Medium-risk security reports

WT Wien Ticket GmbH operates a comprehensive online ticketing platform focused on cultural and entertainment events in Vienna, including concerts, musicals, theater, sports, and exhibitions. The company holds a strong market position as a leading ticket provider in the region, supported by a professional and user-friendly website. The platform targets a broad audience interested in Vienna's vibrant event scene, offering a seamless ticket purchasing experience. Technically, the website employs modern JavaScript libraries such as jQuery and Swiper.js, integrates multiple analytics and advertising tools, and demonstrates good mobile optimization and accessibility features. Security-wise, the site enforces HTTPS, uses session and authentication cookies securely, and implements a robust cookie consent mechanism, although some security headers could be improved. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR requirements, with clear business information consistent with WHOIS data.

XING is a prominent professional networking platform primarily serving German-speaking professionals and recruiters. It offers a comprehensive job marketplace with over one million job listings, employer reviews, salary insights, and recruitment solutions. The platform targets professionals seeking career advancement and companies looking to hire qualified candidates. Technically, XING employs modern web technologies including React, JavaScript, and integrates consent management tools like Usercentrics and marketing automation via Braze, indicating a mature digital infrastructure. The website is well-optimized for performance, mobile responsiveness, and accessibility, providing an excellent user experience. Security-wise, the site enforces HTTPS, implements multiple security headers, and manages user consent effectively, though it lacks publicly disclosed incident response contacts and security certifications. The absence of WHOIS registration details limits transparency but does not detract from the platform's established market presence and trustworthiness. Overall, XING demonstrates a strong security posture and compliance with privacy regulations, making it a reliable platform for professional networking and job search.

Heyflow GmbH operates a sophisticated SaaS platform focused on converting website visitors into qualified leads through interactive, no-code funnels and landing pages. The company targets lead generation marketers and businesses seeking to optimize paid marketing campaigns with a comprehensive solution that includes over 50 integrations, analytics, and customization options. Their market position is solid, supported by thousands of customers and positive reviews on major platforms like G2 and Capterra. Technically, Heyflow leverages modern web technologies including Eleventy for static site generation, Cloudflare for DNS and CDN, and Matomo alongside Google Analytics for data insights. The website is fast, mobile-optimized, and SEO-friendly, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS, employs clientTransferProhibited domain status, and integrates consent management via Usercentrics, although explicit security headers and a dedicated security policy page are absent. Overall, Heyflow demonstrates a strong security posture with room for improvement in transparency and incident response readiness. The business is credible, transparent, and compliant with GDPR, making it a trustworthy platform in the marketing technology space.

DISCO S WAVE, INC. operates the website disco.ac, providing an all-in-one music management platform designed to help artists, rights holders, brands, and music supervisors organize, share, and discover music tracks efficiently. The company positions itself as a trusted SaaS provider in the media industry with a strong customer base and a focus on simplifying music catalog management and collaboration. The platform leverages AI-powered discovery tools and offers mobile applications on iOS and Android, reflecting a modern and accessible digital infrastructure. Technically, the website is built using modern frameworks such as React and Next.js, hosted likely on Cloudflare infrastructure, and integrates various analytics and marketing tools including Google Tag Manager, TikTok Pixel, Facebook Pixel, and Intercom for customer engagement. The site demonstrates excellent performance, mobile optimization, and SEO practices, contributing to a high-quality user experience. From a security perspective, the site enforces HTTPS, implements key security headers, and provides a cookie consent mechanism aligned with GDPR compliance. However, it lacks publicly available security policies, incident response details, and vulnerability disclosure information, which are areas for improvement. The WHOIS data is not publicly available, indicating privacy protection, which is common for commercial SaaS businesses but slightly reduces transparency. Overall, the website presents a professional, trustworthy, and well-structured digital presence with moderate risk due to limited public registrant information and absence of explicit security disclosures. Strategic enhancements in transparency and security communication would further strengthen trust and compliance.

The website www.10vallalas.hu represents the '10 vállalás' initiative by MÁV-csoport, Hungary's national railway group, focusing on enhancing passenger experience through commitments such as delay insurance, fleet modernization, and improved cleanliness. The site targets Hungarian public transport users, providing detailed information about services and improvements. Technically, the site is built on Drupal 11 with Bootstrap and jQuery, integrating Google Analytics and Tag Manager for tracking. It is mobile-optimized and accessible with a clear navigation structure. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security headers and incident response information. Privacy compliance is strong, with a comprehensive cookie and privacy policy in Hungarian. Overall, the site is professional, trustworthy, and well-maintained, serving as an informative portal for MÁV-csoport's passenger commitments.

The website olympicteamaustria.tv serves as the official digital platform for the Austrian Olympic Committee, providing live streaming, video on demand, and event information related to Austrian Olympic athletes and sports. It targets sports enthusiasts and the Olympic community, offering pay-per-view and subscription-based access to content. The platform is relatively new, launched in 2023, and leverages a custom streaming infrastructure managed by partners such as Asport and SportPass Austria. The site demonstrates a good level of digital maturity with a modern tech stack, mobile optimization, and clear legal and privacy documentation. Security posture is solid with HTTPS and some security best practices, though improvements in DNSSEC and security headers are recommended. Overall, the platform is trustworthy, professionally designed, and compliant with GDPR requirements.

