Medium-risk security reports

The website www.mjam.net is currently inaccessible due to a bot mitigation challenge page implemented via PerimeterX and Google reCAPTCHA Enterprise. This prevents any direct content analysis or extraction of business, contact, or policy information. The WHOIS query for the domain returned no match, indicating the domain may not be registered or WHOIS data is protected or unavailable. Consequently, the website's business profile, technical infrastructure, and security posture cannot be fully assessed. The presence of advanced bot mitigation suggests a focus on security but also limits transparency and accessibility. Overall, the site scores very low on content quality, business credibility, and privacy compliance due to lack of accessible information.

MULTIMEDIAFABRIK GmbH is a small Austrian company specializing in media technology and digital agency services, established in 2008. The company offers innovative multimedia solutions including lighting, image, and sound technologies, targeting businesses and organizations in need of professional media and digital services. The website reflects a professional and consistent brand image with good content quality and clear business focus. Technically, the site is built on WordPress using the Bricks Builder framework, hosted with Cloudflare DNS and CDN services, and integrates modern analytics tools such as Segment and Google Tag Manager. Performance and mobile optimization are strong points, ensuring a good user experience across devices. Security posture is good with HTTPS enforced and domain transfer protection, though improvements are recommended in DNSSEC deployment and security headers. Privacy compliance is currently weak due to the absence of privacy and cookie policies, which should be addressed to meet GDPR requirements. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and stable ownership.

Climatec, LLC is a well-established provider of building technology and energy efficiency solutions, serving primarily commercial and public sector clients. Founded in 1975 and a member of the Robert Bosch family since 2015, Climatec offers key services including Energy Services, Building Automation, and Security + Life Safety. The company positions itself as a trusted partner for building safety, comfort, and efficiency across the United States. Technically, the website is built on modern web technologies including Webflow CMS, jQuery, and Google Tag Manager, with good mobile optimization and moderate performance. The site uses HTTPS and Google reCAPTCHA for form security, but lacks explicit HTTP security headers and publicly available security policies, which could be improved to enhance security posture. From a security perspective, the site shows a moderate maturity level with no critical vulnerabilities detected in the provided data. However, the absence of WHOIS domain registration data raises concerns about domain transparency and trustworthiness. The presence of a suspicious external script domain also suggests the need for further security review. Overall, Climatec's website is professional and trustworthy in content and design, but improvements in domain registration transparency and security headers are recommended to strengthen its security posture and compliance. Strategic focus on publishing security policies and incident response information would further enhance trust and compliance.

Bosch Building Technologies is a global enterprise specializing in advanced building technology solutions including security, fire prevention, public announcement, and building automation. The company operates under the Bosch brand umbrella and includes several subsidiaries such as Climatec, DIGICONTROL, and Paladin, serving diverse markets primarily in energy and building sectors. The website reflects a mature digital presence with professional design, multilingual support, and comprehensive content targeting building owners, system integrators, and facility managers. Technically, the site employs modern web technologies including Google Tag Manager for analytics and a custom privacy consent mechanism, ensuring GDPR compliance. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response information are absent. WHOIS data is unavailable, which is unusual but likely due to privacy or proxy services. Overall, the site is trustworthy and professionally maintained, supporting Bosch's market leadership in building technologies.

Querfeld's Wiener Kaffeehaus GesmbH operates an e-commerce platform dedicated to selling gift vouchers for its chain of cafés and restaurants in Vienna, Austria. The website offers a user-friendly interface with multiple voucher categories, a voucher value checking feature, and digital delivery options. The business targets general consumers looking to gift hospitality experiences. The company is positioned as a reputable regional hospitality brand with a medium-sized operation and consistent branding across its digital presence. Technically, the website employs a modern technology stack including Vue.js, jQuery, and various tracking and analytics tools such as Google Analytics, Facebook Pixel, and eTracker. It uses the Incert e-commerce system, which is specialized for tourism and hospitality sectors. The site is mobile-optimized and includes accessibility and SEO best practices, though accessibility could be further enhanced. From a security perspective, the site enforces HTTPS, implements cookie consent mechanisms via Klaro, and uses security headers to protect users. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks explicit security policies, incident response contacts, and vulnerability disclosure information, which are recommended for improved security posture. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. It effectively supports the business model of online voucher sales for hospitality services. Strategic recommendations include publishing security policies, adding incident response contacts, and enhancing accessibility features to further strengthen trust and compliance.

hello again is a European provider of innovative digital customer loyalty solutions, targeting businesses primarily in retail and service sectors. Their platform offers customer loyalty programs, marketing automation, and CRM capabilities, serving over 1,000 companies across 25 countries. The website is professionally designed using modern web technologies such as Nuxt.js and Tailwind CSS, with good mobile optimization and user experience. The presence of detailed cookie consent mechanisms and privacy policies indicates a strong commitment to GDPR compliance. However, the absence of WHOIS registration data and explicit contact information slightly detracts from overall business credibility. Security posture is adequate with HTTPS and cookie consent, but lacks visible security headers and incident response details.

