Medium-risk security reports

Swiss Olympic is the umbrella organization for Swiss sports and serves as the National Olympic Committee of Switzerland. It supports and strengthens its members, including 83 national sports federations and 30 partner organizations, representing approximately 18,300 clubs and 2.2 million active sports participants. The organization is well-established with a strong market position and recognized trust indicators such as ISO 9001:2015 certification and partnerships with major national and international brands. The website reflects a professional and consistent brand image with comprehensive content tailored to its target audience of sports organizations, athletes, and partners. Technically, the website employs modern JavaScript libraries including jQuery, Slick Carousel, JWPlayer, and integrates Google Analytics and Tag Manager for analytics. Accessibility tools like Eye-Able are implemented, and the site is mobile-optimized with good SEO practices. Performance is moderate, with no critical technical issues detected. However, no CMS or hosting provider details were identified. From a security perspective, the site uses HTTPS and cookie consent mechanisms, but lacks explicit security policy pages, incident response contacts, and security headers such as Content-Security-Policy. No vulnerabilities or exposed sensitive data were found. The WHOIS data shows privacy protection consistent with organizational privacy needs, and no suspicious patterns were detected. Overall, the website is secure, professional, and compliant with privacy regulations, with room for improvement in formal security disclosures and enhanced security headers. The risk level is low, and the site effectively supports the organization's mission and stakeholder engagement.

The Hessischer Gründerpreis website represents a well-established regional business award platform focused on startups and business successors in Hessen, Germany. It provides visibility, networking, media exposure, and professional support to companies in their first five years of operation or succession. The platform is backed by reputable partners and sponsors, including financial institutions, industry associations, and government bodies, enhancing its credibility and market position. Technically, the website is built on Joomla CMS with modern front-end frameworks like UIkit and uses common analytics and consent management tools such as Google Analytics, Google Tag Manager, and Usercentrics. The site is mobile-optimized, accessible, and SEO-friendly, with structured data implemented for enhanced search engine understanding. From a security perspective, the site enforces HTTPS and includes CSRF tokens, but lacks explicit security headers like Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance, making it a reliable digital presence for the Hessischer Gründerpreis initiative.

PING PLD operates as a niche golf equipment brand specializing in PLD putters, which are currently restricted in availability by region as indicated on the analyzed page. The website serves primarily as an informational and redirect page to the parent brand PING's main site. The technical infrastructure is modern, leveraging React and Next.js frameworks with Material-UI for styling, indicating a contemporary digital maturity level. However, the content on this particular page is minimal, focused on access restriction messaging without additional business or contact information. Security posture is basic with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is minimal with cookie consent implemented but no visible privacy or terms policies. Overall, the site is legitimate and consistent with the business domain registration and branding but would benefit from enhanced security and compliance documentation.

htp GmbH is a regional telecommunications provider serving the Hannover metropolitan area and surrounding cities in Germany. The company offers bundled services including highspeed internet, fixed-line telephone, mobile LTE plans, fiber optic connectivity, and security solutions. The website reflects a professional and customer-focused business with clear product offerings and local presence. Technically, the site is built on TYPO3 CMS with modern web technologies, good mobile optimization, and accessibility features. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though some HTTP security headers could be improved. The WHOIS data is unavailable, which slightly reduces trust but the website's professionalism and business consistency support legitimacy. Overall, the site scores well on content quality, technical implementation, security, privacy compliance, and business credibility.

The website www.aha-region.de represents the regional public waste management authority 'aha - Zweckverband Abfallwirtschaft Region Hannover' in Germany. It provides comprehensive waste disposal services for private households and businesses, including container services, recycling, composting, and special waste management. The site targets a broad audience including residents and commercial customers within the Hannover region. The business model is focused on public service delivery in the environmental sector, positioning itself as a key regional player in waste management and sustainability. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, and integrates modern tools such as Google Tag Manager, Google Analytics, and Cookiebot for cookie consent management. The site is hosted on German servers (htp-tel.de) and demonstrates moderate performance with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured data. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, indicating a commitment to user privacy and data protection. However, explicit security headers and detailed security policies are not evident in the provided data. No vulnerabilities or exposed sensitive data were detected. The absence of a published privacy policy or terms of service page is a notable gap in compliance documentation. Overall, the website is professional, trustworthy, and safe for general audiences. It effectively communicates its public service mission but could improve transparency by publishing comprehensive privacy and security policies and providing clear contact information. Strategic recommendations include enhancing security headers, incident response readiness, and compliance documentation to strengthen trust and regulatory adherence.

