Medium-risk security reports

The website www.sachsen.de serves as the official digital portal for the Free State of Saxony, Germany. It provides comprehensive information about the state government, public services, economic sectors, culture, and citizen engagement. The portal targets residents, businesses, and visitors, offering access to e-government services and up-to-date news from the state administration. The site is well-positioned as the authoritative source for Saxony's governmental information and services. Technically, the website employs a modern and responsive design with technologies such as jQuery, Bootstrap-like frameworks, and custom navigation components. It is hosted likely by Deutsche Telekom, indicated by the nameservers, and uses HTTPS with good SSL configuration. The site includes accessibility features and SEO optimizations, ensuring a positive user experience across devices. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms compliant with GDPR, and avoids exposing sensitive data. However, explicit security headers are not detected, and there is no public security policy or incident response information. Analytics are performed via etracker with moderate user tracking. Overall, the security posture is solid but could be enhanced with additional headers and published policies. The domain WHOIS data aligns with the official government entity, showing consistent registration since 2005, supporting the site's legitimacy. No suspicious or malicious indicators are present. The site is safe for general audiences, with no adult or questionable content. Strategically, the site effectively serves its governmental role with strong content quality and user trust. Enhancements in security transparency and incident response readiness would further strengthen its posture.

Spielmobilprojekt is a non-profit initiative under KINDERVEREINIGUNG® LEIPZIG e. V., providing mobile play services with their Spielmobile vehicles in various Leipzig neighborhoods. Their focus is on open, generational, and pedagogical play activities, supporting community engagement and youth work. The website is well-structured, informative, and targets families, children, and educators in Leipzig. Technically, the site is built on WordPress with modern plugins and includes cookie consent mechanisms, indicating a good level of digital maturity. Security posture is adequate with HTTPS and reCAPTCHA usage, though it lacks some advanced security headers and explicit security policies. Overall, the site is legitimate, trustworthy, and compliant with GDPR, with clear contact information and partner affiliations.

Kulturwerkstatt KAOS is a well-established non-profit cultural center based in Leipzig, Germany, focused on providing artistic and educational programs for children, youth, and young adults. Operating since 1992 under the KINDERVEREINIGUNG® Leipzig e.V., it offers a diverse range of courses, workshops, events, and community engagement activities. The organization enjoys strong local support from city and state cultural offices and maintains a clear digital presence with comprehensive content and contact information. Technically, the website is built on WordPress with modern plugins and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected, and privacy compliance is well addressed with GDPR-aligned policies. Overall, KAOS presents a trustworthy and professional online presence aligned with its community-focused mission.

McClatchy Washington Bureau operates as a regional news media outlet specializing in political, national, and world news with a focus on Washington DC. It is part of the larger McClatchy Media Network, providing news content through a subscription and advertising-supported model. The website demonstrates a professional digital presence with consistent branding, comprehensive privacy policies, and user consent mechanisms for cookies and tracking. Technically, the site employs modern JavaScript frameworks, integrates multiple advertising and analytics services, and maintains good SEO and mobile optimization standards. Security posture is solid with HTTPS and basic security headers, though improvements in CSP and other headers are recommended. The absence of WHOIS data reduces transparency but does not detract significantly from the site's legitimacy given the professional content and trust signals. Overall, the site is a credible and well-maintained news platform with moderate technical sophistication and good privacy compliance.

The website mcclatchylivewell.com is currently inaccessible due to a security block implemented by the Wordfence plugin, which restricts access from the visitor's area for security reasons. The domain is registered with Network Solutions, LLC since 2016 and is set to expire in 2026, indicating a stable registration history. The site appears to be hosted or proxied via Bluehost, as inferred from the unlock form action URL. Due to the block, no business content, contact information, or policies are accessible for analysis. The site uses WordPress CMS with Wordfence security plugin, but no additional technical or SEO metadata is available. The security posture is limited to the presence of Wordfence blocking, with no visible security headers or policies. Overall, the site cannot be fully assessed due to the WAF block, resulting in a low AI score and incomplete data.

Sogei - Società Generale d'Informatica S.p.A. is a wholly owned IT company of the Italian Ministry of Economy and Finance, specializing in providing digital services and infrastructure to public administration entities. The company plays a strategic role in modernizing and simplifying public services, supporting key government departments and agencies with advanced IT solutions. Their offerings include fiscal information systems, digital platforms, and data center management, positioning them as a critical partner in Italy's digital transformation efforts. Technically, the website demonstrates a mature digital infrastructure using modern frameworks like Bootstrap and Matomo for analytics, with a CMS likely based on Adobe Experience Manager. The site is mobile-optimized, accessible, and well-structured, reflecting a high level of digital maturity. Analytics are implemented with privacy considerations, using anonymized data collection. From a security perspective, the site enforces HTTPS and provides a robust cookie consent mechanism, though it lacks explicit security policy documentation and incident response contacts. No vulnerabilities or exposed sensitive data were detected. The domain registration aligns with the organization's identity, reinforcing trustworthiness. Overall, the website is professional, secure, and compliant with privacy regulations, serving as a reliable digital front for a government IT service provider. Strategic improvements could focus on enhancing transparency around security policies and incident response to further strengthen trust and compliance.

