Medium-risk security reports

Naturpark Flusslandschaft Peenetal is a regional nature park in Germany dedicated to conservation, education, and tourism. The website serves as an informational portal providing detailed content about the park's natural features, events, and educational programs. It targets nature enthusiasts, tourists, and environmental educators. The business operates as a non-profit or government-affiliated entity with a strong regional presence and recognized certification as a Qualitäts-Naturpark. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries such as Leaflet for interactive maps and Swiper for image sliders. It employs Matomo analytics for privacy-conscious visitor tracking and integrates a comprehensive cookie consent mechanism via CCM19. The site demonstrates good mobile optimization, accessibility, and SEO practices, hosted on mvnet.de infrastructure. From a security perspective, the site uses HTTPS with excellent SSL configuration and implements privacy-friendly analytics and cookie consent. However, it lacks explicit security headers and does not provide a public security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR requirements. It provides a safe and informative user experience with no adult or questionable content. Strategic improvements include enhancing security headers, publishing a security policy, and adding explicit contact details for incident response.

Naturpark Mecklenburgische Schweiz und Kummerower See is a regional nature park organization in Germany focused on conservation, education, and tourism. The website provides comprehensive information about the park, including guided tours, events, and educational resources. It targets nature enthusiasts, tourists, and educational groups, positioning itself as a quality-certified nature park with a strong regional presence. Technically, the site is built on TYPO3 CMS, uses modern JavaScript libraries for maps and UI, and is hosted on regional infrastructure. The site is mobile-optimized, accessible, and SEO-friendly. Security-wise, HTTPS is enforced, cookie consent is implemented with granular controls, and privacy-respecting analytics (Matomo) is used. However, explicit security policies and incident response information are not published. Overall, the site is trustworthy, professional, and compliant with GDPR, with no critical vulnerabilities detected.

The Naturpark Nossentiner/Schwinzer Heide website represents a regional nature park in Germany focused on conservation, education, and tourism. The site offers detailed information about the park's natural features, events such as mushroom walks, and educational programs. It targets nature enthusiasts, tourists, and local communities. Technically, the site is built on TYPO3 CMS with modern front-end technologies and includes a cookie consent mechanism compliant with GDPR. Analytics are handled via Matomo, ensuring privacy-conscious tracking. Security posture is good with HTTPS enforced, though some security headers are missing. No critical vulnerabilities or suspicious content were detected. Overall, the site is professional, trustworthy, and well-structured, supporting the park's mission effectively.

Naturpark Sternberger Seenland operates as a regional nature park authority and tourism promoter in Mecklenburg-Vorpommern, Germany. The website provides comprehensive information about the park's natural features, events, and educational offerings, targeting nature enthusiasts, families, and tourists. The business model is non-profit, focusing on environmental education and regional promotion. Technically, the site is built on TYPO3 CMS, uses modern JavaScript libraries like Leaflet for maps, and integrates Matomo for analytics, reflecting a mature digital infrastructure with good mobile optimization and accessibility. Security posture is solid with HTTPS and consent management in place, though security headers and explicit security policies could be enhanced. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, though contact information is primarily via forms rather than direct emails or phone numbers.

The website www.schaalsee.de represents the UNESCO Biosphärenreservat Schaalsee, a regional nature conservation and education entity in Germany. It provides comprehensive information about the biosphere reserve, including natural habitats, conservation efforts, educational programs, tourism, and partner initiatives. The site targets nature enthusiasts, tourists, educators, and regional stakeholders. Technically, the site is built on TYPO3 CMS, uses modern frontend libraries like Swiper.js, and integrates Matomo for analytics along with a consent management platform for GDPR compliance. The website is well-structured, mobile-optimized, and accessible, with clear navigation and professional design. From a security perspective, the site enforces HTTPS and uses a cookie consent mechanism, but lacks explicit security policy pages, incident response contacts, or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data shows consistent domain registration with German name servers, supporting legitimacy. Overall, the site demonstrates a good security posture and privacy compliance suitable for a government/non-profit organization. The risk level is low, with recommendations to enhance security transparency by publishing security policies and incident response contacts, and to consider a vulnerability disclosure mechanism. The website's content is safe for general audiences, focusing on environmental education and regional tourism without any adult or questionable content.

Nationalpark Jasmund is a German national park website representing the smallest national park in Germany, renowned for its ancient beech forests designated as UNESCO World Heritage. The site serves as an informational and educational platform targeting nature enthusiasts, visitors, and volunteers, offering details on the park's natural features, events, and conservation efforts. The business operates within the government and non-profit sectors, focusing on environmental preservation and public engagement. Technically, the website is built on TYPO3 CMS, employs Matomo for analytics with user consent, and embeds multimedia content responsibly. Security posture is solid with HTTPS and consent mechanisms, though it lacks some advanced security headers and formal security policies. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, with no detected adult or questionable content.