LAFRENTZ Baugesellschaft mbH is a specialized construction company based in Hannover, Germany, focusing on park deck renovation, building waterproofing, flood protection, and road marking services. The company targets commercial, public, and private clients with comprehensive services from planning to maintenance. Their market position is that of a niche specialist in construction waterproofing and related services within Germany. The website is professionally designed, mobile-optimized, and provides clear navigation and detailed service descriptions, supporting their business credibility. Technically, the site is built on the 1&1 IONOS Website Editor platform, using modern JavaScript libraries and CDN services, with moderate performance and basic accessibility features. Security posture is adequate with HTTPS enforced but lacks explicit security headers and published security policies. Privacy compliance is weak due to the absence of a privacy policy and terms of service pages, though a cookie consent mechanism is present. Contact information is limited to a phone number with no email or social media links. WHOIS data lacks detailed registrant information, slightly reducing trust but not contradicting the business claims. Overall, the website is a good representation of a small specialized construction business with room for improvement in privacy and security transparency.

ÜSTRA operates as a regional public transportation provider in Hannover, Germany, offering bus and tram services along with timetable and ticketing information. The website is built on TYPO3 CMS and integrates specialized public transport widgets, reflecting a mature digital infrastructure. The site is well-designed, mobile-optimized, and provides a good user experience for its target audience of local commuters and visitors. Security posture is adequate with HTTPS and nonce usage, but lacks explicit security headers and published security policies. Privacy compliance is limited due to missing visible privacy and cookie policies. Overall, the domain registration and WHOIS data align with the business claims, indicating legitimacy and trustworthiness.

DB SCHENKER is a global leader in logistics, transport, and supply chain management, offering a broad range of services including digital services, land, air, and sea transport, contract logistics, packaging systems, and customs services. The company recently merged with DSV, enhancing its market position as a worldwide leading logistics provider. The website reflects a mature, enterprise-level business with a strong focus on professional service delivery and sustainability. Technically, the website employs modern JavaScript frameworks and integrates with Adobe Experience Platform and other marketing and analytics tools, indicating a high level of digital maturity. Security posture is strong with HTTPS enforcement and Content-Security-Policy headers, though additional headers and a security.txt file could improve security transparency. Overall, the site is well-designed, mobile-optimized, and provides comprehensive business and career information, supporting a high trustworthiness rating.

Dextro Energy is a well-established German company specializing in sports nutrition products, particularly dextrose-based energy supplements for endurance and fitness athletes. The company operates a professional e-commerce platform built on Shopify, offering a range of products alongside content such as a magazine and a sports team sponsorship. Their market position is solid with a history dating back to 2005, targeting primarily German-speaking customers interested in sports and fitness nutrition. The website demonstrates good branding consistency and trust signals including customer ratings and GDPR compliance. Technically, the site leverages modern Shopify infrastructure, integrates multiple marketing and analytics tools, and employs Cloudflare for security and performance. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is strong with HTTPS enforced and GDPR-compliant cookie consent mechanisms, although explicit security headers could be improved. No critical vulnerabilities or suspicious activities were detected. Overall, the site presents a trustworthy and professional digital presence aligned with its business goals.

The website www.rossmann.de is currently inaccessible beyond a security challenge page that verifies the browser before granting access. Rossmann is a well-known retail company operating primarily in Germany, specializing in consumer goods and drugstore products. The site content is blocked by a Web Application Firewall or similar security mechanism, preventing full content and policy analysis. The technical infrastructure shows use of JavaScript and strict Content-Security-Policy headers, with hosting likely managed via netnames.net nameservers. Security posture is moderate due to the presence of CSP but limited by lack of accessible content and policies. Overall, the site is protected but lacks publicly accessible privacy, cookie, or contact information in the analyzed content.

ERDINGER Weissbräu operates a professional website focused on promoting its non-alcoholic beer product line, ERDINGER Alkoholfrei, targeting adults over 16 years old and sports enthusiasts. The site features product showcases, athlete sponsorships, and links to an official fan shop. The technical infrastructure is modern, leveraging Next.js and React frameworks, with embedded multimedia content enhancing user engagement. However, the site lacks explicit privacy and cookie policies, and no contact information or security policies are readily available, which may impact user trust and compliance. Security posture is moderate with no detected blocking or WAF challenges, but missing security headers and incident response contacts are areas for improvement. Overall, the website is professionally designed and consistent with the brand's market position but would benefit from enhanced privacy and security disclosures.

ADAC Niedersachsen/Sachsen-Anhalt e.V. operates as a regional club focused on mobility, motorsport, tourism, and traffic safety within the German states of Niedersachsen and Sachsen-Anhalt. The organization provides a variety of services including motorsport events, tourism activities, traffic safety programs, and member support. The website reflects a well-established regional presence with consistent branding and a clear target audience of club members and regional residents interested in mobility and motorsport. Technically, the site is built on TYPO3 CMS with modern front-end technologies such as jQuery, Bootstrap, and carousel plugins, offering a good user experience with mobile optimization and SEO best practices. Security-wise, the site enforces HTTPS, uses GDPR-compliant cookie consent, and avoids exposing sensitive data, though it lacks explicit security policies or incident response contacts. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting the organization's credibility and regional leadership.