The website www.maryanning.ch is a promotional platform for the children's animation film 'Mary Anning', targeting families and children primarily in Switzerland. It offers rich interactive content including a fossil hunting contest across multiple Swiss cities, educational resources for schools, and a mini-game to engage users. The site uses modern web technologies such as HTML5, CSS3, JavaScript, Swiper.js for UI components, and Kaboom.js for the game engine, alongside Google Tag Manager and Google Analytics for tracking. The design is professional and mobile-optimized, providing a good user experience with clear navigation and relevant content. However, the site lacks explicit privacy and cookie policies, which is a compliance gap given the use of tracking technologies.

ThemezHut is a specialized WordPress theme development company focused on creating high-quality magazine and corporate themes. Established in 2013, it has built a niche market presence with over 30,000 active installs, offering both free and premium themes. The company targets WordPress users including bloggers, publishers, and small businesses seeking professional and flexible themes. Their business model revolves around theme sales, support, and documentation, leveraging WordPress as their platform. Technically, the website is built on WordPress 5.9.12, utilizing common plugins such as Yoast SEO, Easy Digital Downloads for e-commerce, Google Analytics for tracking, and CookieYes for GDPR-compliant cookie consent. Hosting is provided by DreamHost, and the site uses HTTPS with a valid SSL certificate. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. From a security perspective, the site employs HTTPS, Google reCAPTCHA for form protection, and cookie consent mechanisms. However, no advanced security headers were detected, and DNSSEC is not enabled. There is no published security policy or incident response information, and no vulnerability disclosure or security.txt file is present. The domain registration is transparent and consistent with the business history, enhancing trust. Overall, ThemezHut presents a professional and trustworthy online presence with a solid technical foundation and compliance with privacy regulations. Strategic improvements in security headers, vulnerability disclosure, and enhanced accessibility could further strengthen their security posture and user trust.

The website 20ans20francs.ch represents a government-supported initiative by the Canton of Geneva to provide a discount card for youth under 21 years old, facilitating access to cultural and sports activities. The service is well positioned as an official program with clear partnerships and a focused target audience. The website content is professionally presented in French, with good navigation and relevant information for its users. Technically, the site is built on WordPress with modern plugins for SEO and GDPR compliance, and it employs Facebook Pixel for marketing and analytics. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers and explicit security policies could enhance trust further. Overall, the site is trustworthy, compliant, and serves its intended audience effectively.

Monoloco is a Geneva-based digital agency specializing in custom web development, CMS solutions, intranet systems, and mobile applications for iOS and Android platforms. With over 15 years of experience, the company serves a diverse clientele, delivering tailored digital solutions that address complex business needs. Their portfolio and client testimonials demonstrate a strong market position as a trusted local technology service provider. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, jQuery, and Swiper.js for interactive content. Google Fonts and Google Tag Manager are integrated for typography and analytics respectively. The site is mobile-optimized and presents a professional design with clear navigation, although accessibility features are basic. The CMS appears proprietary, indicating custom development capabilities. From a security perspective, the site uses HTTPS with excellent SSL configuration but lacks important security headers such as Content-Security-Policy and X-Frame-Options. No exposed sensitive data or vulnerable libraries were detected. However, the absence of privacy and cookie policies indicates compliance gaps with GDPR and related regulations. No incident response or security policy information is provided. Overall, the website is professional and trustworthy with a solid business credibility score. The main risks relate to privacy compliance and security header implementation. Strategic improvements in these areas would enhance the security posture and regulatory adherence of the company’s online presence.

Genève Débat is a Geneva-based non-profit educational project founded in 2018 that promotes the art of debate among secondary school students. The organization operates by deploying young ambassadors aged 20-25 to conduct debate training modules in schools, enhancing students' argumentation and public speaking skills. The website reflects a well-established local initiative with a clear focus on youth education and engagement. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. It integrates Google Tag Manager for analytics and axept.io for cookie consent, demonstrating awareness of privacy and tracking considerations. The site is mobile-optimized and features rich content including testimonials, event information, and multimedia. From a security perspective, the site enforces HTTPS and uses some security best practices but lacks explicit security headers like Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial due to the absence of a privacy policy and terms of service pages. Overall, Genève Débat presents a trustworthy and professional online presence with strong educational content and community engagement. Strategic improvements in privacy documentation and security headers would enhance compliance and security posture.

The Ones We Love is a Swiss-based cinema on demand platform that enables users to vote for their favorite films to be screened in local cinemas. The website offers detailed information about films, screening schedules, and cinema locations, targeting a general audience interested in cinema experiences. The platform leverages modern web technologies including Next.js and React, hosted on Vercel, ensuring a responsive and visually appealing user experience. However, the site lacks explicit privacy and cookie policies, and security headers are not detected, which are areas for improvement. Overall, the security posture is moderate with HTTPS enabled and no exposed sensitive data, but enhancements in compliance and security best practices are recommended. The domain registration data aligns well with the website's Swiss focus, indicating legitimacy and trustworthiness.

Horus Energy SA is a Swiss company specializing in solar-powered and ecological hosting services, including web hosting, cloud storage, email, SMS, and multimedia production. The company positions itself as a sustainable and environmentally responsible service provider, leveraging its own photovoltaic power plants to power its infrastructure. Their market niche focuses on customers valuing ecological impact and data sovereignty within Switzerland. The website is built on WordPress with modern plugins and technologies, offering a good user experience with mobile optimization and clear navigation. Privacy compliance is well addressed with cookie consent management and a comprehensive privacy policy. Security posture is solid with HTTPS, anti-spam measures, and privacy-respecting analytics, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the site is professional, trustworthy, and aligned with its business goals.

