Medium-risk security reports

Gumlet Pte. Ltd. is a technology company specializing in AI-powered video hosting, streaming, and image optimization services. Positioned as a modern alternative to established platforms like Mux and Vimeo, Gumlet targets developers, creators, and enterprises seeking high-performance media delivery solutions. The company offers a comprehensive suite of services including DRM-protected video hosting, adaptive streaming, and detailed analytics, supported by a global CDN infrastructure. Gumlet's market presence is reinforced by notable customer case studies and certifications such as SOC2 and ISO, indicating a commitment to security and compliance. Technically, Gumlet employs a modern web stack leveraging React and Next.js frameworks, with media assets hosted on AWS S3 and delivered via CDN for optimal performance. The website demonstrates excellent mobile optimization, accessibility, and SEO practices, contributing to a fast and user-friendly experience. Security measures include HTTPS enforcement, robust security headers, and DRM capabilities for video content, reflecting a mature security posture. While the website provides comprehensive business and contact information, privacy compliance could be enhanced by implementing explicit cookie consent mechanisms and publishing dedicated security and incident response policies. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the active and professional web presence suggests a legitimate operation. Overall, Gumlet presents a strong digital maturity and business credibility with room for improvement in privacy transparency and domain registration clarity.

The website represents a test system interface branded as Hogrefe Testsystem, likely used for psychological or educational testing purposes. The content is minimal and technical, indicating an internal or client-facing application rather than a public marketing site. The technical infrastructure relies on ExtJS 4, log4javascript, dayjs, and pdf.js libraries, reflecting a moderately modern but somewhat dated technology stack. The site lacks comprehensive SEO and accessibility features and shows basic mobile optimization. Security posture is moderate with HTTPS assumed but no visible security headers or advanced protections. The login form is present but posts to a dummy endpoint, suggesting a test or staging environment. WHOIS data is unavailable, raising concerns about domain registration legitimacy. Overall, the site is functional for its apparent purpose but lacks public-facing business and compliance information.

Hogrefe AG is a reputable Swiss-based publishing company specializing in psychology, healthcare, and educational materials. Their website offers a broad range of products including books, psychological tests, eTesting platforms, seminars, and consulting services, targeting professionals and academics in these sectors. The company maintains a strong market position in Europe with a consistent brand presence and comprehensive service offerings. Technically, the website is built on TYPO3 CMS with modern front-end technologies like Tailwind CSS and integrates Google Tag Manager and Consent Manager for analytics and privacy compliance. Security posture is solid with HTTPS enforced and secure login mechanisms, though explicit security policies and incident response contacts are not published. Overall, the site is professional, well-structured, and compliant with GDPR requirements, reflecting a trustworthy and mature digital presence.

INFINITI Abu Dhabi operates as an official luxury automotive dealership specializing in new and pre-owned SUVs and crossovers under the INFINITI brand. The website targets luxury vehicle buyers in Abu Dhabi and the UAE, offering premium design, performance, and innovation in their vehicle lineup. The business appears to be a medium-sized entity aligned with Nissan Motor Company, leveraging strong brand recognition in the automotive sector. Technically, the website employs modern tracking and analytics tools such as Google Tag Manager and Adobe Experience Platform, with a professional design optimized for mobile devices and good SEO practices. However, the absence of WHOIS data and lack of visible privacy and cookie policies indicate gaps in transparency and compliance. Security posture is moderate but could be improved by implementing standard security headers and explicit security policies. Overall, the website is functional and professional but requires enhancements in privacy, security, and domain registration transparency to strengthen trust and compliance.

MJB International Limited LLC operates a professional website focused on providing comprehensive services for industrial gas turbines, primarily those designed by GE. The company positions itself as a leading independent service provider with decades of OEM experience, offering a wide range of services including parts supply, component repair, field support, training, and contractual services. The website reflects a mature business with consistent branding and a clear target audience in the energy sector. Technically, the site is built on WordPress using modern plugins such as WPBakery Page Builder and Slider Revolution, supported by Cloudflare for DNS and CDN services. The site is mobile-optimized and performs moderately well, though some accessibility features could be improved. Analytics are implemented via Google Analytics and Tag Manager, indicating moderate user tracking. From a security perspective, the site uses HTTPS and Cloudflare DNS but lacks DNSSEC and some advanced security headers. There is no visible security policy or incident response information, and no cookie consent mechanism is present, which may impact GDPR compliance. The WHOIS data is consistent with the business claims, showing a domain age of over 20 years, supporting legitimacy. Overall, the website is professional and trustworthy but could benefit from enhanced privacy compliance and security transparency to improve user trust and regulatory adherence.

