Medium-risk security reports

Factorial MX is a well-established HR software provider founded in 2016, offering a comprehensive SaaS platform that centralizes human resources processes for businesses, primarily targeting Spanish-speaking markets. Their platform includes modules for time management, talent management, payroll, financial management, and employee self-service, positioning them as a leading player in the HR technology sector in Mexico and Latin America. The website reflects a mature digital presence with professional design, clear navigation, and extensive use of modern web technologies including React and Next.js, supported by advanced analytics and optimization tools such as Google Analytics 4 and Visual Website Optimizer.

Factorial is a Spain-based company offering an all-in-one business management software focused on HR and team management. The website targets businesses and HR teams primarily in Spanish-speaking markets, with multiple regional domains indicating a broad international presence. The business model is SaaS, providing digital tools to streamline employee and business management. The company appears well-established with a professional online presence and consistent branding.

LamaPoll is a German-based company providing a professional online survey tool designed for businesses, research institutes, public sector entities, as well as students and educators. The platform emphasizes ease of use, versatility, and strong data protection compliance, including GDPR adherence. With over 10,000 companies using their service, LamaPoll holds a strong market position in Germany, supported by multiple certifications such as ISO 27001, TISAX AL2, and BSI security validations. Their business model is SaaS-based, offering both paid licenses and free access for students, focusing on secure, customizable, and responsive survey solutions. Technically, the website uses a mature technology stack including jQuery and Matomo analytics configured for privacy (no cookies). The site is well-optimized for mobile devices, accessible, and SEO-friendly. Hosting is supported by Google Domains DNS infrastructure, with all servers located in Germany, ensuring compliance with local data protection laws. Security posture is strong, with full HTTPS enforcement, end-to-end encryption, one-way encryption for sensitive data, and regular penetration testing. However, some improvements could be made by adding explicit security headers and publishing a security.txt file. Privacy compliance is excellent, with clear privacy and cookie policies, no third-party trackers, and GDPR-aligned data handling. Overall, LamaPoll presents a trustworthy, professional, and secure online survey platform with a strong focus on data protection and user privacy. The website quality and business credibility are high, making it a reliable choice for organizations needing compliant survey solutions.

Netzsieger.de is a German-language online platform specializing in product comparisons and expert reviews across various categories including software, electronics, household goods, and business services. The website positions itself as a trusted source for consumers seeking detailed and practical advice to aid purchasing decisions. The platform features a well-structured navigation system and a cookie consent mechanism compliant with GDPR requirements, indicating a moderate level of digital maturity. Technically, the site employs modern web technologies such as Google Analytics and Google Tag Manager for analytics and tracking, custom fonts, and responsive design elements to ensure usability across devices. While the site is accessible and performs moderately well, there is room for improvement in accessibility and security headers implementation. From a security perspective, the website uses HTTPS and has implemented cookie consent, but lacks visible security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is limited and partially consistent, which slightly reduces trustworthiness but does not indicate malicious intent. Overall, Netzsieger.de presents a professional and trustworthy platform for product comparison, with recommendations to enhance privacy transparency, security posture, and contact availability to further strengthen user trust and compliance.

The website mbr-rlp-nord.de serves as a regional support and advisory platform focused on combating right-wing extremism, racism, and antisemitism in the northern Rheinland-Pfalz region of Germany. It targets engaged civil society actors, organizations, and institutions, providing assistance in dealing with extremist activities and promoting democratic values. The site is hosted on WordPress.com, leveraging standard WordPress technologies and plugins, with a moderate performance and good mobile optimization. Security posture is solid due to HTTPS and managed hosting, but lacks explicit security headers and formal policies. Privacy compliance is weak, with no visible privacy or cookie policies, and no contact information for data protection or incident response. Overall, the site is trustworthy and professional but would benefit from enhanced compliance and security transparency.

The website berufssprachkurse-mainz.info represents a vocational language course offering operated by Arbeit und Leben gGmbH under commission from the German Federal Office for Migration and Refugees (BAMF). The courses target migrants and individuals seeking to improve their German language skills for professional integration and recognition, particularly in healthcare professions. The site is hosted on WordPress.com and uses standard WordPress technologies with Jetpack and other common plugins. The content is professionally presented with relevant images and course descriptions, targeting a German-speaking audience. Technically, the site is well-structured, mobile-optimized, and uses HTTPS, but lacks some advanced security headers and a visible privacy policy page. No contact emails or phone numbers are directly provided on the main pages, which slightly reduces transparency. The WHOIS data is privacy protected by Identity Digital Inc., which is common and justified for this type of non-profit educational site. Overall, the site is legitimate, secure, and serves its educational purpose effectively.

