Medium-risk security reports

Vaše Dedra is a Czech-based company specializing in the manufacturing and retail of high-quality eco-friendly household products, cosmetics, health supplements, and gift items. Established in 1995, the company positions itself as a trusted brand in the Czech retail market with a focus on sustainability and natural products. The website serves as an e-commerce platform offering a wide range of categorized products targeting general consumers interested in eco-conscious living. Technically, the website employs modern web technologies including Bootstrap for responsive design, Google Tag Manager, Microsoft Clarity, and Google Optimize for analytics and marketing optimization. The site is mobile-optimized and features a clear navigation structure, although some accessibility features could be improved. Performance is moderate with good SEO practices evident through meta tags and structured navigation. From a security perspective, the website uses HTTPS and implements cookie consent mechanisms denying personalization and analytics by default, indicating a privacy-conscious approach. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident, and no privacy policy or terms of service pages were found in the analyzed content. WHOIS data is unavailable due to registry restrictions, which slightly impacts trust but does not negate the legitimacy of the business given the professional website and branding. Overall, Vaše Dedra presents a solid digital presence with room for improvement in privacy disclosures and security header implementation. The absence of WHOIS data is a limitation but consistent with registry policies. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and providing clear contact information for incident response.

ASKO - NÁBYTEK is a prominent Czech furniture retailer offering a wide range of furniture and home accessories through its e-commerce platform. The website presents a comprehensive catalog of products including beds, chairs, tables, wardrobes, sofas, and various home textiles and decorations, targeting general consumers seeking quality home furnishings. The company appears to have a large market presence in the Czech Republic with a well-structured online shopping experience. Technically, the website employs modern JavaScript libraries such as jQuery, Splide, and Slick for UI components and galleries, alongside Google Tag Manager for analytics and marketing. The site is mobile-optimized and includes cookie consent mechanisms, indicating a moderate level of digital maturity. However, the absence of detailed WHOIS data limits the ability to fully verify domain legitimacy and ownership. From a security perspective, the site enforces HTTPS and includes basic security headers, but lacks advanced headers like Content-Security-Policy and HSTS. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is basic, with cookie consent present but no explicit privacy policy or terms of service found in the analyzed content. Overall, the website is professionally designed and functional, with a good user experience and clear navigation. The lack of WHOIS transparency and limited privacy documentation are areas for improvement. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and terms policies, and improving accessibility features to strengthen compliance and trust.

Teta drogérie is a well-established Slovak retail company specializing in drogery, cosmetics, and baby care products, operating a professional e-commerce platform. The website demonstrates a mature digital infrastructure with modern technologies including ASP.NET, advanced analytics tools like Google Analytics and Matomo, and comprehensive cookie consent management via Cookiebot, ensuring GDPR compliance. Security posture is solid with HTTPS enforced and standard security practices observed, though explicit security policies and incident response information are not publicly evident. Overall, the site presents a trustworthy and professional online presence suitable for its market segment.

The website bir.org currently serves a robot challenge screen implementing a client-side proof-of-work CAPTCHA mechanism to mitigate automated access. This indicates the presence of a Web Application Firewall (WAF) or similar security control actively blocking direct content access. Due to this, the actual business content is inaccessible, limiting the ability to analyze the company's services, policies, or contact information. The domain is long-established, registered since 1996 with Gandi SAS, which suggests legitimacy, but the lack of DNSSEC and visible security headers indicates room for improvement in domain and site security. Technically, the site uses advanced JavaScript cryptographic functions and Web Workers to perform the CAPTCHA challenge, demonstrating a modern approach to bot mitigation. However, the page lacks SEO optimization, accessibility features, and any visible business or compliance documentation. No privacy, cookie, or terms of service policies are present, and no contact or incident response information is available. Security posture is moderate due to the presence of the CAPTCHA challenge but is weakened by missing security headers and lack of visible SSL configuration details. The absence of privacy and cookie policies and contact information reduces compliance and trustworthiness. Overall, the site is currently inaccessible for normal users without passing the challenge, which significantly impacts user experience and trust. Strategic recommendations include enabling DNSSEC, publishing privacy and cookie policies, adding contact and incident response information, implementing security headers, and ensuring HTTPS enforcement. These steps will improve compliance, security posture, and user trust.

The Middle East Waste & Recycling Awards (MEWAR Awards) website serves as a professional platform to recognize and celebrate excellence in waste management and recycling within the Middle East region. Established in 2018, the awards event is organized by Waste & Recycling magazine and hosts industry leaders, sponsors, and partners to promote sustainable environmental practices. The website provides information about the awards, categories, key dates, sponsors, and media content such as videos and galleries. The target audience includes professionals and organizations involved in waste management and recycling sectors. Technically, the website employs a modern front-end stack including Bootstrap, jQuery, and popular UI libraries like Slick Carousel and Flickity for interactive elements. It integrates Google Analytics and Google Tag Manager for user tracking and analytics. The site is mobile responsive and has a moderate performance profile. However, it lacks a known CMS and some advanced SEO and accessibility features. From a security perspective, the website uses HTTPS but lacks DNSSEC and important security headers, which are recommended for enhanced protection. No privacy, cookie, or terms of service policies are published, which impacts compliance and user trust. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. The domain registration is consistent with the business timeline and shows no suspicious patterns, indicating legitimacy. Overall, the website is functional and professional but would benefit from improved privacy compliance, security hardening, and clearer contact information to enhance trust and regulatory adherence.