Envimap.hu is a specialized geospatial data provider focusing on delivering high-resolution aerial and LiDAR-based mapping products such as digital surface models, orthophotos, building models, and land cover classifications. Their services cater primarily to municipalities, forestry, real estate development, financial services, and engineering sectors within Hungary. The website demonstrates a modern technical infrastructure built on React and Gatsby, hosted likely on Netlify, with good mobile optimization and fast performance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks explicit security headers and published security policies. Privacy compliance is partial, with a cookie consent banner present but no privacy or terms of service pages found. Overall, the site is professional and trustworthy but could improve compliance and security transparency.

MÁV-csoport is the Hungarian state-owned railway group providing comprehensive passenger and freight rail services, infrastructure management, and related support functions. The website serves as a central portal for travel information, ticketing, service updates, and corporate information, targeting general public users and business partners. The company holds a leading market position in Hungary's transportation sector with multiple subsidiaries under its umbrella. Technically, the website is built on Drupal CMS with modern web technologies including jQuery and responsive design elements. It integrates Google Analytics and Facebook Pixel for analytics and marketing purposes, with a clear cookie consent mechanism ensuring GDPR compliance. The site demonstrates good mobile optimization, accessibility, and SEO practices. From a security perspective, the site enforces HTTPS and uses anonymized IP tracking in analytics. However, it lacks some advanced security headers and does not publicly disclose a security policy or incident response contacts. No vulnerabilities or suspicious activities were detected in the content or scripts. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting the business's credibility. Strategic improvements in security headers and transparency around security policies could further enhance its posture.

MÁV-csoport is a major Hungarian transportation group specializing in rail passenger transport and related services. The website provides comprehensive travel information, ticketing options, and customer support, targeting both domestic and international travelers. The site is well-structured, professionally designed, and mobile-optimized, reflecting a mature digital presence. Technically, it is built on Drupal CMS with modern JavaScript libraries and integrates Google Analytics and Facebook Pixel for marketing and analytics purposes, with a clear cookie consent mechanism in place. Security posture is solid with HTTPS enforced and anonymized analytics tracking, though additional security headers and explicit incident response policies could enhance protection. Overall, the domain registration and website content align well, indicating a legitimate and trustworthy entity. The site is free from blocking mechanisms or suspicious content, making it safe for general audiences.

The website www.adidas.hr is the official Croatian localized e-commerce platform for adidas, a globally recognized sportswear brand. It offers a comprehensive catalog of sports footwear, apparel, and accessories targeting a broad audience including men, women, and children. The site is professionally designed with clear navigation, multiple language and country alternates, and a customer loyalty program (adiClub), positioning it strongly in the Croatian retail sportswear market. Technically, the site leverages modern e-commerce infrastructure including Salesforce Commerce Cloud, Global-e for cross-border commerce, and advanced analytics and monitoring tools such as Google Tag Manager, Instana, and Tealium. Security measures include HTTPS enforcement, Google reCAPTCHA Enterprise, and security headers, reflecting a mature security posture. However, explicit security policies and incident response contacts are not publicly disclosed, representing an area for improvement. Overall, the site is trustworthy, well-structured, and compliant with GDPR, making it a reliable platform for customers.

Tency Music is a professional music licensing platform offering a large catalog of over 80,000 high-quality covers, instrumentals, stems, and karaoke tracks for sync and commercial use. The company targets media producers, advertisers, app developers, and video creators, providing fast licensing with a 48-hour response guarantee and tailored music solutions. The website is well-designed, mobile-optimized, and features notable clients such as Netflix, Amazon Prime, and Universal Music France, indicating a strong market position within the media industry. Technically, the site uses modern web technologies including Google Tag Manager and Google Fonts, hosted on a CDN associated with its parent company, Recisio. Security posture is good with HTTPS enforced and secure forms, but lacks some security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. WHOIS data is missing, which raises some concerns about domain registration transparency, but the professional site and business information mitigate some risk. Overall, the site is trustworthy and functional but should improve privacy compliance and security disclosures.

KaraFun, operated by Recisio, is a well-established online karaoke platform offering a broad catalog of karaoke songs and music quizzes accessible via multiple apps across devices. The business targets a broad audience including casual users and professional karaoke venues, with subscription-based revenue models and additional commercial offerings. The website is professionally designed, multilingual, and provides clear subscription plans and business solutions. Technically, the site uses modern web technologies, including SVG icons, Google Fonts, and privacy-focused Umami analytics, hosted likely on Recisio's infrastructure with CDN support. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response contacts could be improved. Privacy compliance is good with a comprehensive privacy policy, but lacks a visible cookie consent mechanism. Overall, the domain is privacy-protected but consistent with a legitimate, professional business presence.