The website www.nationalpark-vorpommersche-boddenlandschaft.de serves as the official digital presence for the Nationalpark Vorpommersche Boddenlandschaft, the third largest national park in Germany. It provides comprehensive information about the park's natural environment, history, visitor guidelines, events, and educational programs. The site targets nature enthusiasts, visitors, and educational groups, offering detailed content in German with English language support. The business model is primarily informational and educational, supported by government or non-profit funding, with a strong emphasis on conservation and public engagement. Technically, the website is built on TYPO3 CMS, a mature open-source content management system, and employs Matomo for analytics, ensuring privacy-conscious user tracking. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. Security is adequate with HTTPS enforced and a consent management platform in place, though it lacks some advanced security headers and explicit security policies. From a security perspective, the site shows no signs of vulnerabilities or exposed sensitive data. Privacy compliance is strong, with clear privacy and cookie policies aligned with GDPR requirements. However, the absence of a published security policy or incident response contact is a minor gap. Overall, the domain registration data aligns well with the website content, indicating legitimacy and consistency. The overall risk profile is low, with recommendations focusing on enhancing security headers, publishing a security policy, and adding vulnerability disclosure mechanisms to further strengthen trust and resilience.

The Müritz-Nationalpark website represents a well-established German national park authority providing comprehensive information about the park, its nature, educational programs, and visitor services. The site targets nature enthusiasts, educational institutions, and volunteers, positioning itself as a leading government/non-profit entity in environmental conservation and public education. The business model is non-commercial, focusing on conservation, education, and sustainable tourism. Technically, the website is built on TYPO3 CMS, uses modern mapping technologies like Leaflet with OpenStreetMap tiles, and integrates Matomo for analytics, reflecting a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is good with HTTPS and cookie consent mechanisms, but lacks explicit security headers and published security policies. No critical vulnerabilities or exposed sensitive data were found. Overall, the site is trustworthy, professional, and compliant with GDPR, though it could improve transparency around security and incident response. The domain registration aligns with the regional network, supporting legitimacy. No adult or questionable content is present, making it safe for general audiences.

Heureka Group a. s. operates a comprehensive e-commerce service platform primarily serving Slovakia and the Czech Republic. The company offers advertising solutions, data analytics, affiliate programs, and marketplace services tailored for e-shops and brands. Their blog and webinar content demonstrate active engagement with their target audience, focusing on e-commerce growth and marketing strategies. Technically, the website employs modern tracking and consent management tools such as Google Tag Manager, Visual Website Optimizer, and Didomi, indicating a mature digital infrastructure. The site is well-structured, mobile-optimized, and maintains good SEO practices. Security-wise, the site enforces HTTPS and uses consent management but lacks explicit security headers and incident response contacts, which are recommended for improvement. The WHOIS data is privacy protected, a common practice for commercial entities, and the domain appears legitimate based on content and business consistency. Overall, the website presents a professional, trustworthy, and compliant digital presence with room for enhanced security transparency.

Radionix is a security systems provider specializing in integrated intrusion detection, access control, fire alarm, and video monitoring solutions. Positioned as part of the KEENFINITY Group, Radionix targets commercial, educational, financial, and retail sectors with a focus on delivering mission-critical security technology. The website presents a professional and comprehensive digital presence with multimedia content and clear navigation, supporting a medium-sized enterprise profile. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript libraries such as Swiper.js for interactive content. The site is mobile-optimized and accessible, with good SEO practices evident. HTTPS is enforced, and embedded content uses privacy-conscious YouTube no-cookie domains. However, the absence of explicit security headers and cookie consent mechanisms indicates room for improvement in security and privacy compliance. From a security posture perspective, the site shows good practices such as no exposed sensitive data and secure iframe usage. The lack of a published security policy, incident response contacts, or vulnerability disclosure reduces transparency and preparedness. The missing WHOIS data for the domain is a notable concern, impacting trust and legitimacy assessments despite the professional site content. Overall, Radionix's website is well-designed and functional, but the domain registration opacity and limited direct contact information suggest the need for enhanced transparency and security governance to strengthen trust and compliance.

Telex, a brand under Bosch Global, specializes in communication solutions for radio dispatch and aviation sectors, offering hardware and software products designed for high-pressure environments. The company has a strong market presence with over 50 years of legacy, targeting professional users in telecommunications and transportation industries. The website reflects a mature digital infrastructure with modern technologies, consent management, and comprehensive legal compliance. Security posture is solid with HTTPS enforcement and domain protection, though improvements like DNSSEC and explicit security headers could enhance it further. Overall, the site is professional, trustworthy, and well-structured, supporting Telex's reputation as a reliable communication solutions provider.

RTS Intercom Systems, a brand under Bosch Global, specializes in advanced professional intercom systems tailored for broadcasting, live events, and critical communication environments. With a legacy spanning 50 years, RTS offers a comprehensive portfolio including digital matrix intercoms, wireless systems, partyline intercoms, headsets, and innovative cloud-based communication solutions such as RVOC. The company is positioned as a market leader with multiple industry awards and a strong reputation for reliability and innovation. The website reflects a mature digital presence with excellent content quality, clear navigation, and professional branding consistent with Bosch's standards. Technically, the site employs modern web technologies, including Google Tag Manager and consent management tools, ensuring compliance with privacy regulations and good SEO practices. Security posture is strong with HTTPS enforcement and domain transfer protections, though DNSSEC is not enabled and some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, RTS demonstrates a robust business and digital maturity suitable for its enterprise-level operations.