The website represents the Energy from Waste Middle East 2025 conference organized by Mark Allen Group, a UK-based event organizer with a strong presence in the waste to energy sector. The site provides comprehensive event information, including program details, speakers, sponsors, and site visits, targeting senior industry professionals and stakeholders in sustainable waste management. Technically, the site uses a modern event management platform (Evessio), integrates multiple analytics and marketing tools, and implements cookie consent mechanisms, reflecting a mature digital infrastructure. Security posture is generally good with HTTPS and CSRF protections, though DNSSEC is not enabled and security headers are not explicitly detected, suggesting room for improvement. The WHOIS data shows an unusual future domain creation date, which may indicate a staging environment or data anomaly, slightly impacting trust. Overall, the site is professional, content-rich, and trustworthy, with moderate technical and security maturity.

Zest Event Serviices is a small Indian event management company specializing in customized solutions for trade exhibitions and conferences, including online and onsite registration services. The website presents basic but relevant content targeting event organizers and exhibitors in India. The technical infrastructure is built on older but functional technologies such as jQuery 1.11.1 and Bootstrap, with some modern additions like Alpine.js. The site is moderately optimized for mobile and SEO but lacks advanced features and comprehensive policies. Security posture is basic, with no visible security headers and use of outdated libraries, which poses potential risks. No privacy or cookie policies are present, indicating compliance gaps. Overall, the website is functional and moderately trustworthy but requires improvements in security, privacy compliance, and technical modernization to enhance its digital maturity and risk profile.

Built Environment is a specialized media publication serving the GCC and Middle East real estate, property management, community management, and PropTech sectors. It offers a comprehensive range of services including news, expert talks, exclusive content, events, and multimedia such as podcasts and videos. The website demonstrates a professional and consistent brand presence with active social media engagement and digital magazine offerings. Technically, the site employs modern web technologies including AMP, jQuery, Bootstrap, and integrates multiple analytics and marketing tools such as Google Analytics, Google Tag Manager, LinkedIn Insight, and OneSignal push notifications. Security posture is generally good with HTTPS enforced and reCAPTCHA implemented on forms, though the absence of security headers and vulnerability disclosure mechanisms suggests room for improvement. The missing WHOIS registration data is a notable concern, slightly reducing trustworthiness, but the overall digital footprint and content quality support legitimacy. Privacy compliance is basic with a privacy and cookie policy present along with a consent mechanism. Overall, the site is well-positioned as a regional media leader in its niche with moderate technical maturity and a solid security baseline.

Brain City Berlin is an information and networking platform dedicated to promoting Berlin as a leading science metropolis in Europe. The website provides comprehensive content about research developments, funding opportunities, events, and a vibrant ambassador program featuring prominent figures from Berlin's scientific community. The platform targets researchers, academics, students, and stakeholders interested in Berlin's science ecosystem. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and integrates consent management for GDPR compliance. Security posture is solid with HTTPS and consent mechanisms, though explicit security headers and policies are not evident. Overall, the site is professional, content-rich, and trustworthy, with good user experience and mobile optimization.

SIGNAL IDUNA is a well-established German insurance and financial services group with over 100 years of history. The company offers a broad portfolio of insurance products including health, life, property, liability, motor, accident, and travel insurance, supported by digital customer portals and mobile applications. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the site is built on Adobe Experience Manager, leveraging modern web technologies and consent management tools to ensure GDPR compliance. Security posture is solid with HTTPS and consent mechanisms in place, though explicit security headers should be verified. Overall, the site demonstrates high professionalism and trustworthiness, with no signs of blocking or malicious content.

HANSAINVEST Hanseatische Investment-GmbH is a leading German service capital management company specializing in fund administration across all relevant asset classes. The company emphasizes personalized service and comprehensive fund partner support, positioning itself as a key player in the German financial services market. Their website offers extensive fund listings, financial calculators, and compliance information, targeting institutional investors and financial professionals. Technically, the website is built on a custom CMS with Bootstrap and jQuery, providing a responsive and well-structured user experience. Security posture is strong with HTTPS enforcement, security headers, and ISO 27001 certification, though DNSSEC is not enabled, representing an area for improvement. Privacy compliance is robust with clear privacy and cookie policies and GDPR adherence. Overall, the website reflects a mature, professional, and trustworthy financial services provider with a solid digital presence.

Zahlenzorro is an educational online platform operated by the Westermann Gruppe, offering interactive math exercises targeted at primary school students (grades 1-4) in Germany. The platform provides engaging math stories, training apps, and classroom management tools with a subscription-based licensing model for individuals, classes, schools, and school districts. The website is professionally designed with consistent branding and clear navigation, supporting both desktop and mobile devices. It integrates Piwik analytics with privacy-conscious settings and links to reputable educational partners. Security posture is moderate with HTTPS usage and some privacy considerations, but lacks explicit security headers and published security policies. Contact information and trust signals such as awards and partner logos enhance credibility. Overall, the site is safe, compliant with GDPR, and well-positioned in the German educational market.