CARENETWORKER is a German-based company specializing in networking and consulting services within the healthcare and social care market. Founded in 2020 and operating under the parent brand HILSE:KONZEPT, the company focuses on connecting industry players, service providers, and care institutions to foster innovation, market entry, and digital transformation. Their services include market development, pilot projects, product development, and cooperative business platform creation. The website is professionally designed, content-rich, and targets industry stakeholders, startups, and associations in the care sector. Technically, the website is built on the Multiscreensite CMS platform, utilizing modern web technologies such as jQuery, service workers, and Usercentrics for consent management. The site is mobile-optimized with good SEO practices and moderate performance. Hosting and domain registration are consistent with the business location in Germany. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent mechanisms. However, it lacks explicit security headers and detailed security or incident response policies. No vulnerabilities or suspicious activities were detected. Privacy compliance is well addressed with a clear privacy policy and GDPR opt-in on contact forms. Overall, CARENETWORKER presents a trustworthy and professional online presence with a solid business model in the healthcare networking space. Strategic improvements in security headers and incident response transparency would enhance their security posture and trustworthiness further.

Care for Innovation e. V. is a German-based association focused on shaping the future of the healthcare and nursing sector through digital innovation. The organization acts as a network alliance connecting startups, scale-ups, and established partners across Europe to foster collaboration, pilot projects, and knowledge exchange. Their key services include organizing events such as CFI-Talks and the CESB Rütteltest, providing visibility for innovations, and representing members' interests politically. The website is professionally designed, primarily in German, and targets healthcare innovators and stakeholders in the European market. Technically, the site is built on Webflow CMS, uses modern web fonts, and is hosted on AWS Cloudfront CDN, ensuring good performance and mobile responsiveness. Security posture is solid with HTTPS enforced, but lacks some security headers and explicit cookie consent mechanisms. WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy. Overall, the site is trustworthy and professional but would benefit from improved transparency in domain registration and enhanced privacy compliance features.

Heyflow is a technology company providing a SaaS platform for building interactive, no-code forms designed to increase user engagement and conversion rates. The platform offers drag & drop design, conditional logic, and seamless integrations with popular CRMs and analytics tools, positioning itself as a flexible and user-friendly solution for marketers and businesses. The website is professionally designed with consistent branding and clear messaging targeting business users seeking enhanced lead generation tools. Technically, the site leverages modern JavaScript frameworks, asynchronous script loading, and integrates with major analytics and marketing platforms such as Google Analytics, Google Tag Manager, and Facebook Pixel. Hosting and DNS are managed via Cloudflare, ensuring good performance and security. Security posture is solid with HTTPS enforced and domain transfer protections, though additional security headers and a formal security policy could enhance trust. Privacy compliance is addressed with a cookie consent mechanism and links to privacy and imprint pages, indicating GDPR awareness. No direct contact emails or phone numbers are provided on the site, which may impact user trust slightly. Overall, the site is secure, performant, and business credible with room for improvement in explicit security disclosures and contact transparency.

The adidas Saudi Arabia website serves as the official regional online store for adidas, offering a wide range of sportswear, shoes, and accessories tailored to the Saudi Arabian market. The site is well-branded, professionally designed, and provides localized services such as next-day delivery in Riyadh and a welcome discount offer. Technically, the site leverages Salesforce Commerce Cloud, Global-e for international e-commerce, and advanced monitoring and security tools including Google reCAPTCHA Enterprise and Instana. Security posture is strong with HTTPS, security headers, and bot protection in place. Privacy and cookie policies are present and indicate GDPR compliance, although explicit data protection officer contacts and incident response policies are not found. The absence of WHOIS data for the domain is noted but likely due to SaudiNIC domain registration policies rather than a legitimacy concern. Overall, the site demonstrates a mature e-commerce platform with good security and privacy practices, suitable for a large retail brand.

The adidas UAE website is a professionally designed and well-structured e-commerce platform representing the global adidas brand in the United Arab Emirates. It offers a wide range of sportswear, footwear, and accessories targeting consumers interested in athletic and lifestyle products. The site leverages advanced e-commerce technologies including Salesforce Commerce Cloud and integrates third-party services for analytics, marketing, and security. The technical infrastructure demonstrates a mature digital presence with good performance and mobile optimization. Security posture is strong with HTTPS, Google reCAPTCHA Enterprise, and monitoring tools, though some security headers and explicit incident response contacts are not visible. Privacy compliance is partially addressed with a privacy policy and terms of service, but lacks a visible cookie consent mechanism. Overall, the site is trustworthy and aligns well with the adidas brand identity and market positioning in the UAE.

The website represents the official adidas Brazil e-commerce platform, offering a wide range of sports shoes, apparel, and equipment. It targets general consumers interested in sportswear and fitness products, positioning itself as a leading brand in the Brazilian retail market. The site leverages modern web technologies including React and Next.js, hosted on a robust infrastructure likely supported by Akamai CDN, ensuring fast performance and excellent mobile optimization. Security posture is solid with HTTPS and modern TLS protocols, though explicit security headers and privacy policies are not detected in the provided content. The absence of visible contact information and privacy compliance elements suggests areas for improvement. Overall, the site is professional and trustworthy, consistent with a global brand's standards.

