Medium-risk security reports

TopChrétien is a prominent French-speaking Christian community platform dedicated to sharing messages of love, forgiveness, and faith growth. It offers a wide range of content including daily devotionals, Bible reading plans, music, videos, audio messages, and educational courses. The platform serves over 500,000 members and maintains a strong online presence with multiple specialized subdomains and partner sites. Technically, the website is built on a custom Django-based CMS, leveraging modern web technologies and accessibility features such as sign language mode and dyslexic-friendly reading options. Security-wise, the site enforces HTTPS, uses CSRF tokens, and includes secure cookie attributes, though it lacks explicit cookie consent and a published security policy. WHOIS data confirms the legitimacy and transparency of the organization behind the domain. Overall, TopChrétien presents a professional, trustworthy, and well-maintained digital presence tailored to its faith-based audience.

Body Attack Sports Nutrition operates a professional e-commerce platform specializing in fitness nutrition products such as protein powders, creatine, amino acids, and workout boosters. The company targets fitness enthusiasts and athletes primarily in German-speaking countries, emphasizing quality with a 'Made in Germany' label and 30 years of experience. The website is well-branded, consistent, and provides a good user experience with clear navigation and mobile optimization. Technically, the site leverages Shopware CMS, Google Tag Manager, and other modern web technologies with lazy loading to enhance performance. Security posture is solid with HTTPS and consent management, though some security headers and explicit policies are missing. WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the site is trustworthy and professionally maintained but would benefit from publishing comprehensive privacy, terms, and security policies to improve compliance and user trust.

CARDET is a well-established non-profit organization based in Cyprus, specializing in educational technology research and development. With a history dating back to 2004, it operates internationally, engaging millions through innovative education programs, training, and collaborative projects. The website reflects a mature digital presence with comprehensive content, clear navigation, and active social media engagement. Technically, the site is built on WordPress with modern frameworks and includes essential security features such as HTTPS and reCAPTCHA. Privacy and cookie policies are well implemented, supporting GDPR compliance. However, the absence of explicit security policies and incident response contacts suggests room for improvement in security transparency. Overall, CARDET demonstrates a strong market position in the education and non-profit sectors with a trustworthy and professional online presence.

Bond is a UK-based non-profit organization that connects and champions a network of civil society organizations focused on eradicating global poverty, inequality, and injustice. The website demonstrates a strong market position within the international development sector, offering advocacy, events, job boards, training, and resources to its members. The organization is registered as a charity and company in England and Wales, reinforcing its legitimacy and trustworthiness. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, and Google Tag Manager. It is well-optimized for performance, mobile responsiveness, and SEO, providing an excellent user experience. The site uses HTTPS with good SSL configuration and employs best practices such as secure forms and controlled script loading. From a security perspective, the site shows a solid posture with HTTPS enforcement and no visible vulnerabilities or exposed sensitive data. However, explicit security headers and a published security policy or incident response contacts are absent, representing areas for improvement. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-maintained, with minor gaps in security policy transparency. The WHOIS data for the 'www.bond.org.uk' subdomain is unavailable due to domain naming rules, but the main domain 'bond.org.uk' is presumably authoritative and legitimate. Strategic recommendations include enhancing security headers, publishing security policies, and implementing vulnerability disclosure mechanisms.

Alda Europe is a well-established non-profit organization focused on fostering local democracy and civil society development across Europe and beyond. With 25 years of experience, it operates as a global alliance of local and regional authorities and civil society actors, delivering projects, advocacy, and capacity building services. The website reflects a professional and consistent brand image, targeting stakeholders in governance, civil society, and regional development. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the site is trustworthy and compliant with privacy regulations, though WHOIS data is unavailable due to privacy protection, which is typical for such organizations.

ADRA Europe is a well-established Christian humanitarian aid organization operating globally with a focus on disaster relief, health, education, and livelihoods. The website presents a professional and consistent brand image, targeting donors, volunteers, and partners interested in humanitarian causes. Technically, the site is built on WordPress using Elementor and WooCommerce, integrating Google Analytics and Tag Manager for marketing and analytics purposes. The site is mobile-optimized and SEO-friendly but could improve accessibility features. Security posture is good with HTTPS enforced and cookie consent implemented, though the absence of security headers and privacy policy pages indicates room for improvement. Overall, the domain registration is consistent with a legitimate non-profit entity, enhancing trustworthiness. Strategic recommendations include publishing privacy and terms of service policies, adding security headers, and establishing incident response contacts to strengthen compliance and security.