Electro-Voice is a well-established professional audio equipment company with a history spanning over 90 years, specializing in loudspeakers, microphones, and sound system solutions. The website reflects a mature digital presence with comprehensive product information, support resources, and a strong brand identity supported by active social media channels. The technical infrastructure leverages modern web technologies including Google Tag Manager and a consent management platform, ensuring compliance with privacy regulations. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response details are absent. The absence of WHOIS data introduces some uncertainty regarding domain registration legitimacy, but the overall business credibility remains high based on content quality and external trust signals. Strategic recommendations include enhancing transparency around security policies and improving business contact information visibility.

Dynacord is a well-established professional audio company specializing in high-quality amplifiers, system controllers, and sound system software for commercial and fixed installations. The company benefits from a strong brand presence, supported by its parent company Bosch, and targets professional audio engineers and commercial integrators. The website reflects a mature digital presence with excellent content quality, clear navigation, and mobile optimization. Technically, the site uses modern web technologies including Google Tag Manager and a consent management platform, integrated with a CMS API. Security posture is solid with HTTPS enforced and domain registration consistent with the business history, though some improvements in security headers and explicit security policies could be made. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with its business objectives.

The Schweizerischer Turnverband (Swiss Gymnastics Federation) operates the website stv-fsg.ch as the official national body for gymnastics in Switzerland. The site provides extensive information on various gymnastics disciplines, training programs, events, memberships, and partnerships. It targets athletes, trainers, clubs, and sports enthusiasts within Switzerland, positioning itself as a key non-profit organization in the Swiss sports sector. The business model focuses on member services, education, event management, and sponsorship collaborations. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including Google Tag Manager and Hotjar for analytics and user experience insights. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. Privacy and cookie consent mechanisms are well implemented, reflecting compliance with GDPR requirements. From a security perspective, the site enforces HTTPS, employs standard security headers, and avoids exposing sensitive data. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not present, representing areas for improvement. The WHOIS data confirms the domain's legitimacy and consistency with the organization's identity. Overall, the website is professional, trustworthy, and well-maintained, with a strong focus on user privacy and compliance. Strategic enhancements in security transparency and contact information would further strengthen its posture.

Swiss Sailing is the official Swiss national association dedicated to sailing, windsurfing, kitesurfing, and wingfoiling. It serves as the governing body for these sports in Switzerland, providing event organization, training programs, and athlete development. The website reflects a well-established organization with a clear focus on both recreational and competitive sailing communities. It maintains strong partnerships with recognized insurers and sport promotion entities, and is affiliated with international sailing bodies such as World Sailing and Swiss Olympic. The target audience includes sailing clubs, athletes, officials, and enthusiasts across Switzerland. Technically, the website is built on the Neos CMS platform using the Flow PHP framework, incorporating modern web technologies such as Google Tag Manager for analytics and Google Fonts for typography. The site is mobile optimized, accessible, and SEO friendly, with a clear navigation structure and professional design. Performance is moderate, with no major technical issues detected. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, it lacks publicly available formal security policies and incident response contacts. No security headers were detected in the provided data, suggesting room for improvement in hardening the site against common web threats. No vulnerabilities or exposed sensitive data were found in the HTML content. Overall, Swiss Sailing presents a trustworthy and professional online presence with strong business credibility and compliance posture. Strategic recommendations include publishing a formal security policy, enhancing security headers, and providing incident response contact information to improve transparency and security readiness.

bienen.ch is a comprehensive Swiss platform dedicated to providing high-quality, scientifically grounded information about honey and wild bees, beekeeping, and environmental issues. The platform is supported by organizations focused on improving bee health and habitats, offering educational resources, services, and a marketplace for beekeeping supplies. The website targets beekeepers, environmentalists, and the general public interested in bees within Switzerland. Technically, the site is built on a modern WordPress infrastructure with a rich plugin ecosystem, optimized for performance, mobile responsiveness, and accessibility. Security posture is solid with HTTPS enforced and no obvious vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and minimal user tracking via Plausible Analytics. Overall, the site demonstrates high professionalism, trustworthiness, and a strong alignment between WHOIS data and business claims.

Pokus is a small Zürich-based digital agency operating under the legal name simple & co gmbh. The company specializes in UX design, web development, CMS solutions, creative coding, and digital concepts including WebApps, SPA, IoT, and interactive installations. Their market position is that of a niche local agency focused on delivering tailored digital solutions to businesses and organizations. The website presents a professional image with clear contact information and a skilled team, but lacks formal privacy and cookie policies, which are important for compliance. Technically, the website uses a modern technology stack including Python/Django backend and frontend frameworks like Vue and React. The presence of technologies for mobile platforms and IoT indicates a diverse technical capability. The website is moderately performant and mobile optimized, though accessibility and SEO optimizations are basic. No analytics or tracking scripts were detected, suggesting minimal user tracking. From a security perspective, the site lacks visible security headers and formal security or incident response policies. The domain uses privacy protection in WHOIS, which is common and justified for small agencies. No vulnerabilities or exposed sensitive data were found in the HTML content. Overall, the security posture is moderate but could be improved by implementing security headers, HTTPS enforcement, and formal policies. The overall risk is moderate with no critical issues detected. Strategic recommendations include adding privacy and cookie policies, enhancing security headers, implementing vulnerability disclosure and incident response information, and conducting a security audit to strengthen the security posture and compliance.