DOOR is a German non-profit project operated by Arbeit und Leben gGmbH, focused on providing volunteer interpreting services in social contexts such as medical, educational, and public service environments. The project is government funded and aims to facilitate communication for people with different languages by offering qualified volunteer interpreters. The website is hosted on WordPress.com and uses standard WordPress technologies and plugins. It is accessible, mobile-optimized, and provides clear contact information but lacks privacy and cookie policies, which are important for compliance. Security posture is moderate with HTTPS enforced but missing security headers. WHOIS data is privacy protected, which is typical for such non-profit projects. Overall, the website is trustworthy and serves its intended audience effectively.

Haus der Sprachmittlung is a non-profit organization based in Rheinland-Pfalz, Germany, focused on advancing and professionalizing language mediation services. Operating under the umbrella of Arbeit und Leben gGmbH and commissioned by the Ministry for Family, Women, Culture and Integration (MFFKI), it provides resources, events, and software to support qualified language mediators and stakeholders in the social sector. The website is well-structured, professionally designed, and targets various actors involved in language mediation including mediators, clients, and commissioning bodies. Technically, the site is built on TYPO3 CMS with embedded Vimeo videos and uses an outdated jQuery version, which presents a security concern. The hosting is via a reputable German provider, Schlund Technologies. Security posture is moderate with HTTPS enabled but lacking visible security headers and modern JavaScript libraries. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism detected. Contact information is clear and trustworthy, enhancing business credibility. Overall, the site is a reliable resource for language mediation in the region with room for technical and security improvements.

Extenso.live is a technology SaaS platform developed by Sednove Inc., offering a unique no-code and low-code platform for website and application creation. The platform targets webmasters, developers, and designers seeking to build multilingual and high-performance sites without deep coding knowledge. The site demonstrates a professional market position with over 2500 sites created using Extenso, trusted by notable companies such as Bombardier and CN. Technically, the website employs a modern tech stack including jQuery, Bootstrap, RequireJS, and Google Analytics, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and secure forms, though lacking explicit security headers and privacy policies. The WHOIS data is privacy protected, common for tech companies, and no suspicious patterns were detected. Overall, the site is safe, professional, and credible but would benefit from enhanced privacy compliance and security best practices.

WPBakery Page Builder is a mature and widely adopted WordPress plugin developed by Rain-Task Ltd., established in 2009. It offers an intuitive drag-and-drop interface for building WordPress pages without coding, targeting website developers and content creators globally. The company positions itself as a market leader with over 5.8 million active users, providing a comprehensive product suite including addons, templates, and AI-powered content generation tools. The website reflects a professional and consistent brand image with strong SEO and user experience design. Technically, the site is built on WordPress with WooCommerce integration, leveraging modern analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Microsoft Clarity. Security posture is solid with HTTPS enforcement and cookie consent compliance, though some improvements in security headers and explicit security policies are recommended. Overall, the site demonstrates high business credibility and digital maturity.

MarketingCloudFX appears to be a marketing automation software provider targeting B2B customers. However, the current website is in maintenance mode with minimal content, providing only a placeholder message and a link to webfx.com for more information. The technical infrastructure is based on WordPress with a maintenance mode plugin and uses jQuery as a JavaScript library. There is no evidence of advanced frameworks or analytics tools. Security posture is weak due to lack of HTTPS confirmation, absence of security headers, and no visible privacy or cookie policies. The WHOIS data is unavailable, indicating potential domain registration issues or privacy protection without justification, which negatively impacts trustworthiness. Overall, the site lacks business credibility and content quality, limiting its effectiveness as a marketing platform.

EtienneEtienne is an established independent communication agency based in Geneva, Switzerland, specializing in 360° campaigns across print, digital, film, branding, and event marketing. The agency targets brands, institutions, and associations primarily in Geneva and the broader Suisse romande region. Their market position is strong regionally, supported by multiple award nominations and wins, reflecting a professional and creative portfolio. Technically, the website is built on WordPress with modern tools such as Gravity Forms, Google Tag Manager, and Vimeo for media embedding, indicating a mature digital infrastructure. The site is mobile-optimized and well-structured, providing a good user experience. Security posture is adequate with HTTPS and domain transfer protection, though improvements like DNSSEC and enhanced security headers are recommended. Privacy compliance is moderate due to the absence of a clear privacy policy and terms of service, though a cookie consent mechanism is present. Overall, the website is professional, trustworthy, and safe for general audiences.