Karaoke-Version.com is an established e-commerce platform specializing in downloadable instrumental and karaoke tracks, offering over 84,000 songs with customization features. The site targets karaoke enthusiasts and musicians globally, providing various product types including custom backing tracks, vocal backing tracks, video karaoke, and instrument-specific versions. The business is operated by Recisio, a company with a history dating back to 2004, positioning itself as a leading source in the karaoke music niche. Technically, the website employs modern web technologies such as jQuery, Google Analytics, and Google Tag Manager, hosted on a dedicated CDN infrastructure for optimal performance. The site is mobile-optimized with excellent design quality and user experience, supporting multiple languages and regional versions. SEO and accessibility practices are well implemented, contributing to strong digital maturity. From a security perspective, the site enforces HTTPS and displays secure payment logos indicating PCI compliance. However, it lacks visible security headers and a cookie consent mechanism, which are important for enhanced security and privacy compliance. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, although the website content and branding suggest legitimacy. Overall, Karaoke-Version.com presents a professional and trustworthy platform with a solid business model and technical foundation. Strategic improvements in security headers, privacy consent, and domain registration transparency would further strengthen its security posture and compliance standing.

KaraFun Group is a French-based company specializing in the production and distribution of multi-track instrumental music and karaoke-related technologies. They operate a diverse ecosystem including consumer karaoke applications, business solutions for karaoke bars, private karaoke box venues, and applications for musicians. The company positions itself as a leader in the karaoke and instrumental music market with a strong international presence and a rich catalog of exclusive music content. Technically, the website and associated services leverage a modern and diverse technology stack including PHP, C++, Kotlin, Swift, and Node.js, supporting multiple platforms such as Android, iOS, Mac, WebAssembly, and Windows. The website is well-designed, mobile-optimized, and SEO-friendly, reflecting a mature digital infrastructure. Security posture is generally good with HTTPS enforced and no obvious vulnerabilities detected, though the absence of security headers and explicit incident response policies suggests room for improvement. The WHOIS data is missing or inaccessible, which reduces domain trustworthiness despite the professional appearance and consistent branding of the website. Overall, KaraFun Group presents a credible and professional business with a solid technical foundation but should improve transparency in domain registration and privacy compliance mechanisms.

ÖGS.barrierefrei is a well-established Austrian non-profit organization founded in 2005, dedicated to providing barrier-free services and sustainable equal opportunities for deaf and hearing-impaired people. The organization acts as a vital interface between deaf, hearing-impaired, and hearing individuals in Austria, offering key services such as video production for accessible web content, sign language education, relay telephone interpreting services, and an online sign language news portal. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its target audience.

Revolution Payment System (R:PS) is a specialized technology provider offering NFC-based cashless payment solutions tailored for live events. Their platform aims to enhance event efficiency, increase revenue, and improve service quality by replacing cash transactions with NFC cards and bracelets. The company has established a credible market presence with notable clients such as EXIT festival and Sea Dance festival, positioning itself as a trusted partner in the event technology sector. The website reflects a professional and consistent brand image, targeting event organizers, salespersons, visitors, and banking partners.

The Österreichischer Gehörlosenbund (ÖGLB) is a well-established non-profit organization dedicated to serving Austria's deaf community since 1913. The website provides comprehensive information about the organization's history, services, advocacy efforts, and projects. It targets the Austrian deaf community and stakeholders interested in deaf rights and services. The site features multimedia content, including videos and newsletters, enhancing engagement and accessibility. The organization maintains a clear market position as a key advocate and service provider for the deaf community in Austria. Technically, the website is built on a modern WordPress platform using Elementor and WooCommerce, supported by performance optimization tools like WP Rocket. The site is mobile-optimized and includes SEO best practices, ensuring good user experience and discoverability. The use of multiple plugins for multilingual support, email marketing, and social media integration indicates a mature digital infrastructure. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. While some security headers could be improved, no critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the organization's claims, reinforcing legitimacy. However, the absence of explicit security policies or incident response contacts suggests room for improvement in transparency and preparedness. Overall, the website presents a professional, trustworthy, and user-friendly platform for its community. Strategic enhancements in security headers and publishing a security policy would further strengthen its posture. The organization is recommended to maintain regular updates and consider adding terms of service and incident response information to enhance compliance and user trust.

Il Giorno is a well-established Italian regional news media company focused on delivering real-time news from Lombardia. It operates under the parent company Monrif Net - S.p.A. and offers digital subscription services alongside its news publishing. The website demonstrates a modern technical infrastructure leveraging Next.js, various ad and tracking services, and multimedia content delivery. Security posture is solid with HTTPS and standard security headers, though explicit privacy and security policies are not found in the provided content. The site is accessible without WAF or blocking mechanisms, indicating good availability. Overall, Il Giorno presents a credible and professional digital presence in the media sector.