Table Champ is a professional SaaS provider offering modern restaurant reservation software primarily targeting the Austrian hospitality sector. The platform enables restaurants to manage bookings efficiently, automate processes, and increase revenue through features such as online booking widgets, Google reservation integration, and TiPOS cash register integration. The website is built on WordPress with Elementor, incorporating modern web technologies and marketing tools like Google Tag Manager and Intercom. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit privacy and terms policies are missing. WHOIS data is unavailable due to NIC.AT quota limits, slightly impacting trust. Overall, the site presents a credible business with good technical implementation and user experience.

HugeDomains operates as a specialized domain marketplace offering premium domain names for sale with options for immediate purchase or payment plans. The company targets businesses and individuals seeking strong branding and SEO advantages through premium domains. The website is professionally designed, mobile-optimized, and provides clear navigation and trust signals such as a 30-day money back guarantee and customer testimonials. Technically, the site uses modern JavaScript libraries, Google Analytics for tracking, and implements SSL encryption with reCAPTCHA Enterprise for security. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. However, WHOIS data for the domain is unavailable, likely due to privacy protection, which slightly impacts trust but is common in this industry. Overall, the site demonstrates a mature e-commerce platform with good security posture and user experience.

ShopRoku is a well-established e-commerce awards platform operated by Heureka Group a.s., targeting Czech and Slovak online shops. The website serves as a hub for competition information, results, and media content, positioning itself as a trusted authority in the regional e-commerce sector. The platform benefits from strong branding and partnerships with notable companies such as Visa and media partners like Forbes and CzechCrunch. Technically, the site employs modern JavaScript frameworks and integrates consent management tools to comply with privacy regulations. The website is mobile-optimized, fast-loading, and SEO-friendly, providing a good user experience. Security-wise, the site uses HTTPS and consent frameworks but lacks explicit security headers and a published security policy, which are recommended for enhanced protection. Overall, the domain registration and WHOIS data align well with the business claims, indicating high legitimacy and trustworthiness.

NotifyVisitors is a technology company specializing in customer data platform and conversion rate optimization software. Their offerings include web push notifications, heatmaps, A/B testing, and analytics tools designed to enhance customer engagement and marketing effectiveness. The company targets businesses seeking to improve their digital marketing and customer insights through integrated SaaS solutions. The website is built on WordPress using Elementor, indicating a modern and flexible technical infrastructure. The presence of Google Tag Manager suggests active analytics and marketing tracking capabilities. Security posture is moderate with HTTPS enabled but lacks some advanced security headers and explicit privacy and cookie policies, which are critical for compliance and user trust. The absence of WHOIS registration data raises concerns about domain legitimacy, though the professional website presence mitigates some risk. Overall, the website is functional and professional but would benefit from enhanced transparency and security practices.

Operational Optimisation 2026 is a specialized event organized by Mark Allen Group targeting operational decision-makers in the energy from waste and biomass sectors. The website presents a professional and well-structured platform for event information, networking, and industry engagement. The business model focuses on event organization, sponsorship, and industry knowledge exchange, positioning itself as a niche leader in this technical sector. The website content is relevant and well-maintained, with clear calls to action and supporting testimonials enhancing credibility. Technically, the website leverages modern JavaScript libraries, Google Analytics, Google Tag Manager, and a proprietary event platform (Evessio CMS) hosted on AWS infrastructure. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. SEO practices are adequately implemented with proper meta tags and Open Graph data. From a security perspective, the site uses HTTPS and includes CSRF tokens, but lacks visible security headers and DNSSEC is not enabled. No explicit security policies or incident response contacts are published, which could be improved. The domain registration is consistent with the business claims, showing no suspicious patterns and a reasonable domain age. Overall, the website is trustworthy and professional with moderate security posture and privacy compliance. Strategic improvements in security headers, DNSSEC, and published security policies would enhance the site's resilience and user trust.

PROdigitalTV e.V. is a German-based association focused on fostering networking and collaboration within the digital media economy, particularly connecting TV broadcasters and digital media companies across Germany, Austria, and Switzerland. The organization operates primarily through membership and events such as media breakfasts, providing a platform for knowledge exchange and business development. The website reflects a professional and consistent brand image, targeting industry professionals and companies involved in digital media technologies and services. Technically, the website employs a modern technology stack including jQuery, the Foundation framework, Azure Media Player, Google Maps API, and Weglot for multilingual support. Analytics are handled via Piwik/Matomo with a compliant cookie consent mechanism. The site is mobile-optimized with moderate performance and basic accessibility features. From a security perspective, the site enforces HTTPS and uses cookie consent to comply with privacy regulations. However, it lacks explicit security headers and documented security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website presents a low-risk profile with good business credibility and privacy compliance. Strategic improvements could focus on enhancing security headers, publishing security policies, and providing clearer contact information to strengthen trust and compliance.