Candy Factory is a Swiss-based visual communication agency established in 2009, specializing in branding, graphic design, digital creations, and advertising services. The company targets individuals, enterprises, groups, and institutions seeking bespoke visual communication solutions with a focus on Swiss quality and attention to detail. Their website reflects a professional and consistent brand image with comprehensive service offerings and a user-friendly contact form to initiate projects. Technically, the site is built on WordPress with modern libraries such as jQuery and FontAwesome, providing a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS enabled and secure form handling, though it lacks advanced security headers and explicit privacy compliance mechanisms. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

PAF Munication is a small, Swiss-based graphic design atelier founded in 2003 by Yves Salamin, offering comprehensive graphic creation services including branding, advertising communication, web design, packaging, and signage. The website presents a professional image with clear contact details and a focus on personalized service. Technically, the site is built on WordPress, uses jQuery and Google reCAPTCHA v3 for security, and includes a lightbox gallery. While the site is mobile optimized and well structured, it lacks privacy and cookie policies, and security headers are missing, representing compliance and security improvement opportunities. The domain registration data aligns well with the business claims, supporting legitimacy. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security hardening.

COMMUNEapp is a technology product offered by COMMUNEagence, providing a secure login portal primarily targeting administrators or users of their platform. The website is focused on authentication with support for Google Authenticator two-factor authentication, indicating a moderate security posture. The technical infrastructure relies on established JavaScript libraries and CSS frameworks such as jQuery, Bootstrap, and FontAwesome, supporting a functional and moderately optimized user experience. However, the site lacks visible privacy and cookie policies, security headers, and contact information, which limits its compliance and trustworthiness from a security and privacy perspective. Overall, the site is accessible without WAF or blocking mechanisms, but improvements in security headers, privacy compliance, and transparency are recommended.

Hawaii Interactive is a small digital agency based in Lausanne, Switzerland, specializing in web development, design, and hosting services. Established in 2014, the company presents a professional online presence with a portfolio of projects showcasing their expertise in WordPress and modern web technologies. The website is well-structured, mobile-optimized, and uses a modern tech stack including WordPress, Gravity Forms, and Matomo analytics. Security measures include HTTPS, anti-spam protection, and monitoring integrations, though there are gaps such as missing DNSSEC and security headers. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the business appears legitimate and trustworthy with clear contact information and consistent branding.

Almega is Sweden's leading employer organization for the service sector, representing approximately 10,000 member companies and over 500,000 employees. The organization provides a broad range of services including membership benefits, legal advice, training, collective bargaining support, and advocacy. The website is professionally designed, well-structured, and optimized for SEO and accessibility, reflecting a mature digital presence. Technically, the site runs on WordPress with modern plugins such as Yoast SEO and integrates Google Tag Manager and CookieHub for analytics and cookie consent management. Security posture is strong with HTTPS enforced and Cloudflare protection, though explicit security headers could be verified. Privacy compliance is robust with detailed cookie policies and GDPR-aligned consent mechanisms. WHOIS data for the queried subdomain is missing, which is unusual but likely due to querying the 'www' subdomain rather than the root domain. Overall, the site demonstrates a high level of professionalism, security, and compliance suitable for a large, established organization.

edlekarnapilulky.cz is a small Czech language informational website focused on health, wellness, and herbal medicine topics. The site provides blog articles about massage services, herbal products like Persen, and optician services, targeting a general audience interested in wellness. The business model appears to be content publishing monetized primarily through Google Adsense advertising. Technically, the site uses standard HTML5, CSS3, and JavaScript with Cloudflare DNS and CDN services. The site is basic in design and mobile optimization, with moderate performance and SEO. Security posture is adequate with HTTPS enabled but lacks security headers and formal privacy or cookie policies. No contact or business registration information is provided, limiting trust and compliance maturity. The domain registration is consistent with a new small website started in 2023, with no suspicious WHOIS patterns. Overall, the site is safe for general audiences and does not contain adult or explicit content.

Fondamentale – La Filiera delle Costruzioni is a collaborative union representing key stakeholders in the Italian construction sector, including companies and labor unions. The organization focuses on enhancing competitiveness through innovation, sustainability, training, safety, and legal compliance. Their website reflects a professional presence with clear messaging and partnerships with recognized industry bodies. Technically, the site is built on WordPress with Elementor, using modern libraries and a responsive design. Security posture is good with HTTPS and cookie consent implemented, though lacking explicit privacy and security policies. Overall, the site is trustworthy and serves as an effective communication platform for the organization.