Il Giornale d'Italia is a national Italian news media outlet providing real-time news and video content covering politics, economy, culture, sports, and more. The website targets Italian-speaking audiences interested in comprehensive news coverage. It operates primarily on an advertising revenue model with a strong presence on major social media platforms. Technically, the site uses a mix of modern and legacy web technologies including jQuery, Bootstrap 3, and Google Analytics, indicating moderate digital maturity. The site is mobile responsive to a basic degree and implements cookie consent mechanisms to comply with GDPR. Security posture is good with HTTPS enforced and no major vulnerabilities detected, though some legacy libraries and lack of advanced security headers suggest room for improvement. Overall, the website is safe, professional, and trustworthy with moderate business credibility and good content quality.

FPT Software is a global technology leader specializing in digital transformation, AI, cloud, and IT services with a strong presence in Europe and worldwide. The company offers a broad portfolio of services including strategic IT consultancy, product engineering, and IT management, targeting enterprise clients across multiple industries such as manufacturing, energy, banking, and healthcare. The website reflects a mature digital infrastructure using modern frameworks and analytics tools, hosted behind Cloudflare for enhanced security and performance. Security posture is strong with HTTPS and no visible vulnerabilities, but lacks published privacy, cookie, and incident response policies, which are critical for GDPR compliance and user trust. Overall, the site is professional, well-branded, and content-rich, serving its target audience effectively.

Drblitz-weblab is a specialized TYPO3 CMS web development agency based in Poland, established in 2017. The company positions itself as a leader in the TYPO3 ecosystem, offering comprehensive services including website creation, implementation, updates, custom module development, and training. Their target audience primarily consists of businesses and organizations seeking professional TYPO3 solutions. The website is professionally designed, mobile-optimized, and provides a clear navigation structure, supporting their market positioning. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including JavaScript and CSS, with Google Tag Manager and Analytics integrated for marketing and analytics purposes. The domain is registered with OVH sas and uses Cloudflare for DNS services, ensuring reliable hosting infrastructure. Performance is moderate with good SEO and basic accessibility features. From a security perspective, the site uses HTTPS and has domain status protections to prevent unauthorized changes. However, it lacks DNSSEC, security headers, and explicit security or incident response policies on the site. Privacy compliance is partially addressed through a cookie consent mechanism, but no dedicated privacy policy or terms of service pages were found. No contact emails or phone numbers were explicitly identified in the provided content. Overall, the website demonstrates a solid business and technical foundation with room for improvement in security best practices and privacy compliance. Strategic recommendations include enabling DNSSEC, publishing comprehensive privacy and security policies, implementing security headers, and enhancing contact transparency to improve trust and compliance.

dieMAYREI GmbH is a small, regional fullservice creative agency based in Donauwörth, Germany, specializing in design, print, web, photo, and film production services. The company positions itself as a comprehensive branding and media partner for businesses seeking impactful visual identities and content. Their website reflects a professional and modern digital presence built on WordPress with Elementor, featuring strong branding consistency and clear service offerings. Social media integration includes Instagram, LinkedIn, and Facebook, supporting their market engagement. Technically, the site is well-optimized for performance and mobile responsiveness, leveraging modern libraries and SEO best practices. Security posture is good with HTTPS enforced, but lacks some advanced security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. WHOIS data is limited but does not raise immediate concerns. Overall, the website is trustworthy, professional, and safe for general audiences.

Haus der bayrischen Landwirtschaft Herrsching is a well-established educational and hospitality institution located in Herrsching am Ammersee, Germany. It offers a broad range of services including educational seminars, workshops, conference facilities, and accommodation. The organization targets agricultural professionals and individuals seeking personal development and knowledge exchange. The website reflects a regional market position with a strong focus on education and community engagement, supported by a 75-year history. Technically, the site is built on WordPress using Elementor and Jet plugins, providing a modern and responsive user experience with good SEO and accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the website is professional, trustworthy, and serves its audience effectively.

Captury is a technology company specializing in advanced markerless motion capture solutions that enable precise tracking of full-body, finger, and facial movements for multiple actors simultaneously. Their offerings include real-time processing and post-processing software, targeting industries such as 3D game development, VFX, virtual reality, live entertainment, in-game player tracking, and life sciences research. The company is positioned as a versatile and innovative player in the motion capture market, trusted by major clients like Airbus, Audi, and Rockstar Games. Technically, the website is built on WordPress and employs modern libraries such as jQuery, CSS3 Animate It, and Slick Carousel. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. Hosting and domain registration are consistent with the company's European and US presence. No WAF or blocking mechanisms were detected, allowing full content access. From a security perspective, the site uses HTTPS with good SSL configuration but lacks DNSSEC and security headers. There is no visible security policy or incident response information, and no cookie consent mechanism is implemented, which may impact privacy compliance. No vulnerabilities or exposed sensitive data were found in the HTML content. Overall, Captury's website presents a professional and trustworthy digital presence with room for improvement in privacy compliance and security best practices. Strategic enhancements in these areas would strengthen their security posture and regulatory adherence.