CDN Alliance is a nonprofit organization established in 2020, dedicated to connecting, supporting, and representing the global Content Delivery Network (CDN) industry and community. The website serves as an informational and community hub for CDN professionals and stakeholders, positioning itself as an industry alliance. The business model is nonprofit, focusing on industry collaboration rather than commercial sales. The organization appears to be small in size with a clear focus on the technology sector related to CDN services. Technically, the website is built on WordPress using the Divi theme, leveraging common web technologies such as JavaScript, Google Fonts, and Mailchimp for newsletter management. The site is hosted behind Cloudflare DNS services, ensuring reliable delivery and basic security. The website demonstrates moderate performance and good mobile optimization, with basic accessibility and SEO practices in place. From a security perspective, the site uses HTTPS and includes reCAPTCHA for form protection, but lacks DNSSEC and security headers, which are recommended for enhanced security. There is no visible privacy policy or terms of service, which are important for compliance and user trust. No incident response or vulnerability disclosure information is provided, indicating room for improvement in security transparency and readiness. Overall, the website is professional and relevant to its target audience but would benefit from enhanced privacy compliance, security hardening, and clearer contact information to improve trust and regulatory adherence.

Envestnet, Inc. is a leading enterprise in the financial technology sector, specializing in wealth management platforms and financial planning solutions. Their website reflects a mature digital presence with comprehensive offerings targeted at financial advisors, RIAs, asset managers, and financial institutions. The company emphasizes delivering financial wellness through an interconnected ecosystem of technology and data-driven services. Technically, the site is built on Drupal 11 with modern analytics and consent management tools, showing good digital maturity and mobile optimization. Security posture is strong with HTTPS enforced and privacy compliance mechanisms in place, though some security headers could be improved. Overall, the site is professional, trustworthy, and well-aligned with industry standards.

Strategy is a Canadian media company specializing in marketing industry news, events, and awards. It operates a well-established website with a strong market position in Canada's marketing community, supported by its parent company Brunico Communications Ltd. The website offers rich content including news articles, event information, and industry resources, targeting marketing professionals and agencies in Canada. The technical infrastructure is based on WordPress CMS, leveraging modern web technologies and third-party marketing and analytics tools such as Google Analytics, Marketo, and Google Tag Manager. Hosting appears to be on AWS infrastructure, ensuring reliable performance and scalability. Security posture is solid with HTTPS enforced and domain transfer protections in place, though DNSSEC is not enabled, representing a minor security gap. Privacy compliance is basic, with a privacy policy and terms of service present but lacking explicit cookie consent mechanisms and GDPR compliance indicators. Overall, the website is professional, trustworthy, and well-maintained, with moderate user tracking and advertising integration. Recommendations include enabling DNSSEC, implementing cookie consent, and publishing explicit security and incident response policies to enhance compliance and trust.

Alcova is a specialized platform focused on design exhibitions and collaborations, primarily operating in Milan and Miami. It serves designers, companies, institutions, and researchers interested in the future of living and making. The platform organizes recurring international exhibitions and maintains a design shop for curated products. Technically, the website is built using modern frameworks such as Nuxt.js and Vue.js, with a headless CMS (Directus) and Shopify integration for e-commerce. The site is performant, mobile-optimized, and professionally designed, though accessibility and SEO could be improved. Security posture is adequate with HTTPS enforced but lacks important security headers and published security policies. Privacy compliance is limited, with no cookie consent mechanism and only a basic privacy policy. Overall, the domain registration aligns well with the business claims, indicating legitimacy and trustworthiness.

reformiert.jobs operates as a specialized online job portal dedicated to employment opportunities within the church sector in Switzerland. It serves both job seekers and employers by providing a platform for job listings, newsletter subscriptions, and educational course promotions. The website is positioned as a leading niche portal in its market segment, focusing on ecclesiastical work and related services. The content is primarily in German and targets a Swiss audience interested in church-related employment and professional development. Technically, the website is built on WordPress, utilizing standard web technologies such as HTML5, CSS3, and JavaScript, with Google Fonts integration. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate, and the site includes mechanisms to clean tracking parameters from URLs, enhancing user privacy. However, explicit security headers are not evident in the provided data, and no cookie consent banner is present despite GDPR relevance. From a security perspective, the site uses HTTPS and includes secure form inputs with consent checkboxes for newsletter subscriptions. There is no evidence of exposed sensitive data or vulnerable libraries in the analyzed content. The absence of a published security policy or incident response contacts suggests room for improvement in security transparency and readiness. Overall, the domain registration data aligns well with the website's purpose, indicating legitimacy and trustworthiness. The overall risk assessment is moderate with no critical issues detected. Strategic recommendations include implementing explicit cookie consent mechanisms, publishing security policies, enhancing security headers, and improving accessibility. These steps will strengthen compliance, user trust, and security posture, supporting the site's continued role as a trusted niche job portal.