Spotlio is a technology company specializing in dynamic pricing and digital solutions aimed at enhancing the guest experience for resorts, parks, and attractions. Their platform focuses on providing seamless guest ticketing journeys to improve operational efficiency and customer satisfaction. The website is built using modern web technologies such as Gatsby, React, and Tailwind CSS, indicating a contemporary and scalable technical infrastructure. However, the absence of WHOIS registration data and lack of visible contact or compliance information limits the ability to fully verify business legitimacy and compliance posture. Security posture is weak due to missing security headers and lack of published policies, which could expose the business to risks. Overall, while the business offering appears professional and targeted, improvements in transparency, security, and compliance documentation are recommended to enhance trust and reduce risk.

OTS.at is Austria's largest portal for multimedia press information, providing a platform for distribution of press releases and multimedia content including text, images, audio, and video. The website targets media professionals, journalists, and public relations entities, positioning itself as a key player in the Austrian media sector. The business model revolves around media content distribution and press release dissemination, serving a large audience within Austria. Technically, the site employs modern frontend technologies such as Angular and Material Design Components, with a cookie consent mechanism implemented via Usercentrics CMP and analytics through INFOnline Measurement Manager. The website demonstrates good digital maturity with structured data for SEO and responsive design for mobile users. Security posture is solid with HTTPS enforced and cookie consent in place, though explicit security headers and published security policies are absent. No critical vulnerabilities or blocking mechanisms were detected, and the WHOIS data confirms the legitimacy and consistency of the domain registration. Overall, the site is professional, trustworthy, and well-positioned in its market niche.

Wonderlink is a German-based SaaS platform offering a GDPR-compliant 'Link in Bio' solution tailored for influencers, artists, entrepreneurs, and commercial social media users. It positions itself as a privacy-first alternative to competitors like Linktree by eliminating tracking and cookies and hosting exclusively on German servers. The platform supports legal compliance by integrating mandatory legal texts such as Impressum, Datenschutz, and AGB, appealing to commercial users concerned about regulatory adherence. With over 75,000 customers and endorsements from legal partners and media, Wonderlink holds a strong market position in the privacy-conscious segment of link management services. Technically, the website employs modern web standards including HTML5, CSS3, JavaScript, and Lottie animations, delivering a fast, mobile-optimized, and accessible user experience. Hosting is managed via German-based DNS and servers, reinforcing its privacy claims. The site lacks some advanced security headers and a public vulnerability disclosure policy but maintains excellent SSL configuration and no tracking mechanisms, enhancing its security posture. From a security perspective, Wonderlink demonstrates strong GDPR compliance, no user tracking, and transparent privacy policies, making it suitable for privacy-sensitive users. However, the absence of incident response contacts and vulnerability disclosure mechanisms suggests room for improvement in security transparency and readiness. Overall, the site is professional, trustworthy, and well-aligned with its privacy-centric business model. The overall risk assessment is low, with no critical vulnerabilities or suspicious indicators detected. Strategic recommendations include publishing a security.txt file, enhancing security headers, and providing incident response contact details to further strengthen trust and security posture.

The zt:archiv website serves as the official digital archive platform for civil engineers (Ziviltechniker:innen) in Austria, enabling secure storage, qualified electronic signing, and public access to official documents. The platform is government-authorized and targets professionals in the civil engineering sector, as well as authorities and project partners. The business model revolves around providing a legally compliant, secure, and efficient digital archiving service, supporting the professional responsibilities and legal obligations of its users. Technically, the website employs a modern React-based frontend with PDF.js integration for document handling. The site is mobile-optimized and demonstrates good performance and usability, although some accessibility features could be enhanced. The content is well-structured and professionally presented, with consistent branding and clear navigation. From a security perspective, the site enforces HTTPS and uses qualified digital signatures to ensure document authenticity. However, explicit security headers are not evident, and no incident response or security policy information is publicly available. Privacy compliance is strong, with a clear privacy policy and cookie consent mechanism. No analytics or advertising scripts were detected, indicating a privacy-conscious approach. Overall, the website is trustworthy and professionally managed, with a strong alignment between WHOIS data and business claims. Recommendations include enhancing security headers, publishing incident response contacts, and improving accessibility to further strengthen the security posture and user trust.

The website for Bundeskammer der Ziviltechniker:innen serves as an official directory and information portal for licensed civil engineers and architects in Austria. It provides detailed contact information for regional chambers and the federal chamber, facilitating professional engagement and member services. The site targets professionals in engineering and architecture, offering search functionality and comprehensive listings. Technically, the site is built on Angular 13 with modern UI elements including Font Awesome icons and Google Maps integration, indicating a moderate level of digital maturity. Security-wise, the site uses HTTPS and avoids exposing sensitive data but lacks advanced security headers and formal vulnerability disclosure mechanisms. Privacy compliance is partially addressed with a privacy policy page but lacks cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with its governmental role, though improvements in security and privacy practices are recommended.