The website grundschuldiagnose.westermann.de is a professionally developed educational platform operated by the Westermann Gruppe, targeting German primary school educators with online diagnostic tests and differentiated learning materials for German and Mathematics. The platform offers subscription-based licenses for classes, schools, and school districts, supported by a centralized student management system and integration with partner educational services. The site is built on TYPO3 CMS with modern frontend technologies, providing a responsive and accessible user experience. Security posture is solid with HTTPS enforced, but lacks explicit security headers and published security policies. Privacy compliance is partial, with a clear privacy policy but no cookie consent mechanism detected. Contact information is clearly provided, and the site holds a child-safe certification (fragFINN). Overall, the site is trustworthy, well-branded, and serves a clear educational niche.

ALFONS Online-Lernwelt is an educational platform operated by Westermann, targeting primary school students, teachers, and parents in Germany. It offers interactive learning games for German, Mathematics, and English, supported by detailed evaluation tools and a centralized student management system. The platform is positioned as a reputable and certified educational service with a medium-sized market presence in the German education sector. Technically, the website is built on Angular 9 with modern web standards, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enforced, but lacks some advanced security headers and explicit incident response information. Privacy compliance is mostly met with a clear privacy policy, though cookie consent mechanisms are missing. Overall, the site is professional, trustworthy, and safe for its intended audience.

Praktikumswoche.de is a German educational platform operated by stafftastic GmbH that facilitates internship weeks for students across over 200 regions in Germany. The platform enables students to explore different companies and professions by participating in daily internships during the holidays. It serves both students and companies, offering free registration and participation. The website is well-positioned in the education sector with strong media recognition and a broad regional presence. Technically, the website employs a modern tech stack including Bootstrap, jQuery, FontAwesome, and Cookiebot for cookie consent management. Hosting is managed via Google Domains, and privacy-respecting analytics are implemented using Plausible Analytics. The site is mobile-optimized with good SEO and accessibility basics. From a security perspective, the site uses HTTPS with no visible vulnerabilities or exposed sensitive data. Cookie consent is properly implemented, and privacy is respected with no-cookie YouTube embeds. However, security headers are not explicitly detected, and no public security policy or incident response contacts are provided, which could be improved. Overall, the website is trustworthy, professional, and compliant with GDPR. It lacks explicit contact information on the main page but provides social media links and a privacy policy. The domain registration is consistent and legitimate, supporting the platform's credibility.

The Präsenzstelle O-H-V | Velten website serves as a regional hub connecting higher education institutions in Brandenburg with local communities, students, and businesses. It provides access to teaching and research, facilitates networking, and offers consultation services. The site is positioned as a non-profit educational and research facilitation center with strong partnerships including Technische Hochschule Brandenburg, Universität Potsdam, and regional economic development entities. The content is well-structured, professionally presented, and targets a broad audience including students, citizens, and companies in the region. Technically, the website is built on TYPO3 CMS, employs modern web standards, and is mobile-optimized with good accessibility and SEO practices. The site uses HTTPS exclusively and implements a GDPR-compliant cookie consent mechanism. However, it lacks visible security headers and explicit security or incident response policies. Analytics usage is minimal and privacy-conscious, relying on Matomo. From a security perspective, the site demonstrates a solid baseline with HTTPS and cookie consent but could improve by adding security headers and publishing security policies or vulnerability disclosure information. No critical vulnerabilities or suspicious patterns were detected. The domain registration data aligns well with the website's claims, supporting legitimacy and trustworthiness. Overall, the website is a credible, well-maintained regional educational platform with good content quality and technical implementation. Strategic improvements in security policy transparency and header implementation would enhance its security posture and trust further.

The International Fairs Directory, operated by Mulpor Company S.R.L., is a well-established online platform providing a comprehensive global overview of fairs and exhibitions. It serves as a key resource for fair exhibitors, visitors, and industry professionals seeking business connections worldwide. The platform offers detailed listings of fairs, exhibitors, and related business contacts, positioning itself as a leading directory in the international trade show and events sector. The business is headquartered in Costa Rica and has been operational since at least 2016, with the domain registered in 2021. Technically, the website employs a custom-built solution leveraging Bootstrap and jQuery frameworks, with integrations for Google Analytics and Tag Manager for user tracking and analytics. The site is hosted by HOSTINGER operations, UAB, a reputable hosting provider. The website demonstrates good mobile optimization and moderate performance, with a professional design and clear navigation structure. Cookie consent mechanisms are implemented, enhancing privacy compliance, though the privacy policy is basic and lacks explicit GDPR compliance details. From a security perspective, the site uses HTTPS with a valid SSL certificate and displays a Norton Secured seal, indicating a trustworthy encryption standard. However, DNSSEC is not enabled, and several security headers are missing, which could be improved to enhance protection against common web threats. There is no publicly available security policy or incident response information, which limits transparency in security governance. The WHOIS data is consistent with the website's business claims, showing no privacy protection and a domain age appropriate for the business history. Overall, the website presents a moderate risk profile with good business credibility and technical implementation but could benefit from enhanced security practices and more comprehensive privacy and security disclosures. Strategic improvements in these areas would strengthen trust and compliance, supporting the platform's role as a global business connector.

