Medium-risk security reports

Mercartes is a professional event and online platform dedicated to the performing arts and music sectors in Spain. It facilitates networking, business meetings, and sector promotion through an annual event and digital tools such as a professional catalog and private user areas. The website is built on WordPress with a modern theme and plugins, including SEO and cookie consent management. The technical infrastructure is standard for event websites, with multimedia content and mobile optimization. Security posture is adequate with HTTPS and cookie consent, but lacks advanced security headers and explicit privacy policies. No WHOIS data is available due to query restrictions, limiting domain legitimacy assessment. Overall, the site is professional and trustworthy for its target audience.

FINE ITALY is an international marketplace event dedicated to wine tourism, organized by Feria de Valladolid, with its first Italian edition scheduled for October 2025 in Riva del Garda, Italy. The platform connects wineries and tourism operators to promote wine tourism destinations and business opportunities in Southern Europe. The website is built on WordPress and uses modern web technologies including LayerSlider and Cloudflare DNS. It features professional design and good content quality but lacks explicit privacy and cookie policies, which impacts privacy compliance. Security posture is moderate with HTTPS enabled but missing security headers and DNSSEC. Tracking technologies such as Google Analytics and Adform are used, indicating moderate user tracking. Overall, the site is legitimate and professionally presented but could improve in privacy and security transparency.

Feria Outlet Valladolid is a Spanish event organizer specializing in retail outlet fairs offering discounts up to 80% on major brands. The website serves as an information portal for upcoming events, galleries, and participation details, targeting local consumers interested in discounted shopping experiences. The business is relatively new, founded in 2022, and operates primarily in the retail and hospitality sectors within Spain. Technically, the site is built on WordPress using Elementor, with integration of common web technologies such as jQuery and Bootstrap, and hosted behind Cloudflare DNS services. The site demonstrates good digital maturity with structured data, SEO optimization, and mobile responsiveness. Security posture is adequate with HTTPS enforced and GDPR cookie compliance implemented, though additional security headers and DNSSEC could improve resilience. No critical vulnerabilities or suspicious patterns were detected. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though lacking explicit contact emails and terms of service pages.

Cyber Folks is a Polish technology company specializing in hosting services and e-commerce platform solutions, including Shoper, WooCommerce, and PrestaShop. Founded in 2019, the company positions itself as a provider of comprehensive online store solutions targeting businesses and individuals seeking to establish or enhance their e-commerce presence. The website content is professionally presented in Polish, with clear branding and consistent messaging aligned with the company's services. The digital infrastructure is based on WordPress CMS, enhanced with plugins such as Ajax Search Pro and Visual Website Optimizer for analytics and A/B testing, indicating a moderate level of digital maturity.

BAB APP MARKET GmbH operates a specialized B2B e-commerce platform focused on smart home applications, targeting professional customers such as electricians and system integrators. The website offers a curated marketplace for smart home apps integrating with building automation systems, emphasizing business customers with a mandatory trade license for registration. The company positions itself as a niche leader in the German smart home technology sector, providing key services including app sales, SDK access, and integration support. Technically, the website is built on the Magento e-commerce platform with a combination of JavaScript libraries including jQuery, Prototype.js, and Bootstrap. The site is mobile-optimized and employs Google Analytics with IP anonymization for user tracking. While the site uses HTTPS and cookie consent mechanisms, it lacks advanced security headers and explicit security or incident response policies, indicating room for improvement in security maturity. From a security perspective, the site demonstrates basic best practices such as HTTPS enforcement and cookie consent but does not provide detailed security policies or vulnerability disclosure mechanisms. The use of older JavaScript libraries may pose potential risks if not regularly updated. No WAF or blocking mechanisms are detected, and no suspicious content or vulnerabilities are apparent from the analysis. Overall, the website is professional, trustworthy, and well-targeted to its business audience. However, enhancing security headers, publishing security policies, and improving transparency around incident response would strengthen its security posture and compliance stance.

ID LEI, powered by InfoCamere, is an official Local Operating Unit (LOU) accredited by the Global Legal Entity Identifier Foundation (GLEIF), providing fast and reliable Legal Entity Identifier (LEI) services. The website offers clear, professional information about registering, renewing, and transferring LEI codes, targeting businesses needing compliance with international financial regulations. The service is positioned strongly in Italy with expanding international presence, supported by transparent pricing and customer support features.