DIAC is a specialized Italian online daily newspaper focusing on infrastructure, construction, and the built environment. It targets professionals and stakeholders in these sectors by providing news, interviews, and regulatory updates. The website is relatively new, launched in 2024, and positions itself as a niche media outlet with a professional presentation and active social media presence. Technically, it is built on WordPress using Elementor and several plugins for SEO, GDPR compliance, and social media integration. The site uses HTTPS and DNSSEC, indicating a good baseline security posture, though it lacks some advanced security headers and explicit security policies. Privacy compliance is partial, with cookie consent implemented but no visible privacy or terms pages. No direct contact information is publicly visible, which may impact user trust. Overall, the site is well-structured, mobile-optimized, and provides relevant content for its audience.

CFI - Cooperazione Finanza Impresa s.c.p.a. is an Italian institutional investor focused on supporting cooperative enterprises, particularly social cooperatives and workers buyout initiatives. The organization provides capital investments and social finance solutions to promote cooperative business growth and sustainability. Their market position is niche and specialized within the non-profit sector, targeting cooperative enterprises and social businesses in Italy. The website reflects a professional and consistent brand image with clear navigation and relevant content for its audience. Technically, the website uses standard web technologies including jQuery and the Jssor Slider for interactive content. It employs Google Fonts for typography and is mobile-optimized with responsive design elements. Performance is moderate with no major technical issues detected. However, no CMS or advanced frameworks are identified, suggesting a custom or lightweight implementation. From a security perspective, the site enforces HTTPS with good SSL configuration but lacks advanced security headers and published security policies. No incident response or vulnerability disclosure information is available, which could be improved to enhance trust and compliance. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. Overall, the website is trustworthy, professionally maintained, and aligned with its institutional mission. Strategic recommendations include enhancing security headers, publishing formal security and incident response policies, and considering vulnerability disclosure mechanisms to improve security posture and stakeholder confidence.

Previdenza Cooperativa operates as a specialized pension fund serving workers, members, and employees of cooperative enterprises in Italy. The website presents a professional image with clear focus on pension fund services, targeting a niche cooperative sector. The digital infrastructure is built on WordPress with the Divi theme, incorporating modern web technologies such as Google reCAPTCHA and Smart Slider 3 for enhanced user experience and security. The site is GDPR compliant with an implemented cookie consent mechanism and uses Matomo analytics for user tracking. Security posture is solid with HTTPS enforced and standard security headers present, though explicit security policies and incident response information are not published. Overall, the website is trustworthy and well-maintained, though it could benefit from more transparent contact details and formal security disclosures.

Fon.Coop operates Foncoop, an interprofessional fund dedicated to continuous training for cooperative enterprises and entities within the social and civil economy sectors in Italy. The organization positions itself as a proactive and open laboratory promoting growth and economic-social development through training and dialogue. The website reflects a medium-sized non-profit entity with a clear focus on cooperative sector education and funding services. Technically, the site is built on WordPress with Elementor, employs modern web technologies, and integrates analytics and consent management tools, indicating a mature digital infrastructure. Security posture is adequate with HTTPS and CAPTCHA protections, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is partial, with cookie consent present but no explicit privacy policy detected in the scanned content. Overall, the site is professional, trustworthy, and well-aligned with its business mission.

Cresme is an established Italian market research center specializing in the construction and economic sectors, providing data and forecasting services to both private and public institutions. With over 60 years of experience, Cresme holds a strong market position in Italy's real estate and construction intelligence industry. The website reflects a professional digital presence built on WordPress with modern plugins and SEO tools, indicating a mature technical infrastructure. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though there is room for improvement in security headers and formal security policies. Overall, the site is trustworthy and well-maintained, supporting Cresme's business credibility and market reputation.

Formedil is a prominent Italian non-profit organization dedicated to training and safety in the construction sector. It operates nationally to promote professional qualification, safety standards, and workforce development through various training programs, certifications, and observatories. The organization maintains a strong market position as a leader in construction sector education and safety, supported by a comprehensive website with rich content and multiple regional presences. Technically, the website employs modern web technologies including jQuery, Slider Revolution, and Google Fonts, and is built on the Simplex CMS platform. It is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and secure embedded content, but lacks some security headers and explicit incident response information. Privacy compliance is evidenced by a detailed privacy policy, though cookie consent mechanisms are absent. Overall, the domain registration data aligns well with the organization's identity, supporting its legitimacy.

Diesis Network is an established organization operating in the energy sector, likely focusing on cooperative energy solutions given the .coop domain and company name. The website is built on WordPress using the Divi theme and incorporates SEO optimization via Yoast SEO. The technical infrastructure includes Google Analytics and Google Tag Manager for user tracking. Hosting is provided by Infomaniak, a reputable European hosting provider. Security posture is basic with HTTPS enabled but lacks advanced security headers and vulnerability disclosures. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website presents a professional appearance but would benefit from enhanced security and compliance features.