The website sportscheck.com is a retail and event promotion platform focused on running events, specifically the SportScheck RUN Hannover 2025. It targets a general audience interested in sports and running, offering event participation options and related sports equipment. The site uses modern web technologies including React and various JavaScript tracking libraries, indicating a moderate level of digital maturity. However, the absence of visible privacy and cookie policies, as well as missing WHOIS registration data, suggests gaps in compliance and transparency. Security posture appears average with no explicit security headers detected in the provided data, and no evidence of vulnerabilities or exposed sensitive data. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security hardening.

The Deutsche Stiftung für Engagement und Ehrenamt is a German non-profit foundation dedicated to strengthening volunteer engagement through diverse funding, networking, consulting, and educational programs. It holds a significant position in the national landscape of volunteer support, offering digital formats, events, and direct assistance to volunteers and organizations. The website reflects a mature digital infrastructure built on WordPress with modern plugins and SEO tools, ensuring good performance and accessibility. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, although some security headers could be improved. The domain registration data aligns well with the organization's identity, enhancing trustworthiness. Overall, the site is professional, compliant with GDPR, and serves its target audience effectively.

The Deutsche Stiftung für Engagement und Ehrenamt operates the DSEE Lernportal, a dedicated educational platform aimed at supporting volunteers and engaged individuals in non-profit organizations. The portal offers a variety of learning resources including courses, webinars, and video content focused on topics such as digitalization, financing, member recruitment, and organizational management. The platform is positioned as a trusted resource within the German volunteer sector, providing free access to educational materials and fostering community growth. Technically, the website is built on the Totara LMS platform, which is based on Moodle, utilizing modern JavaScript libraries such as YUI and jQuery, and includes accessibility and mobile optimization features. The infrastructure supports a good user experience with moderate performance and solid SEO practices. The site enforces HTTPS and employs secure session management, though it lacks some advanced security headers and a formal security policy page. From a security perspective, the site demonstrates a good posture with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism. However, there is no explicit incident response or vulnerability disclosure information available. The domain registration aligns well with the organization's identity, enhancing trustworthiness. Overall, the DSEE Lernportal is a professionally maintained, secure, and privacy-conscious platform serving the non-profit volunteer community in Germany. Strategic improvements in security policy transparency and incident response readiness could further strengthen its security posture and user trust.

Smart LGT GmbH is a German-based company specializing in AI and automation consulting and software development. Founded in 2015, the company offers tailored AI strategy consulting, software development for large language model applications, consulting services, and process automation solutions targeting businesses seeking to innovate with AI technologies. The website is professionally designed using the Hugo static site generator and includes modern iconography and responsive design, indicating a moderate level of digital maturity. Contact information is clearly provided, but no social media presence or interactive forms are present. Security posture is moderate with domain transfer protection enabled but lacks DNSSEC and security headers. Privacy compliance is partially addressed with a privacy policy but no cookie consent mechanism. Overall, the website presents a trustworthy and legitimate business presence with room for improvement in security and privacy practices.

Kanzlei Dr. Peter Unmüßig is a small, regionally established German law firm specializing in traffic law, labor law, inheritance law, tenancy law, administrative offenses, insurance law, and civil law. The firm operates from a main office in Gundelfingen with multiple branch offices, and is a member of the Apraxa cooperative network of law firms. The website provides comprehensive legal service information, attorney biographies, and detailed privacy and legal disclaimers, targeting private clients and businesses seeking legal representation. Technically, the website uses legacy jQuery and standard HTML/CSS with moderate performance and basic mobile optimization. Security posture is moderate with no HTTPS or security headers explicitly confirmed, and an outdated jQuery version poses a potential risk. Privacy compliance is strong with a detailed GDPR-compliant privacy policy, though no cookie consent mechanism is present. Overall, the site is professional and trustworthy but would benefit from technical and security updates.

baden.fm is a regional media broadcaster serving Freiburg and the Südbaden region in Germany, offering radio streaming, news, event tips, and ticket sales. The website is professionally designed with consistent branding and targets local residents and listeners. Technically, the site uses a modern tech stack including WordPress CMS, JavaScript libraries such as Swiper.js and Video.js, and analytics tools like Matomo and Google Tag Manager. Security posture is adequate with HTTPS enforced and bot protection via hCaptcha, but lacks explicit security headers and documented security policies. Privacy compliance is weak due to missing privacy and cookie policies and absence of consent mechanisms. Overall, the site is trustworthy and legitimate, with domain registration data consistent with the business identity.

Academy of Sports GmbH is a reputable German educational institution specializing in flexible, state-certified distance learning programs primarily in fitness, nutrition, coaching, sport management, and e-sports. Established in 2005, it offers over 50 accredited courses targeting professionals and individuals seeking career advancement or personal development in health and sports sectors. The company holds multiple certifications and awards, reinforcing its market position as a trusted provider in the education sector. Technically, the website employs modern web technologies including jQuery, Google Tag Manager, and Salesforce integrations, hosted on a reliable infrastructure with domain control by GoDaddy. The site is well-optimized for mobile and accessibility, with good SEO practices and a professional design that supports user engagement and navigation. From a security perspective, the site enforces HTTPS, uses security best practices, and avoids exposing sensitive data. However, it lacks explicit security policies and a vulnerability disclosure mechanism, which could be improved. Privacy compliance is strong with clear GDPR-aligned policies and cookie consent mechanisms. Overall, the website presents a low-risk profile with strong business credibility, good technical implementation, and solid privacy compliance. Strategic recommendations include enhancing security transparency and adding formal incident response documentation to further strengthen trust and resilience.