The website bossert.studio currently serves as a minimal placeholder with very limited content, primarily displaying a waving hand emoji and a brief 'in progress' description. There is no substantive business information, contact details, or policies presented, indicating the site is under development or not actively maintained. The technical infrastructure is based on modern web technologies such as React and Next.js, suggesting a contemporary development approach, but the lack of content and metadata limits the site's digital maturity. Security posture is weak due to absence of visible HTTPS confirmation, security headers, and privacy compliance documentation. Overall, the site presents a low trust profile with minimal risk but also minimal utility or engagement potential at this time.

Bänziger Hug is a Swiss-based design agency founded in 2011 by Samuel Bänziger and Olivier Hug. The agency specializes in print and interactive design, offering services such as book design, exhibitions, publications, identities, and website design primarily for cultural institutions, businesses, and individuals. The company has a strong market position within its niche, supported by numerous prestigious design awards, indicating a high level of professional recognition and trust. Technically, the website is built using modern web standards including HTML5, CSS3, and JavaScript, with the use of Modernizr for feature detection and Google Analytics for visitor tracking. The site is mobile optimized and performs moderately well, though accessibility features are basic. The absence of a CMS or hosting provider information limits deeper infrastructure insights. From a security perspective, the website benefits from HTTPS with excellent SSL configuration, but lacks important security headers such as Content-Security-Policy and X-Frame-Options. No forms or input fields are present, reducing attack surface, but the absence of privacy and cookie policies indicates compliance gaps. WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional website content. Overall, the website is professional and trustworthy in appearance and content, but the lack of WHOIS transparency and privacy compliance policies present moderate risks. Strategic improvements in security headers, privacy documentation, and domain registration transparency are recommended to enhance trust and compliance.

Nora Vögeli Grafik Design is a small, professional design atelier based in Zürich, Switzerland, specializing in art direction, graphic design, branding, and spatial design. The website showcases a comprehensive portfolio of projects including corporate design, event branding, publications, and digital applications, targeting clients seeking creative design services primarily in the Zürich region. Technically, the site is built on the Squarespace platform, leveraging modern web technologies such as HTTPS with HSTS, Google Fonts, and YouTube embeds, providing a moderate performance and good mobile optimization. Security posture is solid with HTTPS and HSTS, but lacks additional security headers and formal privacy or cookie policies. The absence of WHOIS data limits domain legitimacy verification, though the professional presentation and content quality suggest a legitimate business. Overall, the site is well-designed and functional but would benefit from enhanced privacy compliance and clearer contact information to improve trust and security.

Lay Theme is a specialized WordPress theme provider focused on creative professionals and portfolio websites. Established in 2015, the company offers a customizable theme with a unique layout tool called the Gridder, extensive customization options, WooCommerce shop support, and various addons to enhance website functionality. The website demonstrates a professional market position within the niche WordPress theme industry, targeting creatives who want visually appealing and customizable portfolio sites. Technically, the site leverages modern JavaScript libraries, video integration, and multiple marketing pixels, hosted on DreamHost. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy policy or terms of service. Overall, the site is trustworthy and professional but could improve transparency and security practices.

The SYJMB Foundation website represents a small non-profit entity established around 2019, likely based in Switzerland. The site is built using modern web technologies such as Gatsby and React, indicating a moderate level of technical maturity. However, the content is minimal and lacks detailed business descriptions, contact information, or compliance documentation. Security posture is basic with no advanced headers or policies detected, and no privacy or cookie policies are published, which may expose the organization to compliance risks. Overall, the site is accessible and free from blocking mechanisms but would benefit from enhanced transparency and security measures.

Mirabella–Morganti is a Swiss design studio founded in 2013 specializing in art, culture, and education projects. The company offers a range of creative services including visual identities, campaigns, posters, books, and digital media, with a strong emphasis on print design and typography. They also contribute to education through lecturing roles at the Zurich University of the Arts. The website reflects a professional portfolio with rich content and a consistent brand image targeting cultural and educational organizations. Technically, the site is built using Vue.js with deferred JavaScript loading, providing good mobile optimization and SEO. However, the site lacks visible privacy and cookie policies, security headers, and explicit contact emails or phone numbers, which are areas for improvement. No WAF or blocking mechanisms were detected, and the WHOIS data aligns well with the business claims, indicating legitimacy.

