provider, and uses HTTPS with a valid SSL certificate. The site is moderately optimized for performance and mobile devices, with good SEO practices and basic accessibility features. From a security perspective, the site enforces HTTPS and uses domain status protections to prevent unauthorized domain transfers or deletions. However, DNSSEC is not enabled, and security headers are not explicitly detected, indicating room for improvement. Privacy compliance is addressed with a clear privacy policy and cookie consent mechanism, aligning with GDPR requirements. No explicit security or incident response policies are published, and no vulnerability disclosure or security.txt files are found. Overall, the website presents a professional and trustworthy front for a niche event business with moderate technical maturity and good privacy compliance. Strategic improvements in security headers, DNSSEC, and published security policies would enhance its security posture and trustworthiness.

The Musée du Désert website presents a small cultural and historical museum focused on the Huguenot and Camisard heritage in France. The site offers information about the museum, its exhibitions, and related activities, targeting a general audience interested in history and culture. The business model appears to be non-profit and educational, with a boutique for visitors. Technically, the site is built on the SPIP CMS platform using jQuery and Colorbox for UI enhancements. The site is moderately optimized for performance and mobile use but lacks advanced accessibility and SEO features. Security posture is weak, with no visible security headers or privacy policies, and the WHOIS data is missing or indicates the domain may be unregistered, which raises concerns about domain legitimacy. Overall, the site is functional but requires improvements in security, privacy compliance, and domain registration transparency.

GARA is a French archaeological research group focused on regional archaeological activities, exhibitions, conferences, and publications. The website serves as a platform to disseminate information about their research, events, and museum activities, targeting archaeology enthusiasts and the local community. The organization appears to be a small, non-profit entity founded recently in 2023, with a clear focus on cultural heritage preservation and education. Technically, the website is built on WordPress with common plugins such as Yoast SEO, Contact Form 7, and WP Statistics for analytics. Hosting is provided by OVH sas, a reputable French hosting provider. The site shows moderate performance and basic mobile optimization. SEO practices are good with proper meta tags and structured data, but accessibility features are basic. From a security perspective, the site uses HTTPS and has domain status protections but lacks DNSSEC and important security headers like CSP or HSTS. No privacy or cookie policies are present, indicating compliance gaps with GDPR. Contact information is available, including a company domain email and phone number, enhancing business credibility. No WAF or blocking mechanisms are detected, and the site content is safe and appropriate for general audiences. Overall, the website is professional and trustworthy but would benefit from improved security configurations and privacy compliance measures to enhance user trust and regulatory adherence.

Eiffage Canada operates as a multiskilled construction group focused on sustainable infrastructure development and local economic contribution. The company is part of the larger Eiffage Group, a well-established European construction and engineering conglomerate. Their Canadian website emphasizes quality, health and safety, environmental responsibility, and strong corporate values. The site targets construction industry clients, local communities, and suppliers in Canada, offering services in maintenance, rehabilitation, and new construction works. Technically, the website is built on the Jahia CMS platform, utilizing modern JavaScript libraries such as jQuery and APIs from YouTube and Vimeo for media integration. It employs Google Analytics and TagCommander for analytics and marketing, alongside OneTrust for cookie consent management, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with comprehensive metadata and structured data enhancing search visibility. From a security perspective, the site enforces HTTPS, uses reCAPTCHA for form protection, and displays a security alert warning users about impersonation attempts, reflecting a proactive security posture. However, the absence of WHOIS data for the domain www.eiffage.ca is a notable anomaly, though the website content and external links strongly associate it with the legitimate Eiffage Group. No critical vulnerabilities or exposed sensitive data were detected. Overall, Eiffage Canada's website presents a professional, secure, and compliant digital presence aligned with its business objectives. The main risk lies in the missing WHOIS data, which should be investigated further to ensure domain registration transparency and trustworthiness.

Eiffage Sénégal is a subsidiary of the multinational Eiffage Group, operating primarily in the construction, civil engineering, and energy sectors within Senegal. The company positions itself as a key player in infrastructure development, offering services such as road construction, building, and energy systems. The website reflects a professional corporate presence with clear branding and comprehensive information about its business activities and social commitments. Technically, the site is built on the Jahia CMS platform, uses modern web technologies including Typekit fonts and Google Analytics, and implements GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. The absence of explicit contact details and security policies on the homepage suggests areas for enhancement in transparency and user engagement. Overall, the website demonstrates a mature digital presence aligned with the company's market position in Senegal.