Beste Vergabe is an official portal operated by the Bundeskammer der Ziviltechniker:innen, serving as a comprehensive resource for public procurement, competitions, awards, and consulting services primarily targeting civil engineers and architects in Austria. The platform offers structured information on procurement procedures, event listings, publications, and advisory services, positioning itself as an authoritative source within the Austrian government and professional sectors. Technically, the website employs modern web technologies including Bootstrap and Piwik PRO analytics, ensuring a responsive and user-friendly experience with good SEO and accessibility features. Security-wise, the site enforces HTTPS, uses CSRF tokens, and avoids exposing sensitive data, though it lacks some advanced security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no visible cookie consent mechanism. Overall, the site demonstrates a solid security posture and professional business credibility, with room for improvement in privacy and security transparency.

GreenWebspace is an Austrian-based eco-social web hosting provider established in 2006, specializing in sustainable and CO2-neutral web hosting solutions primarily targeting customers in Austria, Germany, and Switzerland. Their offerings include green hosting packages, domain registration, managed Nextcloud cloud services, and online meeting tools, all emphasizing environmental responsibility and data sovereignty. The company positions itself as a niche leader in green IT with a strong commitment to GDPR compliance and customer support. Technically, the website is built on WordPress with a modern theme and performance optimizations such as LiteSpeed caching. It uses reputable third-party services like Google Tag Manager for analytics and Imunify360 for security. The infrastructure is hosted in Austria/EU, ensuring data protection compliance. The site is mobile-optimized, accessible, and SEO-friendly, with comprehensive structured data enhancing search visibility. Security posture is strong with HTTPS enforced, malware protection in place, and no exposed sensitive data. However, some security headers could be improved, and a formal security policy or incident response page is not found. Privacy compliance is robust, with clear privacy and cookie policies and consent mechanisms. Business credibility is high, supported by transparent WHOIS data, customer testimonials, and certifications. Overall, GreenWebspace demonstrates a mature digital presence with a clear focus on sustainability and privacy, making it a trustworthy provider in its market segment.

The domain idqsa.com is registered with a reputable registrar and has a valid registration period until 2026. However, the website itself is inaccessible, returning a 404 Not Found error with no meaningful content or metadata. There are no visible business details, contact information, or policies published on the site. The technical infrastructure appears minimal with no detectable CMS, frameworks, or analytics tools. Security posture is basic with no advanced headers or DNSSEC enabled. Overall, the site lacks digital maturity and does not provide sufficient information to assess business credibility or security readiness.

Les communes genevoises website serves as an official informational platform representing the 45 communes of the Geneva canton in Switzerland. It provides comprehensive information about the diverse public services offered by the communes, including childcare, education, sports, culture, public safety, and infrastructure maintenance. The site targets residents and citizens of Geneva, aiming to increase awareness and transparency of municipal activities. Technically, the website is built on Drupal 10 with Bootstrap 5, uses Matomo for analytics with privacy-conscious settings, and integrates modern web fonts and icons. The design is professional, mobile-optimized, and accessible, providing a good user experience. Security posture is solid with HTTPS and privacy-respecting analytics, but lacks explicit privacy and cookie policies, and contact information is not clearly presented. Overall, the site is trustworthy and legitimate, aligned with its government sector role, but could improve privacy compliance and user contact options.

CoESS is a well-established European confederation representing the private security industry, advocating for quality, compliance, and public-private collaboration. The organization serves as a voice for 23 national associations across 17 EU member states, representing a significant portion of the private security sector. Their website reflects a professional and consistent brand image, targeting industry stakeholders and EU institutions. Technically, the site uses a custom or unknown CMS with common JavaScript libraries and cookie consent tools, hosted by a reputable provider. Security posture is generally good with HTTPS and cookie consent, though improvements are recommended in DNSSEC, security headers, and fixing minor PHP warnings. Privacy compliance is adequate with a privacy policy and cookie banner. Overall, the site is trustworthy and functional with moderate technical sophistication.

E.BI.N.VI.P. is an Italian bilateral national entity dedicated to the private security sector, established by trade unions and employer associations. The website serves as an institutional portal providing information about the organization's activities, services, and partner network. The site targets companies and workers within the private security industry in Italy, offering services such as certification issuance and social contributions. The business model is non-profit and focused on sector support and labor relations. Technically, the website uses a combination of jQuery, Bootstrap, Fancybox, Owl Carousel, and Cookiebot for cookie consent management, running on OxCMS by LOstudio.it. The site is mobile-optimized with moderate performance and basic SEO and accessibility features. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, but lacks visible security policies or incident response contacts. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

Datalynq is a technology company specializing in next-generation case management and market intelligence solutions for the electronics supply chain industry. Their platform provides extensive analytics and real-time data on over 1 billion electronic components, helping businesses optimize supply chain decisions and manage risks effectively. The company positions itself as a key player in supply chain intelligence with a SaaS business model targeting procurement and supply chain professionals. Technically, the website is built on modern web technologies including Webflow CMS, integrated with multiple marketing and analytics tools such as HubSpot, Google Analytics, Hotjar, and Apollo.io. The site uses Cloudflare DNS but lacks DNSSEC, and no advanced security headers were detected. Performance and mobile optimization are good, with a professional design and clear navigation. From a security perspective, the site uses HTTPS and has domain registration protections in place, but lacks visible privacy and cookie policies, security policies, and incident response contacts. The absence of DNSSEC and security headers presents moderate security risks. User tracking is extensive via multiple analytics and marketing scripts, but privacy compliance is limited due to missing policies. Overall, the website is professional and credible with moderate security posture. Strategic improvements in privacy compliance, security headers, and DNS security would enhance trust and reduce risk.