Bloom Facilities Management is a UAE-based company specializing in providing comprehensive facilities management services to both corporate and residential clients. Their offerings include corporate services, residential services, project management, innovation initiatives, and business excellence programs. The company positions itself as a professional and customer-centric service provider within the UAE market. Technically, the website is built on Concrete CMS, uses modern JavaScript libraries such as jQuery and jQuery UI, and integrates Google Analytics and Google reCAPTCHA for analytics and security respectively. The site is hosted under Etisalat's registrar and nameservers, consistent with its UAE location. Security posture is solid with HTTPS enforced and spam protection on forms, though there is room for improvement in security headers and published security policies. Privacy and cookie policies are not found, indicating a compliance gap. Overall, the website is professional and functional with moderate tracking and good user experience.

Horton Interiors is a small, award-winning interior design and fit-out company based in Dubai, serving clients across the GCC region. The company specializes in delivering high-quality interior design solutions and fit-out services, positioning itself as a reputable player in the real estate and construction sector. The website reflects a professional business model focused on service delivery to businesses and individuals seeking interior design expertise. Technically, the website is built on WordPress using the Kadence theme and blocks, with integrations for SEO (Rank Math), multilingual support (WPML), and marketing analytics (Google Tag Manager, Facebook Pixel, Hotjar). The site is mobile-optimized and demonstrates good SEO practices with structured data and meta tags. Security-wise, the site uses HTTPS with a good SSL configuration but lacks explicit security headers and published security policies. No privacy or cookie policies were found, indicating a gap in compliance with GDPR and related regulations. The domain registration is consistent with the business claims, showing no suspicious patterns and a legitimate registration history since 2021. Overall, the website is professional and credible but would benefit from enhanced privacy and security disclosures to improve trust and compliance.

stafftastic GmbH is a German-based recruiting company specializing in sourcing suitable talents for businesses. Founded in 2020, the company operates a professional website primarily in German, targeting companies seeking recruitment services. The website demonstrates a good level of digital maturity, employing modern technologies such as Bootstrap, FontAwesome, and Cookiebot for cookie consent management, alongside Plausible Analytics for privacy-friendly analytics. Hosting is supported by Google Cloud DNS infrastructure, indicating reliable hosting services. Security posture is solid with HTTPS enabled and cookie consent implemented, although additional security headers could enhance protection. Privacy compliance is strong, with a comprehensive privacy policy and GDPR-aligned cookie consent mechanisms. Overall, the website is professional, trustworthy, and safe for general audiences.

The website www.duomoshop.com appears to be an e-commerce retail site built on the Wix platform. However, the absence of WHOIS registration data raises significant concerns about the legitimacy and ownership of the domain. The site lacks essential business information such as privacy policies, contact details, and terms of service, which are critical for trust and compliance. Technically, the site uses standard Wix scripts and includes LinkedIn tracking pixels for marketing purposes, but SEO and accessibility are minimal. Security posture is weak due to missing security headers and lack of incident response information. Overall, the site presents a basic online presence with limited content and low trustworthiness.

Afeefa - Digitaler Zusammenhalt e.V. operates the website 'Afeefa - Bunter Kompass für Thüringen', a non-profit digital platform providing a comprehensive and accessible overview of services and offers for immigrants in the Thuringia region of Germany. The platform supports newcomers by listing language courses, counseling services, leisure activities, and other integration-related resources. It also facilitates community engagement by allowing users to submit their own offers. The website is positioned as a regional integration support tool with a clear focus on accessibility and up-to-date information. Technically, the website employs modern frontend technologies including Vue.js and MapLibre GL for interactive maps, along with Font Awesome for icons. The site demonstrates good mobile optimization and accessibility features, though performance is moderate and SEO optimization is basic. The absence of a CMS or hosting provider details limits deeper infrastructure insights. From a security perspective, the site uses HTTPS but lacks visible security headers and cookie consent mechanisms, indicating room for improvement in security best practices and privacy compliance. No vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data is privacy protected, which is typical for non-profit organizations, but limits transparency. Contact information is clearly provided, enhancing trust. Overall, the website presents a professional and trustworthy platform for its target audience, with a solid business credibility score. Strategic recommendations include implementing cookie consent, enhancing security headers, and publishing security policies to improve compliance and security posture.

instant.page is a technology-focused website offering a lightweight, open source JavaScript library that enables just-in-time preloading of web pages to improve page load speed and user engagement. The service targets website owners and developers aiming to reduce latency and increase conversion rates by approximately 1%. The website is well designed, mobile optimized, and provides clear technical explanations and usage instructions. It is trusted by notable brands and has a strong GitHub presence, indicating a reputable and active community. Technically, the site uses modern web standards including CSS Grid and asynchronous JavaScript loading. It integrates Google Analytics and Google Tag Manager for user tracking and performance measurement. The site is fast and accessible, with good SEO and mobile optimization. However, it lacks visible security headers and formal privacy or cookie policies, which are important for compliance and user trust. From a security perspective, the site demonstrates good practices such as script integrity checks and respectful resource loading, but it does not publish a security policy or incident response contacts. No vulnerabilities or suspicious content were detected. The absence of privacy and cookie policies and contact information reduces the overall privacy compliance score. Overall, instant.page presents a professional, trustworthy, and technically sound offering with room for improvement in privacy compliance and security transparency. Strategic recommendations include publishing privacy and cookie policies, adding security headers, and providing clear contact channels for security incidents.