Elmo is a technology company providing a SaaS tool focused on GDPR, ePrivacy, and CCPA compliance, primarily targeting website and app owners who need to manage cookie consent and privacy policies. The company positions itself as a compliance enabler with automated scanning, geo-targeting, and user control features. The website is professionally designed, mobile-optimized, and integrates with popular platforms like Shopify and WordPress. Technically, the site uses modern web technologies including Google Tag Manager for analytics and marketing. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, but lacks explicit security headers and visible privacy policies. The domain WHOIS data is privacy protected, which is common for privacy-centric services, and no suspicious patterns were detected. Overall, the website is credible and functional but could improve transparency and security best practices.

Mediagroup98 is an Italian communication company specializing in various communication disciplines including live, visual, digital, analog, and in-touch communication. The company operates multiple offices in Modena, Parma, and Milan, serving a business clientele seeking comprehensive communication solutions. Their market position is supported by several certifications such as ISO 9001, ISO 45001, ISO 20121, and a Gender Equality certification valid through 2025, indicating a commitment to quality and compliance. The website reflects a professional and modern digital presence built on WordPress with Elementor, enhanced by SEO and analytics tools, demonstrating a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and explicit security policies. The absence of WHOIS registration data is a notable anomaly that slightly detracts from overall trust but does not overshadow the professional presentation and compliance indicators. Overall, the company appears credible and well-positioned in the media communication sector.

Homes4All is a small Italian real estate company specializing in the recovery and valorization of disused properties, transforming them into socially and economically valuable housing opportunities. Their business model emphasizes sustainability, social impact, and collaboration with investors, private individuals, public entities, and communities. The website reflects a professional and consistent brand image with clear messaging and targeted content for their audience. Technically, the site is built on WordPress with modern plugins and frameworks, including SEO and analytics tools, ensuring good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and GDPR-compliant cookie consent mechanisms in place, although explicit security and incident response policies are not published. Overall, the site demonstrates a mature digital presence with moderate user tracking and good privacy compliance.

Numaferm is a German biotechnology company specializing in the discovery, optimization, and production of peptides, pepteins, and proteins for life sciences and related industries. The company leverages proprietary technologies such as Numascreen™ and Numatech™ to deliver innovative, cost-effective, and sustainable bioprocess solutions from lead discovery to commercial manufacturing. Their market position is strengthened by partnerships with academic institutions and industry leaders, and they maintain ISO 9001:2015 certification to ensure quality standards. Technically, the website is built on WordPress with modern SEO and analytics tools including Yoast SEO, Google Analytics, and Google Tag Manager. The site is mobile-optimized and performs moderately well, with clear navigation and professional design. Hosting is provided by IONOS SE, a reputable provider. However, DNSSEC is not enabled, and some security headers are missing, indicating room for improvement in security hardening. Security posture is generally good with HTTPS enforced and no exposed sensitive data detected. The site implements a cookie consent mechanism but lacks explicit privacy and terms of service pages, as well as a published security policy or incident response contacts. WHOIS data shows privacy protection but aligns with the company's German location and business age, supporting legitimacy. Overall, Numaferm presents a professional and trustworthy online presence suitable for its biotech B2B audience. Strategic improvements in privacy documentation, security headers, and incident response transparency would enhance compliance and trust further.

TMF e.V. is a German non-profit organization dedicated to advancing medical research by developing concepts, infrastructures, and methods. The website reflects a professional and well-structured digital presence, targeting medical researchers, healthcare professionals, and policy makers. It offers comprehensive information about their working groups, products, events, and publications, supporting their mission to facilitate connected medical research. Technically, the site is built on Drupal 10, uses Matomo for privacy-conscious analytics, and implements a robust cookie consent mechanism. The site is mobile-optimized and accessible, with clear navigation and professional design. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security policies and incident response contacts are not published. Overall, TMF e.V. presents a trustworthy and credible online presence consistent with its role in the healthcare research sector.

Toggle is a UK-based hospitality commerce platform specializing in gift card and experience sales for hospitality businesses. The company offers a SaaS solution that integrates with various systems such as EPOS, CRM, and ecommerce platforms, providing a seamless customer journey and operational efficiency. The website demonstrates a strong market position with a focus on hospitality operators, supported by customer testimonials and recognized hospitality brands. Technically, the site is built on Webflow with modern tracking and marketing tools, optimized for performance and mobile use. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though a dedicated security policy page is absent. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with its business objectives.