Astrom / Zimmer & Tereszkiewicz is a small, specialized design and development studio based in Zurich, Switzerland. They focus on creating digital and analogue tools, interfaces, and data modeling solutions aimed at transforming information into knowledge. Their market position is niche, serving clients interested in archives, research, and data visualization projects. The website showcases a professional portfolio with multiple client projects and external references, indicating a credible and established presence in their field. Technically, the site uses modern web technologies including JavaScript and React, hosted likely on DigitalOcean, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and public security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

Agenza GmbH is a specialized web agency based in Kriens near Luzern, Switzerland, focusing on WordPress websites, UX design, e-commerce solutions, and web platform development. The company serves a diverse clientele including SMEs, organizations, and startups, offering tailored digital solutions that emphasize accessibility, SEO, and user experience. Their market position is solid within the regional technology sector, supported by a portfolio of over 93 clients and positive testimonials. Technically, the website is built on WordPress using modern tools such as the Breakdance builder, WooCommerce for e-commerce, and Yoast SEO for optimization. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. Analytics and marketing integrations include Google Tag Manager, Google Ads, and LinkedIn Insight, indicating a moderate level of user tracking and marketing sophistication. From a security perspective, the site enforces HTTPS and follows good practices by avoiding exposed sensitive data and using reputable third-party scripts. However, explicit security headers and a formal security policy are absent, representing areas for improvement. Privacy compliance is strong with a comprehensive privacy policy and cookie policy, though a consent mechanism is not evident. Overall, Agenza GmbH presents a trustworthy and professional online presence with a strong focus on quality and client satisfaction. The website's security posture is good but could benefit from enhanced header policies and incident response transparency. The business is credible, well-branded, and aligned with its WHOIS registration data, supporting a high legitimacy score.

Klinikum Fulda gAG operates a large, modern hospital providing maximal healthcare services in the Osthessen region of Germany. The institution serves over 500,000 residents with inpatient and outpatient care, specialized clinics, and educational programs as a campus of the Universitätsmedizin Marburg. The website reflects a mature digital presence with comprehensive patient information, event announcements, and career opportunities. Technically, the site is built on WordPress with modern plugins and analytics tools, ensuring good performance and SEO optimization. Security posture is strong with HTTPS, cookie consent management, and no visible vulnerabilities. Privacy policies are comprehensive and GDPR compliant. Overall, the site projects high professionalism and trustworthiness.

FFT Produktionssysteme GmbH & Co. KG is a well-established German company specializing in innovative and flexible manufacturing systems, particularly turnkey production solutions and process automation for industries such as automotive and aerospace. Founded in 1974, FFT holds a strong market position as a global leader with a comprehensive portfolio of services including after-sales support. The website reflects a professional and consistent brand image with multilingual support and detailed business information. Technically, the site is built on TYPO3 CMS, hosted likely by Deutsche Telekom, and integrates modern analytics tools like Matomo and Leadinfo while maintaining GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and CAPTCHA protections, though some security headers could be improved. Overall, the site is user-friendly, mobile-optimized, and trustworthy, with no signs of suspicious activity or content.

BINGO! - Die Umweltlotterie operates as a regional environmental lottery in Germany, offering lottery tickets with jackpots and additional prizes. The organization supports environmental projects across seven German federal states and integrates a related TV quiz show to engage its audience. The website is professionally designed, mobile-optimized, and provides comprehensive information about jackpots, prizes, and lottery rules. Technically, the site uses modern web technologies including Next.js and React, with Cloudflare DNS and FriendlyCaptcha for security. Analytics are handled via Piwik PRO, indicating a moderate level of user tracking with privacy considerations. Security posture is strong with HTTPS, security headers, and CAPTCHA protections, though some improvements are recommended in cookie consent and published security policies. Overall, the site is trustworthy, well-branded, and targets German-speaking lottery players interested in environmental causes.

GEOTEST Ltd. is a Swiss-based leader in geosciences, offering a broad range of services including site development, geoinformatics, natural hazard assessment, and environmental consulting. The company employs over 200 professionals across seven locations in Switzerland, emphasizing innovation, quality, and customer focus. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to business and governmental clients. Technically, the site uses modern web technologies including Cmsbox CMS, Google reCAPTCHA, and analytics tools such as Google Analytics and Matomo, ensuring a secure and performant user experience. Security posture is strong with HTTPS enforcement and appropriate security headers, though the absence of visible cookie consent and incident response policies suggests room for compliance improvement. Overall, the domain registration and website content are consistent and trustworthy, supporting a high legitimacy score.

Museo Nacional del Prado is a prestigious national museum in Spain dedicated to fine arts and cultural heritage. It serves a broad audience including tourists, families, researchers, and art enthusiasts by providing exhibitions, educational resources, virtual tours, and access to its extensive art collection. The museum operates under the Spanish Government's Ministry of Culture and Sport, positioning it as a leading cultural institution with a strong market presence in the government and non-profit sectors. Technically, the website employs a modern and diverse technology stack including jQuery, Bootstrap, Google Tag Manager, and TinyMCE, supported by a CDN infrastructure. The site is well-optimized for mobile devices, accessible, and SEO-friendly, reflecting a mature digital presence. The CMS used is GNOSS, which supports semantic web and knowledge graph features. From a security perspective, the site uses HTTPS with excellent SSL configuration and follows best practices such as secure forms and no visible vulnerabilities. However, explicit security headers and a public security policy or incident response contact are not evident, representing areas for improvement. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. Overall, the website is professional, trustworthy, and secure, with no signs of malicious activity or content safety concerns. It effectively supports the museum's mission and public engagement goals.