The website represents the Global Elevator Exhibition (GEE), a major trade fair event dedicated to elevators, escalators, moving walkways, and components, organized by Fiera Milano S.p.A. It targets industry professionals, exhibitors, and visitors interested in the vertical transportation sector. The site provides comprehensive event information, exhibitor services, visitor ticketing, and news updates, positioning itself as a key industry hub in Italy. Technically, the website is built on Adobe Experience Manager (AEM) with modern front-end technologies including Bootstrap, jQuery, and carousel libraries. It integrates Google Tag Manager and Iubenda for analytics and cookie consent management, reflecting a mature digital infrastructure. The site is mobile-optimized and well-structured for user experience. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks visible security headers and incident response information. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is a notable anomaly, slightly reducing trust but mitigated by the professional presentation and association with Fiera Milano. Overall, the website is professional, secure, and compliant with privacy regulations, serving its business purpose effectively. Strategic improvements in security headers, incident response transparency, and WHOIS data clarity are recommended to enhance trust and security posture.

IBIMI is an Italian educational platform specializing in Building Information Modeling (BIM) professional training. The website offers online courses and certifications aimed at professionals and students interested in digital construction technologies. The platform leverages a modern WordPress infrastructure with WooCommerce for e-commerce capabilities and Gravity Forms for data collection. The site is well-structured, mobile-optimized, and integrates Google Analytics and Tag Manager for marketing and analytics purposes. Privacy compliance is evident through a comprehensive privacy and cookie policy with a consent mechanism. Security posture is solid with HTTPS enforcement and reCAPTCHA integration, though formal security policies and incident response contacts are not publicly disclosed. Overall, IBIMI presents a credible and professional online presence in the niche education sector.

The website conpaviper.org is currently inaccessible beyond a security challenge page that performs a JavaScript-based browser integrity check and automatic redirect. The visible content is minimal, showing only a loading animation and a message indicating a redirect in progress. The site uses outdated CMS technologies (Joomla 1.5 and WordPress 2.5), which are known to have multiple security vulnerabilities and are no longer supported. There are no visible privacy, cookie, or terms of service policies, nor any contact or business information. The domain is registered since 2015 with Tucows Domains Inc., with no privacy protection and a stable registration status. The presence of a security check powered by BitNinja.io suggests some level of protection against automated threats or attacks. Overall, the site lacks transparency, modern security practices, and business credibility indicators.

The Collegio degli Ingegneri e Architetti di Milano is a historic and reputable cultural association founded in 1563, dedicated to promoting the professional culture of engineers and architects in Milan. The organization offers professional training courses, events, publications, and membership services targeting professionals in engineering and architecture. The website reflects a well-structured and professional digital presence with clear navigation and relevant content for its audience. Technically, the site uses modern JavaScript libraries and frameworks such as Bootstrap and jQuery, with Google Tag Manager for analytics. Security posture is adequate with HTTPS enforced, but lacks some advanced security headers and anti-CSRF protections. Privacy and cookie policies are present, with a named Data Protection Officer contact, indicating GDPR awareness. Overall, the site is trustworthy and serves its niche well.

ANIT is a well-established Italian national association dedicated to promoting scientific information and best practices in thermal and acoustic insulation for the construction and industrial sectors. The website serves as a comprehensive platform offering news, legislative updates, training courses, publications, and membership services targeting professionals, companies, and public entities involved in insulation technologies. The organization maintains a strong market position within Italy's energy and construction sectors, supported by active social media engagement and a professional web presence. Technically, the website is built on WordPress with WooCommerce integration, leveraging modern frameworks like Bootstrap and libraries such as jQuery and FontAwesome. It employs Google Analytics and Google Tag Manager for analytics and tracking, alongside Iubenda for cookie consent management, indicating a moderate level of digital maturity. The site is mobile-optimized and SEO-friendly, with structured data enhancing search visibility. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data confirms the legitimacy and consistency of the domain registration with the organization's identity and history. Overall, ANIT's website demonstrates a solid business and technical foundation with room for improvement in security policy transparency and enhanced security header implementation. The site is safe for general audiences and aligns well with its stated mission and sector focus.

Politecnico di Milano is Italy's largest scientific-technological university, established in 1863, offering a wide range of academic programs including undergraduate, graduate, and doctoral studies, alongside advanced research activities. The institution targets students, researchers, and academic staff, providing comprehensive campus services and sustainability initiatives. The website reflects a mature digital presence built on TYPO3 CMS with modern frontend technologies such as Bootstrap and Swiper.js, and integrates multiple analytics platforms including Google Analytics, Matomo, and Maze Analytics with privacy-conscious configurations. Security posture is strong with HTTPS, DNSSEC, and cookie consent mechanisms, although explicit privacy and security policies are not found in the analyzed content. WHOIS data confirms domain legitimacy and long-term ownership consistent with the institution's history.

Claymatic Games Ltd is a small independent game development company based in the United Kingdom, specializing in cooperative and couch-play games for PC and console platforms. Their flagship project is Clodhoppers, featuring the character Cletus Clay. The company emphasizes bringing friends together through fun and laughter in gaming experiences. The website is professionally designed using Squarespace CMS and includes essential business documents such as privacy policy and terms and conditions, indicating a basic level of compliance and professionalism. Social media presence across multiple platforms supports their market engagement and community building. Technically, the website uses modern web technologies including Google Analytics and Tag Manager for tracking, Typekit fonts for typography, and is hosted on Squarespace. The site is mobile optimized with good SEO practices but lacks some advanced security headers which could enhance its security posture. HTTPS is enforced, but HSTS and other headers like Content-Security-Policy are missing. From a security perspective, the site shows no signs of vulnerabilities or malicious content. Privacy compliance is basic but present, with a cookie consent banner and accessible privacy documents. The WHOIS data is privacy protected, common for small businesses, and does not raise immediate concerns. Overall, the site is trustworthy with room for security improvements. Strategically, the company should focus on enhancing security headers, improving contact information availability, and possibly expanding privacy and security policies to strengthen trust and compliance. The technical infrastructure is solid for their size and market position, supporting their business goals effectively.