Robinson Club GmbH operates a hospitality business focused on resort holidays catering to families, couples, and singles. Their offerings include sports, childcare, wellness, and entertainment events, positioning them as a well-established player in the holiday resort market primarily in Germany. The website is built on TYPO3 CMS with modern web technologies including PWA support and uses third-party marketing tools such as Optimizely for optimization and Gigya for user engagement. Social media presence is strong and verified, enhancing brand trust. From a technical perspective, the website demonstrates moderate to good performance with mobile optimization and SEO best practices. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure, but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies and consent mechanisms, which is a notable gap given GDPR requirements. WHOIS data is missing or unavailable, which reduces domain trustworthiness and raises questions about domain registration transparency. However, the website content and official social media links support legitimacy. Overall, the site is professionally designed and functional but requires improvements in privacy compliance and security transparency to enhance trust and regulatory adherence.

Kontakt Stiftung is a German non-profit foundation focused on promoting science, research, education, volunteerism, and sports-related community projects. The foundation collaborates with partners such as the Deutscher Schwimm-Verband and trainersuchportal.de to foster social cohesion through sports and education. The website is professionally designed using modern front-end technologies and is mobile-optimized, providing a good user experience and clear navigation. Contact information is prominently displayed, enhancing business credibility. Technically, the site is built with the Hugo static site generator and uses popular libraries like Bootstrap and jQuery, indicating a modern and maintainable infrastructure. Security posture is adequate with HTTPS usage, but lacks explicit security headers and a cookie consent mechanism, which are recommended for improved compliance and protection. Overall, the site is trustworthy, safe, and well-aligned with its non-profit mission.

ats Elektronik GmbH is a German technology company specializing in secure communication and safety technology solutions. Their website presents a professional image with detailed service offerings in areas such as 5G, TETRA, MOTOTRBO/DMR radio technology, security systems, system solutions for energy, transport, public safety, and military sectors, as well as research projects and training. The company targets security professionals and enterprises requiring advanced communication and safety solutions. The website is well-structured, multilingual (German and English), and includes comprehensive contact information and policies, reflecting a mature digital presence. Technically, the website uses a proprietary CMS (sethora.de Synapsis CMS), integrates modern JavaScript libraries including jQuery and MediaElement.js, and leverages Google Maps API for location services. Hosting is provided by Hetzner Online GmbH, a reputable German hosting provider. Performance is moderate with good mobile optimization and basic accessibility features. SEO practices are adequate with proper meta tags and structured navigation. Security posture is decent with HTTPS enforced and cookie consent implemented. However, no explicit security policy or incident response information is published, and security headers are absent. The WHOIS data shows an anomalous future domain creation date, which is likely an error but reduces trustworthiness. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is professional and trustworthy with minor security and compliance gaps. Strategic improvements in security transparency and WHOIS data accuracy are recommended to enhance credibility and risk posture.

Evangelische Hochschule Ludwigsburg is a state-recognized university of applied sciences affiliated with the Evangelical Church in Württemberg, Germany. The institution offers a broad range of bachelor and master programs primarily in social work, pedagogy, and theology, with a strong emphasis on practical application and international orientation. The website reflects a well-established academic institution with a clear focus on education, research, and community engagement. The target audience includes prospective and current students, academic staff, and partners in social and church-related sectors. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as Bootstrap and jQuery, and integrates third-party services like Google Analytics 4 and YouTube for enhanced user engagement. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. Privacy and cookie compliance are robust, featuring a detailed cookie consent mechanism and clear privacy policies aligned with GDPR requirements. From a security perspective, the site enforces HTTPS and employs cookie management best practices. While explicit security headers like Content-Security-Policy are not visibly declared, the overall security posture is strong with no evident vulnerabilities or exposed sensitive data. The WHOIS data is minimal but consistent with the domain's educational purpose, and no suspicious patterns were detected. Overall, the website demonstrates a mature digital presence with high content quality, good technical implementation, and strong privacy compliance. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining regular audits of third-party scripts to sustain security and trust.

GEMEINSAM GEGEN DOPING is a German government-supported non-profit network focused on anti-doping education and prevention in sports. It operates under the Stiftung Nationale Anti Doping Agentur Deutschland and collaborates with national and international partners such as NADA, WADA, and the German Olympic Sports Confederation. The website serves as an information hub offering workshops, e-learning, quizzes, and community engagement to promote clean sports. Technically, the site is built on TYPO3 CMS with modern JavaScript integrations, uses hCaptcha for form security, and employs Matomo for analytics with a strong emphasis on privacy compliance via Cookiebot. Security posture is solid with HTTPS and spam protection, though some security headers could be improved. Overall, the site is professional, trustworthy, and well-optimized for accessibility and SEO.