FC Zürich operates an official website serving as both an information portal and an e-commerce platform for club merchandise. The site targets football fans and customers interested in official FC Zürich products and club news. The business holds a strong market position as a leading Swiss football club with a professional digital presence. Technically, the website is built on the Shopify platform, leveraging modern web technologies and multiple analytics and marketing tools, including Google Analytics, Microsoft Clarity, and Facebook Pixel. The site employs a consent management platform (Usercentrics) to address privacy compliance. Security posture is solid with HTTPS enforced and no visible sensitive data exposure; however, some security headers are missing, and no explicit security or incident response policies are published. Overall, the website is professional, trustworthy, and well-branded, with room for improvement in privacy policy transparency and security header implementation.

Golf Sempach is a prominent golf resort located centrally in Switzerland, offering two championship 18-hole golf courses and a variety of related services including a performance center, academy, events, gastronomy, and an online shop. The website is professionally designed using TYPO3 CMS and integrates modern analytics tools such as Google Analytics and Matomo. It provides clear contact information and maintains a consistent brand presence with active social media channels. The site is fully accessible without any blocking or WAF challenges, indicating good digital maturity. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in cookie consent and security policy disclosures. Overall, the business presents a trustworthy and professional online presence aligned with its market position as a leading golf resort in Switzerland.

Golf Kyburg is a premium golf club located near Zürich, Switzerland, offering an 18 Hole Championship Course and a range of services including memberships, events, seminars, golf academy courses, gastronomy, and an online shop. The club is part of the Leading Golf Courses of Switzerland, positioning it as a high-quality destination for golf enthusiasts and event attendees. The website is well-structured, professionally designed, and provides clear navigation and contact information, targeting golfers and hospitality clients in the region. Technically, the website is built on TYPO3 CMS and employs modern frontend technologies such as Slick Slider and GSAP TweenMax. It integrates multiple analytics platforms including Google Analytics, Google Tag Manager, and Piwik/Matomo, indicating a mature approach to user behavior tracking. The site is mobile optimized and SEO friendly, though accessibility features are basic. From a security perspective, the site uses HTTPS with good SSL configuration and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policies, incident response information, and a cookie consent mechanism, which are important for GDPR compliance and user trust. No vulnerability disclosure or security.txt files are present. Overall, Golf Kyburg's website demonstrates a solid business and technical foundation with good security hygiene but could improve privacy compliance and transparency. Strategic recommendations include implementing cookie consent, publishing security policies, and enhancing security headers to strengthen trust and compliance.

Golfclub Interlaken-Unterseen is a regional golf club located in Switzerland, offering a scenic and accessible golf course embedded between two lakes. The club provides golf-related services including teetime reservations, tournaments, golf lessons, and hospitality through its restaurant and pro shop. The website reflects a well-established business with a focus on quality and sustainability, evidenced by certifications and partnerships. Technically, the site uses Joomla CMS with UIkit and Yootheme frameworks, delivering a good user experience with moderate performance and mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and privacy compliance mechanisms such as cookie consent. Overall, the domain registration and business information are consistent and trustworthy, supporting a positive legitimacy assessment.

Golfclub Bodensee Weißensberg is a regional golf club located in Germany, serving golf enthusiasts primarily in the Bodensee area. The club offers membership services, golf course access, tournaments, and a proshop, positioning itself as a member of The Leading Golf Courses, which enhances its market credibility. The website is professionally designed using WordPress and Elementor, with a focus on user experience and clear navigation. It employs modern SEO practices and complies with GDPR regulations through a comprehensive privacy policy and cookie consent mechanism. Security posture is solid with HTTPS enforced and no obvious vulnerabilities detected, though security headers could be improved. Overall, the site reflects a trustworthy and professional business presence.

AdCapital AG is a German industrial holding company specializing in core manufacturing sectors including electrotechnology, metal and plastic processing, mechanical and toolmaking engineering, and automotive. The company manages a portfolio of subsidiaries that are economically successful and future-oriented, emphasizing sustainability and long-term growth. It acts as a strategic partner to its subsidiaries, supporting their development, expansion, and internationalization. The website provides detailed information about the company’s history, management, subsidiaries, and investor relations, targeting investors, potential employees, and business partners. Technically, the website is built on TYPO3 CMS and uses older versions of jQuery and jQuery UI. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. No advanced analytics or tracking tools are detected, and no social media links are present. The site lacks visible security headers and privacy or cookie policies, indicating areas for compliance improvement. From a security perspective, the site is accessible without WAF or blocking mechanisms, with no exposed sensitive data or obvious vulnerabilities. However, the use of outdated JavaScript libraries and absence of security headers suggest moderate security posture. The WHOIS data is consistent with the company’s history and domain usage, supporting legitimacy. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening.

The website www.performanceartaward.ch is dedicated to the Swiss Performance Art Award, presenting information primarily in French with multilingual support. It serves as a cultural platform to promote performance art in Switzerland, targeting artists and the general public interested in this art form. The site uses modern web technologies such as Next.js and React, indicating a contemporary digital infrastructure with moderate performance and good mobile optimization. However, the site lacks visible privacy and cookie policies, contact information, and security headers, which are important for compliance and trust. No analytics or tracking scripts were detected, suggesting minimal user tracking. Overall, the security posture is moderate but could be improved with better policy disclosures and security best practices. The site content is safe for general audiences with no adult or explicit material detected.