Transkribus is a mature AI-powered platform specializing in the transcription, recognition, and analysis of historical documents. Operated by the cooperative READ-COOP SCE, it serves a broad audience including researchers, archivists, and educational institutions. The platform offers advanced AI text recognition, custom model training, and collaborative tools, positioning itself as a leader in the niche of historical document digitization. Technically, the website leverages modern frameworks such as Next.js and React, with strong performance, mobile optimization, and accessibility. Security posture is robust with HTTPS, security headers, GDPR compliance, and consent management, although explicit security policies and incident response details are not publicly disclosed. Overall, the platform demonstrates high professionalism, trustworthiness, and a strong community-driven business model.

FlowPaper, operated by Devaldi Ltd, is a specialized technology company offering a digital publishing platform that converts static PDFs into interactive web publications such as flipbooks, catalogs, brochures, and magazines. The company targets content creators, marketers, and businesses seeking to enhance their digital content delivery with mobile-first and interactive features. The platform is positioned as a niche solution with a strong emphasis on user engagement, accessibility, and SEO optimization. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Material Design, and various JavaScript libraries to deliver a responsive and performant user experience. Hosting and DNS are managed via Cloudflare, ensuring robust delivery and security. The site is well-optimized for mobile devices and includes analytics integration through Google Tag Manager and Google Analytics, with appropriate cookie consent mechanisms in place. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and publicly available security policies or incident response contacts. No vulnerabilities or suspicious elements were detected in the content or scripts. The domain registration is consistent with the business profile, showing a long-standing presence and no privacy protection, which supports legitimacy. Overall, FlowPaper demonstrates a mature digital presence with strong business credibility and technical implementation. Strategic improvements in security policy transparency and incident response readiness would further enhance trust and compliance.

Embed Private YouTube Video is a small technology-focused business founded in 2017 that provides a specialized service and WordPress plugin enabling website owners to securely embed private YouTube videos. The company targets website owners and businesses requiring private video sharing solutions, positioning itself as a niche provider in this space. The website content is well-structured, professional, and consistent with the business model, offering clear service descriptions and customer testimonials that enhance trust. Technically, the website is built on WordPress and leverages common web technologies including jQuery, YouTube iframe API, and Google Fonts. The site is hosted under a domain registered with GoDaddy.com, LLC, with a stable registration status and no privacy protection, indicating transparency. Performance and mobile optimization are good, though accessibility is basic. SEO practices are adequately implemented with proper metadata and structured data. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and security headers such as Content-Security-Policy or Strict-Transport-Security. There is no visible security policy or incident response information, and no cookie consent mechanism is present, which may impact privacy compliance. The use of Facebook Pixel indicates moderate user tracking. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a moderate risk profile with room for improvement in security best practices and privacy compliance. Strategic recommendations include enabling DNSSEC, implementing security headers, adding cookie consent, and publishing security and incident response policies to enhance trust and compliance.

The Magyar Labdarúgó Szövetség (MLSZ) website serves as the official digital presence of the Hungarian Football Federation, providing comprehensive information on national teams, match results, news, and organizational resources. The site targets football fans, players, coaches, and officials within Hungary, positioning itself as the authoritative source for Hungarian football. The business model revolves around governance, event organization, fan engagement, and education within the sport. Technically, the website employs modern web technologies including Bootstrap for responsive design, jQuery, Font Awesome, and integrates social media SDKs from Facebook and Twitter. The site is mobile-optimized with good SEO practices and moderate performance. Privacy and cookie policies are well implemented with consent mechanisms, reflecting GDPR compliance. From a security perspective, the site enforces HTTPS, uses standard security headers, and avoids exposing sensitive data. However, explicit security policies and incident response contacts are not found, indicating room for improvement in transparency and readiness. No vulnerabilities or suspicious content were detected. Overall, the website is professional, trustworthy, and well-maintained, with a strong focus on content quality and user experience. Strategic recommendations include enhancing security transparency, adding vulnerability disclosure mechanisms, and improving accessibility features to further strengthen compliance and user trust.

Nagyerdei Stadion operates as a regional stadium and event venue in Hungary, providing services such as event hosting, ticket sales, and stadium card offerings. The website serves as a digital storefront and information portal for upcoming events, targeting sports fans and local attendees. The business appears established with a domain age of over 10 years, supporting its market presence. Technically, the site is built on Angular 14 with modern web fonts and icons, offering a responsive and user-friendly experience. However, the absence of explicit privacy and terms of service policies, as well as limited contact information, suggests room for improvement in transparency and compliance. Security posture is moderate with cookie consent implemented but lacking visible security headers or incident response contacts. Overall, the site is professional and functional but would benefit from enhanced security and privacy disclosures.

The website at henkel-na.com currently serves only a default cPanel placeholder page indicating no active business content or services. The domain WHOIS data is suspicious with a creation date set in the future (February 2025), which undermines trust and suggests the domain is either inactive or misconfigured. No privacy, cookie, or terms of service policies are present, and the only contact information is a generic webmaster email address. Technically, the site uses Apache and cPanel hosting but lacks HTTPS and security headers, exposing it to security risks. Overall, the website is not operational and provides no meaningful business or security information.