Topic Intelligence™️ is a small technology company founded in 2020, offering an AI-driven platform that provides topic-based marketing insights to improve targeting, content strategy, and lead generation. The platform integrates website and cross-channel marketing data to identify high-converting topics, trending industry topics, and user journeys, enabling smarter marketing decisions. The website is professionally designed using WordPress and Elementor, with a focus on clear messaging and user engagement. Technically, the site employs modern tools including Google Analytics, Matomo, Google reCAPTCHA Enterprise, and Stripe for payment processing, indicating a mature digital infrastructure. Security posture is good with HTTPS and form protections, though some security headers and explicit policies are missing. Privacy compliance is basic, lacking cookie consent mechanisms and detailed GDPR indicators. Overall, the site presents a credible and professional business presence with room for improvement in privacy and security transparency.

Single.xyz operates as a specialized e-commerce platform integrated with Shopify, enabling musicians and content creators to sell music, videos, and memberships directly to consumers. The platform supports livestream shows and reporting music sales to charts, positioning itself as a niche player in the digital media sales market. The website is professionally designed with good content relevance and user experience, targeting Shopify store owners and digital media creators. Technically, the site leverages Shopify's infrastructure and integrates multiple marketing and analytics tools such as HubSpot, Facebook Pixel, and Google Tag Manager, indicating a mature digital marketing approach. Security-wise, the site benefits from HTTPS and domain transfer protections but lacks DNSSEC and security headers, and does not publish privacy or cookie policies, which are critical for compliance and user trust. Overall, the site is legitimate and functional but would benefit from enhanced privacy compliance and security best practices.

AAA Studio was a Swiss-based small design agency operating from 2019 to 2023, specializing in visual communication, graphic design, and digital spaces. The agency served clients primarily in the cultural and industrial sectors, collaborating with interdisciplinary partners to deliver complex and sustainable projects. Their business model focused on agile, project-based work with a strong emphasis on creative experimentation and client collaboration. Technically, the website is built on Drupal CMS with a moderate performance profile and good mobile optimization. However, the site lacks advanced security headers and privacy compliance documentation, which are areas for improvement. The security posture is moderate with no critical vulnerabilities detected but missing best practices. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include implementing privacy and cookie policies, enhancing security headers, and improving accessibility and compliance measures.

AAA Studio was a Swiss-based visual communication agency operating from 2019 to 2023, specializing in graphic design, digital spaces, and communication projects for cultural and industrial clients. The studio emphasized a collaborative and experimental approach to design, working closely with interdisciplinary partners. Their portfolio includes projects for notable clients such as Fondation Beyeler, Museum Tinguely, and Performance Art Awards Switzerland. The website is bilingual (German and English), professionally designed, and showcases a rich portfolio of projects with multimedia content including images and videos. Technically, the site is built on Drupal CMS with modern HTML5 and CSS3 standards, optimized for mobile devices with good SEO practices. However, there are gaps in privacy and security compliance, with no visible privacy or cookie policies, no security headers, and no incident response information. Contact information is clearly provided, enhancing business credibility. Overall, the site reflects a small but professional agency with a strong creative portfolio but could improve in security and privacy compliance.

Zephir Software Design AG is a Swiss-based web agency specializing in web development services with a focus on innovative ideas and modern web technologies. The company targets businesses and organizations seeking professional web solutions, emphasizing Swiss quality and reliability. Their website showcases client references and projects, positioning them as a reputable regional player in the technology sector. Technically, the website uses modern JavaScript libraries such as fullPage.js and integrates privacy-friendly analytics via Plausible. The site is well-designed, mobile-optimized, and provides clear contact information, enhancing user experience and trust. However, the absence of privacy and cookie policies indicates a compliance gap that should be addressed. Security-wise, the site uses HTTPS but lacks visible security headers and incident response information, suggesting room for improvement in security posture. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