KulturPass is a German government-supported cultural initiative aimed at providing 18-year-old youths in Germany with a digital budget to access a wide range of cultural offerings such as books, concerts, cinema, and music. The platform is accessible via a web portal and mobile apps, facilitating budget redemption and promoting media literacy through a dedicated toolkit. The website is professionally designed, mobile-optimized, and integrates social media channels to engage its target audience effectively. Technically, it leverages TYPO3 CMS with modern JavaScript libraries and frameworks, ensuring a stable and accessible user experience. Security posture is solid with HTTPS and cookie consent mechanisms, although some security headers could be enhanced. Privacy compliance is strong, reflecting GDPR adherence with clear policies and consent management. Overall, the site demonstrates high trustworthiness and professionalism, supporting its role as a government cultural program.

The Berliner Ukulele Festival website represents a small cultural event organizer focused on Ukulele music festivals in Berlin, Germany. Established in 2016, the festival has become a recognized event within the German-speaking Ukulele community. The website is built on WordPress with a modern tech stack including WooCommerce, Yoast SEO, and Borlabs Cookie for consent management. The site is well-branded, mobile-optimized, and provides rich visual content including professional photography. However, it lacks explicit privacy and terms of service pages, and does not provide direct contact information or security incident response details. The SSL configuration is excellent, and no major vulnerabilities or suspicious patterns were detected. Overall, the site is trustworthy and professional but could improve compliance and security transparency.

Wagnerepiano operates a niche business specializing in designer digital piano wings (Flügel) that are portable, stylish, and equipped with solar modules for autonomous use. The company targets musicians, bands, and private users seeking mobility and aesthetic enhancement for their digital pianos. The website is professionally designed using WordPress with the Divi theme and includes multimedia content such as images and videos to showcase the product. Contact information and certifications related to innovation competence are clearly presented, enhancing business credibility. Technically, the website employs modern web technologies and plugins, ensuring good performance and SEO optimization. Security posture is solid with HTTPS enabled, though some security headers are missing and no explicit cookie consent mechanism is present. WHOIS data is incomplete, which slightly reduces trust but does not outweigh the professional presentation and clear contact details. Overall, the website is a reliable and well-maintained digital presence for a small manufacturing business in Germany.

Leipziger Buchmesse is a major cultural and media event organizer based in Germany, hosting the prominent Leipzig Book Fair which connects readers, authors, publishers, and media companies. The website reflects a well-established event with a strong market position in the German-speaking book and media industry. The site offers comprehensive information for exhibitors, visitors, and media professionals, supported by a professional design and consistent branding. Technically, the site uses modern JavaScript libraries, consent management tools, and Google Tag Manager for analytics, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the site is trustworthy, professional, and serves its audience effectively.

MVB GmbH operates as a central digital infrastructure and media service provider for the book industry, serving publishers, bookstores, self-publishers, and service providers primarily in Germany and internationally. The company offers a broad portfolio of platforms and media formats designed to improve visibility and connectivity within the book market. Their website reflects a professional and consistent brand presence with a focus on digital innovation and industry networking. Technically, the site employs modern frameworks such as Bootstrap and FontAwesome, integrates Google Tag Manager for analytics, and uses a third-party cookie consent mechanism, indicating a mature digital infrastructure. Security posture is adequate with HTTPS enforced and consent management in place, but lacks explicit security policies, incident response contacts, and security headers, which are areas for improvement. Overall, the domain registration data aligns well with the business identity, supporting legitimacy and trustworthiness.

Freight and Transit Company Limited (FTL) is a well-established logistics service provider founded in 1994, operating primarily in Mauritius, Madagascar, and South Africa. The company offers a comprehensive range of logistics services including air and sea freight, customs clearing, warehousing, project cargo management, and handling of perishable and dangerous cargo. Their website reflects a professional and consistent brand image, targeting businesses requiring reliable logistics solutions in the Indian Ocean and African regions. Technically, the website is built on Drupal 9 and incorporates modern web technologies such as Google Analytics, Facebook Pixel, and Google reCAPTCHA to enhance user experience and security. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Security-wise, the website enforces HTTPS and uses CAPTCHA to protect forms, but lacks some security headers and explicit security policies. The WHOIS data is unavailable due to privacy protection, which is common but reduces transparency. Overall, the website is trustworthy and professional, with room for improvement in privacy compliance and security documentation.