FH Münster is a prominent university of applied sciences in Germany, offering a wide range of bachelor, master, dual study, and continuing education programs. It is recognized for its strong emphasis on applied research, innovation, and quality culture. The institution targets students, researchers, and professional learners, positioning itself as a leading educational provider in the region. The website reflects a professional and comprehensive digital presence, supporting its educational mission effectively. Technically, the site uses modern JavaScript modules, CSS, and enforces security policies such as Content-Security-Policy and HTTPS, hosted on DFN infrastructure. The site is mobile-optimized and accessible, with clear navigation and rich content. Security posture is strong with no visible vulnerabilities, though it lacks some compliance features like a cookie consent mechanism and published incident response policies. Overall, FH Münster demonstrates a mature digital and security posture appropriate for a large educational institution.

The AStA der FH Münster website serves as the official online presence of the student representation body at FH Münster, Germany. It provides students with information about their interests representation, services such as legal and social counseling, political education, and management of student tickets. The organization is positioned as a key non-profit entity supporting student welfare and participation in university governance. The website is well-structured, content-rich, and targets primarily the student community of FH Münster. Technically, the website is built on TYPO3 CMS, leveraging Bootstrap for responsive design and Font Awesome for iconography. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. No advanced analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS and does not expose sensitive data. However, it lacks explicit security headers and formal security policies such as incident response or vulnerability disclosure. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism detected. Overall, the website is trustworthy, professional, and safe for general audiences. Strategic improvements in security headers, cookie consent, and incident response documentation would enhance its security posture and compliance maturity.

immobilienbesucher.de is a German real estate service provider specializing in nationwide property inspections, measurement services compliant with WoFlV and DIN277, and property valuation reports including Wertindikationen and Gutachtenerstellungen. The company targets business customers, investors, and real estate professionals, offering detailed service descriptions, pricing, and online order forms. The website is built on modern technologies including React and Next.js, hosted on DigitalOcean, and uses Material-UI for UI components. It features a cookie consent mechanism via Klaro and integrates Google reCAPTCHA for bot protection. Security posture is good with HTTPS enforced, but could be improved by adding security headers and publishing a security policy. The domain WHOIS data is consistent with the business focus and shows no privacy protection, which is appropriate. Overall, the website is professional, trustworthy, and well-optimized for performance and SEO.

DPG Media Group operates a privacy consent management page as part of its digital media services, primarily targeting users in Belgium and the Netherlands. The page analyzed is a minimal privacy gate interface designed to handle user consent for privacy compliance, featuring a loading animation and redirect logic. The company is a large media group with a strong market position in the media industry. The website uses Google Tag Manager for analytics and tracking purposes, indicating a moderate level of digital maturity. Technically, the site employs standard JavaScript and Google Tag Manager scripts but lacks visible advanced frameworks or CMS indicators. The page is mobile optimized with responsive background images and basic accessibility features. However, no explicit security headers or SSL configuration details were provided, limiting the security posture assessment. The absence of visible privacy and cookie policies on this page reduces privacy compliance confidence. From a security perspective, the site does not show signs of WAF or blocking mechanisms and appears accessible. The WHOIS query for the subdomain failed, which is expected behavior since WHOIS typically does not provide data for subdomains. The main domain likely holds the registration data. No suspicious or malicious indicators were found in the content or scripts. Overall, the security posture is moderate but could be improved by adding explicit privacy policies, security headers, and contact information. The overall risk is moderate with recommendations to enhance privacy transparency, implement security best practices, and provide clear contact channels for privacy and security inquiries to improve trust and compliance.

weekli.de is a German digital platform operated by yack.rocks GmbH that aggregates weekly retail brochures, offers, and store information from a wide range of retailers. The website targets general consumers in Germany seeking to save money by browsing current offers and coupons online. It holds a strong market position with partnerships with major retailers such as Kaufland, Lidl, and MediaMarkt, and cooperates with regional newspapers to provide up-to-date content. The platform supports mobile users with dedicated iOS and Android apps, enhancing accessibility and user engagement. Technically, the website employs a modern tech stack including jQuery, Google Tag Manager, Google Adsense, and CookieFirst for consent management. The site is mobile-optimized with good SEO practices and a clear navigation structure. Performance is moderate, with room for improvement in accessibility features. Security posture is solid with HTTPS enforced and privacy compliance mechanisms in place, though some security headers could be enhanced. No critical vulnerabilities or security issues were detected. The site respects GDPR requirements with a comprehensive privacy policy and cookie consent mechanism. Contact information is partially available, including an email address and a contact form linked via the parent company site. The domain registration is consistent with the business profile, indicating legitimacy. Overall, weekli.de presents a professional, trustworthy, and user-friendly platform for retail brochure aggregation in Germany, with a good balance of content quality, technical implementation, and privacy compliance.