Eiffage Ævia is a specialized subsidiary of the Eiffage Group focused on the conservation, maintenance, and improvement of civil engineering infrastructure and heritage. The company offers both services and products tailored to the construction and repair of civil engineering works, leveraging specialized equipment and in-house developed systems. The website reflects a professional B2B orientation targeting infrastructure professionals and stakeholders in the energy, transportation, and real estate sectors. Technically, the site uses modern JavaScript libraries, integrates Google reCAPTCHA for form security, and employs OneTrust for cookie consent management, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and visible security alerts, though some security headers are missing and no explicit incident response contacts are published. The domain WHOIS data is unavailable, which raises some concerns about domain registration legitimacy, but the strong branding and affiliation with the reputable Eiffage Group mitigate these concerns. Overall, the website is professional, secure, and compliant with privacy regulations, serving its target audience effectively.

The website www.r-100.no represents a project by Norsk Hydro ASA focused on promoting Hydro CIRCAL R100, an innovative aluminium product made entirely from recycled post-consumer scrap. The site highlights collaborations with prominent designers and showcases exhibitions, targeting design professionals and sustainability advocates. The business model centers on corporate branding and sustainable innovation promotion within the energy and manufacturing sectors. Technically, the site is built using modern frameworks such as Next.js and Sanity CMS, with integration of privacy-focused analytics via Plausible. The site demonstrates good mobile optimization and a professional design, though some SEO and accessibility features could be improved. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks explicit security policies and headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced compliance and security transparency.

Notre aluminium is a Quebec-based industry platform promoting the region's aluminium sector, emphasizing its low-carbon footprint and critical role in North America's energy transition. The website positions Quebec as a global leader in aluminium production, highlighting historical milestones and industry achievements. Technically, the site is built on WordPress with modern plugins and tracking tools, offering good SEO and mobile optimization. Security posture is solid with HTTPS and consent mechanisms, though it lacks explicit security policies and contact details. Overall, the site is professional and trustworthy but could improve privacy and security transparency.

Redback Solutions is a well-established digital marketing and web design agency based in Newcastle, Australia, operating since 1999. The company offers a comprehensive range of services including web design and development, ecommerce solutions, SEO, digital marketing, and creative content production. Their market position is strong, supported by multiple industry partnerships and awards such as the 2025 Australian Web Awards. The website reflects a professional and trustworthy digital presence targeting businesses seeking digital growth and online results. Technically, the site is built on WordPress with modern integrations including Google Tag Manager, Facebook Pixel, and live chat services, demonstrating a mature digital infrastructure. Performance and mobile optimization are good, with SEO best practices well implemented. Security posture is adequate with HTTPS enforced, but lacks explicit security headers and formal security policies. Privacy compliance is limited due to absence of privacy and cookie policies, which should be addressed to meet regulatory standards. Overall, the website is professional and credible with room for improvement in privacy and security transparency.

IONOS SARL is a prominent web hosting and cloud services provider targeting both individual and professional customers primarily in France and Europe. The company offers a comprehensive portfolio including domain registration, web hosting, email solutions, cloud services, website building tools, and e-commerce hosting. Their market position is that of a large enterprise with a strong brand presence and consistent digital footprint across multiple country-specific domains. The website is professionally designed with excellent content quality, clear navigation, and mobile optimization, reflecting a mature digital infrastructure. Technically, the site leverages modern web technologies such as Next.js and React, ensuring a responsive and performant user experience. The presence of structured data and comprehensive meta tags supports good SEO practices. Security-wise, the website enforces HTTPS, implements key security headers, and uses secure forms, indicating a solid security posture. However, the absence of explicit security policies, incident response information, and vulnerability disclosure mechanisms suggests areas for improvement in transparency and security governance. The WHOIS data for the domain is notably missing or unavailable, which is unusual for a major enterprise and could be due to registry policies or privacy protection. While this does not directly indicate malicious intent, it reduces the transparency of domain ownership and registration details, slightly impacting trustworthiness. Overall, the website is safe, professional, and trustworthy, with no signs of adult or questionable content. Strategically, IONOS should enhance its security transparency by publishing detailed security policies and incident response contacts, and consider providing vulnerability disclosure channels. These steps will strengthen customer trust and compliance posture. Continued investment in technical modernization and privacy compliance will support sustained market leadership.