Freiwilligendienste im Sport is a non-profit organization based in Germany focused on promoting voluntary social engagement in sports, primarily targeting young people. The organization facilitates various volunteer service formats, including domestic and international projects, providing educational and orientation opportunities in the sports sector. Their website is professionally designed, accessible, and provides clear information and contact details, supporting their mission effectively. Technically, the site uses ProcessWire CMS with modern frontend libraries and includes accessibility features and cookie consent mechanisms, reflecting a mature digital presence. Security posture is adequate with HTTPS and cookie consent but lacks explicit security headers and documented policies. Overall, the site is trustworthy and well-positioned within its niche, though improvements in security documentation and terms of service could enhance compliance and user trust.

The website sterne-des-sports.de represents the official platform for the 'Sterne des Sports' awards, a prestigious German recognition program honoring sports clubs for their social engagement. Operated under the Deutscher Olympischer Sportbund (DOSB) and in partnership with Volksbanken Raiffeisenbanken, the site serves as an information hub for participants, partners, and the public. It offers detailed content about the competition, participation guidelines, news updates, and multimedia resources. The target audience includes sports clubs, banking partners, sports associations, and media professionals. The business model is non-profit, focusing on community engagement and corporate social responsibility within the sports sector.

STUCO Fullservice GmbH operates as a specialist fullservice provider for promotional products in Germany, offering comprehensive services from product conception to logistics and e-shop solutions. The company targets businesses seeking scalable and sustainable promotional merchandise solutions. The website reflects a professional digital presence with a modern WordPress and Elementor infrastructure, enhanced by SEO plugins and consent management tools. While the technical setup is solid, there is room for improvement in privacy compliance and security best practices. The absence of a published privacy policy and terms of service represents a compliance gap, and security headers are not detected, which could be enhanced to improve security posture. Overall, the site is trustworthy and well-positioned in its niche, with active social media engagement and recognized certifications such as EcoVadis.

Bewegungslandkarte.de is a German non-profit sports platform operated by the Deutscher Olympischer Sportbund (DOSB). It provides a searchable directory of sports and movement offers across Germany, targeting both sports enthusiasts and non-profit sports providers. The website is well-branded, consistent, and supported by a broad network of reputable sports organizations and government bodies. Technically, it is built on TYPO3 CMS, hosted by Hetzner, and integrates modern analytics and marketing tools such as Matomo and Adition. The site is mobile-optimized and SEO-friendly, offering a good user experience with clear navigation and professional design. Security-wise, HTTPS is enforced and cookie consent is implemented with granular controls, though explicit security policies and incident response contacts are not publicly available. Overall, the site demonstrates a strong legitimacy and trustworthiness profile with no suspicious content or vulnerabilities detected.

The Sportabzeichen-Wettbewerb website is a professionally designed platform promoting a national sports competition initiative supported by the Sparkassen-Finanzgruppe in Germany. It focuses on encouraging both athletic achievement and social engagement through the Deutsches Sportabzeichen. The site offers information about participation, prizes, and related projects, targeting athletes, sports clubs, and community organizers. Technically, the site is built on a Laravel-based framework, uses modern web standards including HTTPS, and integrates Google Analytics for visitor tracking. The cookie consent mechanism is robust and GDPR compliant. Security posture is solid with CSRF protections and secure cookie handling, though explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, well-branded, and serves its non-profit sports promotion mission effectively.

maxcluster is a German technology company specializing in managed hosting services, particularly for e-commerce platforms. Founded in 2009, it has established itself as a medium-sized player in the managed hosting market. The website content provided is a 404 error page, indicating the requested resource is not found, which limits the ability to fully assess the company's online presence. Contact information such as phone number and support email are available in the page's JavaScript variables and footer links, suggesting accessible customer support channels. Technically, the website uses jQuery and Bootstrap frameworks, with Bugsnag integrated for error monitoring configured to avoid IP tracking, reflecting some privacy consideration. However, the absence of DNSSEC, security headers, and privacy or cookie policies indicates gaps in security and compliance maturity. The website lacks structured data and SEO optimization, and the 404 page design and content quality are poor, impacting user experience and trust. From a security perspective, the domain is registered with RegistryGate GmbH since 2009, with no privacy protection, and the registrant information aligns with the website's German origin, supporting legitimacy. The security posture is moderate but could be improved by enabling DNSSEC, adding security headers, and implementing privacy policies. No WAF or blocking mechanisms were detected, and no adult or questionable content is present. Overall, the website's current state reflects a functional but minimal online presence with room for improvement in content quality, security best practices, and privacy compliance. Strategic enhancements in these areas would strengthen trust, user experience, and regulatory adherence.