Instructure is a leading education technology company specializing in learning management systems and edtech solutions for K–12, higher education, and business sectors. Their flagship product, Canvas LMS, is recognized as the world's most-loved LMS, supported by additional offerings such as Mastery for assessments and Parchment for credential management. The company maintains a strong market position with a global customer base and a comprehensive partner ecosystem. Technically, the website is built on Drupal 10 and integrates modern analytics, marketing, and tracking technologies, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is solid with HTTPS enforced and no evident vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website reflects a professional, trustworthy, and mature digital presence.

The website mint-frauen-bw.de represents a regional initiative in Baden-Württemberg, Germany, focused on promoting women in STEM (MINT) careers. It provides educational measures, workshops, and career planning support targeting women interested in STEM fields. The site is built on WordPress using the Avada theme and includes SEO and accessibility features, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and cookie consent implemented, but lacks explicit privacy policies, terms of service, and security headers. Contact information is not readily available, which may impact user trust and compliance. Overall, the site is professional and trustworthy for its purpose but could improve in privacy and security transparency.

explorhino is a German educational science center focused on interactive learning experiences for children, families, and schools. It offers hands-on exhibits, workshops, courses, and events designed to engage young learners in science and technology. The website reflects a well-structured and professionally designed platform that supports its educational mission with clear navigation and relevant content. Technically, the site is built on WordPress with modern plugins for SEO, event management, and GDPR compliance, ensuring a good digital maturity level. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and incident response transparency. Overall, the site is trustworthy, compliant with privacy regulations, and provides clear contact information and social media presence.

The website www.suedwissen.de serves as an educational platform focused on providing information about multiple universities and supporting educational advancement, primarily targeting students and prospective university attendees in Germany. The site features a modern technical infrastructure utilizing JavaScript frameworks such as Vue.js, with Cookiebot managing cookie consent and Matomo for analytics, hosted on bunny.net's infrastructure. While the site demonstrates good design quality and user experience with mobile optimization, it lacks explicit privacy policies, terms of service, and contact information, which are critical for compliance and user trust. Security posture is moderate, with no detected security headers or incident response policies, indicating room for improvement in security best practices. Overall, the site is safe for general audiences and does not contain adult or questionable content.

Taxmaster.de is an educational website focused on providing a Master of Taxation degree and tax consultancy training in Germany. The site targets students and professionals interested in taxation, offering dual qualifications. The business operates in the education sector with a niche focus on taxation studies. The website is built on TYPO3 CMS and integrates modern technologies such as Google reCAPTCHA, Cookiebot for consent management, and Google Tag Manager for analytics. The technical infrastructure is solid with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enforced and consent mechanisms in place, though some security headers and explicit policies could be improved. Privacy compliance is strong, with comprehensive cookie policies and GDPR adherence. Overall, the site is professional, trustworthy, and well-positioned within its market niche.

Studierendenwerk Ulm is a non-profit public institution dedicated to supporting the social needs of students in Ulm and surrounding academic institutions. The organization provides a broad range of services including student housing, cafeteria and food services, financial aid consulting (notably BAföG), psychosocial and legal counseling, childcare support, and services for international students. The website reflects a well-established regional leader in student social services with a clear focus on accessibility and comprehensive support. Technically, the website is built on WordPress with common plugins such as Events Manager and AIOSEO, leveraging jQuery and RoyalSlider for interactive elements. The site is served over HTTPS with a Content-Security-Policy header, indicating a good baseline security posture. Performance is moderate with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured data. Security-wise, the site benefits from HTTPS and some security headers but lacks others like HSTS and X-Frame-Options. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial; while a comprehensive privacy policy is present, no cookie consent mechanism was found, which may pose GDPR compliance risks. Contact information is available, though no direct company emails are exposed on the site. Overall, the website is trustworthy, professional, and well-aligned with its mission. Strategic improvements in privacy compliance and security headers would enhance its security posture and regulatory adherence.

HugeDomains operates as a reputable domain marketplace specializing in premium domain name sales, exemplified by the SevenVenture.com listing. The platform offers straightforward purchase options including immediate buy and interest-free payment plans, targeting individuals and businesses seeking valuable domain assets. The website is professionally designed with clear navigation, mobile responsiveness, and trust signals such as customer testimonials and a 30-day money back guarantee. Technically, the site employs modern web technologies including jQuery, Google Analytics, Google reCAPTCHA Enterprise, and cookie consent management, ensuring a secure and user-friendly experience. Security posture is strong with HTTPS enforced and SSL encryption, although explicit security headers and incident response policies are not publicly documented. Overall, the domain sale page is trustworthy and well-maintained, with minor recommendations to enhance security transparency and accessibility.