Orian Ltd. is a publicly traded Israeli logistics company offering comprehensive supply chain management solutions. The company operates as part of an international group, providing sea and air freight, domestic transportation, customs brokerage, e-commerce logistics, and specialized services such as cargo insurance and clinical trials logistics. The website is professionally designed, primarily in Hebrew, targeting business clients and investors. Technical infrastructure includes modern JavaScript libraries, Google Analytics, and Tag Manager, indicating a mature digital presence. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks explicit security headers and detailed privacy compliance mechanisms. The absence of WHOIS data raises concerns about domain registration legitimacy, though the business content and investor relations links support its authenticity. Strategic improvements in privacy policies, security headers, and incident response disclosures are recommended to enhance trust and compliance.

Groupe Marill is a well-established family-owned business group with a history dating back to 1896, operating primarily in the Horn of Africa region. The group offers a diversified portfolio of services including maritime agency, logistics, insurance, automobile distribution, and industrial equipment supply. Their website reflects a professional and consistent brand image, targeting businesses and individuals requiring these services in the region. Technically, the website is built on Drupal 7 with several JavaScript libraries and uses Google Analytics for tracking with IP anonymization enabled. However, some technologies like jQuery 1.8 are outdated, and there is a lack of modern security headers and DNSSEC implementation. Security posture is moderate with HTTPS enabled but missing several best practices. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration data supports the legitimacy of the business with consistent and long-term domain ownership.

Virtual Culture GmbH is a Swiss-based small technology company specializing in digital sustainable strategies, digitization, imaging, and project management services for cultural institutions and museums. Their website presents a professional portfolio showcasing key services such as IT consulting, digital project management, and talent promotion. The company targets cultural organizations and experts in digital culture, positioning itself as a niche provider with a focus on sustainable and interoperable digital content solutions. Technically, the website employs modern JavaScript libraries and CSS frameworks, ensuring good mobile optimization and user experience, though some accessibility and SEO optimizations could be improved. Security posture is moderate with no visible security headers or incident response policies, and privacy compliance is basic with privacy and terms documents available but lacking explicit cookie consent mechanisms. Overall, the site is trustworthy and professional with moderate risk and room for security and compliance enhancements.

Frontify is a technology company specializing in brand management and digital asset management solutions. Their platform targets brand managers and marketing teams in enterprises, offering SaaS tools to maintain branding consistency and facilitate collaboration. The website analyzed is a login page for their platform, reflecting a professional and consistent brand image. Technically, the site uses modern web technologies including React and integrates third-party services such as Amplitude for analytics and Sentry for error tracking. The site is well optimized for performance and mobile devices, with a good user experience and clear navigation. Security posture is strong with HTTPS enforced, CSRF tokens, and password policies, though some security headers are missing and no public security or privacy policies are visible on this page. Overall, the site is trustworthy and professional but could improve transparency around privacy and security policies. The domain registration data aligns well with the business, showing legitimacy and consistency. No blocking or WAF mechanisms were detected, and no adult or questionable content is present.

CivixX – Werkstatt für Zivilgesellschaft is a small non-profit organization based in Leipzig, Germany, specializing in consulting and supporting civil society initiatives, sustainable development, and citizen participation projects. The organization collaborates closely with local governments and regional partners, providing services such as coaching, moderation, networking, and educational material development. Their website reflects a professional and consistent brand image, with clear navigation and comprehensive project descriptions tailored to their target audience of local authorities and civil society stakeholders. Technically, the website is built on WordPress with a modern tech stack including jQuery, Owl Carousel, and Matomo for analytics, indicating a privacy-conscious approach. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. Security practices include HTTPS enforcement and email obfuscation, though some security headers are missing and no explicit security or incident response policies are published. Overall, the security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, featuring a comprehensive privacy and cookie policy with a consent mechanism. The domain registration data aligns well with the website content and business location, supporting legitimacy. No adult or questionable content is present, making the site safe for general audiences. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and maintaining regular updates to WordPress and plugins to sustain security and compliance.

Digitales Schaudepot is a small non-profit initiative based in Switzerland focused on digitally connecting and curating cultural heritage collections. The website presents a professional and well-structured platform that highlights their projects, technology use, and partnership ecosystem. Their target audience includes cultural institutions, researchers, and the general public interested in cultural heritage. Technically, the site uses modern front-end frameworks such as Bootstrap and integrates Google Analytics for visitor tracking, though it lacks a cookie consent mechanism. Security posture is moderate with HTTPS implied but no visible security headers or published security policies. Contact information is clearly provided via email, physical address, and a contact form, but no phone numbers or incident response contacts are found. Overall, the website is trustworthy and safe, with no adult or questionable content detected.

Julian Humm Gestaltung und Entwicklung is a small design and development office based in Basel, Switzerland, specializing in visual communication and publication solutions for both digital and analog spaces. The company offers services including branding, web design, poster creation, and identity development, targeting clients who require professional visual communication systems. The website showcases a portfolio of projects and client references, indicating a solid market presence within its niche. Technically, the website is built using modern technologies such as Svelte and Swiper.js, with good mobile optimization and a clean, professional design. However, there is a lack of privacy and cookie policies, and no security headers were detected, which are areas for improvement. The WHOIS data for the domain is missing or indicates the domain may not be registered, which is unusual but the website content and contact information suggest a legitimate business. Overall, the site is safe, professional, and trustworthy, but would benefit from enhanced security and privacy compliance measures.