FRAKO Kondensatoren- und Anlagenbau GmbH is a specialized company focused on reactive power compensation, energy management, and power quality solutions. The company offers a comprehensive portfolio of products, services, and training aimed at improving energy efficiency and network reliability, primarily targeting industrial and commercial energy professionals. The website is professionally designed, mobile-optimized, and provides clear navigation and rich content, reflecting a mature digital presence. Technically, the site is built on TYPO3 CMS with Bootstrap and uses Matomo analytics for privacy-conscious user tracking. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies are missing. The WHOIS data is notably absent or unregistered, which raises legitimacy concerns; however, the association with the parent company AdCapital Gruppe and consistent branding mitigate some risk. Overall, the site scores well on content quality and technical implementation but should address WHOIS transparency and security policy publication to improve trust and compliance.

ver.di is a major German trade union focused on advocating for workers' rights, fair wages, and work-life balance. The website reflects a large, professional organization with a clear mission to support service sector employees. The technical infrastructure uses modern web technologies and includes consent management and analytics tools, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent, but lacks visible security headers and explicit privacy and terms policies. Overall, the site is trustworthy and well-maintained but could improve transparency and security practices.

Simple Plan Merch Store is an official e-commerce platform dedicated to selling exclusive merchandise for the band Simple Plan. The website offers a variety of products including t-shirts, hoodies, accessories, and music media, targeting fans of the band globally. The store operates on the Shopify platform, leveraging its robust e-commerce infrastructure and payment integrations such as Shopify Payments, Apple Pay, and PayPal. The site is professionally designed with consistent branding and good user experience, optimized for mobile devices and featuring clear navigation. Security is well implemented with HTTPS and standard security headers, though some privacy compliance aspects like cookie consent could be improved. The absence of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy, but the presence of official social media links and partnership with RH Merchandise supports the site's credibility.

ReferralCandy operates as a leading SaaS provider specializing in referral marketing software tailored for eCommerce businesses. The platform empowers online retailers to leverage customer referrals to drive exponential sales growth, boasting a user base exceeding 30,000 eCommerce stores. Their business model focuses on performance-based payments and seamless integration with popular platforms such as Shopify. The website reflects a mature digital presence with professional branding, comprehensive content, and strong social media engagement.

ÖVT is an established Austrian non-profit association founded in 1980, serving small and medium-sized travel businesses including travel agencies, airlines, and tour operators. The organization focuses on providing networking opportunities, framework contracts, education, and IT support to its approximately 200 members. The website is professionally designed using WordPress and Elementor, with good SEO practices and clear navigation. Contact information is transparent, enhancing business credibility. Technically, the site uses modern plugins and Google Tag Manager for analytics, but lacks some security headers and cookie consent mechanisms. WHOIS data is unavailable due to TLD restrictions, but the website content and structure indicate legitimacy. Overall, the site demonstrates a solid digital presence with room for security and privacy improvements.

Playmit GmbH operates jobeinsteiger.at, a leading Austrian online platform dedicated to connecting vocational beginners with apprenticeship and entry-level job opportunities. The platform offers comprehensive job listings, company profiles, career videos, and integrated services such as strength analysis through its partner site Playmit.com. The website targets young professionals and students seeking to start their careers in Austria, positioning itself as a trusted resource in the education and employment sector. Technically, the site employs modern JavaScript frameworks, Vite for asset bundling, and integrates analytics tools like Matomo and Microsoft Clarity with user consent mechanisms, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS, uses CSRF tokens, and provides cookie consent, though it could enhance security headers and publish a formal security policy. Overall, the platform demonstrates strong business credibility, excellent content quality, and good privacy compliance, making it a reliable and professional resource for its audience.

The Duomo di Milano website serves as the official digital presence for the Veneranda Fabbrica del Duomo di Milano, the institution responsible for the preservation and promotion of the iconic Milan Cathedral. The site targets tourists, cultural enthusiasts, and the religious community, offering services such as ticketing, guided tours, cultural events, and donation opportunities. It holds a strong market position as the authoritative source for information and engagement related to the Duomo. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates SEO and accessibility best practices. Security posture is robust with HTTPS, security headers, and cookie consent mechanisms, though it lacks a dedicated security policy or incident response contact. Overall, the site is professional, trustworthy, and compliant with GDPR, providing a positive user experience and strong business credibility.

EICMA operates as an internationally recognized exhibition organizer specializing in two-wheel vehicles, primarily motorcycles. The website serves as a digital platform to promote their events, provide exhibitor information, and engage enthusiasts and industry professionals. The business is positioned as a key player in the transportation exhibition sector in Italy, targeting a broad audience of motorcycle fans and exhibitors. Technically, the site is built on WordPress with modern SEO and marketing tools integrated, including Yoast SEO, Google Tag Manager, and multiple tracking pixels. The presence of Cookiebot ensures compliance with cookie consent regulations, although explicit privacy and terms of service pages were not detected in the provided content. Security posture is solid with HTTPS and no visible vulnerabilities, but lacks published security policies or incident response contacts. Overall, the site is professional, trustworthy, and well-optimized for its audience and business goals.