KultIQ.ai is a Hungarian language AI-driven platform specializing in intelligent search and analysis of cultural databases, including documents, spreadsheets, and archives. The business targets cultural institutions and researchers requiring advanced AI tools for data integration and contextual text analysis. The company appears to be a small technology startup founded in 2025, leveraging modern web technologies such as JavaScript ES modules and WebP images for a responsive and visually appealing user experience. The website is well-structured and optimized for SEO, though it lacks explicit privacy and cookie policies, as well as contact information, which limits user trust and compliance visibility. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers, indicating room for improvement in domain and web security configurations. Overall, the site is safe with no adult or questionable content detected.

The domain agonyshark.com currently serves a 404 Not Found error page with embedded information describing services provided by Admiral, a company specializing in copyright access control and privacy consent management for digital publishers. The site lacks any actual business content, contact information, or interactive features, indicating it is either inactive or used solely as a service endpoint. The technical infrastructure is minimal, hosted on Google Cloud Platform with AWS DNS servers, and uses HTTPS with frequent certificate rotation. Security practices are described as industry standard, with no executable files hosted and continuous scanning in place. However, the absence of DNSSEC and security headers reduces the overall security posture. The domain registration is recent but consistent with a service domain, registered via NameCheap, Inc. Overall, the site is safe but lacks substantive content and business credibility, resulting in a low AI score and limited insights.

Minding Creative Minds is a small non-profit organization founded in 2020, dedicated to providing free 24/7 mental wellbeing support services to individuals in the Irish creative sector. Their offerings include a helpline, counselling, creative arts therapies, specialist trauma support, career services, and legal assistance. The organization targets a broad range of creative professionals including musicians, actors, writers, and arts administrators within Ireland and Irish creatives abroad. The website positions itself as a trusted resource with clear contact information, company registration details, and government cultural support, reinforcing its legitimacy and community focus. Technically, the website is built on WordPress using the Enfold theme, integrating modern web technologies such as Google Analytics, Facebook Pixel, and Google reCAPTCHA v3 for security and analytics. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. Hosting details are partially known, with domain registration through Register 365. Security posture is solid with HTTPS enforced and no exposed sensitive data, but could be enhanced by enabling DNSSEC and additional security headers. Security-wise, the site shows adherence to best practices with secure forms and anti-bot measures, but lacks explicit security policies or incident response contacts. Privacy compliance is basic but present, with privacy and cookie policies accessible and a consent mechanism implemented. No critical vulnerabilities or suspicious activities were detected. Overall, the site is professional, trustworthy, and well-aligned with its mission. The overall risk is low, with recommendations focusing on improving DNS security, publishing security policies, and enhancing security headers to further strengthen the security posture and trustworthiness of the platform.

Cultural & Creative Industries Skillnet is a professional organization dedicated to providing high-quality, subsidised skills development and training programs tailored for the cultural and creative sectors in Ireland. The website reflects a well-established entity with a clear focus on delivering responsive and relevant training courses, events, and resources to industry professionals. The presence of co-funding logos from Skillnet Ireland and the Government of Ireland further supports its credibility and market position. Technically, the website is built on a modern WordPress platform utilizing a variety of plugins such as LifterLMS for course management, Complianz for GDPR compliance, and Google Analytics for visitor tracking. The site is well-optimized for SEO and mobile responsiveness, with a clean design and clear navigation enhancing user experience. Security measures include HTTPS enforcement and Google reCAPTCHA on forms, although additional security headers could improve the security posture. From a security perspective, the site demonstrates good practices with no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, with comprehensive privacy and cookie policies and a consent mechanism in place. However, there is no explicit incident response or vulnerability disclosure information, which could be areas for improvement. Overall, the website presents a low-risk profile with a strong business credibility and technical foundation. Strategic recommendations include enhancing security headers, adding a security.txt file, and improving accessibility features to further strengthen compliance and trust.