ActionAid International is a well-established global non-profit federation dedicated to eradicating poverty and injustice through humanitarian aid, advocacy, and development programs. The organization operates in multiple countries worldwide, focusing on key themes such as women's rights, climate justice, emergencies, and economic and political issues. Their website reflects a professional and consistent brand image, providing comprehensive information about their mission, activities, and resources. The presence of multiple country-specific domains underscores their global footprint and operational scale. Technically, the website is built on Drupal 10, leveraging modern analytics tools like Google Analytics, Google Tag Manager, and Hotjar for user behavior insights. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Hosting and DNS services utilize Cloudflare, enhancing availability and resilience. Privacy and cookie compliance are well implemented, including user consent mechanisms aligned with GDPR requirements. From a security perspective, the site enforces HTTPS and employs domain transfer protection. However, DNSSEC is not enabled, and no explicit security headers were detected in the HTML content, representing areas for improvement. No vulnerability disclosure or incident response contacts are publicly available, which could be enhanced to improve transparency and trust. Overall, the security posture is solid but could benefit from additional hardening and disclosure practices. The overall risk assessment is low, with no indications of malicious content or suspicious activity. The site is trustworthy, professionally maintained, and compliant with privacy regulations. Strategic recommendations include enabling DNSSEC, publishing a vulnerability disclosure policy, adding security headers, and providing clear incident response contacts to further strengthen security and compliance posture.

ACT Alliance EU is a coalition of European faith-based development and humanitarian NGOs focused on advocating for fairer, locally-led humanitarian and development policies. The organization operates as a non-profit network, emphasizing social, economic, and environmental justice, and the empowerment of local communities. Their market position is that of a recognized European NGO coalition with a clear advocacy and networking mission. Technically, the website is built on WordPress using Elementor, with modern web technologies such as Google Tag Manager and FontAwesome. The site is mobile-optimized and SEO-friendly, though performance is moderate. Security posture is good with HTTPS enforced and cookie consent implemented, but lacks some advanced security headers and explicit public security policies. Overall, the site is professional, trustworthy, and compliant with GDPR, though it could improve transparency around security and incident response. The domain registration is consistent with the business purpose, with no suspicious patterns detected.

CONCORD is a well-established European confederation of NGOs focused on sustainable development and international cooperation. The organization acts as a key interlocutor with EU institutions, advocating for social justice, gender equality, and sustainable policies. Their website reflects a mature digital presence with rich content, resources, and active engagement with their audience and partners. Technically, the site is built on WordPress with a modern theme and plugins, hosted by OVH sas, and uses HTTPS with Google Tag Manager for analytics. Security posture is generally good but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is limited as no explicit privacy or cookie policies were detected in the provided content. Overall, the site is professional, trustworthy, and serves its non-profit advocacy mission effectively.

The Gutenberg-Shop is an e-commerce platform associated with the Gutenberg Museum in Mainz, Germany, specializing in exclusive gifts related to the art of printing and book painting. The website targets a general audience interested in cultural and artistic merchandise, offering products crafted using traditional techniques. The business operates in the retail sector with a niche focus on cultural and museum-related products. Technically, the site is built on a modern e-commerce platform (likely Shopware), uses HTTPS, and integrates Matomo analytics for privacy-conscious tracking. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security practices include CSRF protection and cookie consent mechanisms, though explicit privacy and terms of service pages are missing. Overall, the site demonstrates a moderate to good security posture with room for improvement in policy transparency and security headers. The domain registration data is minimal but consistent with the business profile, and no suspicious patterns were detected. The site is safe for general audiences with no adult or questionable content.

The website is an official microsite for the Gutenberg-Museum hosted under the city of Mainz's domain, representing a government cultural institution dedicated to the history of printing and Johannes Gutenberg. It offers museum exhibitions, a shop, and educational experiences, targeting a broad audience including tourists and culture enthusiasts. The site is professionally designed with good content quality and consistent branding, supporting both German and English languages. Technically, it uses a Sitepark CMS platform with a mix of legacy and modern JavaScript libraries, and is mobile optimized with accessibility features. Security posture is adequate with HTTPS and consent-based Matomo analytics, but lacks explicit privacy, cookie, and security policies on this page. WHOIS data confirms legitimacy and consistency with the official city domain. Overall, the site is trustworthy and well-positioned as a government cultural resource, though it could improve privacy disclosures and security headers.

Body Attack Sports Nutrition operates a professional e-commerce platform specializing in fitness and sports nutrition products, targeting German-speaking fitness enthusiasts and athletes. The company leverages a mature digital infrastructure based on the Shopware platform, enhanced with modern performance optimizations such as lazy loading and integration with Google Tag Manager and Mollie payment services. The website demonstrates consistent branding and a clear market position as a trusted German fitness nutrition provider with over 30 years of experience. Security posture is solid with HTTPS and Cloudflare DNS/CDN usage, though explicit security headers and policies are not fully visible. Privacy compliance is limited due to missing visible privacy and cookie policies. Overall, the site is well-designed, user-friendly, and trustworthy for its target audience.