The website represents the Musikschule Hennigsdorf, a municipal music school serving children, youth, and adults in the city of Hennigsdorf, Germany. It is positioned as the second largest music school in the Oberhavel district, offering a wide range of musical education services including early childhood music education, instrumental and vocal lessons, and ensemble participation. The site targets local residents interested in music education and cultural engagement. The business model is public and community-focused, operated under the city administration. Technically, the site uses a mature but somewhat dated technology stack centered around jQuery and various UI libraries, hosted on an IKISS CMS platform. The site is well-structured with good accessibility and mobile optimization, though some modernization opportunities exist. SEO and metadata are well implemented, supporting good discoverability. From a security perspective, the site uses HTTPS (implied by domain and no warnings), has a cookie consent mechanism, and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security headers and incident response information, and uses an older jQuery version which could pose risks. Privacy compliance is strong with a clear privacy policy and cookie banner, aligned with GDPR requirements. Overall, the site is trustworthy and professional, with no signs of malicious content or blocking mechanisms. Recommendations include updating libraries, enhancing security headers, and adding security policy disclosures to improve the security posture and compliance transparency.

Praktikumswoche is an Austrian educational service focused on providing internship week experiences to students during school holidays, helping them explore different companies and career paths. The website is professionally designed with good content quality and targets German-speaking students in Austria. The technical infrastructure includes modern web technologies such as Bootstrap, FontAwesome, and Cookiebot for cookie consent management, alongside Plausible Analytics for privacy-friendly user tracking. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers and incident response policies are not publicly documented. Overall, the website is trustworthy and compliant with GDPR requirements, with transparent domain registration consistent with its business purpose.

Lehrkraft Digital operates an e-commerce platform specializing in Apple products and educational licenses targeted at teachers. The website is built using modern technologies such as Flutter for frontend, Supabase for backend services, and Intercom for customer communication. The business model focuses on providing discounted Apple products and educational licenses, catering specifically to the education sector. The site presents a niche market position with a clear target audience of educators and schools. From a technical perspective, the website leverages a modern tech stack with Flutter and Supabase, hosted likely on Vercel, ensuring a responsive and performant user experience. However, the site lacks visible security headers and published privacy or cookie policies, which are critical for compliance and user trust. The use of JWT tokens and session management indicates some level of security maturity, but the absence of WHOIS transparency and DNSSEC reduces overall trust. Security posture is moderate with no immediate vulnerabilities detected in the provided content, but improvements are needed in security headers, privacy disclosures, and WHOIS data completeness. The site does not exhibit any WAF or blocking mechanisms, and content is fully accessible and safe for general audiences. Overall, Lehrkraft Digital shows promise as a specialized e-commerce platform but should prioritize enhancing transparency, compliance, and security best practices to improve trust and reduce risk.

Aviation360 is a specialized aviation media platform providing news, opinions, videos, podcasts, and event information targeting aviation professionals and enthusiasts. The website is built on a modern WordPress infrastructure with popular plugins such as Elementor, WooCommerce, and Yoast SEO, indicating a mature digital presence. Social media integration with YouTube, LinkedIn, and Instagram supports audience engagement. Security posture is generally good with HTTPS and no visible vulnerabilities, but the absence of key security headers and privacy policies suggests room for improvement. The lack of WHOIS data introduces uncertainty about domain legitimacy, which impacts overall trust. Strategic recommendations include enhancing privacy compliance, adding security headers, and clarifying domain registration details to improve credibility and compliance.

The Smart Built Environment Awards website serves as a professional platform to recognize excellence in the built environment sector, focusing on property management, community management, facilities management, and PropTech. The site is positioned as a regional leader in its niche, offering nomination, sponsorship, and event booking services. The business targets industry professionals and stakeholders primarily in the UAE and surrounding regions. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and various UI libraries, with integration of Google Analytics and Facebook Pixel for marketing and tracking. The site is mobile optimized and presents a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and security headers, and does not provide visible privacy or cookie policies, which impacts compliance and trust. Overall, the domain registration is consistent with the business claims and shows no suspicious patterns.

Imdaad is a leading integrated facilities management company based in Dubai, UAE, with a strong presence across the Middle East. The company offers a comprehensive range of services including Hard FM, Environmental Services, Material Recovery, Soft FM, Home Maintenance, Fire Detection, and Lift Systems. Imdaad operates through multiple subsidiaries and brands, serving a diverse clientele with a multi-national workforce. The website reflects a mature digital presence built on modern technologies such as Next.js and React, with good performance and mobile optimization. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit privacy and cookie policies. WHOIS data confirms legitimacy with consistent registration details and no privacy protection, supporting trustworthiness. Overall, the site is professional, content-rich, and well-branded, targeting business customers in the facilities management sector.