PlanetHoster Forums is an official community platform supporting PlanetHoster's web hosting services. It serves as a hub for customers to discuss maintenance, outages, reviews, tutorials, and technical support. The forum is well-structured, bilingual (primarily French), and actively maintained with thousands of discussions and messages. The website uses modern web technologies including XenForo CMS, jQuery, FontAwesome, and integrates Google Analytics and Tag Manager for analytics. HTTPS is enforced with a valid SSL certificate, and forms include CSRF tokens, indicating a good security baseline. However, some security headers are missing, and no explicit security or incident response policies are published on the forum site. Privacy and terms of service pages are present and linked, showing attention to compliance. The WHOIS data is privacy protected but consistent with an active and legitimate domain. Overall, the site demonstrates a professional and trustworthy presence with a strong community focus.

LWS is a well-established French web hosting and domain registration company founded in 1999, offering a broad range of services including shared hosting, VPS, dedicated servers, WordPress optimized hosting, email solutions, and cloud storage. The company targets individuals, professionals, and agencies seeking reliable and affordable web presence solutions. Their market position is strong with over 680,000 hosted sites and 800,000 registered domains, supported by ISO 27001 certified datacenters in France. Technically, the website demonstrates a mature digital infrastructure using modern JavaScript libraries, Google Tag Manager, Bing Ads tracking, and cookie consent mechanisms. The site is fast, mobile-optimized, and SEO-friendly, reflecting a high level of digital maturity. Hosting is self-managed with servers located in France, emphasizing data sovereignty and security. From a security perspective, LWS enforces HTTPS, implements daily backups, and operates ISO 27001 certified datacenters. However, explicit security headers like CSP and HSTS are not detected, and no public vulnerability disclosure or incident response contacts are published, indicating areas for improvement. The WHOIS data for the domain is restricted, which is common for .be domains but slightly reduces transparency. Overall, LWS presents a professional and trustworthy web presence with strong business credibility and technical implementation. The risk profile is low, with recommendations to enhance security headers and publish clearer security policies to further strengthen trust and compliance.

LWS is a well-established French web hosting company with a strong presence in Canada, offering a wide range of hosting services including domain registration, VPS, WordPress hosting, and cloud storage. Founded in 1999, it hosts over 680,000 websites and operates 4500 servers in France, emphasizing performance, security, and customer support. The company targets individuals, enthusiasts, and businesses seeking reliable and affordable web hosting solutions. Technically, the website employs modern technologies such as jQuery, Google Tag Manager, and integrates cookie consent mechanisms, ensuring GDPR compliance. The hosting infrastructure is self-managed with ISO 27001 certified datacenters in France, providing robust security and data protection. Security posture is strong with HTTPS enforced, daily backups, and secure data centers, though some security headers could be improved and a security.txt file added. The website is professional, mobile-optimized, and SEO-friendly, with extensive trust signals including customer reviews and certifications. However, the absence of WHOIS data for the domain introduces some uncertainty about domain registration transparency, though the overall business credibility remains high.

Culligan Storkök AB operates as a leading Swedish provider of commercial kitchen solutions, offering comprehensive services from planning and design to installation and maintenance. With over 30 years of industry experience and a nationwide service network, the company targets professional kitchens including restaurants, cafes, and schools. The website reflects a mature digital presence with professional branding, clear service offerings, and strong customer engagement channels. Technically, the site is built on WordPress with modern frameworks and integrates advanced analytics and marketing tools while maintaining GDPR compliance. Security posture is solid with HTTPS and CAPTCHA protections, though there is room for improvement in HTTP security headers and formal security policies. Overall, the site demonstrates high professionalism and trustworthiness, supporting Culligan Storkök's market position as a reliable B2B partner in the hospitality sector.

ChatVusyon.ai is a small technology company offering an AI chatbot solution designed to enhance website customer support, lead generation, and ensure GDPR compliance. The website is professionally designed using modern tools such as Framer and integrates multiple third-party analytics and marketing technologies including Google Analytics, Hotjar, Facebook Pixel, and LinkedIn Insight Tag. While the technical infrastructure is modern and the website is mobile optimized with good SEO practices, there are notable gaps in privacy compliance and security best practices. No privacy or cookie policies are present, and no contact information or security policies are published, which may impact user trust and regulatory compliance. The domain registration uses privacy protection, which is common for startups but reduces transparency. Overall, the website presents a functional and professional front but requires improvements in privacy, security headers, and contact transparency to enhance trust and compliance.