FABELTRA LTD is a small technology company based in Cyprus specializing in software development, network solutions, IT consulting, and business process automation. The company targets businesses and internet users seeking enhanced network security and software solutions. Their website presents a professional image with clear descriptions of their services and a physical office address in Nicosia, Cyprus. Technically, the website uses common web technologies such as Bootstrap, jQuery, and Ionicons, hosted on AWS infrastructure, with moderate performance and good mobile optimization. However, the site lacks HTTPS enforcement and security headers, which lowers its security posture. No privacy or cookie policies are published, and contact information is limited to a physical address without emails or phone numbers, impacting privacy compliance and business credibility. Overall, the website is functional and professional but requires improvements in security and compliance to enhance trust and user confidence.

Chilli Partners operates as an affiliate marketing network specializing in casino brands, aiming to bring leads to top casino operators. The website is currently under reconstruction, presenting a 404 error page with minimal content and no visible contact or policy information. The business model focuses on affiliate lead generation within the gambling sector, targeting affiliate marketers and casino industry partners. The domain is registered since 2020 with a long-term expiry, indicating a stable registration history. Technically, the site is built on the Tilda CMS platform, utilizing standard scripts including an outdated version of jQuery and Google Fonts. Hosting and DNS are managed via Cloudflare, but DNSSEC is not enabled. The site lacks modern security headers and privacy compliance mechanisms, and the current page content is minimal, impacting user experience and trust. From a security perspective, the absence of security headers, outdated libraries, and missing privacy and cookie policies represent compliance and security gaps. No WAF or blocking mechanisms were detected, and the site is accessible but not fully operational. The overall security posture is weak, with recommendations to improve DNS security, update libraries, implement security headers, and add privacy and cookie policies. Overall, the website's current state limits its credibility and trustworthiness. Strategic improvements in content, security, and compliance are necessary to enhance business credibility and user trust.

Migros Kulturprozent Classics is a cultural initiative under the Migros umbrella, dedicated to promoting classical music and cultural events in Switzerland. The website serves as an informational platform showcasing this initiative with a focus on cultural engagement and event promotion. The target audience is the general public interested in classical music and cultural activities. The business model is non-profit cultural sponsorship funded by Migros, a large Swiss retail cooperative. Technically, the website uses modern web technologies including Google Tag Manager, Facebook Pixel for tracking, and OneTrust for cookie consent management. The site employs custom web components and web fonts from Fonts.com, indicating a moderate level of digital maturity. Mobile optimization is good, and the site loads with moderate performance. However, accessibility and SEO optimizations are basic and could be improved. From a security perspective, the site is served over HTTPS with no visible exposed sensitive data. Cookie consent is implemented, but no explicit privacy policy or terms of service are found, which is a compliance gap. No security headers are detected, which could be improved to enhance security posture. No forms or input fields are present, reducing attack surface. The domain registration aligns well with the parent company Migros, indicating high legitimacy. Overall, the website is professional and trustworthy but lacks some compliance documentation and security hardening. Strategic recommendations include publishing privacy and terms policies, adding security headers, and enhancing accessibility and SEO. These improvements would raise the site's security posture and compliance standing while improving user trust.

Migros Museum für Gegenwartskunst is a contemporary art museum based in Switzerland, affiliated with the Migros group. The website serves as an informational and promotional platform for the museum's exhibitions, events, and educational offerings. It targets a general audience interested in contemporary art and culture. The museum holds a reputable position in the Swiss cultural landscape, supported by consistent branding and active social media presence. Technically, the website employs modern web technologies including React components and integrates Google Analytics and Google Tag Manager for visitor tracking. Cookie consent is managed through OneTrust, reflecting compliance efforts with GDPR. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be enhanced. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent mechanisms. However, it lacks explicit security headers, a published security policy, and incident response contact information. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of a privacy policy and terms of service pages represents a compliance gap. Overall, the website is professional and trustworthy, with moderate technical maturity and a solid security posture. Strategic improvements in privacy documentation, security policies, and accessibility would enhance compliance and user trust.

Reutlingen University is a well-established public higher education institution in Germany, focused on providing diverse, practice-oriented, and international academic programs. The university positions itself as an innovation driver shaping sustainable futures regionally and globally. The website reflects a professional and consistent brand image, targeting students, researchers, and industry partners. Technically, the site is built on TYPO3 CMS, leveraging privacy-conscious Matomo analytics and Cookiebot for GDPR compliance, hosted on BelWü infrastructure. Security posture is solid with HTTPS enforced and standard security headers present, though explicit security and incident response policies are not publicly detailed. Overall, the domain registration and website content align well, indicating high legitimacy and trustworthiness.