Das Bauhaus-Archiv / Museum für Gestaltung is a prominent cultural institution in Germany dedicated to preserving and showcasing the Bauhaus legacy, the most influential school of architecture, design, and art of the 20th century. The website serves as a comprehensive portal for visitors, researchers, and enthusiasts, offering information on exhibitions, research projects, educational outreach, and a dedicated shop for Bauhaus-related products. The institution holds a leading market position in the cultural and educational sector related to Bauhaus history. Technically, the website is built on WordPress CMS with modern frontend technologies such as Vue.js, providing a smooth and responsive user experience. The site employs performance optimization tools like WP Rocket and integrates a consent management platform to comply with privacy regulations. Hosting is managed professionally via dns-hotel.net, ensuring reliable uptime and security. From a security perspective, the website enforces HTTPS and uses privacy-conscious cookie consent mechanisms. While no explicit security policy or incident response contacts are published, the site shows no signs of vulnerabilities or exposed sensitive data. The absence of common security headers is noted as an area for improvement. Overall, the security posture is solid for a cultural institution website. The risk assessment is low, with no detected malicious or suspicious activity. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a security.txt file to improve transparency and vulnerability management. The website demonstrates high professionalism, trustworthiness, and compliance with GDPR requirements.

The domain bg.de currently hosts a minimal content website that appears to be a parked domain landing page primarily serving advertisements. There is no meaningful business content, no contact information, and no privacy or cookie policies present. The site uses third-party ad scripts and cloudfront CDN for content delivery but lacks any structured data or branding elements. The WHOIS data indicates the domain is in a 'connect' status with parkingcrew.net name servers, consistent with domain parking rather than an active business presence. Technically, the site lacks HTTPS enforcement and security headers, which further reduces trustworthiness and security posture. Overall, the site does not represent an operational business or service and is likely used for ad monetization or domain holding purposes.

Nubassa Gewürzwerk GmbH is a well-established German B2B company specializing in the supply of spices, marinades, and food technology solutions with a history spanning over 90 years. The company targets food manufacturers and retailers, offering high-quality products and customer service to facilitate consistent production standards. Their website reflects a professional and consistent brand image, supporting their market position as a reliable partner in the food manufacturing sector. Technically, the website is built on TYPO3 CMS, leveraging modern frontend technologies such as Bootstrap and Font Awesome, and is hosted on German infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms, but lacks some explicit security headers and published security policies. No critical vulnerabilities or suspicious content were detected, and the domain WHOIS data aligns with the company's German business identity, supporting legitimacy. Overall, the website demonstrates a solid digital presence with room for improvement in privacy and security transparency.

Haus des Lebens e.V. is a small German non-profit organization dedicated to supporting social-missionary projects primarily in Indonesia, Romania, and Israel. The organization focuses on community building, education, and social services in these regions, engaging donors and volunteers through its website and social media presence. The website is professionally designed with clear navigation and content relevant to its mission, targeting donors and supporters interested in social causes. Technically, the website is built on WordPress with modern plugins enhancing user experience and compliance with GDPR through privacy and cookie policies. The site is mobile-optimized and accessible, with moderate performance. Security posture is good with HTTPS enabled and cookie consent implemented, though security headers are not detected, and no explicit incident response or vulnerability disclosure policies are present. The WHOIS data is unavailable due to a malformed query response, limiting domain trust analysis. However, the website's transparency in contact information and privacy compliance supports its legitimacy. Overall, the site presents a trustworthy and professional front for a small non-profit organization with room for improvement in security best practices and domain registration transparency.

webQ GmbH is a well-established full-service advertising agency based in Weinheim, Germany, with 25 years of experience. The company offers a broad range of creative and digital marketing services including web design, graphic design, video production, 3D animation, print, domain registration, hosting, SEO, and consulting. Their target audience includes both public and private sector clients across various industries. The website reflects a professional and consistent brand image with clear contact information and a portfolio of clients, indicating a strong local market presence. Technically, the website is built with modern web standards using HTML5, CSS3, and JavaScript, featuring a strict Content-Security-Policy header and HTTPS usage, which demonstrates a good security posture. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. However, there is a lack of explicit privacy and cookie policies, which is a compliance gap that should be addressed. Security-wise, the site benefits from HTTPS and CSP headers but lacks other common security headers and incident response contact information. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is limited due to DENIC privacy restrictions but shows no suspicious patterns, and the domain age aligns with the company's claimed history. Overall, webQ GmbH presents a trustworthy and professional online presence with room for improvement in privacy compliance and security transparency. Strategic recommendations include adding comprehensive privacy and cookie policies, implementing security.txt for vulnerability disclosure, and enhancing security headers to further strengthen the security posture.

INSURNINJA GmbH is a small German marketing and PR agency that previously focused on insurance products for gamers. The website is currently in maintenance mode with a notice that the domain and content are for sale, indicating a possible business wind-down or transition. The company is registered in Hannover, Germany, with clear contact information provided. Technically, the website runs on WordPress with a maintenance mode plugin and uses jQuery. The site is accessible without WAF or security challenges but lacks advanced security headers and DNSSEC. No privacy or cookie policies are present, which impacts compliance posture. Overall, the security posture is basic with room for improvement in DNS security and HTTP headers. The website content is minimal and business-focused, with no adult or explicit content detected, making it safe for general audiences.