Bosch Building Automation GmbH, formerly GFR mbH, is a subsidiary of the Bosch Group specializing in innovative building automation solutions focused on comfort, efficiency, and sustainability. The company leverages Bosch's strong brand and technological expertise to serve facility managers, building owners, and energy managers primarily in Germany. Their offerings include system automation, room automation, building management software, and related services. The website is professionally designed, well-structured, and provides comprehensive information about their portfolio and corporate identity. Technically, the site uses modern web technologies including Google Tag Manager and Qualtrics for analytics and surveys, with good mobile optimization and accessibility. Security posture is solid with HTTPS and consent management, though explicit security policies and incident response details are absent. WHOIS data is unavailable, which slightly reduces transparency but does not detract significantly from trust given the strong Bosch affiliation and professional presentation. Overall, the site demonstrates a mature digital presence aligned with Bosch's corporate standards.

Legacoop Nazionale is a well-established non-profit association founded in 1886, representing over 10,000 cooperative enterprises primarily in Italy. The organization promotes economic, social, and civil protagonism of cooperatives, supporting their growth domestically and internationally. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to cooperative stakeholders. Technically, the site is built on WordPress with Elementor and Yoast SEO, hosted behind Cloudflare DNS, and uses HTTPS with domain transfer protections, indicating a secure and modern infrastructure. However, explicit privacy and terms of service pages are not found, and direct contact information is missing, which are areas for improvement. The security posture is strong with no visible vulnerabilities, but enabling DNSSEC and publishing security policies would enhance trust. Overall, the site is trustworthy, professional, and aligned with the organization's mission.

ANAEPA-Confartigianato Edilizia is a national Italian association representing artisans in the construction sector, including decorators and painters. The website serves as an information hub providing news, documents, and resources relevant to artisan construction professionals. It maintains a consistent brand presence and targets small to medium artisan enterprises in Italy. Technically, the site is built on WordPress with modern plugins and uses Matomo analytics for privacy-conscious visitor tracking. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements such as DNSSEC and security headers are recommended. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

Net at Work GmbH is a German technology company specializing in Microsoft solutions such as Microsoft 365, Teams, Security, SharePoint, and Exchange. The company positions itself as an experienced Microsoft Solutions Partner, offering consulting, migration, managed services, and change management to enable modern, secure digital workplaces. Their website reflects a professional and consistent brand image targeting business customers seeking Microsoft-based collaboration and security solutions. Technically, the website is built on WordPress with a modern theme and plugins, including Borlabs Cookie for GDPR-compliant cookie consent and Google Analytics for tracking. Security posture is good with HTTPS and cookie consent, but lacks visible advanced security headers and explicit security policies. Privacy compliance is partial due to missing explicit privacy and terms of service pages. WHOIS data is minimal but consistent with the business location and domain usage. Overall, the website is professional, trustworthy, and well-maintained, with room for improvement in privacy transparency and security documentation.

Tintri is a technology company specializing in data management solutions tailored for virtualized workloads. Their offerings focus on providing enterprises with enhanced control, automation capabilities, and improved security for managing virtual data environments. The company has an established market presence since 2008, positioning itself as a specialized provider in the virtual data management sector. The website reflects a professional and consistent brand image, targeting IT professionals and enterprises requiring advanced data management solutions. From a technical perspective, the website is built on WordPress using modern tools such as Elementor and Yoast SEO, indicating a mature digital infrastructure. The site demonstrates good mobile optimization and SEO practices, although performance is moderate. Security-wise, HTTPS is used, and a cookie consent mechanism is implemented, but there is room for improvement in security headers, DNSSEC, and published security policies. The security posture is adequate but lacks transparency in privacy and incident response policies, which are critical for compliance and trust. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is functional and professional but would benefit from enhanced privacy and security disclosures. Strategic recommendations include publishing comprehensive privacy and terms of service policies, enabling DNSSEC, adding security headers, and providing clear incident response contacts to strengthen trust and compliance.

fairplaid.org is a German crowdfunding platform specializing in sports projects, enabling sports clubs and athletes to raise funds for their initiatives. The platform has been operational since 2012, indicating a mature presence in its niche market. The website is well designed with good content relevance and user experience, targeting sports organizations and individuals in Germany. The technical infrastructure leverages modern JavaScript frameworks and integrates multiple analytics and marketing tools while maintaining user privacy through cookie consent and IP anonymization. Security posture is solid with HTTPS enforced and domain registration protections in place, though improvements such as enabling DNSSEC and adding security headers could enhance resilience. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism, but the absence of terms of service and explicit security policies is noted. Overall, the site demonstrates a professional and trustworthy online presence with moderate to good technical and security maturity.

TARGOBANK is a well-established German financial institution offering a broad range of banking products including loans, accounts, cards, savings, investments, and insurance. The website targets private, business, and corporate customers with a strong emphasis on flexible, customer-centric financial solutions. The bank maintains a significant physical presence with approximately 340 branches and complements this with a robust digital platform featuring online banking and mobile apps. The site content is professional, comprehensive, and well-structured, reflecting a mature business model in the banking sector. Technically, the website employs modern web technologies including asynchronous JavaScript, CSS, and uses third-party services such as Google Tag Manager and TagCommander for analytics and consent management. The site is hosted on a CDN, ensuring moderate to good performance and excellent mobile optimization. Accessibility features and SEO best practices are well implemented. From a security perspective, the site enforces HTTPS, includes multiple security headers, and integrates a consent management platform to comply with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, explicit incident response contacts and vulnerability disclosure mechanisms like security.txt are not found, representing an area for improvement. Overall, the website demonstrates a high level of professionalism, security, and compliance suitable for a large financial institution. Strategic recommendations include enhancing transparency around security incident response and vulnerability disclosure to further strengthen trust and security posture.