Verbund Offener Werkstätten operates as a non-profit network of open workshops in Germany, providing shared access to craft and digital fabrication resources. The website serves as a community hub offering workshop search, membership information, and educational content. The organization targets individuals interested in maker culture and collaborative craftsmanship. Technically, the website employs modern JavaScript libraries such as Swiper.js and SweetAlert2, with accessibility features via Eye-Able scripts, hosted by a reputable German provider. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though improvements are recommended in DNSSEC and security headers. No critical vulnerabilities or blocking mechanisms were detected, indicating a trustworthy and accessible platform.

tabmag is a German-based digital magazine platform and content marketing service provider specializing in transforming traditional print content into interactive, responsive digital magazines. The company operates under the umbrella of the publish! Content-Marketing-Agentur and targets organizations such as companies, associations, and clubs seeking modern digital publishing solutions. The website demonstrates a high level of digital maturity with modern technologies, multimedia content, and interactive tools like a cost-saving calculator. Security posture is solid with HTTPS and form validation, though some enhancements like CSP headers and incident response contacts could improve it further. Privacy compliance is well addressed with clear privacy and terms pages, though a cookie consent mechanism is not evident. Overall, the website is professional, trustworthy, and well-positioned in its niche market.

Kontainer is a Denmark-based technology company specializing in digital asset management, product information management, and image bank solutions. Established in 2000, it serves businesses seeking efficient digital content management through a B2B SaaS platform. The website reflects a professional and consistent brand image with a focus on user experience and mobile responsiveness. Technically, the site leverages modern frameworks such as Nuxt.js and Vue.js, ensuring a contemporary and performant digital presence. Security posture is solid with HTTPS enabled and domain protections in place, though improvements like DNSSEC and explicit security policies could enhance trust further. Overall, Kontainer presents a credible and mature digital footprint suitable for its market segment.

Jazzcampus is an educational institution specializing in jazz music education located in Basel, Switzerland. It operates as part of the Hochschule für Musik Basel under the Fachhochschule Nordwestschweiz FHNW umbrella. The website presents a professional and comprehensive digital presence, offering detailed information about study programs, music courses, events, and affiliated organizations. The site is well-structured, mobile-optimized, and integrates multimedia content such as Vimeo videos to enhance user engagement. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though improvements in cookie consent and security headers are recommended. The absence of WHOIS data for the domain raises concerns about domain registration transparency, but the strong institutional affiliation and content quality support legitimacy. Overall, the site serves its educational mission effectively with a trustworthy and professional online presence.

Musikschule Basel is a well-established music education institution based in Basel, Switzerland, offering a wide range of musical education services including individual and group instrumental and vocal lessons, ensembles, choirs, and music projects for children, youth, and adults. The website reflects a strong market position as a competence center for musical education with a comprehensive offering and clear target audience. Technically, the website employs modern JavaScript and Google Tag Manager for analytics, with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policy and incident response information are not present. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with its business purpose.

Allegra Academy is an educational platform specializing in bike tourism and slow traffic mobility, primarily serving the Graubünden region in Switzerland. The website offers online courses with multimedia content and certificates, targeting professionals involved in bike tourism such as product managers, municipal employees, hotel staff, and guides. The platform is positioned as a niche educational resource with a focus on enhancing knowledge and service quality in the bike tourism sector. Technically, the site is built on WordPress using popular plugins like LearnDash for LMS functionality, WooCommerce for e-commerce, and Elementor for design. It employs modern web technologies and is mobile-optimized with good SEO practices. Security-wise, the site uses HTTPS and Google Tag Manager but lacks some security headers and explicit security policies. Privacy compliance is partial, with a cookie consent mechanism but no clear privacy or terms of service pages. No direct contact or incident response information is provided, which could be improved to enhance trust. Overall, the site is professional, secure, and credible but could benefit from enhanced privacy and security disclosures.

SpendenSchweiz is a Swiss non-profit online donation platform operated by StiftungSchweiz, offering donors access to over 900 charitable organizations and projects. The platform facilitates easy, secure donations and enables users to start their own fundraising campaigns. The website is professionally designed, SEO optimized, and uses modern WordPress technologies including jQuery, Slick Carousel, and Intercom for user engagement. Google Analytics and Google Tag Manager are employed for traffic analysis. Security posture is strong with HTTPS and secure forms, though explicit privacy and cookie policies are missing, which impacts compliance. No incident response or vulnerability disclosure information is provided. Overall, the platform is trustworthy and well-positioned in the Swiss charitable sector, but could improve transparency and privacy compliance.