First Music Contact is a small, Ireland-based non-profit organization dedicated to supporting musicians and the independent music sector through various projects, consultancy services, and development programs. The website is professionally designed using the Squarespace platform, featuring clear navigation and a focus on artist support and regional development. Technically, the site uses modern web technologies and is hosted on Squarespace's CDN, providing good performance and mobile optimization. Security posture is solid with HTTPS enforced, but lacks advanced security headers and privacy compliance documentation. The absence of WHOIS data raises concerns about domain legitimacy, though the website content and social media presence suggest a genuine organization. Overall, the site is functional and trustworthy but would benefit from enhanced privacy policies and security practices.

Culture Ireland is a government agency focused on promoting Irish arts worldwide through funding and support programs. The website serves as an official platform providing information on grants, news, and cultural events, targeting artists, cultural organizations, and international arts presenters. The site is well-branded, consistent with government standards, and includes official contact information and social media links. Technically, the site is built on WordPress with modern tools like Google Tag Manager and Cookiebot for analytics and privacy compliance. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS and cookie consent, though some security headers are not explicitly detected. WHOIS data is unavailable, but the domain's .ie extension and government affiliation strongly indicate legitimacy. Overall, the site is professional, trustworthy, and serves its cultural promotion mission effectively.

The Irish Music Rights Organisation (IMRO) operates as a collective rights management entity in Ireland, administering performing rights for songwriters, composers, and music publishers. The organization licenses music use to businesses and distributes royalties to rights holders, positioning itself as a key player in the Irish music industry. The website clearly targets two main audiences: music creators seeking membership and royalty management, and music users requiring legal music licenses. The business model is based on licensing and rights management, supported by a professional and well-structured digital presence. Technically, the website is built on WordPress with modern frameworks like UIkit and optimized with caching and SEO plugins, ensuring fast performance and excellent mobile responsiveness. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities, though DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy compliance is good with clear privacy and cookie policies and consent mechanisms. Overall, the website reflects a mature, trustworthy organization with a solid digital infrastructure and clear business focus.

The website www.meta.com/quest is a part of Meta Platforms, Inc., focusing on their Meta Quest virtual reality products. However, the content is fully gated behind a login wall requiring a Meta account, preventing access to substantive content without authentication. The site uses advanced React-based frameworks and Facebook's internal technologies, indicating a modern technical infrastructure. Security posture and privacy compliance cannot be fully assessed due to lack of accessible content and missing WHOIS data. The domain is legitimate but WHOIS transparency is limited, likely due to corporate privacy policies. Overall, the site is a secure, enterprise-grade platform but inaccessible for public analysis.

Nasze Miasto is a Polish local news media portal providing city news, sports, business, health, and event information. It operates under a large media group, likely Polskapress, supported by extensive advertising and analytics infrastructure. The website is technically mature, employing modern JavaScript libraries, header bidding for ads, and consent management tools to comply with privacy regulations. Security posture is good with HTTPS and Content-Security-Policy headers, though explicit security policies and incident response information are not published. The domain is well aged and registered with a reputable registrar, indicating legitimacy. Privacy compliance is basic, with a consent mechanism but lacking explicit privacy and terms pages. Overall, the site is professional, trustworthy, and safe for general audiences.

StopDNA is a non-profit advocacy campaign focused on opposing the European Digital Networks Act, emphasizing risks such as monopolization and loss of internet freedom. The campaign is associated with AIIP, an Italian Internet Provider association, targeting European citizens, businesses, and independent ISPs. The website is built on WordPress using Elementor and Yoast SEO, providing a good user experience with clear navigation and multilingual support. Security posture is adequate with HTTPS enforced, but lacks some security headers and cookie consent mechanisms. Contact information and privacy policy are present, though GDPR compliance indicators are minimal. Overall, the site is professional and trustworthy within its niche.