Sourceability is a well-established global distributor of electronic components, founded in 2014, with a strong market position as a Top 20 Global Distributor and recognized by Inc. 5000 for rapid growth. The company offers a comprehensive suite of services including distribution, quality management, and digital tools such as Sourcengine and Datalynq, targeting electronics manufacturers, engineers, and procurement professionals worldwide. Their business model integrates traditional distribution with advanced digital platforms to streamline supply chain sourcing and risk management. Technically, the website is built on a modern stack leveraging Webflow CMS, HubSpot marketing and analytics tools, Apollo.io tracking, and other contemporary JavaScript libraries. The site is hosted behind Cloudflare DNS and CDN services, ensuring fast performance and global availability. Mobile optimization and accessibility are well addressed, providing a seamless user experience across devices. From a security perspective, the site enforces HTTPS with strong domain locking mechanisms and integrates secure form handling via HubSpot. However, DNSSEC is not enabled, and no explicit security or incident response policies are published, which could be areas for improvement. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms aligned with GDPR requirements. Overall, the website presents a professional, trustworthy, and secure digital presence with no signs of blocking or malicious content. Strategic recommendations include enabling DNSSEC, publishing a security policy, and adding a vulnerability disclosure program to further enhance trust and security posture.

OPUS Fashion is a well-established European women's fashion brand offering a wide range of casual and feminine clothing through its e-commerce platform. The company emphasizes sustainability, fair working conditions, and provides a seamless shopping experience with multiple payment options and international shipping. Technically, the website is built on modern frameworks such as Spryker and uses Storyblok CMS, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and security headers, though explicit security policies and incident response information are absent. The lack of WHOIS domain registration data is a concern but does not detract significantly from the professional presentation and trustworthiness of the site. Overall, the site is safe, compliant with GDPR, and targets a general audience interested in fashion.

dema dent is a Swiss-based dental services platform focused on providing brokerage for dental practices and offering dental seminars. The website targets dental professionals within Switzerland, offering a marketplace and educational resources. The business operates in the healthcare sector with a regional focus and a small company size. Technically, the website employs modern JavaScript libraries, Cookiebot for GDPR compliance, and Google Tag Manager for analytics, indicating a moderate level of digital maturity. The site is mobile optimized and uses HTTPS with appropriate security headers, reflecting a good security posture. However, explicit security and incident response policies are not publicly available, which could be improved. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with extensive use of tracking and marketing tools typical for its industry.

SQAT is a service product of yomma GmbH focused on providing a barrier-free feedback mechanism for websites by translating German Sign Language videos into written language and vice versa. The service targets both website operators seeking to enhance accessibility and deaf users who prefer sign language communication. The website is professionally designed, uses modern WordPress infrastructure, and complies with GDPR and cookie consent regulations. It features partnerships with reputable German government and non-profit organizations, enhancing its credibility. Technically, the site employs common plugins and SEO tools, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and cookie consent, though explicit security headers and incident response policies are not published. WHOIS data is unavailable due to privacy protection, but the domain and business information align with the website content and market positioning. Overall, SQAT presents a trustworthy and professional digital presence in the niche of accessibility services.

Intramovies is an independent film distribution company with a professional online presence showcasing a curated catalogue of feature films, documentaries, classics, and restorations. The company targets film industry professionals and cinephiles, offering distribution and production services. The website is built on WordPress with modern technologies such as Bootstrap and jQuery, and includes SEO optimization and mobile responsiveness. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies are missing. The absence of WHOIS data for the domain is a concern, reducing trustworthiness despite the professional site and social media presence. Overall, the site is functional, secure, and compliant with basic privacy standards.

AISICO is an established Italian company specializing in road safety and crash test services, boasting over 30 years of experience. The company operates a unique European testing center dedicated to crash tests, supported by a skilled team and advanced laboratories. Their market position is strong within the transportation safety sector, offering a broad range of services including certification, infrastructure testing, and training. The website reflects a professional and comprehensive digital presence, supporting their leadership claims with detailed service descriptions and accreditations. Technically, the site is built on WordPress with modern JavaScript libraries and includes GDPR-compliant privacy and cookie policies managed by Iubenda. Security posture is generally good with HTTPS enabled and consent mechanisms in place, though some security headers are missing and no explicit incident response or security policy pages were found. The absence of WHOIS data for the domain is a notable concern, potentially impacting trust and legitimacy perceptions. Overall, AISICO presents as a credible and professional organization with room for improvement in domain transparency and security hardening.

Indigo Film SRL is an established independent film production company based in Italy, specializing in films, TV series, documentaries, and factual content. The company maintains a professional and well-branded online presence with a website optimized for both desktop and mobile users. Their market position is that of a medium-sized player in the Italian media production industry, targeting a general audience interested in independent film and television content. The website demonstrates good digital maturity with a modern WordPress CMS, SEO optimization via Yoast, and compliance with GDPR through an integrated cookie consent mechanism. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although formal security policies and incident response information are not published. Overall, the site is trustworthy and professionally managed, with strong social media integration and clear business information. Strategic recommendations include enhancing security headers, publishing a security policy, and providing incident response contacts to further improve trust and compliance.