The website represents a secure login portal for Telekom Deutschland GmbH's domain management system, facilitating the registration and administration of internet domain names and DNS zones. It serves primarily Telekom's domain customers and administrators, reflecting the company's position as a leading telecommunications provider in Germany. The platform is branded consistently with Deutsche Telekom's corporate identity and provides clear contact channels for support. Technically, the site is built using JavaServer Faces with PrimeFaces 11.0.0 and jQuery, indicating a mature enterprise web application stack. While the site shows moderate performance and basic mobile optimization, it lacks advanced SEO and accessibility features. Security practices include secure cookies and password input protections, but HTTP security headers are not evident, suggesting room for improvement. From a security perspective, the site does not exhibit vulnerabilities or exposed sensitive data. However, the absence of explicit security policies and incident response information publicly available limits transparency. The WHOIS data is restricted due to DENIC policies but aligns with Telekom's infrastructure, supporting legitimacy. Overall, the site is trustworthy and professionally maintained. Recommendations include enhancing security headers, improving mobile responsiveness and accessibility, and publishing clear security and incident response policies to strengthen user trust and compliance posture.

DTScout is a small technology company based in Israel specializing in audience discovery and data aggregation for marketers and publishers. Their platform aggregates large-scale audience data to enable targeted advertising and improved monetization for publishers. The website demonstrates a professional design with clear navigation and a strong emphasis on privacy compliance, including opt-out mechanisms and user data request forms. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and integrates analytics and advertising tools like Google Analytics and AdRoll. However, the absence of WHOIS registration data raises concerns about domain legitimacy, which impacts overall trust. Security practices are moderate with room for improvement in headers and incident response transparency. Overall, the site is functional and business-focused but requires domain registration verification and enhanced security policies to improve credibility.

whos.amung.us Inc. operates a web analytics platform offering free and pro-tier real-time visitor statistics and heatmap widgets for websites and blogs. The service targets website owners and bloggers seeking immediate insights into visitor behavior without requiring account registration. The company positions itself as an established player in the web analytics market, with a business model centered on free widget usage complemented by paid Pro features. The website content is professionally designed, consistent, and supported by mentions in reputable technology media outlets, indicating moderate market trust and recognition. Technically, the website employs a modern JavaScript technology stack including jQuery, Bootstrap, Fancybox, and Google Tag Manager for analytics and marketing. The site is mobile-optimized with good SEO practices and moderate performance. However, accessibility features are basic and no CMS or hosting provider details are evident. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers are not detected and no explicit security policies are published. From a security and compliance perspective, the site lacks explicit cookie consent mechanisms and GDPR compliance indicators, which could pose privacy compliance risks. The absence of WHOIS data due to privacy protection reduces transparency but is common for this business type. No incident response or vulnerability disclosure policies are found, limiting the security maturity visibility. Overall, the site is safe with no adult or questionable content, but improvements in privacy compliance and security transparency are recommended. Strategically, whos.amung.us should enhance its privacy and security disclosures, implement cookie consent, and publish incident response and vulnerability disclosure policies to strengthen trust and compliance. Technical modernization focusing on accessibility and security headers would further improve the security posture and user experience.

GELD DATA d.o.o. is a Croatian ICT company specializing in software development, data collection, validation, and IT services, founded in 1992. The company positions itself as a regional player with expertise in business data analytics, GDPR compliance support, and virtual expertise services. Their website reflects a professional business focus targeting companies needing accurate and verified business data, particularly in the EU market. Technically, the site is built on Bitrix24 CMS with Bootstrap and integrates Facebook Pixel for marketing analytics. The site is mobile-optimized and well-structured, though some accessibility features are basic. Security posture is adequate with HTTPS enabled but lacks visible security headers and formal privacy or cookie policies, indicating room for compliance improvement. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include enhancing privacy compliance, implementing security headers, and publishing incident response information to strengthen trust and security culture.