The website 'Udržitelná budoucnost' serves as a dedicated platform for dm drogerie markt s.r.o. to communicate its sustainability initiatives and corporate responsibility efforts. It targets environmentally conscious consumers and stakeholders interested in the company's sustainable development. The site is well-branded, consistent, and provides rich content focused on sustainability topics, extending from their official sustainability reports. Technically, the site employs modern JavaScript frameworks and a consent management platform (Usercentrics) to handle cookie policies, indicating a moderate level of digital maturity. However, the absence of explicit privacy policy and terms of service pages, as well as missing WHOIS data, slightly diminish the overall trustworthiness. Security posture is adequate with HTTPS usage and consent management but lacks visible security headers and detailed incident response information. Overall, the site is professional, safe, and well-structured but could improve transparency and security practices.

DARI Motion is a specialized healthcare technology company offering the world's only FDA-cleared markerless human motion analysis system. Their solution enables healthcare providers, wellness centers, and sports facilities to capture and analyze motion health data quickly and accurately, improving patient outcomes and athletic performance. The company has established a strong market position with patented technology and scientific validation, serving a medium-sized business footprint primarily in the United States. Technically, the website is built on WordPress hosted on WP Engine, leveraging modern libraries and SEO best practices, though performance is moderate and accessibility is basic. Security posture is adequate with HTTPS and domain protections but lacks DNSSEC and explicit security headers. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Business credibility is high with clear contact information, trust signals, and professional content. Overall, the website is professional, trustworthy, and well-branded, with room for improvement in security and privacy practices.

The website 'Situationsbericht 24/25' appears to be a German-language informational site with a focus on situational reports or news. The homepage title indicates a focus on current or ongoing reports for the years 2024/2025. However, the content provided is minimal and mostly technical frontend code without clear business descriptions or service offerings. The site uses modern web technologies such as Nuxt.js and Bootstrap, indicating a contemporary technical infrastructure. Despite this, there is a lack of visible privacy policies, cookie consent mechanisms, contact information, or security policies, which limits the site's compliance and trustworthiness. The security posture is weak due to missing security headers and lack of explicit HTTPS confirmation in the provided data. Overall, the site is accessible without WAF or security challenges but lacks critical compliance and security features.

The Stiftung für Begabtenförderung der Deutschen Landwirtschaft is a German non-profit foundation dedicated to supporting talented individuals in the agricultural sector through funding and scholarships for professional development courses, seminars, and internships. The website clearly targets individuals working in or connected to agriculture who seek educational advancement. The foundation positions itself as a niche player focused on agricultural education and talent promotion within Germany. Technically, the website is built on WordPress using the Divi theme, with common plugins such as Complianz for GDPR cookie consent and Matomo for analytics, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and published security policies or incident response information. Overall, the website is trustworthy and professional, though it could improve transparency around privacy policies and security disclosures.

The Kölner Liste website is a professional platform dedicated to providing transparency and information about dietary supplements tested for doping substances. Operated by HEIMSPIELE GmbH & Co. KG, it targets athletes, sports organizations, and companies interested in doping prevention. The site offers product listings, laboratory analyses, and educational content to promote clean sports. Technically, the site is built on TYPO3 CMS with modern frontend components and includes a cookie consent mechanism compliant with GDPR. Security posture is adequate with HTTPS enforced, though some security headers are missing. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy, but the website content and partnerships indicate a trustworthy organization. Overall, the site is well-designed, user-friendly, and serves a niche non-profit sector effectively.

Projustice.sk is a Slovak scientific and professional peer-reviewed journal specializing in law and security sciences. It serves an academic and professional audience including researchers, students, and legal/security practitioners. The website offers scholarly articles, podcasts created by AI, and research survey services. It is indexed in reputable academic databases such as EBSCO and DRJI, enhancing its visibility and credibility. The business model is non-profit with fundraising and sponsorship support. Technically, the site is built on Drupal 10 with modern frontend libraries and hosted on Websupport infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and professional content. Security posture is adequate with HTTPS and DNSSEC enabled, but lacks some security headers and formal privacy/cookie policies. Contact information is clearly provided, supporting business credibility.

RED NOSES International is a well-established non-profit organization founded in 1994, specializing in healthcare clowning and humanitarian aid to vulnerable populations including sick children, seniors, and disabled individuals. The organization operates in 11 countries with a medium-sized footprint and offers key services such as crisis response missions, advocacy, training, and research. The website reflects a professional and consistent brand presence with comprehensive content and clear navigation. Technically, the site is built on TYPO3 CMS with modern libraries like Bootstrap and jQuery, and integrates analytics and donation tools effectively. Security posture is strong with HTTPS and cookie consent mechanisms, though some security headers and incident response information are absent. WHOIS data is unavailable, which slightly impacts trust but the overall digital maturity and compliance with GDPR are positive. Strategic recommendations include enhancing security headers, publishing incident response contacts, and adding a vulnerability disclosure policy.