KW automotive GmbH is a well-established German company specializing in chassis optimization for racing and street vehicles, with over 30 years of industry experience. The company operates an informative and professionally designed website built on WordPress with Elementor, targeting automotive professionals and enthusiasts. The site supports multilingual content and integrates modern web technologies and analytics tools. Security posture is solid with HTTPS and reCAPTCHA, though explicit security policies and headers could be improved. Privacy compliance is basic, with cookie consent implemented but no visible privacy or terms of service pages. Overall, the website reflects a credible and mature business with room for enhanced transparency and security documentation.

CCC Druck und Medien GmbH operates an online and local print and media service shop based in Münster, Germany. The website offers a broad range of printing products and services targeting both business and private customers, including flyers, posters, thesis printing, and various print media. The company positions itself as a local trusted provider with personal consultation available on-site. Technically, the website uses a Bootstrap-based responsive design with jQuery and other JavaScript libraries, hosted on servers indicated by creolineserver.com nameservers. The site is moderately optimized for performance and mobile devices but lacks some advanced accessibility features. Security posture is moderate with HTTPS implied but no visible security headers and no published security or incident response policies. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Business credibility is supported by clear contact information and consistent WHOIS data. Overall, the website is functional and professional but could improve in security and privacy compliance.

Volksbank Alzey-Worms eG is a regional cooperative bank in Germany serving local customers primarily in the Alzey-Worms area. The website presents banking services and financial products with a focus on local presence and customer support. The business model is cooperative banking with a medium-sized regional footprint. The website uses modern web technologies including Angular Material and Dynatrace monitoring, indicating a moderate level of digital maturity. The site is mobile optimized and provides a professional user experience with clear navigation and relevant content. Security posture is good with HTTPS enabled and no visible vulnerabilities, but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Overall, the domain registration data aligns well with the business identity, supporting legitimacy and trustworthiness. Strategic improvements in privacy compliance and security transparency are recommended to enhance user trust and regulatory adherence.

Netxp GmbH operates the website www.netxp-verein.de, providing specialized online software solutions for clubs and associations to manage memberships, finances, and communications efficiently. The company positions itself as a trusted provider with a focus on ease of use, multi-user access, and comprehensive club management features. The website is professionally designed, well-structured, and targets German-speaking clubs and associations. Technically, the site uses modern web technologies including jQuery, Bootstrap, and tracking tools such as Google Analytics and Facebook Pixel, hosted on Schlund Technologies infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit security policies are absent. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact information and social media presence.

Autohaus Heydasch GmbH is an established automobile dealership located in Worms, Germany, serving as an official Nissan partner. The company offers a wide range of services including new and used car sales, vehicle trade-ins, service bookings, and maintenance. Their market position is that of a trusted local Nissan dealership catering to private and commercial customers. The website reflects a professional business model focused on automotive sales and services with clear contact channels and customer engagement features. Technically, the site is built on modern frameworks such as React and Next.js, ensuring a responsive and user-friendly experience. Privacy compliance is well addressed with GDPR-aligned policies and a visible data protection officer contact. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response information are absent. Overall, the website is trustworthy, well-structured, and suitable for its target audience.

LOTTO Rheinland-Pfalz operates as the official state lottery provider for the Rheinland-Pfalz region in Germany, offering a variety of lottery games including LOTTO 6aus49, Eurojackpot, Rubbellose, GlücksSpirale, BINGO!, KENO, and TOTO. The website facilitates online ticket purchases, account registration, and subscription services such as Dauerschein and Jackpot-Jäger. The business is positioned as a trusted regional government entity with a focus on secure and regulated gambling services for adults. The website content is professionally presented, consistent with the brand, and targets adult users interested in lottery gaming. Technically, the website employs modern web technologies including jQuery, SVG icons, and a custom JavaScript framework by MULTA MEDIO AG. It supports progressive web app features and is mobile optimized with responsive design. Analytics are implemented via etracker, and a chat widget from moin.ai is integrated for user support. While the site uses HTTPS and secure login forms, it lacks some security headers and explicit cookie consent mechanisms, which are areas for improvement. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and responsible disclosure availability, but could enhance its posture by adding security headers and publishing incident response contacts. No vulnerabilities or exposed sensitive data were detected. The domain WHOIS data is limited but does not raise concerns, and the overall legitimacy is supported by consistent branding and government affiliation. Overall, the website is a reliable and professional platform for online lottery services with moderate technical maturity and a solid security baseline. Enhancements in privacy compliance and security headers would further strengthen trust and regulatory adherence.