Philippe Meyer Architecte is a small Swiss architectural firm presenting its portfolio, projects, competitions, essays, and photography through a professionally designed Drupal-based website. The site targets architecture clients and collaborators, showcasing the firm's design capabilities and team. The technical infrastructure includes Drupal CMS and Matomo analytics with privacy-conscious settings such as Do Not Track enabled. The website is mobile optimized with moderate performance and basic accessibility features. Security posture is adequate with HTTPS enabled but lacks security headers and formal privacy or cookie policies, which are important for compliance and trust. No direct contact emails or phone numbers are provided, only a contact form. Overall, the website is professional and trustworthy but could improve privacy compliance and security best practices.

InterSmart is a small technology company specializing in web design, development, digital marketing, and e-commerce solutions primarily serving clients in Kochi, Kerala, India. The website demonstrates a professional design with good content relevance and user experience, targeting businesses and individuals seeking digital services locally. Technically, the site is built on WordPress with modern technologies such as Bootstrap and Google Fonts, and uses SEO tools like Rank Math and Google Tag Manager for analytics and marketing. However, the security posture is moderate with no explicit security headers detected and missing privacy and cookie policies, which are critical for compliance and trust. The WHOIS data is missing or indicates the domain is unregistered, which is a significant red flag affecting the legitimacy and trustworthiness of the domain. Overall, the site is functional and professional but requires improvements in security, privacy compliance, and domain registration transparency to enhance trust and reduce risk.

The Federal Ministry of Food and Agriculture (BMLEH) operates an official government website providing comprehensive information and public services related to food, nutrition, consumer protection, farming, animals, rural regions, forests, fisheries, international affairs, and digitalisation. The site targets the general public, stakeholders in agriculture and food sectors, and international partners. It serves as a key communication platform for the ministry's activities and policies. Technically, the website is built on the Government Site Builder CMS, a content management system tailored for federal administration websites. It employs modern web standards including responsive design, SVG graphics, and Matomo analytics for privacy-respecting visitor statistics. The site is mobile-optimized and accessible, with a clear navigation structure and comprehensive metadata. From a security perspective, the website enforces HTTPS with strong SSL configuration and implements multiple security headers such as Content-Security-Policy and X-Frame-Options. A cookie consent banner provides granular control over necessary, statistical, social media, and third-party cookies, demonstrating good privacy compliance aligned with GDPR. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the website is trustworthy, professional, and safe for general audiences. It lacks direct contact emails or phone numbers in the HTML but provides a contact form. The domain WHOIS data is consistent with a government entity, supporting legitimacy. Strategic recommendations include publishing security policies, incident response contacts, and vulnerability disclosure information to enhance transparency and security posture.

Zimmerer Westfalen is a trade association representing 20 carpentry and wood construction guilds in the Westfalen region of Germany, forming the third largest carpentry association in the country. The organization provides member services including representation, training, information dissemination, and industry events. Their website is professionally designed using WordPress with Elementor and Astra theme, featuring modern SEO and privacy compliance tools such as Rank Math and Complianz. The site is well-structured, mobile-optimized, and provides clear contact information and active social media engagement. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response details are not publicly available. Overall, the domain registration and website content are consistent and trustworthy, supporting a medium-sized regional trade association.

Primarstufe Münchenstein operates as a primary education institution serving the Münchenstein community in Switzerland. The website provides comprehensive information about the school's organizational structure, locations, and services, targeting parents, students, and local stakeholders. The business model is that of a public educational institution focused on delivering primary and kindergarten education with additional online services for ease of access. Technically, the website is built using a modern JavaScript and CSS stack, leveraging Webpack for module bundling and an i-web CMS platform. The site demonstrates good mobile optimization and basic accessibility features, with moderate performance. SEO is basic but functional, and the site includes proper meta tags and a consent mechanism for anonymized web statistics. From a security perspective, the site uses HTTPS with good SSL configuration but lacks explicit security headers and publicly available security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is adequate with a visible privacy policy and cookie consent mechanism aligned with GDPR requirements. Overall, the website is trustworthy, professionally designed, and well-maintained, with a strong alignment between WHOIS registration data and the website content. There are no critical security or compliance issues, making it a reliable digital presence for the educational institution.

Museo Africano is a non-profit cultural institution based in Verona, Italy, dedicated to African culture and heritage. Operated by Fondazione Nigrizia Onlus, the museum offers permanent and temporary exhibitions, educational programs for schools and families, and cultural events. The website reflects a well-established organization with clear contact information, social media presence, and donation capabilities. The business model focuses on cultural education and community engagement supported by donations and public participation. Technically, the website is built on WordPress with a modern plugin stack including Yoast SEO, Revolution Slider, and GiveWP for donations. It is mobile-optimized and uses HTTPS with Google Analytics and Tag Manager for analytics. The site demonstrates good SEO practices and basic accessibility features, though some security headers are missing. From a security perspective, the site enforces HTTPS and includes a GDPR-compliant cookie consent mechanism. However, it lacks explicit security policies, incident response contacts, and security.txt files. The WHOIS data is unavailable, likely due to privacy protection, but the website content and contact details support legitimacy. No critical vulnerabilities or adult content were detected. Overall, Museo Africano presents a trustworthy and professional online presence suitable for its cultural and educational mission. Strategic improvements in security headers and incident response transparency would enhance its security posture and compliance.