株式会社カビネット is a Japanese IT company specializing in cloud services, software system development, and design content production. Established in 1998, it serves primarily business clients in Japan with a focus on delivering customer value through IT and communication. The company maintains a professional web presence with clear service descriptions, case studies, and recruitment information, positioning itself as a reliable mid-sized IT service provider. Technically, the website uses modern JavaScript libraries such as jQuery and Slick Carousel, and integrates Google Analytics for visitor tracking. The site is mobile-optimized and well-structured with good SEO practices. However, there is no visible cookie consent mechanism, which is a compliance gap given the use of tracking scripts. From a security perspective, the website uses HTTPS and displays trust certifications like the Privacy Mark and Secom Trust Systems badge, indicating a commitment to privacy and security. Nonetheless, the absence of DNSSEC, security headers, and explicit security or incident response policies suggests room for improvement in security posture. Overall, the website is professional, trustworthy, and functional with moderate technical sophistication. Strategic improvements in privacy compliance and security practices would enhance its risk profile and user trust.

Filmexplorer is a Swiss non-profit association dedicated to providing a rich cultural media platform focused on film as an experiential art form rather than a commodity. The website offers curated film critiques, interviews, podcasts, and festival coverage, targeting film enthusiasts and cultural audiences primarily in Switzerland. The platform maintains a consistent and professional brand image with excellent content quality and user experience. Technically, the website employs modern web technologies including Swiper.js for interactive sliders, a consent manager for GDPR-compliant cookie handling, and Google Analytics for visitor insights. The site is mobile-optimized and SEO-friendly, though no specific CMS or hosting provider details are evident. Performance is moderate with good accessibility features. From a security perspective, the site uses HTTPS with an effective cookie consent mechanism and email obfuscation to reduce spam. However, it lacks explicit security policies, incident response contacts, and terms of service pages. No critical vulnerabilities or suspicious content were detected, and WHOIS data confirms the legitimacy and consistency of the domain registration. Overall, Filmexplorer presents a trustworthy, well-maintained cultural media website with strong privacy compliance and a clear focus on its niche audience. Strategic improvements could include publishing security policies and incident response information to enhance transparency and trust.

Derivative is a Canadian software company specializing in TouchDesigner, a visual development platform targeting creative professionals and media artists. The company has a strong market position in the niche of media server and visual development software, supported by an active community and comprehensive learning resources. The website reflects a mature digital presence with professional design and consistent branding. Technically, the site is built on Drupal 7 with modern JavaScript libraries and hosted on AWS infrastructure, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS and domain transfer protections, though DNSSEC is not enabled and security policies are not publicly documented. Privacy compliance is partial, with privacy and terms pages present but lacking cookie consent mechanisms. Overall, the site is trustworthy and professional, with room for improvement in security and privacy transparency.

Brogramming is a small, specialized web development business operated by Fabian Voegeli based in Zürich, Switzerland. The company focuses on delivering custom web development projects primarily for cultural heritage institutions, academia, art galleries, and architecture firms. Their portfolio demonstrates expertise in modern web technologies including Next.js, React, Craft CMS, WordPress, and Gatsby, reflecting a mature and technically competent digital infrastructure. The website showcases a broad network of partners and clients, reinforcing its niche market position. Technically, the website employs a modern tech stack with frameworks like React and Next.js, and integrates Google Analytics for user tracking. The site is mobile optimized with good SEO practices, though accessibility features are basic. Hosting and DNS are managed through Key-Systems GmbH and firestorm.ch DNS servers. Performance is moderate, with room for improvement in security configurations. From a security perspective, the site lacks visible security headers and DNSSEC is not enabled, which are areas for enhancement. The domain is secured with clientTransferProhibited status, and HTTPS is presumed but not explicitly confirmed in the data. Privacy and cookie policies are absent, indicating compliance gaps with GDPR and related regulations. No incident response or vulnerability disclosure information is provided, limiting transparency in security management. Overall, the website is professional and trustworthy with a solid business foundation and technical implementation. However, it would benefit from improved security practices and formalized privacy compliance to enhance user trust and regulatory adherence.

The website scoutingdays.info is currently inaccessible beyond a security challenge page, likely implemented by a Web Application Firewall (WAF). The visible content is minimal, consisting primarily of a redirect countdown and a security check powered by BitNinja.IO. The site metadata indicates the use of outdated content management systems such as Joomla 1.5 and WordPress 2.5, which are no longer supported and pose significant security risks. No meaningful business information, contact details, or privacy policies are available, limiting the ability to assess the site's legitimacy or business operations. The WHOIS data is not publicly available, with the registrar identified as Identity Digital Inc., but no creation or expiry dates or registrant details are disclosed, suggesting privacy protection or unsupported TLD WHOIS services. Overall, the site exhibits a low level of digital maturity and security posture, with critical gaps in transparency and compliance.

Gebäudeversicherung Bern (GVB) is a well-established regional insurance provider specializing in obligatory building insurance for the Canton of Bern, Switzerland. With over 200 years of history, GVB offers comprehensive insurance products including obligatory building and construction period insurance, as well as voluntary insurance products through its subsidiaries. The website targets property owners and residents in Bern, providing detailed information on insurance services, claims, fire prevention, and natural hazard protection. The company maintains a strong market position as a trusted insurer in the region.