The website www.nsks.de represents the Niedersächsische Sparkassenstiftung (NSKS) and the VGH Stiftung, two cultural foundations focused on promoting arts, music, museums, monument preservation, and sustainability projects in Lower Saxony, Germany. The platform serves as an information hub for cultural awards, events, and funding opportunities, targeting cultural institutions, artists, and the general public interested in regional culture. The business model is non-profit, emphasizing cultural support and community engagement. Technically, the website is built on WordPress with a modern tech stack including Bootstrap for responsive design, Yoast SEO for search optimization, and Borlabs Cookie for cookie consent management. Hosting is provided via DomainDiscount24, and the site uses HTTPS with a good SSL configuration. The site is moderately performant and well-optimized for mobile devices, though accessibility features are basic. From a security perspective, the site benefits from HTTPS and cookie consent mechanisms but lacks visible security headers and explicit privacy policies. No vulnerability disclosures or incident response contacts are present, which could be improved to enhance trust and compliance. No WAF or blocking mechanisms were detected, and no adult or questionable content is present, making the site safe for general audiences. Overall, the website is professional and trustworthy, with good content quality and business credibility. However, improvements in privacy policy publication, security headers, and contact information would strengthen its security posture and compliance with GDPR requirements.

The website www.celleheute.de appears to be a small-scale local news or information portal based in Germany, built using the Wix platform. The site uses standard Wix hosting and scripts, including Google Tag Manager and Facebook Pixel for analytics and tracking. However, the website lacks critical privacy and cookie policies, contact information, and security policies, which impacts its overall trustworthiness and compliance posture. The content quality is minimal based on the provided HTML snapshot, and no structured data or Open Graph metadata is present to enhance SEO or social sharing. Technically, the site benefits from HTTPS and Wix's hosting infrastructure but lacks advanced security headers and accessibility features.

Antolin by Westermann Gruppe is a well-established educational platform focused on promoting reading skills among students from grades 1 to 10. The platform offers a vast database of quizzes related to children's and youth literature, enabling self-directed learning and performance tracking. The website is professionally designed, mobile-optimized, and provides comprehensive content relevant to its target audience of students, teachers, parents, and libraries. The business model revolves around licensing and subscriptions for schools, with free trial options available. Recognized certifications and awards enhance its market credibility. Technically, the website employs a modern tech stack including jQuery, Flexslider, and Piwik (Matomo) for analytics, with responsive design and good SEO practices. However, some security best practices such as security headers and cookie consent mechanisms are missing or not detected, which could be improved to enhance GDPR compliance and security posture. The site uses HTTPS and disables cookies in analytics to protect user privacy. From a security perspective, the site shows a moderate security maturity with no visible vulnerabilities or exposed sensitive data. The absence of a published security policy or incident response contact limits transparency. The WHOIS data is partially consistent but lacks detailed registrant information, though no suspicious patterns are detected. Overall, the domain and website appear legitimate and trustworthy. Strategically, the platform should focus on improving privacy compliance by implementing cookie consent banners, publishing security policies, and adding incident response contacts. Enhancing security headers and conducting regular security audits would further strengthen its security posture. These improvements will support trust and compliance in the education sector, ensuring continued growth and user confidence.

Rapp AG is a leading Swiss planning and consulting group specializing in integrated design and sustainable development of living spaces and environments. The company offers a broad range of services including general planning, construction management, logistics, architecture, infrastructure, energy management, and mobility solutions. Their website reflects a mature business with a professional digital presence, supporting multiple languages to cater to a diverse audience. Technically, the site is built on Drupal 10 and incorporates modern tracking and consent management tools, indicating a reasonable level of digital maturity. Security posture is strong with HTTPS enforcement and security headers, though explicit privacy and terms of service documentation are missing, representing compliance gaps. Overall, the website and WHOIS data align well, confirming the legitimacy and credibility of the business.

The website www.muenchenstein.ch serves as the official online presence of the Einwohnergemeinde Münchenstein, the municipal government of Münchenstein, Switzerland. It provides comprehensive information and services for residents, families, seniors, foreign residents, and local businesses. The site offers access to administrative services, community news, event announcements, waste disposal information, and local project updates, positioning itself as a key resource for the local population. The business model is that of a governmental service provider focused on community engagement and service delivery. Technically, the website employs modern web technologies including Bootstrap for responsive design, Matomo for analytics, and ES modules for JavaScript. The site is mobile optimized and accessible, with good SEO practices and a clear navigation structure. The CMS used appears to be i-web, a specialized platform for municipal websites. Performance is moderate, with asynchronous loading of analytics scripts and modular JavaScript enhancing user experience. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, it lacks explicit security policy documentation, incident response contacts, and vulnerability disclosure mechanisms such as security.txt. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy and consistency with the municipal identity. Overall, the website is a trustworthy, well-maintained municipal portal with good content quality and technical implementation. Strategic improvements include publishing a security policy, adding incident response contacts, and enhancing security headers to further strengthen the security posture.