Afriradio is a niche cultural radio station operated by Fondazione Nigrizia Onlus in Italy, focusing on Afro and international music and world news. The website serves as a digital platform to promote their radio content, news, and cultural initiatives, targeting primarily Italian-speaking audiences interested in Afro culture and global news. The organization is well-established with a domain registration consistent with its business history and transparent ownership. Technically, the website is built on WordPress with standard plugins for SEO, forms, and donations, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and cookie consent implemented, though it lacks advanced security headers and multi-factor authentication. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, with clear contact information and partner affiliations.

Pew Research Center is a well-established, nonpartisan non-profit organization focused on providing public opinion polling, social science research, and data analysis to inform the public and policymakers. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content targeted at a broad audience including researchers, media, and the general public. Technically, the site is built on WordPress VIP with modern SEO and analytics tools integrated, including Google Tag Manager and Crazy Egg, with consent mechanisms for EU privacy compliance. Security posture is good with HTTPS enforced and denial of ad personalization in EU regions, though explicit security headers and detailed privacy policies are not detected in the provided content. WHOIS data is unavailable due to privacy protection, which is justified for this type of organization. Overall, the site is trustworthy, professional, and safe for general audiences.

WFMT is a well-established classical and folk music radio station based in Chicago, offering both traditional broadcasting and online streaming services. The website serves as a digital platform to engage listeners with high-quality music programming, live event broadcasts, and community information. The station targets classical and folk music enthusiasts primarily in the Chicago area but also globally via streaming. Technically, the website is built on WordPress and integrates modern web technologies including Google Tag Manager, Adsense, and New Relic for performance monitoring. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and reCAPTCHA, but lacks explicit security policies and incident response contacts, which could be improved. The absence of WHOIS data for the domain is a notable concern, although the professional presentation and active social media presence support legitimacy. Overall, WFMT's digital presence is solid but could benefit from enhanced transparency in security and domain registration information.

StellarTerm operates as an open source trading client for the Stellar network, enabling users to trade, send, and receive assets on the Stellar Decentralized Exchange. The platform targets cryptocurrency traders and users within the Stellar ecosystem, positioning itself as a niche service provider in blockchain finance. The business model revolves around providing a decentralized exchange client with additional services such as crypto swaps and asset purchases. Technically, the website employs standard web technologies including JavaScript, CSS, and HTML5, hosted via Cloudflare, ensuring moderate performance and basic mobile optimization. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, though improvements such as DNSSEC enablement and enhanced security headers are recommended. Privacy compliance is partial, with privacy and terms policies present but lacking cookie consent mechanisms. Overall, the site is professional and trustworthy with moderate risk, suitable for its business scope.

Basler Stadtbuch is a reputable digital cultural archive dedicated to preserving and presenting the historical memory of Basel since 1879. The website offers rich historical content including articles, dossiers, and daily historical events, targeting the general public interested in Basel's heritage. Technically, the site is built on Magnolia CMS and uses modern JavaScript libraries and analytics tools, providing a good user experience with mobile optimization and accessibility features. Security posture is strong with HTTPS and security headers, though explicit privacy and security policies are missing. Overall, the site is trustworthy and professionally maintained, with room for improvement in privacy compliance and incident response transparency.

The Dachstiftung der Christoph Merian Stiftung (DS-CMS) is a well-established non-profit foundation based in Basel, Switzerland, managing 35 sub-foundations to fund social, cultural, and natural projects in the region. It serves as an efficient vehicle for donors to implement their philanthropic goals. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to its target audience of donors and project applicants. Technically, the site leverages modern frameworks such as Vue.js and Nuxt.js, hosted likely by cyon AG, and uses Craft CMS for content management. Analytics are implemented via Google Tag Manager, indicating moderate user tracking. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies could be improved. Privacy compliance is adequate with a clear privacy policy but lacks a cookie consent mechanism. Overall, the site is trustworthy and credible, aligned with its parent organization Christoph Merian Stiftung.

Modern Languages Open is a reputable open access academic journal platform specializing in modern languages research, published by Liverpool University Press in partnership with the University of Liverpool Library. The platform offers rigorous peer review, interdisciplinary content, and international dissemination under Creative Commons licenses. The website is professionally designed, mobile-optimized, and provides clear navigation and rich content relevant to its academic audience. Technically, it leverages modern web technologies including React and Next.js, hosted on a reliable infrastructure with good performance and accessibility standards. Security posture is strong with HTTPS, security headers, and reCAPTCHA integration, though DNSSEC is not enabled and explicit security policies are absent. Privacy compliance is generally good with a comprehensive privacy policy, but lacks a cookie consent mechanism. Overall, the website demonstrates high business credibility and trustworthiness with strong university press affiliation and recognized certifications.