RWU Hochschule Ravensburg-Weingarten University of Applied Sciences is a medium-sized educational institution in Germany offering over 30 Bachelor and Master programs in technology, economics, and social sciences. The website reflects a well-established academic institution with a strong regional and international presence, focusing on practical and applied sciences education. The digital infrastructure is built on Drupal 10 with modern web standards, responsive design, and privacy-conscious analytics (Matomo configured to disable cookies and respect Do Not Track). Security posture is solid with HTTPS and some security headers, though lacking explicit security policies and cookie consent mechanisms. The site is professional, trustworthy, and well-structured, targeting prospective and current students, international students, and industry partners.

Hochschule Aalen is a German higher education institution offering a broad range of study programs across engineering, business, health sciences, informatics, and design. The website reflects a well-established academic entity with a strong regional and international presence, providing education, research, and continuing education services. The institution targets students, researchers, and professionals seeking academic advancement and career development. Technically, the website employs modern web technologies including Cookiebot for consent management and Matomo for analytics, hosted likely on academic or regional infrastructure. The site is well-structured, mobile-optimized, and provides comprehensive content and navigation for its audience. Security posture is solid with HTTPS enforced and privacy compliance evident, though some security headers could be improved. Overall, the domain registration and DNS setup align with the institution's identity, supporting legitimacy and trust. No critical vulnerabilities or suspicious elements were detected.

Hochschule Esslingen is a leading German university of applied sciences specializing in academic education and applied research in technology, economics, and social sciences. It serves approximately 6,400 students across numerous Bachelor and Master programs, emphasizing practical learning and strong industry connections. The website reflects a mature digital presence with a modern TYPO3 CMS infrastructure, comprehensive content, and accessibility features. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is robust, with clear GDPR-aligned policies and cookie management. Overall, the site projects high professionalism and trustworthiness suitable for an academic institution.

Berlin Hyp is a leading European commercial real estate financier operating as part of the LBBW universal bank group. The company specializes in large-volume real estate financing for professional investors and housing companies, emphasizing sustainability, ESG principles, and digital innovation to streamline customer processes. The website reflects a mature and professional business with a clear market position and strong branding consistency. Technically, the site is built on the Contao CMS platform, uses modern JavaScript libraries like Swiper.js, and integrates Matomo analytics with GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS and session management in place, though explicit security headers and incident response policies are absent. Overall, the site is trustworthy, well-structured, and compliant with privacy regulations.

iClosed is a technology company offering an AI-powered scheduling solution designed to enhance the productivity of high-ticket sales teams by capturing more qualified leads and disqualifying non-buyers. The website presents a professional and modern design, leveraging advanced analytics tools such as PostHog and Facebook Pixel to monitor user interactions. However, the absence of publicly available WHOIS data due to privacy protection limits transparency about the domain ownership. The site lacks explicit privacy, cookie, and terms of service policies, which impacts compliance and trustworthiness. Security posture is moderate with no visible security headers and unknown SSL configuration, suggesting room for improvement in technical security measures. Overall, the business appears legitimate and focused on a niche SaaS market, but would benefit from enhanced transparency and compliance documentation.

Hotel Alte Schmiede is a traditional 4-star hotel located in the center of Seefeld, Austria, offering hospitality services including hotel rooms, apartments, a wellness area with an indoor pool, and an à la carte restaurant. The website targets tourists and travelers seeking quality accommodation and leisure services in the region. The business positions itself as an established player in the hospitality sector with a focus on comfort and tradition. Technically, the website is built on WordPress using popular plugins such as WooCommerce for e-commerce capabilities, Elementor for page building, and WPML for multilingual support. The site employs modern web technologies and SEO best practices, including structured data (JSON-LD) and Google Tag Manager for analytics. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the website uses HTTPS with a good SSL configuration and implements a cookie consent mechanism, indicating some level of privacy compliance. However, it lacks explicit security headers and dedicated security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, the website presents a professional and trustworthy online presence for the hotel business, with clear contact information and consistent branding. The risk level is low, but improvements in security headers and privacy policy transparency are recommended to enhance compliance and security posture.

Hotel "Das Köhle" is a family-oriented hospitality business located in the Serfaus-Fiss-Ladis region of Tirol, Austria. The website presents the hotel as a regional family hotel offering accommodation and related services to tourists and families visiting the area. The business operates on a small scale with a focus on hospitality and tourism. Technically, the website is built on WordPress using Elementor and Yoast SEO plugins, indicating a modern CMS infrastructure with SEO optimization. Performance and mobile optimization are good, but accessibility features are basic. Security posture is weak due to lack of visible security headers, absence of privacy and cookie policies, and no incident response or vulnerability disclosure information. The domain uses privacy protection for WHOIS data, which is common for small businesses but reduces transparency. Overall, the website is functional and professional but lacks critical security and privacy compliance elements.