Waste & Recycling is a regional media publication focused on the waste management and recycling industry, providing news, expert insights, event information, and multimedia content. The website is professionally designed with good mobile optimization and uses modern technologies including AMP, Bootstrap, and various analytics and marketing tools. Security posture is moderate with HTTPS enabled but lacking several important security headers and explicit privacy policies. The absence of WHOIS data raises some legitimacy concerns, though the active and professional website presence suggests a legitimate business. Overall, the site serves as an important information hub for industry professionals but should improve transparency and security practices.

Plachutta's Mario Hietzing is a hospitality business operating a restaurant in Vienna, Austria, specializing in Mediterranean and Viennese cuisine. The website presents a professional and visually appealing platform showcasing their menu offerings, including breakfast, pasta, grilled dishes, and takeaway options. The business is positioned as a local favorite with a strong brand association to the Plachutta group. Technically, the website employs modern web technologies such as JavaScript libraries for galleries and sliders, and uses Google Tag Manager for tracking, though Google Analytics is not actively configured. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit privacy or terms of service documentation. Overall, the site is accessible, well-structured, and trustworthy, though improvements in privacy compliance and security best practices are recommended.

Plachutta's Grünspan is a traditional Austrian tavern located in Vienna’s historic beer district, offering classic Austrian pub fare and specialties in a beer garden setting. The business targets both local diners and tourists seeking authentic culinary experiences. The website reflects a medium-sized hospitality business with a consistent brand presence and professional design. Technically, the site uses modern web technologies including JavaScript, CSS3, and integrates Google services such as Tag Manager and reCAPTCHA, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and cookie consent implemented; however, the absence of explicit privacy policies, terms of service, and security headers suggests room for improvement. No WAF or content blocking was detected, and the site contains no adult or explicit content, making it safe for general audiences. WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the site is functional, professional, and trustworthy but would benefit from enhanced privacy and security disclosures.

Plachutta's Neuer Markt is a well-established restaurant located in Vienna, specializing in traditional Viennese cuisine with a modern presentation. The website reflects a strong market position with clear branding, comprehensive menu offerings, and services including dine-in, takeaway, and reservations. The target audience includes locals and tourists seeking authentic Viennese dining experiences. Technically, the site uses modern web technologies such as Bootstrap, Google Tag Manager, and Photoswipe for image galleries, ensuring a responsive and user-friendly experience. Security measures include HTTPS enforcement, cookie consent management, and use of Google reCAPTCHA, indicating a mature security posture. No critical vulnerabilities or compliance gaps were detected, though explicit security policies and incident response contacts could be improved. Overall, the website is professional, trustworthy, and compliant with GDPR, supporting the business's credibility and customer engagement.

Plachutta's Gasthaus zur Oper is a well-established hospitality business located in Vienna, Austria, specializing in traditional Viennese cuisine such as Wiener Schnitzel and Tafelspitz. The website showcases a blend of modern design and tradition, offering dine-in, takeaway, and retail services including cookbooks. The business enjoys a strong market position with recognized culinary awards and active social media presence. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript libraries like Slick Slider and Photoswipe, and integrates Google Tag Manager and reCAPTCHA for analytics and security. The site is mobile-optimized and provides a good user experience with rich multimedia content. Security posture is solid with HTTPS enforced and cookie consent implemented, though it lacks explicit security headers and published privacy or terms of service documents. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

The website standard404.com is a minimal portfolio or personal site hosted on the Cargo Collective platform. It contains very limited content, primarily navigation links labeled 'WORK' and 'ABOUT', with no detailed business description, contact information, or legal policies. The technical infrastructure is based on Cargo Collective's CMS and hosting, utilizing standard web technologies such as HTML5, CSS3, JavaScript, and jQuery. The site is served over HTTPS with a clientTransferProhibited domain status, but lacks DNSSEC and security headers, indicating room for improvement in security posture. No privacy or cookie policies are present, and no contact or incident response information is provided, which impacts compliance and trust. Overall, the site is safe for general audiences but lacks comprehensive business and security information, resulting in a moderate risk profile.