PC CADDIE AG is a specialized software provider focused on golf club and golf course management solutions. The company positions itself as a market leader in the golf IT sector, offering a comprehensive suite of products including customer management, reception and proshop integration, golf course and school management, online booking and tournament management, and hosting services. Their target audience includes golf clubs, commercial golf facilities, golf associations, and tournament agencies primarily in German-speaking countries and Switzerland. The website is professionally designed, content-rich, and provides extensive customer references and testimonials, reinforcing its credibility and market position. Technically, the website is built on TYPO3 CMS and employs modern web technologies including JavaScript, CSS, and Google reCAPTCHA for form security. The presence of mobile app links for Android and iOS indicates a mature digital infrastructure. Hosting is managed via agenturserver nameservers, and the site uses HTTPS with good SSL configuration. Performance and mobile optimization are rated as moderate to good, with room for improvement in accessibility features. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, use of CAPTCHA, and no visible exposure of sensitive data. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms like a security.txt file. Additional security headers could enhance protection. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Overall, PC CADDIE AG presents a trustworthy and professional online presence with a solid business model and technical foundation. Strategic improvements in security transparency and accessibility could further strengthen their posture.

frogblog.tv is a multilingual landing page associated with ENERGETIX GmbH & CO.KG, a German company operating in the energy sector. The site serves primarily as a language selection portal directing users to German, English, and French subdomains, indicating an international or European audience focus. The business model appears to be content or community engagement related to energy topics, though the landing page itself contains minimal content. Technically, the website is very basic with no detected CMS, scripts, or analytics tools. The site uses simple CSS for basic mobile responsiveness but lacks advanced SEO and accessibility features. No security headers or HTTPS status were identified from the provided data, and no privacy or cookie policies are present, indicating low digital maturity. From a security perspective, the domain is registered transparently to a legitimate German company with a long registration history, which supports trustworthiness. However, the lack of security best practices such as DNSSEC, HTTPS enforcement, and security headers reduces the overall security posture. No incident response or vulnerability disclosure information is available. Overall, the website is functional but minimal, with significant room for improvement in content richness, security, privacy compliance, and technical sophistication. Strategic recommendations include implementing HTTPS, publishing privacy and cookie policies, adding security headers, and enhancing content and navigation to improve user experience and trust.

The UEFA Foundation is a well-established non-profit organization dedicated to supporting social projects related to football, primarily focusing on children and community development. The website reflects a professional and consistent brand presence, leveraging WordPress CMS with modern plugins such as Yoast SEO and OneTrust for cookie consent. Hosting is stable and reputable, utilizing Microsoft Azure DNS infrastructure. Security posture is adequate with HTTPS enabled and domain transfer protection, though there is room for improvement in security headers and published security policies. Privacy compliance is partially addressed via cookie consent, but lacks a visible privacy policy and terms of service. Overall, the site is trustworthy and serves its non-profit mission effectively.

Stiftung Behindertensport Lenzerheide is a small Swiss non-profit foundation dedicated to supporting and promoting disabled sports in the Lenzerheide holiday region. The foundation organizes sporting and social events for people with disabilities and maintains a partnership with PluSport Behindertensport Schweiz, a national umbrella organization for disabled sports. The website is built on the Jimdo Creator CMS platform, hosted by Jimdo, and presents content primarily in German. It features a clean design with clear navigation and mobile responsiveness, though it lacks some compliance documents such as a privacy policy and terms of service. Security posture is moderate with HTTPS enforced and cookie consent implemented, but missing security headers and explicit contact information reduce the overall security and compliance score. The website content is safe and appropriate for a general audience, with no adult or questionable material detected.

Stiftung Denk an mich is a Swiss non-profit organization dedicated to supporting people with disabilities by providing financial assistance for holidays and leisure activities. The foundation fills a social gap by enabling those who cannot afford recreational time to enjoy improved quality of life. The website reflects a focused mission with clear messaging, targeting individuals with disabilities and their supporters within Switzerland. The organization maintains a credible market position as a niche non-profit with recognized certifications such as ZEWO. Technically, the website is built on modern frameworks including Vue.js and Nuxt.js, with integrations for analytics and media content. The site is mobile-optimized and demonstrates good SEO and accessibility practices, though some accessibility features could be enhanced. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, but lacks a public security policy or vulnerability disclosure. Overall, the site is professional, trustworthy, and compliant with privacy regulations, making it a reliable digital presence for the foundation.

Beisheim Stiftung is a non-profit foundation operating primarily in Germany and Switzerland, providing funding and support for various projects. The website serves as an informational portal offering downloadable resources such as funding criteria and application guidelines. The foundation targets applicants and partners interested in its funding programs. Technically, the website is built using the Nuxt.js framework and integrates Cookiebot for cookie consent management, ensuring compliance with privacy regulations. The site employs HTTPS and uses Piwik Analytics for visitor statistics, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks visible security headers and explicit security policies. The absence of WHOIS data and contact information slightly reduces trustworthiness. Overall, the website is professional and functional but could improve transparency and security documentation.