The IXP Database (IXPDB) is a specialized public platform providing comprehensive and up-to-date data on Internet Exchange Points worldwide. It aggregates data automatically from IXP management systems, offering valuable insights into IXP architecture, membership, hardware, and traffic. The service targets network operators, researchers, and commercial analysts, positioning itself as a key resource within the telecommunications and technology sectors. The website is professionally designed with clear navigation and offers a free API for data access, enhancing its utility and reach. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and Font Awesome, and is likely built on the Django framework. The site is mobile-optimized and provides a good user experience, although some accessibility and SEO optimizations could be improved. Security measures include CSRF protection, but the absence of HTTP security headers and cookie consent mechanisms indicates room for enhancement. No analytics or tracking scripts were detected, suggesting a privacy-conscious approach. From a security perspective, the site shows a moderate posture with secure form handling but lacks comprehensive security headers and published incident response policies. The WHOIS data for the domain is missing or not publicly available, which reduces trust from a domain registration standpoint. However, the website content and affiliations with Euro-IX and IX-F lend credibility. No signs of malicious or adult content were found, and the site is fully accessible without WAF or blocking mechanisms. Overall, the IXPDB website is a credible and valuable resource within its niche but would benefit from improved transparency in domain registration, enhanced security headers, and formalized privacy and cookie policies to strengthen trust and compliance.

Haaretz.com is a leading Israeli news media website providing breaking news, analysis, and opinion focused on Israel, the Middle East, and the Jewish world. The site operates a subscription and advertising-based business model, targeting a general audience interested in regional and global news. The website demonstrates a mature digital infrastructure using modern web technologies such as React, Next.js, and GraphQL, supported by multiple advertising and tracking services including DoubleClick, Taboola, and Facebook Pixel. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms implemented. Security posture is strong with HTTPS enforced and multiple security headers present, although explicit security policy and incident response information are not publicly available. WHOIS data for the www subdomain is missing, but the website's established brand and content quality support its legitimacy. Overall, Haaretz.com presents a professional, secure, and user-friendly platform with high trustworthiness in the media sector.

Nostalgie is a well-established Belgian radio station brand specializing in classic hits and nostalgic music content for the Dutch-speaking audience. The website serves as a digital platform for streaming, podcasts, competitions, and advertising, positioning itself as a key player in the regional media landscape under the ownership of DPG Media. The site demonstrates a mature digital infrastructure leveraging modern web technologies such as React and Gatsby, ensuring fast performance and excellent mobile responsiveness. Security posture is strong with HTTPS enforcement and appropriate security headers, although no explicit incident response or vulnerability disclosure policies are publicly visible. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms in place. Overall, the website reflects a professional and trustworthy media brand with a solid market presence in Belgium.

The website popkulturalis.hu serves as the largest Hungarian pop cultural database, providing extensive archival information on performers, bands, films, albums, and other cultural entities. It also highlights the Bahia Kiadó publishing house, a significant player in Hungary's alternative and underground cultural scene since 1991. The platform targets Hungarian pop culture enthusiasts and researchers, offering detailed data and video content. Technically, the site employs modern JavaScript frameworks, tracking tools like Google Tag Manager, Hotjar, and Facebook Pixel, and enforces HTTPS with cookie consent mechanisms, reflecting a mature digital infrastructure. Security posture is solid with encrypted connections and privacy policies, though improvements in security headers and incident response transparency are recommended. Overall, the site is professional, trustworthy, and safe for general audiences, with a moderate to good technical and security maturity.

The Social Innovation Campus website is a professionally designed and content-rich platform operated by Fondazione Triulza, focusing on social innovation education and engagement primarily targeting students, schools, and young people in Italy. The site promotes events, hackathons, workshops, and cultural programs centered around social innovation, technology, and sustainable development. The organization holds a strong market position as a leading Italian non-profit in this niche, with a clear mission and active partnership ecosystem. Technically, the website leverages a modern WordPress infrastructure with Elementor and Gravity Forms, ensuring interactive and accessible user experiences. The site is mobile-optimized, SEO-friendly, and integrates cookie consent mechanisms and Google Analytics for user insights. While HTTPS is enforced, the site lacks some advanced security headers, which could be improved to enhance security posture. Security-wise, the site demonstrates good practices with secure form handling and no visible vulnerabilities or exposed sensitive data. However, the absence of explicit security policies and incident response information suggests room for maturity in security governance. The WHOIS data is unavailable, likely due to privacy protection, but the website's legitimacy is supported by its professional presentation and association with a known foundation. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular updates to sustain security and compliance standards.