The website phedrebarbas.com serves as an online portfolio for a French-Greek artist and designer based in Paris, showcasing various artistic installations and design projects. The content is rich with images and descriptions of art pieces spanning from 2021 to 2024, targeting a general audience interested in contemporary art and design. The business model is primarily a portfolio presentation without e-commerce or direct sales functionalities, positioning itself within a niche artistic community. Technically, the site is built on the Cargo Collective platform, utilizing standard web technologies such as HTML5, CSS3, JavaScript, and jQuery. The site demonstrates moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. Hosting and domain registration are managed via eNom and Cargo Collective, with HTTPS enabled but missing DNSSEC and security headers. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks DNSSEC and critical security headers, which could expose it to certain risks. No privacy, cookie, or terms of service policies are present, indicating compliance gaps. The WHOIS data is suspicious due to a future domain creation date, which undermines trust in the domain registration legitimacy. Overall, the website is a well-designed artist portfolio with good content quality but has notable deficiencies in privacy, security policies, and domain registration transparency. Strategic improvements in security headers, privacy compliance, and domain registration accuracy are recommended to enhance trust and security posture.

Pepe Valenti is a creative professional specializing in product and installation design with a focus on materiality and hands-on experimentation. The website serves as a portfolio showcasing artistic works and installations, targeting an audience interested in design and art. The site is built on Squarespace, leveraging its hosting and CMS capabilities, and includes multimedia content such as images and videos. Security posture is strong with HTTPS and HSTS enabled, but lacks comprehensive privacy and security policies. WHOIS data is unavailable, which slightly reduces trust but the professional presentation and consistent branding mitigate major concerns. Overall, the site is functional and visually appealing but would benefit from enhanced privacy compliance and security transparency.

PANORAMMMA is an artistic and design-focused website showcasing collections, exhibitions, and interiors. The site targets art and design enthusiasts and potential buyers, offering a portfolio-style presentation with image galleries and a shop feature, although e-commerce functionality appears limited. The business is relatively new, with domain registration dating back to 2021, and operates on the Cargo Collective platform. Technically, the site uses modern web technologies including Google Tag Manager and Google Analytics for tracking, but lacks advanced security headers and privacy policies. Security posture is moderate with HTTPS enabled and domain transfer protections in place, but improvements are needed in DNS security and compliance documentation. Overall, the website is professional and functional but would benefit from enhanced privacy, security, and contact transparency to improve trust and compliance.

Odd Matter Studio is a small, niche design studio based in Rotterdam, Netherlands, founded by Els Woldhek and Georgi Manassiev. The studio focuses on exploring materials, processes, and concepts to create unique design products, interiors, and commissions. Their market position is that of a creative and curious design entity targeting clients interested in innovative and place-specific design solutions. Technically, the website is built on WordPress with common libraries such as jQuery and Vue.js, and uses Google Analytics and Tag Manager for tracking. The site is moderately optimized for performance and mobile use but lacks advanced accessibility features. Security posture is basic with HTTPS enabled but missing security headers and using an outdated jQuery version, which poses some risk. Privacy compliance is weak due to absence of privacy and cookie policies and no consent mechanisms. Business credibility is supported by clear contact information and company registration details. Overall, the website is professional but could improve in security and compliance areas.

The website nataliatriantafylli.com serves as a personal portfolio for artist and photographer Natalia Triantafylli, showcasing her visual artwork and photography. The site is built on the Cargo Collective platform, featuring a clean and consistent design optimized for mobile devices. It targets art enthusiasts and potential collaborators, focusing on artistic exposure rather than commercial transactions. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript, and jQuery, with web fonts for typography. Hosting and domain registration are consistent and reputable, with HTTPS enabled ensuring secure connections. However, the site lacks privacy and cookie policies, contact information, and security incident response details, which are important for compliance and trust. No advanced security headers or analytics tools are detected, indicating a basic security posture. Overall, the site is functional and professional but could improve in privacy compliance and security best practices.

The website www.madebyastronauts.com appears to be a minimal Wix-built site with very limited content and no visible business or contact information. The domain WHOIS data is unavailable, indicating the domain may not be registered or the data is withheld, which raises concerns about legitimacy. Technically, the site uses standard Wix platform technologies and includes some security hardening scripts, but lacks essential security headers and privacy compliance mechanisms. There are no forms or data collection points detected, and no privacy or cookie policies are present. Overall, the site has a low trustworthiness score and minimal business credibility.

JacobT.link is a small-scale website registered in 2022, utilizing modern web technologies such as React and Next.js. The site content is minimal, primarily showing a loading animation and branding elements without substantive business or contact information. The technical infrastructure is modern but lacks advanced SEO, accessibility, and security features. Security posture is limited due to absence of security headers and unclear SSL status, while privacy compliance is non-existent as no privacy or cookie policies are present. Overall, the site appears to be in early development or a personal project with limited business presence and low trust indicators.

The website www.emilioferro.it serves as the official online presence for contemporary artist Emilio Ferro, showcasing his artwork and providing information about the artist. The site targets art enthusiasts and potential collectors within a niche contemporary art market. The business model is primarily promotional, focusing on portfolio display rather than direct e-commerce or service transactions. The website is built on the Wix platform, leveraging Wix's hosting and content management capabilities. It uses standard Wix scripts and Google Analytics for visitor tracking. The technical infrastructure is modern but basic, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and incident response contact information. Privacy and cookie policies are absent, indicating gaps in compliance with data protection regulations. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security measures to improve compliance and user trust.