APT Servizi is an Italian service-oriented company with an online presence primarily targeting Italian-speaking customers. The website is built on WordPress and employs common web technologies such as jQuery, Contact Form 7, and Cookiebot for cookie consent management. The presence of Google reCAPTCHA and New Relic indicates attention to bot protection and performance monitoring. However, the absence of WHOIS data limits the ability to fully verify domain legitimacy and ownership details. The website is accessible without any WAF or security challenge blocking content. Cookie consent is well implemented, but no explicit privacy policy or terms of service pages were detected in the provided content. Contact information such as emails or phone numbers is not clearly presented on the site.

Seeweb srl is an established Italian cloud computing and hosting provider founded in 1998, offering a wide range of IT infrastructure services including cloud servers, GPU computing for AI and machine learning, virtual private clouds, and data center services across Italy, Switzerland, and Bulgaria. The company emphasizes sustainability by powering its data centers with 100% renewable energy and guarantees high service availability with SLA commitments of 99.9%. Their business model targets enterprises and organizations requiring scalable, secure, and high-performance cloud solutions, supported by a multi-level technical support system and a partner program to extend market reach. Technically, the website demonstrates a mature digital infrastructure with modern JavaScript libraries, self-hosted analytics (Matomo), Microsoft Clarity for user behavior insights, and integrated marketing tools such as Google Tag Manager and various ad networks. The site is well-optimized for mobile devices, features clear navigation, and maintains good SEO and accessibility standards. Hosting appears to be managed internally, reflecting control over infrastructure and performance. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. While explicit security headers are not fully detailed, the absence of exposed sensitive data and use of privacy-conscious analytics indicate a solid security posture. However, the site lacks a publicly visible security policy or incident response contact, which could be improved to enhance transparency and readiness. Overall, Seeweb presents a trustworthy and professional online presence with strong business credibility, technical robustness, and compliance with privacy regulations. The risk profile is low, with recommendations focusing on enhancing security transparency and formalizing vulnerability disclosure processes.

Virtual Südtirol is a small hospitality-focused business offering augmented reality virtual tours of the Alto Adige region in Italy. The company, branded as Flyeye, provides immersive virtual experiences to tourists and hospitality clients to enhance travel planning and marketing efforts. The website is professionally designed using Incomedia WebSite X5 Pro and integrates modern analytics tools such as Matomo and Google Analytics, with GDPR-compliant privacy and cookie policies in place. Contact information is clearly presented, including a contact form, phone number, email, and physical address in Meran, Italy. However, the WHOIS data for the domain is missing or unavailable, which raises some concerns about domain registration transparency.

ITASnow.it is a dedicated website offering mandatory ski insurance in Italy, operated by ITAS Mutua, a well-established insurance mutual company. The site targets skiers in Italy, providing an easy and immediate online purchase experience for the required ski insurance. The business model focuses on direct online sales of insurance policies, leveraging ITAS Mutua's brand and market presence. The domain registration and DNSSEC status support the legitimacy of the business, with a domain age consistent with the product launch timeline. Technically, the website employs modern web technologies including React, Google Tag Manager, OneTrust for cookie consent, and Worldline Italy's payment SDK for secure transactions. Accessibility is enhanced via the AccessiWay tool. The site demonstrates good mobile optimization, SEO practices, and a strict Content Security Policy, contributing to a robust technical infrastructure and digital maturity. From a security perspective, the website benefits from HTTPS, DNSSEC, and a strict CSP. However, the use of an outdated jQuery version and the absence of explicit privacy policy and terms of service pages are notable gaps. No security.txt or vulnerability disclosure information is present, and no direct contact information for security incidents is provided. Cookie consent mechanisms are implemented comprehensively, supporting GDPR compliance. Overall, the website presents a professional and trustworthy front for its insurance product, with strong technical and security foundations. To enhance compliance and trust, publishing clear privacy and terms documents, updating legacy libraries, and providing direct contact channels for security and customer support are recommended.

Luisl's Ski School is a regional ski instruction service based in Ratschings, South Tyrol, Italy, offering skiing and snowboarding lessons including group courses and private lessons. The website is professionally designed using Consisto CMS and integrates modern technologies such as Google Analytics, Google Tag Manager, and Avacy Consent Management for privacy compliance. The site demonstrates good mobile optimization and user experience with clear navigation and relevant content for its target audience of winter sports enthusiasts. Security posture is solid with HTTPS enforced and consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data for the domain is a notable concern, suggesting the need for further verification of domain registration and ownership to ensure legitimacy. Overall, the website is functional, privacy-aware, and business-focused but would benefit from enhanced transparency regarding domain registration and contact information.

Breaking Tunes is a niche media platform dedicated to the discovery and promotion of music artists on the Island of Ireland. It serves as a community portal for artists and industry professionals, supported by First Music Contact, a national music organization. The website offers artist registration, browsing by genre, and curated artist charts, positioning itself as a key resource in the Irish independent music sector. Technically, the site uses modern web technologies including Turbolinks and Google Tag Manager for analytics, with good mobile optimization and a professional design. However, the absence of visible security headers and privacy policies indicates room for improvement in security and compliance. The WHOIS data is missing, which raises questions about domain registration legitimacy, though the content and organizational association suggest a legitimate business presence. Overall, the site is safe for general audiences and provides valuable services to its target community.