innovaphone AG is a well-established European technology company specializing in software and hardware solutions for enterprise communications and digital collaboration. Their offerings include IP telephony systems, virtual meetings, unified communications, and cloud services, targeting businesses of all sizes from SMBs to large enterprises. The company emphasizes security, GDPR compliance, and quality 'Made in Germany' products, positioning itself as a trusted provider in the telecommunications sector. The website demonstrates a mature technical infrastructure utilizing modern web technologies such as Bootstrap, jQuery, and Matomo analytics, combined with proprietary innovaphone scripts and WebSocket-based widgets. The site is well-optimized for mobile devices, fast loading, and includes comprehensive SEO and accessibility features, reflecting a high level of digital maturity. From a security perspective, the site employs HTTPS, strict Content Security Policies, and cookie consent mechanisms aligned with GDPR requirements. While DNSSEC is not enabled and no explicit incident response contacts or security.txt file are found, the overall security posture is strong with no evident vulnerabilities or exposed sensitive data. Overall, innovaphone AG presents a professional, trustworthy online presence with clear business information, active partner engagement, and robust security and privacy practices. The site supports their market position as a reliable European provider of enterprise communication solutions.

The website opensourcelms.de serves as a German-language advocacy platform promoting free and open-source learning management systems (LMS) for educational institutions. It represents a coalition of major LMS communities including ILIAS, Stud.IP, and Moodle, supported by numerous universities and educational organizations across Germany. The site emphasizes the importance of sustainable funding, policy support, and the preservation of digital sovereignty in education through open-source software. Technically, the site is built with standard web technologies including HTML5, CSS3, and JavaScript with jQuery, and is hosted with DNS services from DomainControl (GoDaddy). The website is well-structured, mobile-optimized, and provides extensive content relevant to its audience. Security-wise, while HTTPS usage is assumed, explicit security headers and incident response policies are not evident, and no forms collect sensitive data except a downloadable PDF form. Contact is primarily via an obfuscated email address. Overall, the site is legitimate, trustworthy, and serves an important role in the German education sector.

Bluesound Deutschland operates as a specialized distributor and information portal for high-resolution wireless multiroom audio products in the German market. The company offers a range of streaming speakers, stereo components, and home cinema solutions, leveraging the BluOS platform for seamless music streaming. Positioned as a niche player, Bluesound Deutschland targets audiophiles and tech-savvy consumers seeking premium audio experiences. The website reflects a mature digital presence with localized content, product catalogs, and a network of authorized dealers. Technically, the site is built on WordPress with modern plugins and scripts, ensuring good SEO and user experience. Security posture is solid with HTTPS, cookie consent, and reCAPTCHA integration, though some security headers and explicit policies could be enhanced. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, supporting the company's credibility in the technology sector.

BAB TECHNOLOGIE GmbH is a German company specializing in smart home gateways and intelligent building automation products, including KNX control and EnOcean integration. The company targets professionals and system integrators in the building automation sector, offering hardware, software modules, and training services through its BAB Academy. The website reflects a mature digital presence with comprehensive product information, news updates, and a strong brand identity. Technically, the site is built on WordPress with modern plugins and SEO optimizations, delivering a good user experience across devices. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements like DNSSEC and security headers could enhance protection. No critical vulnerabilities or blocking mechanisms were detected, indicating a trustworthy and professional online presence.

AGFEO GmbH & Co. KG is a German-based manufacturer and full-range supplier specializing in telecommunications solutions including telephones, telephone systems, software, and SmartHome products. The company positions itself as an expert in individual telecommunications solutions, targeting business customers and professional users. The website reflects a mature digital presence with comprehensive product offerings and clear navigation. Technically, the site is built on WordPress with modern plugins and frameworks, optimized for SEO and mobile use. Security posture is solid with HTTPS and consent management, though some security headers could be improved. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

ABL Mobility operates a professional website focused on electric vehicle charging solutions, including private wallboxes, commercial charging stations, and public charging infrastructure. The company is positioned as a recognized leader in the eMobility sector in Germany, with an emphasis on quality and innovation as evidenced by the ADAC award mention. The website demonstrates a moderate level of digital maturity, utilizing modern JavaScript libraries, responsive design, and cookie consent mechanisms. However, explicit privacy policies and contact information are not clearly presented in the analyzed content, which may impact user trust and compliance perception. Security posture is adequate with HTTPS and cookie consent but lacks visible security headers and vulnerability disclosure mechanisms. Overall, the site is professional and trustworthy but could improve transparency and security best practices.