Kandersteg International Scout Centre (KISC) operates as the World Centre of the World Organisation of the Scout Movement (WOSM), providing accommodation, adventure programs, and volunteering opportunities primarily for scouts and youth organizations globally. The website reflects a well-established non-profit entity with a clear mission to support scouting activities and community engagement. The site is professionally designed with consistent branding and clear navigation, targeting a global scouting audience. Technically, the site is built on Drupal 7 with a range of JavaScript libraries enhancing user experience and interactivity. Mobile optimization and SEO practices are adequately implemented, though some accessibility features could be improved. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but lacks visible security headers and published security policies. WHOIS data confirms domain legitimacy and consistency with the organization's identity. Overall, the site is trustworthy, functional, and compliant with privacy regulations.

The website www.klima-plattform.de serves as a German national platform under the DIHK umbrella, aimed at fostering a network for companies and multipliers engaged in climate protection. It provides a centralized resource for improving climate protection knowledge and facilitating collaboration across Germany. The platform is powered by TYPO3 CMS, indicating a stable and mature technical foundation. However, the site lacks visible privacy and cookie policies, contact information, and security headers, which are critical for compliance and trust. No advanced analytics or tracking scripts were detected, suggesting a minimal data collection approach. The domain registration details are limited but appear consistent with the business purpose. Overall, the site presents a professional and focused business presence but requires improvements in privacy, security, and contact transparency to enhance trust and compliance.

KS-ORIGINAL GMBH operates the website projekt-weiss.blog, a professional German-language platform focused on promoting Kalksandstein (sand-lime brick) architecture and sustainable building projects. The site features project showcases, podcasts, and thematic content aimed at architects, builders, and construction professionals. The business positions itself as a niche leader in the Kalksandstein building materials sector, providing valuable content and engagement through multiple media formats. Technically, the site is built on Drupal 10 with modern web technologies, including lazy loading, responsive design, and integrated analytics via Matomo and Google Analytics. Privacy compliance is well addressed with a cookie consent mechanism and a comprehensive privacy policy. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response contacts are absent. The domain WHOIS data is privacy-protected, which is common and justified for business websites. Overall, the website is professional, trustworthy, and well-structured, serving its target audience effectively.

ROWE Mineralölwerk GmbH is a well-established German company specializing in the production and distribution of high-quality motor oils, gear oils, transmission oils, and lubricants for automotive and industrial applications. Founded in 1995, the company has built a strong international presence with a comprehensive product portfolio and a network of distributors. The website reflects a mature digital infrastructure with multi-language support, professional design, and clear navigation tailored to both industrial and private customers. Technically, the site employs modern technologies including Pimcore CMS, Matomo analytics, and Usercentrics for privacy compliance, ensuring a good user experience and adherence to GDPR standards. Security posture is robust with HTTPS enforcement and security headers, though some security policy documentation and incident response contacts are absent. The absence of WHOIS registration data is a notable concern, potentially indicating privacy protection or registration issues, which slightly impacts the trustworthiness score. Overall, the website is professional, secure, and compliant, serving as a credible digital front for ROWE Mineralölwerk GmbH.

Fondazione Pirelli is a well-established non-profit cultural foundation based in Italy, dedicated to preserving and promoting the corporate cultural heritage of Pirelli since 2008. The website serves a broad audience including the general public, educational institutions, and researchers by offering archival access, educational programs, exhibitions, and events. The foundation maintains a strong market position within the cultural and educational sectors, leveraging its historical ties to the Pirelli brand. Technically, the site is built on WordPress with modern JavaScript libraries and SEO optimizations, providing a good user experience and mobile responsiveness. Security measures include HTTPS, Google reCAPTCHA on forms, and cookie consent mechanisms, although some security headers could be improved. Privacy compliance is robust with clear policies and GDPR adherence. Overall, the site is professional, trustworthy, and safe for general audiences.

VHE Industrial automation is a specialized B2B partner focused on co-development and production of high-tech machine control, connectivity, and motion control systems. The company targets Original Equipment Manufacturers in advanced technology sectors, providing integrated hardware and software solutions to accelerate innovation and time-to-market. The website reflects a mature digital presence with professional design, comprehensive content, and strong branding consistency. Technically, the site is built on WordPress with modern tools like Yoast SEO, Google Tag Manager, and Google Consent Mode, ensuring good SEO and privacy compliance. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent, though explicit security policies and headers could be improved. Overall, the domain registration and website content align well, indicating a legitimate and trustworthy business entity.

Cinéart is an independent film distributor based in the Netherlands, specializing in releasing films in cinemas, on DVD and Blu-ray, and making films available on Video on Demand and TV platforms. The company targets cinema audiences and film enthusiasts, maintaining a strong presence in the Dutch and Benelux media market. Their website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site uses modern web technologies including Google Tag Manager and Typekit fonts, with a cookie consent mechanism in place, indicating awareness of privacy compliance. Security posture is solid with HTTPS enforced, though some security headers and explicit policies are missing. No direct contact emails or phone numbers are publicly listed, but multiple newsletter signup forms and social media channels provide user engagement avenues. WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website is well maintained, secure, and compliant with basic privacy regulations.