The website ydea.it is currently a parked domain page primarily advertising the domain for sale. The content is minimal, with no business services or company information presented. The domain was registered in 2012 and is consistent with a long-held domain now offered for resale. Technically, the site uses basic JavaScript and external ad network scripts, hosted via Amazon Cloudfront CDN. There is no evidence of a CMS or advanced frameworks. Security posture is weak with no visible security headers or privacy policies, and no HTTPS status provided. The site lacks contact information, privacy, cookie, or terms of service policies, indicating low compliance and business credibility. Overall, the site is low trust and low content quality, suitable only for domain investors or buyers.

The website at https://www.b-ite.com/recruitingmanager/ is currently inaccessible, returning a server error (HTTP 500) with minimal HTML content. Due to this, no meaningful business, technical, or security information can be extracted or analyzed. The lack of accessible content prevents assessment of the company's market position, services, or compliance posture. Technically, the site shows no evidence of modern web technologies, security headers, or privacy mechanisms. The WHOIS data is privacy protected, further limiting trust verification. Overall, the site appears non-operational or blocked, resulting in a low trust and security score.

The domain px.media currently serves a 404 error page with no accessible business content or services. The page references pixx.io in its imprint and privacy policy links, suggesting a possible affiliation or redirection to that domain. The lack of WHOIS data due to TLD restrictions and privacy protection limits the ability to verify registrant details. Technically, the site uses Google Fonts and Material Icons but lacks HTTPS and security headers, indicating a minimal technical setup. No forms, contact information, or analytics scripts are present, reflecting a non-operational or placeholder status. Security posture is weak due to missing HTTPS and security best practices. Overall, the domain appears inactive or misconfigured, with low trustworthiness and business credibility.

servier.bar is a German-based digital ordering and payment platform tailored for the hospitality industry. The company offers self-ordering, kiosk, and webshop solutions that enable guests to order and pay via smartphones, aiming to reduce staff workload, minimize errors, and increase revenue. The website is professionally designed using WordPress with modern SEO and analytics integrations, targeting hospitality businesses in Germany. The technical infrastructure includes WordPress CMS, WPBakery Page Builder, Usercentrics for cookie consent, and analytics tools such as Matomo and Facebook Pixel. Security posture is moderate with HTTPS enabled and cookie consent implemented; however, the absence of security headers and explicit privacy and terms policies indicates room for improvement. Overall, the website is trustworthy and functional but lacks some compliance and security best practices.

The website 'Parken in Ulm' serves as an informational platform providing live updates on parking availability across multiple parking facilities in Ulm, Germany. It targets drivers and cyclists looking for parking options, offering real-time data, route guidance, and facility details. The business behind the site appears to be the Ulmer Parkbetriebs-GmbH, a local parking management entity. The site is well-branded, consistent, and provides clear contact information, enhancing its credibility. Technically, the site is built on the Odoo CMS platform and leverages modern web technologies including MapLibre GL for interactive maps and FontAwesome for icons. The site is mobile-optimized with good navigation and SEO practices. Hosting is managed via the d9t.de infrastructure, consistent with the domain's nameservers. Performance is moderate with no major technical issues detected. From a security perspective, the site uses HTTPS and includes CSRF tokens, but lacks visible HTTP security headers and a cookie consent mechanism, which are areas for improvement. No forms or data collection points are present on the main page, reducing immediate data exposure risks. No incident response or security policies are published, which could be enhanced to improve trust. Overall, the website is safe, professional, and trustworthy with a solid business focus on transportation services. Strategic improvements in privacy compliance and security headers would elevate its security posture and regulatory adherence.

The Evangelische Gesamtkirchengemeinde Ulm operates the Ulmer Münster, serving as a religious and community organization in Ulm, Germany. The website provides comprehensive information about visiting hours, tours, church services, music ensembles, and community activities. It targets local residents, visitors, and church members, positioning itself as a key cultural and religious institution in the region. The business model is non-profit, focusing on community engagement and cultural preservation. Technically, the website is built on the ChurchDesk CMS platform, which is tailored for church organizations. It uses modern web technologies including JavaScript and jQuery, and integrates Cookiebot for GDPR-compliant cookie consent management. The site is hosted on servers associated with kasserver.com, with good mobile optimization and accessibility features. Performance is moderate, with a well-structured navigation system and SEO-friendly metadata. From a security perspective, the site enforces HTTPS and employs a robust cookie consent mechanism. However, explicit security headers are not detected, and no dedicated security policy or incident response information is published. There are no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, with clear privacy and cookie policies in German, reflecting GDPR adherence. Overall, the website presents a low-risk profile with a professional and trustworthy online presence. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen security posture and trust.