Discover-Culture is a small media company based in Germany, specializing in digital cultural tours, VR experiences, and interactive cultural media. The website offers digital tours and cultural films accessible without restrictions after purchase, targeting a general audience interested in culture and art. The business model is primarily e-commerce focused on digital content delivery. Technically, the website is built on WordPress with WooCommerce, integrating modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and HubSpot. Hosting is via Amazon AWS infrastructure, ensuring reliable performance and scalability. Security posture is good with HTTPS enforced and domain transfer protection, though the absence of DNSSEC and explicit security headers suggests room for improvement. Privacy compliance is partial, with a cookie policy and consent mechanism present but lacking explicit privacy and terms of service pages. Overall, the website is professional, well-branded, and functional, with moderate trustworthiness and a solid technical foundation.

Armaguard Australia, part of the Linfox Armaguard Group, is a leading provider of secure currency supply chain and technology solutions across Australia, New Zealand, and Southeast Asia. Established in 1938, the company serves major banks, financial institutions, ATM networks, and retailers with services including currency management, secure transport, and precious cargo protection. The website reflects a mature business with a strong market position and a broad service portfolio. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses essential plugins such as Yoast SEO and Contact Form 7. The site is mobile-optimized and demonstrates good SEO practices, though performance is moderate. Security measures include HTTPS and Google reCAPTCHA on forms, but the absence of DNSSEC and security headers indicates room for improvement. From a security perspective, the site shows a solid baseline with encrypted connections and form protections but lacks published security policies and incident response contacts. No critical vulnerabilities or suspicious content were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional, trustworthy, and business-focused, with recommendations to enhance security headers, DNS security, and privacy compliance to further strengthen its posture.

The European Union Intellectual Property Network (EUIPN) website serves as the official portal for intellectual property information and services across the European Union. Operated by the European Union Intellectual Property Office (EUIPO), it provides resources, tools, and updates relevant to IP professionals, government entities, and the public. The site is positioned as an authoritative source within the government sector, supporting IP management and cooperation among EU member states. Technically, the website employs modern web technologies including React and JavaScript, with Matomo analytics for privacy-conscious user tracking. The site demonstrates good mobile optimization, accessibility, and a professional design consistent with government standards. However, some security headers and explicit security policies are not evident, suggesting room for enhancement in security posture. From a security perspective, the site benefits from HTTPS and GDPR-compliant privacy and cookie policies, including a consent mechanism. No critical vulnerabilities or suspicious indicators were found. The WHOIS data is unavailable or malformed, which is typical for EU domains, but the domain's legitimacy is supported by consistent branding and official content. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic recommendations include improving security headers, publishing explicit security policies, and enhancing incident response transparency to further strengthen trust and security maturity.

The website swissreg.ch is the official portal of the Swiss Federal Institute for Intellectual Property (Eidgenössisches Institut für Geistiges Eigentum). It serves as the authoritative source for intellectual property rights in Switzerland, including trademarks, patents, and design protections. The site targets businesses, legal professionals, inventors, and the general public seeking information and services related to intellectual property. As a government entity, it holds a strong market position as the official Swiss authority in this domain. Technically, the website employs modern web technologies such as Angular and Material Design components, ensuring a responsive and accessible user experience. The presence of Font Awesome icons and Dynatrace monitoring scripts indicates a mature digital infrastructure focused on usability and performance. The site is well-structured with good design quality and navigation clarity, optimized for mobile devices. From a security perspective, the site uses HTTPS and modern JavaScript frameworks, but lacks explicit security headers and detailed privacy or cookie policies. No forms or direct contact information were detected in the provided content, which limits user interaction and transparency in privacy compliance. The WHOIS data confirms the domain's legitimacy as a Swiss federal government asset, reinforcing trustworthiness. Overall, the website demonstrates a solid security posture and technical maturity appropriate for a government service portal. However, improvements in privacy compliance documentation and security header implementation are recommended to enhance user trust and regulatory adherence.

Liverpool University Press is a reputable academic publisher specializing in humanities and social sciences. It offers a range of publishing services including books, journals, digital collections, and distribution. The press targets academics, researchers, libraries, and institutions primarily in the UK and Europe. The website reflects a professional and consistent brand image aligned with its academic mission. Technically, the site uses modern JavaScript frameworks, Cloudflare for hosting and security, and integrates Google Analytics for user tracking. Security posture is strong with HTTPS and secure login forms, though it lacks some advanced security headers and explicit cookie consent mechanisms. Overall, the domain registration and website content are consistent and trustworthy, supporting a high legitimacy score.

Rapidmail operates as a German-based email marketing and servicedomain provider targeting businesses and marketers primarily in German-speaking regions. The website presents a professional but basic digital presence with a focus on servicedomain offerings. The technical infrastructure is standard, utilizing modern web fonts and CSS, hosted with DNS Made Easy, indicating a reliable DNS setup. However, the site lacks visible advanced frameworks or CMS indications. Security posture is minimal with no detected security headers or incident response information, and privacy compliance is not evident due to missing privacy and cookie policies. Overall, the site is accessible and safe but would benefit from enhanced security and compliance features to strengthen trust and regulatory adherence.

The website www.kulturplus1.ch is currently inaccessible due to a Cloudflare security challenge page that requires human verification before access. As a result, no business content, contact information, or policies are available for analysis. The site appears to be protected by Cloudflare's Turnstile captcha, indicating a focus on security but limiting visibility into the site's actual content and services. Without access to the underlying website content, it is not possible to assess the business model, market position, or technical infrastructure in detail. The security posture is difficult to evaluate beyond the presence of Cloudflare protection, and no compliance or privacy information is visible. Overall, the site is currently blocked for analysis, resulting in a low AI score and limited insights.