Longleaf Services, Inc. is a well-established non-profit organization founded in 2006, dedicated to serving the university press community by providing comprehensive order processing, warehousing, fulfillment, and additional operational services. The company operates with a clear focus on university presses, bookstores, and wholesalers, positioning itself as a specialized service provider with a strong reputation supported by a long domain history and a client base of reputable university presses. Technically, the website is built on a modern WordPress platform with common plugins and frameworks, delivering a good user experience with moderate performance and mobile optimization. Security posture is solid with HTTPS enforced and domain transfer protections, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is basic, with a privacy policy present but lacking cookie consent mechanisms and GDPR explicit indicators. Overall, the website is professional, trustworthy, and safe for general audiences.

Verso la Biennale is a cooperative initiative organized by the Lega Nazionale delle Cooperative e Mutue, focusing on promoting the role of cooperatives in Italy's socio-economic growth. The website serves as an information hub for events, news, and cooperative activities, targeting institutions, political, economic, academic, and cultural sectors in Italy. The site is built on a modern WordPress infrastructure using Elementor and Yoast SEO, ensuring good SEO and mobile responsiveness. Security posture is adequate with HTTPS and cookie consent mechanisms, though DNSSEC is not enabled and security headers are missing. Privacy compliance is strong with a comprehensive privacy policy hosted on iubenda and a cookie policy with consent management. Contact information is limited to an email address, with no phone numbers or physical addresses explicitly provided. Overall, the site is professional, trustworthy, and well-aligned with its business purpose.

The Terrific Project website represents a European initiative focused on advancing the packaging sector through innovative bio-based and circular economy solutions. The project aims to develop and demonstrate sustainable packaging materials and processes that contribute to ecological transition and resource efficiency. The website is professionally designed using WordPress with Elementor and includes multimedia content such as videos and images to communicate its mission and progress. Social media integration is present with links to Twitter, LinkedIn, and YouTube, enhancing outreach and engagement. Technically, the site employs modern web technologies and privacy-conscious tools such as Cookiebot for consent management and Matomo for analytics, reflecting a commitment to GDPR compliance and user privacy. The site is mobile-optimized and SEO-friendly, leveraging Yoast SEO plugin and structured data for enhanced search visibility. However, explicit privacy policy and terms of service pages are not detected in the provided content, representing an area for improvement. From a security perspective, the website uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers and published security policies or incident response information. No vulnerabilities or suspicious activities are detected, indicating a generally secure posture. The domain registration is consistent and trustworthy, registered through a reputable registrar without privacy protection, aligning with the project's transparency. Overall, the website is a credible and professional platform for the Terrific Project, with strong technical foundations and privacy practices. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and providing clear contact information to improve trust and compliance further.

The website pico.coop is currently inaccessible due to a security challenge page implementing a JavaScript proof-of-work CAPTCHA. This indicates the presence of a Web Application Firewall or similar security mechanism designed to block automated or suspicious traffic. As a result, no meaningful business, contact, or policy information is available for analysis. The page content is minimal and focused solely on verifying the visitor's legitimacy before granting access. The technical infrastructure includes advanced client-side cryptographic computations to solve the challenge, served via Amazon CloudFront CDN. Security posture is partially demonstrated by the challenge mechanism, but lacks visible security headers or compliance documentation. Overall, the site cannot be fully assessed for business credibility, privacy compliance, or content quality due to this blocking mechanism.

HAWtech is a consortium of six leading German universities of applied sciences specializing in engineering sciences. Founded in 2009, it serves approximately 60,000 students across economically strong regions in Germany. The alliance focuses on applied teaching, learning, research, and academic cooperation, offering study programs, summer schools, and scholarships. The website reflects a professional academic presence with clear navigation and relevant content targeted at students and academic partners. Technically, the site is built on TYPO3 CMS with JavaScript enhancements and uses Piwik for analytics, indicating moderate digital maturity. Security posture is adequate with cookie consent implemented but lacks visible advanced security headers and explicit incident response or security policies. The absence of WHOIS registration data for the domain is a notable anomaly that reduces trustworthiness, though the website content and partner domains strongly suggest legitimacy. Overall, the site is well-maintained, content-rich, and serves its educational mission effectively.

DYMATRIX is a German-based company specializing in customer experience management solutions, offering a comprehensive Customer Experience Platform that integrates customer data, analytics, marketing automation, and personalization. The company targets businesses across multiple sectors including retail, finance, media, telecommunications, energy, and transportation, positioning itself as a trusted partner for data-driven marketing and customer engagement. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support (German and English). Technically, the site is built on TYPO3 CMS and leverages modern web technologies and marketing tools such as Google Tag Manager and Econda analytics. Security posture is solid with HTTPS enforced and privacy compliance evident through a detailed cookie consent mechanism and GDPR-aligned privacy policy. However, the absence of explicit security policies and incident response contacts suggests room for improvement in transparency and security maturity. Overall, the website is professional, trustworthy, and well-aligned with its business objectives.