DONAU 3 FM is a regional radio station serving the Schwaben region in Germany, providing music and important local news from cities such as Ulm, Neu-Ulm, Biberach, Günzburg, and Heidenheim. The website is professionally designed with consistent branding and targets local residents and listeners interested in regional content. The business model focuses on radio broadcasting and news dissemination, positioning itself as a key media outlet in its region. Technically, the website uses a modern technology stack including Google Tag Manager, Matomo Analytics, Google Adsense for advertising, and hCaptcha for bot protection. It is hosted on Hetzner servers, a reputable German hosting provider. The site is mobile optimized and SEO friendly, with structured data implemented for better search engine understanding. From a security perspective, the site enforces HTTPS and uses bot protection mechanisms. However, it lacks explicit security headers and does not provide visible security or incident response policies. Privacy compliance is basic, with no clear privacy or cookie policy pages found, although a cookie consent mechanism is present. No contact information for security or data protection officers is available. Overall, the website is safe, professional, and trustworthy for general audiences, with no adult or explicit content. The main risks relate to privacy compliance and security policy transparency, which could be improved to enhance user trust and regulatory adherence.

RADIO 7 is a regional private radio broadcaster based in Ulm, Germany, offering a variety of services including live radio streaming, podcasts, regional news, entertainment, and event ticketing. The website reflects a strong local media presence with multiple regional studios and a broad content offering targeting general audiences in southern Germany. The business model centers on media broadcasting and advertising, supported by partnerships with ticketing and advertising platforms. The site is professionally designed, mobile-optimized, and provides clear contact channels and social media integration. Technically, the website leverages modern JavaScript frameworks (Nuxt.js/Vue.js), integrates a consent management platform (Usercentrics), and uses Google Analytics and Tag Manager for analytics. Hosting and media assets are served via Amazon AWS infrastructure, ensuring good performance and scalability. The site demonstrates good SEO and accessibility practices. From a security perspective, the site enforces HTTPS, employs standard security headers, and anonymizes IP addresses in analytics. Consent mechanisms for cookies and privacy are implemented, aligning with GDPR requirements. However, no explicit security policy or incident response information is publicly available, and no vulnerability disclosure policy is found. The WHOIS data is minimal, lacking detailed registrant information, which slightly reduces trust but is not uncommon for media companies using managed DNS services. Overall, RADIO 7's website is a well-maintained, secure, and privacy-conscious platform that effectively serves its regional audience. Strategic improvements could include publishing dedicated security and incident response policies and enhancing transparency around vulnerability disclosures.

Ulmer City Marketing e.V. is a local economic association dedicated to supporting and promoting the retail, service, hospitality, and gastronomy sectors in Ulm, Germany. The organization focuses on marketing the city center, organizing events, and managing voucher programs to enhance the local business environment. The website reflects a professional and consistent brand image, targeting local businesses and consumers with relevant content and services. Technically, the site is built on Webflow with modern animation libraries and includes cookie consent mechanisms, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and incident response information. Privacy compliance is partial due to missing explicit privacy and terms of service pages. Overall, the site is trustworthy and functional but could improve in compliance and security transparency.

Marathon Photos Live is a globally operating sports photography company specializing in mass participation event photography, with a presence in 70 countries and a large volume of images and athletes served. The company positions itself as a world leader in this niche, offering event photography services and image sales primarily targeting athletes and event organizers. The website is professionally designed using modern web technologies such as Vue.js, with good mobile optimization and SEO practices. Privacy and cookie policies are implemented with user consent mechanisms, supporting GDPR compliance. However, direct contact information such as emails or phone numbers is not publicly listed, relying on contact forms instead. The WHOIS data is privacy protected, limiting verification of domain age and registrant details, but the website's content and social media presence support its legitimacy. Security posture is adequate with HTTPS enforced, but lacks visible security headers and explicit security policies. Overall, the site demonstrates a good balance of business credibility, technical implementation, and privacy compliance, with room for improvement in security transparency and accessibility.

X-treme Battle is a small-scale event organizer specializing in obstacle and cross runs in Heroldstatt, Germany. The website provides detailed event information, registration links via a trusted third-party platform (Datasport), and multimedia content to engage participants. The site is built on WordPress using Themify Ultra theme and includes modern web technologies such as lazy loading and video embedding. Security posture is adequate with HTTPS and cookie consent, but lacks comprehensive security headers and formal privacy or terms policies. Contact information is limited to an email address, with no phone or physical address provided. Overall, the site is functional and professional for its niche audience but could improve compliance and security transparency.

The website ulmer-jugendlaeufe.de represents the Einstein Jugendläufe, a well-established youth running event held annually in Ulm, Germany. The site is professionally designed using WordPress and Elementor, providing comprehensive information about the event, registration, and results. The business operates in the education and sports event sector, targeting children, youth, families, and schools in the region. The site integrates with partner domains and services such as einsteinmarathon.de and datasport.de for event management and registration. Technically, the website employs modern web technologies including WordPress 6.8.3, Elementor, and Rank Math SEO, hosted behind Cloudflare DNS and CDN services. The site is mobile-optimized and SEO-friendly, though some accessibility features are basic. Security posture is good with HTTPS enforced, but lacks explicit security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies and absence of consent mechanisms. Overall, the security posture is moderate with no critical vulnerabilities detected, but improvements are recommended in privacy compliance and security header implementation. The domain WHOIS data aligns with the website's business purpose, showing legitimacy and consistency. No WAF or blocking mechanisms interfere with content access. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, establishing a vulnerability disclosure policy, and enhancing user consent mechanisms to improve compliance and trust.