Clara Schweers is a contemporary artist specializing in glass and mixed media artworks, presenting a professional portfolio website that showcases her artistic creations and collaborations. The website serves as a platform for exhibiting her work and facilitating contact for potential sales or exhibitions. The site is hosted on DreamHost and built using the Cargo CMS platform, featuring a modern and visually appealing design optimized for desktop and mobile users. However, the site lacks explicit privacy and cookie policies, which are important for GDPR compliance and user trust. Security-wise, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and security headers, which could be improved to enhance security posture. Overall, the website is credible and professional but would benefit from enhanced privacy compliance and security best practices.

Age Of Digital (AOD) presents itself as a digital platform dedicated to the storage of physical creations in digital form. The website is minimalistic, featuring a video background and a slogan emphasizing its core purpose. The technical infrastructure is modern, leveraging React and Next.js frameworks hosted on Vercel, with basic analytics via Vercel Analytics. However, the site lacks essential business and compliance information such as privacy policies, contact details, and terms of service, which impacts its credibility and trustworthiness. The absence of WHOIS registration data raises concerns about the domain's legitimacy and registration status. Security posture is weak due to missing security headers and unclear SSL configuration. Overall, the site appears to be in an early or placeholder stage with significant gaps in compliance and security.

Weingut Rotes Haus is a historic Austrian winery based in Vienna's Döbling district, with a heritage dating back to 1683. The business focuses on producing high-quality wines from renowned vineyards such as the Nussberg and Alsegger Riede. Their offerings include classic wines, Lagenweine, sparkling wines, and spirits, sold through an online shop and a physical Ab-Hof wine shop. The website reflects a professional and consistent brand image, targeting wine enthusiasts and customers seeking premium Austrian wines. Technically, the site is built on WordPress with modern plugins and good mobile optimization, though performance is moderate. Security posture is adequate with HTTPS enabled but lacks some security headers and visible privacy compliance documentation. Social media integration is strong, particularly with Instagram. Overall, the site is trustworthy and well-positioned in its niche but could improve privacy and security transparency.

Restaurant Pfarrwirt is a historic hospitality business located in Vienna, Austria, operating in a building dating back to the 12th century. The website presents a professional and comprehensive digital presence showcasing traditional Austrian cuisine, event hosting capabilities, and an online shop for wines and delicacies. The business targets both local and tourist audiences seeking authentic dining experiences and special event venues. Technically, the site is built on WordPress using the Avada theme and LayerSlider, with multilingual support and modern UX features. Security posture is solid with HTTPS and hCaptcha integration, though some security headers and policies could be improved. Privacy compliance is strong with clear GDPR-aligned policies and cookie consent mechanisms. However, the absence of WHOIS registration data raises concerns about domain registration transparency, which slightly impacts trustworthiness. Overall, the site is well-designed, content-rich, and trustworthy from a business perspective, but domain registration details should be clarified to enhance legitimacy.

Mayer am Nussberg is a small hospitality business operating a traditional Austrian Buschenschank, offering a variety of food and beverage services including onsite dining, reservations, and online ordering via integrated third-party platforms. The website is built on WordPress using the Avada theme and includes modern web technologies such as LayerSlider and FontAwesome. It demonstrates good digital maturity with structured data for SEO and social media integration. Security posture is solid with HTTPS enabled and no visible sensitive data exposure, though it lacks explicit privacy and cookie policies and security headers. Overall, the site is professional and trustworthy but could improve compliance and security transparency. Strategic recommendations include implementing privacy and cookie policies, adding security headers, and establishing a vulnerability disclosure process.

Kronen Zeitung operates as Austria's leading daily newspaper with a strong digital presence through krone.at. The website offers comprehensive news coverage, weather updates, horoscopes, and subscription services under the Krone PUR brand. Its market position is well-established, targeting a broad general audience with a business model primarily based on advertising and paid subscriptions. The company is part of Mediengruppe Österreich GmbH, reflecting a large-scale media enterprise with a long history dating back to 1900. Technically, the website employs a modern tech stack including jQuery, Swiper.js, Bitmovin Player, and integrates multiple third-party services for analytics, advertising, and consent management, demonstrating a mature digital infrastructure. Security-wise, the site enforces HTTPS, uses standard security headers, and implements GDPR-compliant consent mechanisms, though it lacks publicly available detailed security policies or incident response documentation. Overall, the site is professional, trustworthy, and compliant with privacy regulations, with room for improvement in explicit security transparency and accessibility features.