Wohlfahrtswerk für Baden-Württemberg is a large non-profit organization specializing in elderly care, volunteer services (FSJ/BFD), and educational programs. It holds a strong market position as one of the largest elderly care providers in the Baden-Württemberg region of Germany. The website reflects a professional and consistent brand image, targeting elderly individuals, volunteers, job seekers, and donors. Technically, the site is built on TYPO3 CMS with modern front-end technologies and integrates consent-based Google Analytics and Usercentrics for privacy compliance. Security posture is solid with HTTPS and consent management, though it lacks explicit security policies and incident response contacts. Overall, the website is trustworthy, well-structured, and compliant with GDPR requirements.

Donau-Iller-Nahverkehrsverbund-GmbH (DING) operates as a regional public transportation association in Germany, providing comprehensive transport schedules, ticketing options, and service information for the Donau-Iller region. The website serves as a portal for commuters, students, and travelers, offering quick connection searches, ticket purchase information, and service updates. The company holds a solid regional market position as a transportation authority and service provider.

The Bundesministerium für Forschung, Technologie und Raumfahrt (BMFTR) is a German federal government ministry responsible for research, technology, education, and space policy. The website serves as an official information portal targeting the general public, researchers, students, and policymakers. It provides comprehensive information on education, research programs, and government initiatives. The site is positioned as a key government entity with enterprise-level scale and a focus on public service and policy dissemination. Technically, the website is built on the Government Site Builder CMS, featuring structured data (JSON-LD), Open Graph metadata, and accessibility features such as ReadSpeaker integration. The site is mobile optimized and implements a cookie consent mechanism with options for anonymous statistical tracking and external media embedding. Performance is moderate, and SEO is basic but functional. From a security perspective, the site enforces HTTPS and uses cookie consent for privacy compliance. While explicit security headers are not fully visible in the provided data, no critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy as a government entity with consistent registration details. No WAF or blocking mechanisms interfere with access. Overall, the website is trustworthy and professionally maintained, though the analyzed page is a 404 error page with minimal content. Strategic recommendations include enhancing security headers, publishing a dedicated security policy, and improving content quality on error pages to better serve users.

A-Frame is an established open source web framework founded in 2015 that enables developers to build 3D, AR, and VR experiences using HTML and entity-component architecture. The website serves as a hub for documentation, examples, and community resources targeting developers and VR content creators. It holds a niche position in the WebVR technology space with a small but focused user base. Technically, the site uses modern web technologies including A-Frame 1.7.0, Hexo static site generator, Google Analytics, and Algolia DocSearch, hosted behind Cloudflare DNS. The site is moderately optimized for performance and mobile, with good SEO metadata and clear navigation. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks DNSSEC and security headers, and does not publish privacy or cookie policies, which impacts compliance. No contact emails or phone numbers are provided, limiting direct business credibility signals. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the project. The site content is safe for general audiences with no adult or questionable material.

The website specialcraftbox.com currently contains no accessible content beyond an empty HTML skeleton, indicating either a placeholder or an unconfigured site. The domain WHOIS data is highly suspicious, showing a creation date set in the future (March 2025), which undermines trust and legitimacy. There is no evidence of business information, contact details, or any form of user engagement mechanisms such as forms or policies. Technically, the site lacks any metadata, scripts, or security headers, and no SSL/TLS configuration is detected, suggesting it is not served over HTTPS. This results in a very low digital maturity and security posture. Overall, the site appears inactive or improperly configured, with significant risks related to trust and compliance.

Jeni.cash is a professionally designed website representing a cash deposit solution offered by Linfox Armaguard Pty Ltd, a large Australian transportation and cash management company. The service focuses on providing businesses with a secure, flexible, and efficient way to deposit cash without the risks and delays of traditional bank trips. The platform integrates uniquely identified cash bags, an online portal for logging deposits, and scheduled collections, positioning itself as an innovative solution in the cash logistics sector. Technically, the website is built on WordPress with modern plugins and multimedia content, offering good mobile optimization and SEO. Security posture is solid with HTTPS and secure login portals, but lacks visible security headers and privacy compliance documentation. The WHOIS data is limited, lacking registrant details, which slightly reduces trust but aligns with the business's legitimate branding and market presence.

Armaguard, operating under Linfox Armaguard Pty Ltd, is a well-established enterprise specializing in secure currency supply chain management and technology solutions across Australia, New Zealand, and Southeast Asia. The company holds a strong market position as an industry leader, partnering with major banks, financial institutions, and retailers. Their services encompass currency management, secure transport of precious cargo, and integrated technology solutions, supported by a network of subsidiaries and partners. The website reflects a professional and consistent brand image with good content quality and clear navigation.