Misereor is a well-established German Catholic non-profit organization dedicated to global development and social justice. The website serves as a comprehensive platform for informing the public, facilitating donations, and promoting advocacy campaigns. It targets donors, partners, and socially conscious individuals, offering detailed project information and engagement opportunities. The organization maintains a strong market position within the German and international development NGO sector, emphasizing transparency and partnership. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies including Bootstrap and FontAwesome Pro for styling and icons. It employs Usercentrics for cookie consent management, ensuring GDPR compliance. Hosting is inferred to be with NetCologne, a reputable German provider. The site demonstrates good performance, excellent mobile optimization, and solid SEO practices. From a security perspective, the site enforces HTTPS and integrates consent management for privacy compliance. While explicit security headers are not fully confirmed, no vulnerabilities or exposed sensitive data were detected. The absence of a published security policy or incident response contact is noted as an area for improvement. Overall, the security posture is strong for a non-profit organization. The website content is safe for general audiences, focusing on charitable activities without any adult or questionable material. The domain WHOIS data aligns with the organization's profile, supporting legitimacy and trustworthiness. No WAF or blocking mechanisms interfere with content accessibility, allowing full analysis. Strategic recommendations include enhancing security header implementation, publishing a formal security policy and vulnerability disclosure process, and continuing to maintain transparency and user trust through clear contact and privacy information.

The Forschungsstätte der Evangelischen Studiengemeinschaft e.V. (FEST) is a well-established non-profit interdisciplinary research institute based in Heidelberg, Germany, founded in 1958. It is primarily funded by member organizations within the Evangelical Church community and conducts research, consulting, and publishes academic content. The website reflects a professional and consistent brand image targeting academic and church audiences. Technically, the site uses Edith CMS, jQuery, Bootstrap, and Matomo analytics, indicating a mature but somewhat traditional technology stack. Security posture is good with HTTPS and cookie consent mechanisms, though it lacks explicit security headers and published privacy policies. WHOIS data confirms domain legitimacy and consistency with the organization's history. Overall, the site is trustworthy and professionally maintained but could improve transparency on privacy and security policies.

The website centrostudicts.it is currently inaccessible due to a security challenge page implementing a JavaScript-based proof-of-work captcha. This challenge blocks normal access and prevents extraction of meaningful business or contact information. The domain is registered since 2019 with no privacy protection and is set to expire in 2025, indicating a legitimate registration. However, the lack of DNSSEC, security headers, and absence of privacy or cookie policies suggests a weak security posture. The site uses Cloudfront CDN for hosting assets and employs advanced client-side cryptographic challenges to mitigate automated access. Overall, the site is not currently usable for end users without passing the challenge, limiting content and business insight extraction.

The website www.bodensee-stiftung.org/wp-admin/ is currently inaccessible without authentication, presenting a WordPress error message indicating permission denial. The site appears to be a WordPress-based platform with restricted admin access, likely protected by security plugins or access controls. Due to the lack of accessible content, no business description, contact information, or policies are available for analysis. The WHOIS data query failed, returning no registrar or registrant information, which limits trust and transparency. Technically, the site uses WordPress CMS but lacks visible security headers or SSL configuration details. Overall, the site’s security posture cannot be fully assessed, but the access restriction is a positive security control. However, the absence of public business and privacy information is a concern for compliance and trust.

Arquitectos Urbanistas e Ingenieros Asociados S.L. (AUIA) is a well-established Spanish firm specializing in architecture, urbanism, and engineering with a strong focus on sustainable building practices. Founded in 1969, the company serves both public and private sectors, offering a broad range of services including residential architecture, urban development, industrial construction, and rehabilitation of historic buildings. Their website reflects a professional and consistent brand image, targeting clients interested in sustainable and efficient architectural solutions. Technically, the website is built on WordPress using popular plugins such as Yoast SEO, Contact Form 7, and Slider Revolution, indicating a modern and maintainable infrastructure. The site is mobile-optimized and includes SEO best practices, although performance is moderate and accessibility features are basic. Security is adequate with HTTPS enforced and a cookie consent mechanism in place, but lacks advanced security headers and explicit security policies. From a security perspective, no critical vulnerabilities or exposed sensitive data were detected. However, the absence of published security policies and incident response contacts suggests room for improvement in transparency and readiness. WHOIS data is unavailable due to Red.es restrictions, but the domain's privacy protection is typical and justified for a professional services firm. Overall, the website presents a trustworthy and credible digital presence with moderate risk. Strategic recommendations include enhancing security headers, publishing clear security and incident response policies, and improving technical performance and accessibility to further strengthen the company's digital maturity and client trust.