KEENFINITY Group is a global leader in providing innovative security and professional communication solutions, partnering with renowned brands such as Bosch, Dynacord, and Electro-Voice. Their website showcases a comprehensive portfolio of products and services including video systems, intrusion alarms, access control, public address, conference systems, and electronics manufacturing services. The company targets businesses and organizations seeking advanced security and communication technologies. Technically, the website is built on modern web technologies with good mobile optimization, SEO, and performance. Security posture is solid with HTTPS and consent management, though explicit security policies and incident response contacts are not published. The absence of WHOIS registration data is a notable concern for domain legitimacy, though the professional website and strong brand associations mitigate some risk. Overall, KEENFINITY presents a credible and professional digital presence with room for improvement in transparency and security disclosures.

The website www.overenezakaznikmi.sk is a Slovak language platform focused on customer verification and review aggregation services. It targets a general audience in Slovakia, providing a service platform that likely helps businesses and consumers verify customer feedback. The site demonstrates a modern design with mobile optimization and basic accessibility features. Technically, it employs Google Analytics and Google Tag Manager for user tracking and analytics, alongside a privacy consent mechanism via the Privacy Center SDK, indicating some level of GDPR awareness. However, the absence of an explicit privacy policy and terms of service reduces its privacy compliance maturity. Security-wise, the site uses HTTPS but lacks visible security headers and detailed security policies, which suggests room for improvement in its security posture. No critical vulnerabilities or adult content were detected, and the domain WHOIS data is privacy protected, which is common for small businesses but slightly reduces transparency. Overall, the website scores moderately in content quality, technical implementation, security, privacy compliance, and business credibility, resulting in an overall AI score of 68.

The website garancianakupu.sk operates as a Slovak e-commerce purchase guarantee platform affiliated with Heureka Group a.s. It provides customers with assurances on purchases made through the Heureka Košík system, including money-back guarantees and support for order issues. The site targets Slovak online shoppers and certified e-shops, positioning itself as a trusted intermediary in the Slovak e-commerce market. The business model revolves around enhancing consumer confidence and supporting e-shops with certification and guarantee services. Technically, the website uses AngularJS for frontend rendering, includes Google Analytics for tracking, and employs modern HTML5 and CSS3 standards. The site is mobile-optimized and presents a professional design with clear navigation. However, it lacks advanced accessibility features and modern frameworks. No CMS or hosting provider details are evident from the content. From a security perspective, the site uses HTTPS and does not expose sensitive data. However, it lacks visible security headers and published security or incident response policies. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. The domain WHOIS data is consistent and indicates a legitimate, established business presence since 2009. Overall, the website is functional, trustworthy, and professionally presented but would benefit from enhanced privacy compliance, security hardening, and transparency regarding data protection and incident response.

The website www.natur-mv.de serves as an official informational portal for the National Natural Landscapes in Mecklenburg-Vorpommern, Germany. It provides detailed information about various national parks, biosphere reserves, and nature parks in the region, targeting nature enthusiasts, tourists, and visitors interested in environmental conservation and outdoor activities. The site features event announcements, interactive maps, and educational content, positioning itself as a key regional resource for nature-related tourism and conservation awareness. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, and employs modern web technologies such as Leaflet.js for interactive maps and Swiper.js for image sliders. It integrates Matomo analytics with user consent mechanisms, ensuring compliance with privacy regulations. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the site uses HTTPS and implements cookie consent banners, reflecting adherence to GDPR requirements. However, explicit security headers and a dedicated security policy or incident response contact are not evident. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the website's regional and governmental nature, supporting its legitimacy. Overall, the site maintains a solid security posture but could benefit from enhanced security header implementation and formal vulnerability disclosure policies. The overall risk assessment is low, with the website presenting a trustworthy, professional, and privacy-conscious platform. Strategic recommendations include adding security headers, publishing a security policy or incident response contact, and considering a vulnerability disclosure framework to further strengthen security and trust.

TEN Co., Ltd. operates a regional chain of beauty and nail salons primarily located in Aichi Prefecture, Japan. The company emphasizes personalized hair styling services that fit individual lifestyles and hair types, supported by a professional website that facilitates information dissemination and online reservations. The business is well-established with a domain age dating back to 2006, reflecting a mature market presence. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and responsive design to provide a good user experience across devices. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal privacy or cookie policies, indicating areas for compliance and security improvement. Overall, the website is professional, trustworthy, and serves its target audience effectively, though it would benefit from enhanced privacy compliance and security hardening.

SMEC is a global engineering and consultancy firm specializing in infrastructure, energy, transport, and international development sectors. The company operates in over 40 countries and emphasizes sustainable and practical solutions. Their website is built on WordPress and integrates common analytics and tracking tools such as Google Analytics and MonsterInsights. The site is professionally designed with good content quality and clear navigation, targeting government and private sector clients. Security posture is adequate with HTTPS and reCAPTCHA usage, but could be improved by adding more security headers and explicit incident response policies. The absence of WHOIS data reduces transparency but the website content and branding suggest a legitimate and established business.