Fragmat is a medium-sized manufacturing company specializing in insulation solutions for modern construction and related industries. The company holds a leading market position in Slovenia and is recognized across Europe for its high-quality thermal insulation, waterproofing, radiant heating, and packaging products. The website reflects a professional business with clear product offerings and references to significant projects, targeting construction professionals and industry clients. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses common analytics and marketing tools such as Google Tag Manager and Facebook Pixel. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is good with HTTPS enforced and no visible vulnerabilities, but security headers and explicit security policies are absent. The domain WHOIS data is privacy protected by EURid, which is typical for European domains and justified for this business type. No suspicious patterns were found. Contact information is transparent and consistent with the company brand. Privacy and cookie policies are present and indicate GDPR compliance. Overall, Fragmat's digital presence is solid, supporting its business credibility and market position. Security and privacy practices are adequate but could be enhanced with additional policies and technical controls.

Dunapack Packaging is a large European manufacturer specializing in customized corrugated cardboard packaging solutions, operating 24 plants across 12 countries. The company is part of the Prinzhorn Group and emphasizes sustainability and circular economy principles in its business model. The website is professionally designed, multilingual, and provides comprehensive information about products, locations, and corporate values. Technically, the site is built on TYPO3 CMS with modern front-end frameworks and integrates Google Tag Manager and analytics tools with user consent mechanisms. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. The absence of WHOIS data reduces domain trust slightly but the overall corporate presence and transparency mitigate concerns. Contact information is clear and extensive, supporting business credibility.

Čazmatrans - Nova d.o.o. is a Croatian transportation company specializing in bus services within Croatia and international routes. The website provides an online ticket purchasing platform targeting general travelers and commuters. The company has a medium-sized presence with multiple subsidiaries and a well-established market position since 2012. The website is professionally designed with good navigation, mobile optimization, and relevant content focused on transportation services. Technically, the site uses modern JavaScript libraries such as jQuery, Swiper.js, and integrates Google services like Tag Manager and Maps API, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS implied, cookie consent implemented, and secure payment logos displayed, though there is room for improvement in security headers and incident response transparency. Overall, the site is trustworthy, compliant with GDPR, and provides a safe user experience.

CREAPLUS is a well-established European cybersecurity and AI consulting, distribution, and software development firm founded in 2008. The company specializes in delivering comprehensive cybersecurity solutions including cryptography, AI, and software development services to regulated industries such as banking, pharmaceuticals, telecommunications, and energy. Their market position is strong with over 15 years of experience and multiple certifications including ISO 27001 and Cyber Essentials Plus. Technically, the website is built on WordPress with modern plugins like Elementor and Slider Revolution, hosted with Cloudflare DNS and a reputable registrar. Security posture is good with HTTPS and domain transfer protection, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional, content-rich, and trustworthy, targeting enterprise clients seeking secure innovation in cybersecurity and AI.

Comark is a specialized project logistics company based in Slovenia, focusing on the transportation and packing of cargo worldwide. The company offers a range of services including project cargo handling, heavy and oversized transport, government and defence logistics, cargo packing, permits and escorts, and relocation and assembly. With over 25 years of experience in oversize load logistics and ISO 9001:2015 certification, Comark positions itself as a reliable and knowledgeable partner in complex logistics projects. The website reflects a professional and consistent brand image targeting businesses requiring specialized logistics solutions globally. Technically, the website is built on WordPress using a modern tech stack including Yoast SEO, Google Tag Manager, Google Analytics, and WPML for multilingual support. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. Security measures include HTTPS, reCAPTCHA for forms, and cookie consent mechanisms; however, DNSSEC is not enabled and security headers are not explicitly detected, indicating room for improvement. The security posture is solid but could be enhanced by implementing DNSSEC, security headers, and publishing a formal security policy and incident response contacts. Privacy compliance is basic but present, with clear cookie and privacy policies and GDPR compliance indicators. Contact information is comprehensive and clearly presented, enhancing business credibility. No signs of malicious activity or suspicious domains were found, and the domain registration details align well with the business claims, supporting legitimacy. Overall, Comark's digital presence is professional and trustworthy, with good business credibility and moderate technical maturity. Strategic improvements in security and privacy transparency would further strengthen their posture and trustworthiness.