Green Fins is a well-established non-profit initiative dedicated to protecting coral reefs through sustainable marine tourism. Supported by the United Nations Environment Programme and partnered with Reef-World, it offers certified and digital memberships to dive centers, snorkelling centers, and liveaboard businesses globally. The website provides educational e-courses for recreational divers and professional guides, promoting responsible tourism practices. The organization targets eco-conscious tourists and marine operators, positioning itself as a trusted global leader in marine conservation education and certification. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Google Analytics, and Google Maps API integration. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Hosting and DNS services leverage Cloudflare and NameCheap, ensuring reliable performance and domain security. From a security perspective, the site enforces HTTPS and has domain transfer protections in place. However, DNSSEC is not enabled, and some security headers are missing. There is no public vulnerability disclosure or incident response policy, and cookie consent mechanisms are absent, which may impact GDPR compliance. No exposed sensitive data or vulnerabilities were detected. Overall, Green Fins presents a professional, trustworthy, and content-rich platform with a strong business credibility score. Strategic improvements in privacy compliance and enhanced security practices are recommended to further strengthen its security posture and regulatory adherence.

The Mouvement des Flambeaux et des Claires Flammes is a French non-profit scouting organization established in 1964, serving evangelical Protestant churches and open to all youth. The website reflects a well-established community-focused entity with clear educational and youth engagement objectives. Technically, the site is built on WordPress using standard plugins such as Yoast SEO and Contact Form 7, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and Cloudflare Turnstile captcha implemented, though additional security headers and explicit incident response policies are absent. The lack of WHOIS data limits domain trust analysis but the website content and affiliations support legitimacy. Overall, the site is professional, trustworthy, and safe for general audiences.

The Association du Scoutisme Jurassien (ASJ) operates as a regional non-profit scouting organization in Switzerland, serving the Jura and Jura-bernois regions. It coordinates local scout groups, organizes training and events, and promotes youth development through scouting principles. The website reflects a well-structured association with clear organizational teams and committees, supported by regional government funding. Technically, the site is built on Joomla CMS with modern libraries like Bootstrap and jQuery, offering a good user experience and mobile optimization. Security is adequate with HTTPS and CSRF protections, though it lacks some security headers and formal privacy/cookie policies, which are compliance gaps. No tracking or analytics scripts were detected, indicating minimal user tracking. Overall, the site is safe, professional, and trustworthy, but could improve privacy compliance and security hardening.

Service de Missions et d'Entraide (SME) is a Swiss non-profit organization dedicated to providing education and professional training to underprivileged populations. Established in 2007, SME operates primarily in the education sector, focusing on basic education, professional training, and professional development. The organization relies on donations and volunteer support to fund its projects and has a strong presence in Switzerland with multilingual website support in French and German. SME maintains a reputable position in its niche with certifications such as ZEWO and active social media engagement.

The website eglisesfree.ch serves as the official online presence for the Fédération romande d'Églises évangéliques (FREE), a non-profit federation of evangelical churches in French-speaking Switzerland. It provides news, event information, resources, and community support tailored to evangelical communities. The site is well-structured, content-rich, and targets a specific religious audience with relevant services such as podcasts, theological commissions, and youth programs. The business model is non-profit and community-focused, with partnerships to support its mission. Technically, the site is built on Joomla CMS using the Helix3 framework, integrating common web technologies like jQuery, Google Analytics, and YouTube embeds. The site is mobile-optimized and performs moderately well, with good SEO practices. However, it lacks some advanced accessibility features and security headers that could enhance its robustness. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. No vulnerability disclosure or security.txt files are present, and security headers are missing, indicating room for improvement in security posture. The WHOIS data aligns well with the website's identity, supporting legitimacy. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices to reduce risk and improve user trust.

Myfreelife.ch is a French-language evangelical Christian news and community website operated under the Fédération romande d’Églises évangéliques (FREE), targeting the Suisse romande evangelical community. The site provides news, portraits, spiritual reflections, and societal articles relevant to its audience. It maintains a consistent brand identity aligned with the federation and integrates social media channels for broader engagement. Technically, the site is built on Joomla CMS with the Helix3 template framework and uses common web technologies such as jQuery and Bootstrap. Google Analytics and Tag Manager are employed for user tracking. Security posture is adequate with HTTPS enabled and CSRF protections in forms, but lacks security headers and explicit privacy or cookie policies. Contact information and incident response details are not directly visible, which may impact user trust and compliance. Overall, the site is professionally presented, content-rich, and trustworthy within its niche, but could improve privacy compliance and security best practices.

Association du Scoutisme Vaudois (ASVd) is a well-established non-profit organization dedicated to promoting scouting activities for youth aged 5 to 16 in the Vaud region of Switzerland. It is part of the largest youth movement in Switzerland, serving thousands of scouts locally. The website provides comprehensive information about scouting, the association's structure, history, and facilities, targeting families and youth interested in scouting. Technically, the site is built on WordPress with common plugins such as Contact Form 7 and Jetpack, and uses modern JavaScript libraries like Leaflet for maps. The site is mobile-optimized and has good SEO practices but lacks visible privacy and cookie policies, which is a compliance gap. Security posture is generally good with HTTPS enforced, but security headers are missing and no vulnerability disclosure or incident response information is provided. Overall, the domain registration data aligns well with the organization's identity, supporting legitimacy and trustworthiness.