The website www.mts-online.com presents itself as a digital marketing and online sales performance service provider, focusing on outstanding booking performance through targeted digital marketing and online distribution. The content is professional and business-oriented, targeting companies seeking to improve their booking and sales results. The technical infrastructure leverages modern web technologies including Astro framework, Swiper.js for UI components, and integrates major analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag. The website is accessible without any WAF or security challenge blocking content, and it uses HTTPS with a good SSL configuration. However, the security posture is moderate due to the absence of security headers and lack of visible privacy or cookie policies. The WHOIS data is notably missing or unavailable, which raises concerns about domain registration legitimacy and reduces overall trust. No contact information or security incident response details are provided, limiting transparency and compliance indicators. Overall, the website is functional and professional but requires improvements in security best practices, privacy compliance, and transparency to enhance trust and reduce risk.

CASABLANCA is a small Austrian company specializing in hotel software solutions aimed at hospitality businesses. Their website presents a modern design built with Nuxt.js and Tailwind CSS, indicating a contemporary technical infrastructure. The site includes a cookie consent mechanism via Usercentrics, reflecting some privacy compliance efforts. However, critical compliance documents such as privacy policy and terms of service are missing, and no direct contact information is provided on the site. Security posture is moderate with HTTPS implied but lacking visible security headers and incident response information. Overall, the website is functional and professional but would benefit from enhanced transparency and security documentation to improve trust and compliance.

SalesViewer is a technology company specializing in B2B sales intelligence and lead generation software. Their platform identifies anonymous website visitors and converts them into actionable sales leads, targeting sales and marketing professionals primarily in Europe. The company positions itself as a trusted partner with ISO 27001 certification and a strong focus on GDPR compliance. Their business model is subscription-based SaaS, serving medium-sized enterprises and sales teams. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses Matomo for privacy-conscious analytics. The site is well-optimized for mobile and SEO, with a professional design and clear navigation. Security posture is strong with HTTPS, security headers, and secure forms, though public security policies and incident response contacts are not published. Overall, the website demonstrates a mature digital presence with good security and privacy practices. However, the lack of WHOIS registration transparency and absence of a public vulnerability disclosure policy slightly reduce trust. Strategic improvements in transparency and incident response communication would enhance their security posture and business credibility.

Atikon EDV & Marketing GmbH is a specialized marketing and advertising company focused on serving tax consultants and accounting firms primarily in Austria. Established since 2000, the company offers a broad range of services including online marketing, SEO, social media advertising, graphic design, and consulting for firm founding and succession. Their market position is that of a trusted specialist in their niche, supported by a professional and well-structured website that clearly targets tax consultancy professionals. Technically, the website employs modern analytics and marketing tools such as Matomo, Hotjar, Google GTag, and Meta Pixel, indicating a mature digital infrastructure. The site is well optimized for mobile and accessibility, with good SEO practices and a comprehensive privacy and cookie consent mechanism, reflecting strong compliance with GDPR requirements. Security posture is generally good, though explicit security headers were not detected in the provided data, and no critical vulnerabilities were found. The WHOIS data for the domain www.atikon.com is unavailable, which raises some concerns about domain registration transparency; however, the website content and business information appear legitimate and consistent with the claimed business. Overall, the risk is moderate with recommendations to improve security headers and clarify domain registration details.

Atikon EDV & Marketing GmbH is a specialized marketing and advertising company focused on serving tax consultants and accounting firms primarily in Austria. Established since 2000, the company offers a broad range of marketing services including online marketing, SEO, social media advertising, and consulting for firm founding and succession. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its target audience. Technically, the site employs reputable analytics and marketing tools such as Matomo, Hotjar, Google GTag, and Meta Pixel, indicating a modern approach to data-driven marketing. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy and registration status, which is inconsistent with the company's claimed history and professional image. Security posture is adequate with HTTPS and consent management but lacks visible security headers and incident response information. Overall, the website is professional and trustworthy in content and design but requires verification of domain registration and enhancement of security best practices.

Plan International Deutschland e.V. is a well-established non-profit child rights organization operating globally with a focus on improving the lives of children, especially girls, through sponsorship and humanitarian aid. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to donors and supporters. Technically, the site uses TYPO3 CMS with modern JavaScript frameworks and includes privacy and cookie consent mechanisms, indicating compliance with GDPR and user privacy standards. Security posture is strong with HTTPS and secure forms, though some security headers could be improved. Overall, the domain registration and WHOIS data align well with the organization's claims, supporting legitimacy and trustworthiness.