Coface Slovenia is a leading credit insurance and risk management company supporting business growth by offering credit insurance, debt collection, and business information services. Established in 1946 and part of the global Coface Group, it serves a broad B2B audience across Slovenia and internationally. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive business information. Technically, the site uses modern frameworks such as Symfony and is hosted on AWS infrastructure, with integrations for consent management and analytics. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is trustworthy, GDPR compliant, and well-optimized for SEO and accessibility.

Claus Møller Consulting is a small, specialized consulting and training organization focused on developing General Business Excellence for companies, teams, and individuals. Their services emphasize improving productivity, relationships, quality, leadership, and management at multiple organizational levels. The company is well established with a domain registered since 2002 and operates primarily from Slovenia. The website is professionally designed using WordPress with Divi theme and integrates e-commerce and learning management systems to support their training offerings. Technically, the site employs modern web technologies and third-party services such as Google Analytics, Zoho SalesIQ, and social media tracking pixels, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and domain transfer protections, but lacks advanced security headers and DNSSEC. Privacy compliance is basic, with a cookie consent mechanism but no explicit privacy policy or terms of service found. Overall, the website presents a trustworthy and professional image with room for improvement in security and privacy transparency.

BOSQAR INVEST is a prominent company builder and perpetual capital provider focused on the Central and Eastern Europe (CEE) region. Founded in 2016, the company has rapidly expanded through strategic acquisitions and partnerships, establishing itself as a pan-European leader across multiple industries including business process outsourcing, human resources, and the agri-food sector. The website reflects a mature business with a strong emphasis on sustainability, investor relations, and corporate governance. The company operates several subsidiaries such as Mplus and Workplace, and has launched significant initiatives like sustainability-linked bonds and proprietary AI platforms.

Aquafil is a well-established company specializing in the production of Polyamide 6 and pioneering circular business models in the textile and clothing sector. The company positions itself as a leader in sustainable textile manufacturing with a focus on environmental responsibility. Their website reflects a mature digital presence built on WordPress, incorporating modern technologies such as Google Tag Manager and Cookiebot for privacy compliance. The site is professionally designed, mobile-optimized, and provides comprehensive privacy and cookie policies, demonstrating a commitment to GDPR compliance. However, explicit contact details such as emails and phone numbers are not directly provided, relying instead on a contact form for communication. The WHOIS data for the domain is unavailable or indicates the domain may not be registered, which is inconsistent with the company's claimed history and raises questions about domain registration transparency. Security posture is generally strong with HTTPS enforced and cookie consent implemented, but additional security headers and explicit security policies could enhance trust. Overall, the website is professional and trustworthy, but the domain registration ambiguity warrants further investigation.

Apiherbal Ltd. is a Croatian company specializing in the development, certification, registration, distribution, and marketing of natural herbal-based medical devices and cosmetic products. The company holds a CE ISO 13485 certification, indicating compliance with medical device quality management standards. Their product portfolio targets uro-genital diseases, chronic wounds, inflammatory skin diseases, and menopausal issues, positioning them as a niche player in the healthcare sector focused on natural remedies. The website is professionally designed, mobile-optimized, and provides comprehensive contact information and legal policies, supporting a trustworthy online presence. Technically, the website runs on WordPress with popular plugins such as WPBakery Page Builder and Slider Revolution. It integrates Google Analytics and Google reCAPTCHA for analytics and security, respectively. The site uses HTTPS with a good SSL configuration but lacks some security headers and DNSSEC, which are recommended for enhanced security. Performance is moderate with good mobile responsiveness and basic accessibility features. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, CAPTCHA protection on forms, and cookie consent mechanisms. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure information. The WHOIS data is transparent and consistent with the business profile, enhancing trustworthiness. No critical vulnerabilities or suspicious content were detected. Overall, Apiherbal Ltd. presents a credible and professional online presence with a solid foundation in security and privacy compliance. Strategic improvements in security headers, DNSSEC, and explicit security policies would further strengthen their posture and trust with customers and partners.

ADRIARED is a small-sized company founded in 2021, specializing as an authorized distributor for mobile construction and contactless access solutions, primarily serving investors and companies in the DACH and ADRIA regions. The company leverages extensive regional business experience and partnerships to connect stakeholders and implement innovative business models. The website is built on WordPress with Themify builder, integrating modern technologies such as Google Analytics and reCAPTCHA Enterprise, reflecting a moderate to good level of digital maturity. Security posture is solid with HTTPS and anti-bot measures, though some improvements like DNSSEC and security headers are recommended. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy policy or terms of service, representing a compliance gap. Overall, the website is professional, trustworthy, and content-rich, supporting the company's business credibility.