Pfadibewegung Schweiz operates the website pfadi.swiss, serving as the largest youth scouting organization in Switzerland with approximately 51,000 members. The website provides information about scouting activities, international events, and resources for children, teenagers, and their families. The organization is well-established with a domain registered since 2017, consistent with its public presence. The website is professionally designed, mobile-optimized, and uses privacy-friendly analytics, reflecting a moderate to high level of digital maturity. However, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance and user trust. Security posture is adequate with HTTPS enabled and domain transfer protections, but could be improved by enabling DNSSEC and implementing security headers. Overall, the site is trustworthy and serves its non-profit mission effectively.

basemap.at is an official Austrian government geospatial data portal providing comprehensive administrative base maps of Austria. It is a cooperative initiative involving federal states' GIS offices, the Austrian Cities Association, and other governmental partners. The website offers regularly updated raster and vector map products accessible via standard APIs and offline downloads, licensed under Austria's Open Government Data license. Technically, the site is built on WordPress with a modern theme and multilingual support, incorporating analytics and cookie consent mechanisms. Security posture is adequate with HTTPS enforced, though improvements are recommended in security headers and explicit privacy policies. The absence of WHOIS data limits domain trust analysis, but the strong government affiliation and partner links support legitimacy. Overall, the site is professional, trustworthy, and serves a specialized audience of GIS professionals and government entities.

Crownd Estates GmbH operates a premium luxury real estate platform focused on exclusive properties in Vienna, Austria. The company positions itself as a boutique investment and property sales firm targeting affluent clients seeking high-end residential projects. The website showcases multiple luxury projects with rich multimedia content, indicating a strong market presence in the Vienna real estate sector. Technically, the site is built on modern frameworks such as Next.js and React, hosted on Microsoft Azure, and employs Usercentrics for cookie consent, reflecting a mature digital infrastructure. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities, though privacy and terms policies are lacking. Overall, the site is professional and trustworthy but could improve compliance documentation and incident response transparency.

Scout24Media operates as a specialized advertising marketer for ImmoScout24 in Austria, focusing on real estate-related advertising campaigns. The company leverages exclusive access to first-party data to deliver targeted advertising solutions including data-driven, geo-targeting, and integration with newsletters. The website reflects a professional and consistent brand presence, supported by structured data and social media channels, positioning Scout24Media as a key player in the Austrian real estate advertising market. Technically, the site is built on WordPress with Elementor and Yoast SEO, ensuring modern CMS capabilities and SEO optimization. Security measures include HTTPS and Google reCAPTCHA on contact forms, though security headers are not explicitly detected. The absence of WHOIS data due to quota limits restricts domain registration insights, but the overall digital footprint supports legitimacy. Privacy and cookie policies are present and GDPR compliant, enhancing trust and compliance posture.

ImmoScout24 is Germany's leading online real estate marketplace, offering a comprehensive platform for property seekers and owners to buy, rent, and sell residential and commercial real estate. The platform serves both private individuals and professional real estate agents, providing extensive listings and additional services such as mortgage financing and agent search. The website demonstrates a mature digital infrastructure leveraging modern web technologies like React and Next.js, hosted on AWS, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforcement and security headers, although explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is robust with clear GDPR-aligned policies and cookie consent mechanisms. Overall, ImmoScout24 presents a trustworthy, professional, and well-maintained online presence with high business credibility and technical maturity.

Ottakringer BrauWerk is a medium-sized brewery business based in Vienna, Austria, operating under the parent company Ottakringer Getraenke AG. The company produces a variety of beers with an international style and hosts events while offering an online shop for direct sales. The website is built on WordPress with a moderate technical stack including jQuery and SEO and cookie consent plugins. It is well-optimized for mobile and SEO, with good content quality and clear navigation. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit incident response policies. WHOIS data confirms legitimacy and consistency with the business claims. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

ServusTV On is a professional Austrian media platform providing livestreams, on-demand content, TV programming, and news primarily in German. The website targets German-speaking audiences interested in sports, news, and entertainment. The platform leverages modern web technologies including Next.js and uses CDNs such as Red Bull's for content delivery. The site is well-designed, mobile-optimized, and includes structured data for SEO. Security posture is good with HTTPS enforced, but lacks explicit security headers and visible privacy or cookie policies. WHOIS data is unavailable, which raises some concerns about domain registration transparency. Overall, the site appears legitimate and professionally maintained but would benefit from improved privacy compliance and clearer contact information.

Kelly Ges.m.b.H. is a well-established Austrian snack manufacturer and retailer specializing in chips, popcorn, nuts, and other snack products. The company has a strong market position in Austria as a market leader and is part of the larger Intersnack Group. Their website reflects a mature digital presence with a comprehensive product catalog, engaging content such as recipes and party planning tools, and active social media integration. Technically, the site is built on TYPO3 CMS and uses Matomo for analytics, indicating a preference for open-source and privacy-conscious tools. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers and cookie consent mechanisms could be improved. Overall, the website is professional, trustworthy, and well-aligned with the company's business objectives.