The website eu-skladi.si is an official Slovenian government portal managed by the Ministry for Digital Transformation, providing comprehensive information and services related to European Union funds and cohesion policy. It serves as a key resource for Slovenian businesses, public institutions, and citizens seeking funding opportunities, calls for proposals, and policy updates. The site is well-branded, consistent, and professionally maintained with clear navigation and relevant content tailored to its audience. Technically, it is built on the Plone CMS platform with modern frontend technologies such as jQuery, Foundation CSS, and Font Awesome, hosted behind Cloudflare DNS services. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks some advanced security headers and explicit security policies. Privacy compliance is partially addressed with a cookie consent banner but no visible privacy policy page. Contact information is clearly provided, including emails, phone numbers, and physical address, enhancing trust and credibility. Overall, the site is trustworthy, safe, and serves its government function effectively.

Kulturzentrum Merlin is a non-profit socio-cultural center located in Stuttgart, Germany, focusing on providing a platform for concerts, literature, children's activities, films, and festivals. The website positions itself as a local cultural hub serving a general audience with family-friendly content. Technically, the site is built on WordPress using the Divi theme and several plugins including Yoast SEO and Contact Form 7, indicating a moderate level of digital maturity. The site is mobile optimized and uses HTTPS, but lacks some advanced security headers and explicit privacy and terms of service pages. Security posture is adequate but could be improved with better header implementation and explicit security policies. Overall, the website is trustworthy and professional, though it would benefit from enhanced privacy compliance and clearer contact information.

Humacom srl is a Belgium-based communication agency specializing in event management and communication services, including physical and virtual events, association management, and corporate identity design. The company targets businesses of all sizes seeking professional event communication solutions and positions itself as a dynamic and creative agency with international reach. The website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the site is built on Drupal 7 with older JavaScript libraries, indicating some technical debt but remains functional and moderately optimized for mobile devices. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though lacking advanced security headers and updated libraries. Privacy compliance is well addressed with clear policies and GDPR consent mechanisms. The absence of WHOIS registration data is a concern and should be investigated further to confirm domain legitimacy. Overall, the website presents a trustworthy and professional front for the business, with room for technical and security improvements.

chiliSCHARF GmbH operates a professional photography studio specializing in industrial, advertising, business portrait, and food photography services primarily in Austria. The company targets businesses and professionals requiring high-quality visual content for marketing, catalogs, online shops, and corporate branding. Their website demonstrates a strong market position as a specialized regional service provider with a comprehensive portfolio and clear contact channels. Technically, the website is built on TYPO3 CMS with Bootstrap framework, ensuring a modern, responsive, and accessible user experience. The site integrates advanced consent management via Usercentrics and tracking tools like Leadinfo and Google Tag Manager, reflecting a mature digital infrastructure. Performance and SEO optimizations are well implemented, contributing to excellent content quality and navigation clarity. From a security perspective, the site uses HTTPS and employs email obfuscation to protect contact details. However, no explicit security headers or published security policies were detected, and WHOIS data is unavailable, which slightly reduces domain trustworthiness. Cookie consent mechanisms and GDPR compliance indicators are present, but incident response and vulnerability disclosure information are missing. Overall, the website presents a professional, trustworthy, and user-friendly platform for chiliSCHARF GmbH's photography services. The main risk lies in the lack of WHOIS transparency and limited visible security policies, which should be addressed to enhance trust and compliance.

Build Better Bones is a non-profit educational website operated by the International Osteoporosis Foundation, providing global resources to individuals diagnosed with osteoporosis, their caregivers, and those seeking prevention strategies. The site offers comprehensive guidance on exercise, nutrition, and home safety to support bone health. The website is well-branded, professionally designed, and clearly targeted at a healthcare audience with a focus on osteoporosis education. Technically, the website is built on Drupal 9, leveraging modern web technologies including Google Tag Manager and AddToAny for social sharing. The site is mobile-optimized, accessible, and performs moderately well. Privacy and cookie policies are present and linked to the parent foundation's domain, indicating good privacy compliance. However, explicit security policies and incident response information are not published. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers are not explicitly detected. No vulnerabilities or suspicious domains were found. WHOIS data is unavailable due to privacy protection, which is justified given the non-profit nature of the organization. Overall, the site demonstrates a trustworthy and professional presence with minor areas for security enhancement. The overall risk is low, with recommendations focusing on improving security headers, publishing security policies, and adding vulnerability disclosure information to enhance transparency and trust.