Transdanubia is a transport and logistics service provider emphasizing faster, safer, and more reliable services in a dynamic environment. The website presents core business areas including transport, forwarding, and logistics but lacks detailed company information or contact data. The technical infrastructure includes usage of Google Maps API and custom JavaScript, with a basic design and moderate navigation clarity. However, the site lacks advanced CMS or analytics integrations and shows limited mobile optimization and accessibility features. Security posture is minimal with no evident security headers or privacy policies, and WHOIS data is missing, raising concerns about domain legitimacy. Overall, the site is functional but basic, with room for improvement in security, compliance, and business transparency.

ImmoUnited GmbH operates a professional website focused on providing real estate data and land registry analytics services primarily in Austria. The company offers a suite of products designed to support real estate professionals, banks, insurers, developers, and legal experts with data-driven decision-making tools. The website is well-branded, consistent, and targets a specialized B2B and B2C audience in the real estate sector. Technically, the site is built on WordPress with modern plugins and includes SEO and analytics integrations, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, reCAPTCHA, and cookie consent mechanisms, though explicit security policies and incident response details are absent. Overall, the site is trustworthy, professional, and compliant with GDPR requirements.

Kleider Bauer is a well-established Austrian retail fashion chain offering clothing collections for women, men, and children, with a strong regional presence across 25 locations. The website reflects a mature digital presence built on WordPress with Elementor, featuring rich content, marketing campaigns, and social media integration. While the site is professionally designed and optimized for SEO and mobile, it lacks explicit privacy and terms of service pages, which are critical for compliance and user trust. Security posture is good with HTTPS and GDPR cookie compliance, but could be improved by adding security headers and incident response contacts. Overall, the site is trustworthy and serves its retail audience effectively.

Technogym is a globally recognized leader in manufacturing commercial and home fitness equipment, serving gyms, sports centers, healthcare facilities, and individual consumers. The website presents a professional and comprehensive catalog of products and services, emphasizing wellness and fitness solutions. Technogym's market position is strong, supported by decades of experience and Olympic partnerships. The technical infrastructure leverages modern web technologies such as React and integrates secure payment solutions like Adyen Checkout, indicating a mature digital presence. Security posture is generally good with HTTPS and secure payment integration, though explicit security headers and policies are not evident in the provided data. The absence of WHOIS registration details is a concern but does not detract significantly from the overall legitimacy given the brand's global recognition. Strategic recommendations include enhancing transparency around privacy, security policies, and domain registration details to bolster trust further.

Hyundai Import Gesellschaft m.b.H. operates as the official importer and distributor of Hyundai vehicles in Austria, offering a broad range of automotive products including electric vehicles, hybrids, and traditional combustion engine models. The company targets individual consumers, business clients, and entrepreneurs, providing services such as vehicle sales, leasing, test drives, and after-sales support through a network of partners. The website reflects a strong market position with comprehensive product information and customer engagement features such as newsletter subscriptions and social media integration. Technically, the website is built on a modern stack including jQuery, Piwik PRO analytics, and Umbraco CMS, with media assets hosted on Azure CDN. The site demonstrates good performance, mobile optimization, and accessibility. SEO practices are well implemented with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS, uses security best practices in form handling, and avoids exposing sensitive data. However, it lacks a visible cookie consent mechanism and explicit security or incident response policies. Privacy compliance is supported by a comprehensive privacy policy with GDPR consent in the newsletter form. Overall, the website is professional, trustworthy, and secure with minor gaps in privacy consent and security transparency. Strategic improvements in cookie consent and security disclosures would enhance compliance and user trust.

The Österreichischer Fußball-Bund (Austrian Football Association) operates a comprehensive and authoritative website providing extensive data, news, and information about Austrian football leagues and competitions. The site serves a broad audience including football fans, clubs, players, and officials, positioning itself as the leading national football federation platform in Austria. The website features rich content, official branding, and strong partner relationships, reflecting its market leadership and credibility. Technically, the website employs a modern and robust technology stack including jQuery, Moment.js, JSViews, and various UI libraries, supported by a custom CMS framework. It demonstrates good performance, mobile optimization, and accessibility, ensuring a positive user experience. The site is well-structured with clear navigation and SEO best practices. From a security perspective, the site enforces HTTPS, implements key security headers, and maintains privacy compliance with GDPR through clear privacy and cookie policies and consent mechanisms. No critical vulnerabilities or security issues were detected. However, the site could enhance its security posture by publishing a dedicated security policy and incident response contacts. Overall, the website is a trustworthy, professional, and secure platform that effectively supports the Austrian Football Association's mission and services.