IOF Academy is a specialized e-learning platform dedicated to osteoporosis and bone health education, operated by the International Osteoporosis Foundation. It offers a range of CME accredited courses designed by global experts, targeting healthcare professionals and researchers. The platform is well-branded, professionally designed, and provides comprehensive educational content with certificates of achievement. Technically, the website is built on Drupal 10 with modern frameworks and libraries, ensuring good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong with clear policies and GDPR adherence. Overall, the website demonstrates high business credibility and trustworthiness, supported by its association with a reputable international foundation.

Türkische Gemeinde Deutschland (TGD) is a German non-profit umbrella organization representing the interests of people with Turkish migration backgrounds. The website provides comprehensive information about their projects, member associations, and societal topics such as participation, equality, and diversity. The organization targets migrants and stakeholders interested in integration and social inclusion. Technically, the website is built on WordPress using WPBakery Page Builder and several plugins, with a moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though security headers are not explicitly detected. Privacy compliance is strong with detailed GDPR-compliant policies and consent management. Overall, the site is professional, trustworthy, and well-structured, supporting the organization's mission effectively.

The Deutsches Zentrum für Integrations- und Migrationsforschung DeZIM e.V. is a German non-profit research institute specializing in integration, migration, discrimination, and racism studies. The website serves as a professional platform to disseminate research findings, publications, and event information targeting academics, policymakers, and practitioners. The institute is funded by the German Federal Ministry for Family Affairs, Senior Citizens, Women and Youth, indicating strong institutional backing and credibility. Technically, the website is built on TYPO3 CMS with modern frameworks like Bootstrap and jQuery, and it integrates accessibility tools such as ReadSpeaker webReader. The site is well-optimized for mobile and SEO, with a clear navigation structure and professional design. Security-wise, HTTPS is enforced, and a cookie consent mechanism is implemented with Matomo analytics configured for privacy. However, additional security headers and explicit security policies could enhance the security posture. Overall, the website is trustworthy, compliant with GDPR, and provides a safe browsing experience.

ProjectTogether is a German non-profit organization established in 2012 that aims to bring together society, politics, and economy for collaborative social impact. The website reflects a mature digital presence with a modern WordPress CMS using Elementor and Astra theme, integrated with marketing and analytics tools such as HubSpot, MailerLite, and Usercentrics for cookie consent. The organization maintains active social media channels on Facebook, Twitter (X), and LinkedIn, enhancing its community engagement and trustworthiness. Technically, the site is well-structured with good SEO and mobile optimization, though performance is moderate. Security posture is adequate with HTTPS enforced and domain registration transparency, but could be improved by enabling DNSSEC and adding additional security headers. Privacy compliance is basic, lacking explicit privacy and terms of service pages, which should be addressed to meet GDPR standards fully. Overall, the website is professional and trustworthy, serving its non-profit mission effectively.

The Robert Bosch Stiftung website represents a large, well-established non-profit foundation linked to the Bosch corporate group. The foundation focuses on funding and supporting projects in health, education, and global issues to promote a just and sustainable future. The website is professionally designed with excellent content quality, clear navigation, and consistent branding. It targets NGOs, educational institutions, policymakers, and the general public interested in social and global topics. Technically, the site uses Drupal 11 CMS with modern web technologies and moderate performance. Privacy compliance is strong, with clear cookie consent mechanisms and a comprehensive privacy policy. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are not publicly provided. Overall, the site is trustworthy, safe, and professionally maintained.

ZEOK e.V. Leipzig is a small non-profit organization focused on promoting open culture, anti-racism, and peaceful coexistence in Leipzig, Saxony, and across Germany. The website presents a professional and well-structured digital presence built on WordPress with the Kadence theme and related plugins, supporting educational and cultural initiatives such as workshops, publications, and festivals. The organization targets educators, activists, and the general public interested in diversity and anti-discrimination efforts. Technically, the site is well implemented with modern technologies, good mobile optimization, and SEO best practices. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, though some security headers and explicit policies are missing. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and professional, reflecting the organization's mission and activities effectively.