Hotelmarketing Gruppe is a specialized marketing service provider focused on developing hotel personalities and branding strategies within the hospitality sector in Germany. The website demonstrates a professional design using WordPress with Elementor and WPRocket plugins, indicating a moderate level of digital maturity. However, the absence of explicit privacy and cookie policies, as well as lack of visible contact information, suggests room for improvement in transparency and user trust. Security posture is basic with no detected security headers and minimal SSL configuration details, which could be enhanced to protect user data and improve compliance. Overall, the website is functional and professional but would benefit from stronger privacy compliance and security measures to elevate trustworthiness and regulatory adherence.

Nanovital.pl is a Polish online retailer specializing in healthy food, bee products, natural cosmetics, and ecological cleaning agents. The company targets health-conscious consumers seeking natural and organic products. The website is built on a modern e-commerce platform (Shoper) using JavaScript frameworks and integrates analytics tools such as Google Analytics and Microsoft Clarity. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Contact information is clearly presented, enhancing business credibility. Overall, the site is legitimate and professionally maintained but would benefit from improved privacy and security disclosures.

Hotel Sobienie Królewskie is a premium hospitality business located near Warsaw, Poland, offering luxury hotel accommodations, a golf course, conference facilities, wellness and spa services, and event hosting. The website reflects a well-established brand targeting both leisure and business travelers seeking high-end experiences. The company positions itself as a unique and high-standard destination in the region. Technically, the website uses modern JavaScript frameworks and integrates with Profitroom booking and marketing platforms, Google Tag Manager, and other third-party services. The site is mobile-optimized and includes GDPR-compliant cookie consent mechanisms. Security posture is generally strong with HTTPS enforced and no exposed sensitive data, though the absence of explicit security headers is noted as an area for improvement. WHOIS data is unavailable, likely due to privacy protection, but external signals and structured data support the legitimacy of the business. Overall, the website is professional, trustworthy, and compliant with privacy regulations.

Anna Cichosz operates a Polish-language fashion e-commerce website specializing in high-quality designer clothing including Haute Couture and Pret a Porter collections. The site targets fashion-conscious consumers in Poland, offering a curated selection of dresses, suits, and accessories. The business appears to be a small-sized, established brand with a domain registered since 2010, indicating a stable market presence. Technically, the website is built on WordPress with WooCommerce, leveraging modern frontend libraries such as Bootstrap and Swiper.js, and SEO optimized with Yoast. The site is mobile-friendly and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enabled and secure e-commerce forms, but lacks advanced security headers and explicit privacy or terms of service documentation, which are compliance gaps. No incident response or vulnerability disclosure information is provided. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy compliance and security best practices.

Grupa Zdunek operates as a large automotive dealership group based in Poland, offering new and used vehicles across multiple brands. The website provides a comprehensive vehicle search and filtering experience, targeting consumers interested in purchasing cars. Technically, the site leverages modern JavaScript frameworks (likely Vue.js), integrates Google Tag Manager and reCAPTCHA for analytics and bot protection, and uses Cookiebot for cookie consent management. The site is mobile-optimized and presents a professional design with good navigation and content relevance. Security-wise, HTTPS is enforced, but there is room for improvement in security headers and DNSSEC implementation. Privacy compliance is basic, with cookie consent present but no explicit privacy policy or terms of service found. Overall, the website is trustworthy and functional but would benefit from enhanced transparency and security documentation.

The Scene Project is a European initiative focused on revolutionizing the film industry by integrating advanced technologies such as Artificial Intelligence, blockchain, and 3D simulations with cultural heritage preservation. The project aims to build a globally competitive European film industry by developing innovative tools for audience scouting, distribution, and intellectual property protection. The website reflects a professional digital presence built on WordPress with a modern theme and SEO optimization, targeting stakeholders in the European film and cultural sectors. Technically, the site uses standard WordPress plugins and frameworks, with good mobile optimization and moderate performance. Security posture is solid with HTTPS and cookie consent mechanisms, though lacks published privacy and security policies. Overall, the site is trustworthy and well-positioned for its niche, but could improve transparency and compliance documentation.

Scoutters is a specialized SaaS platform launched in 2024, focused on providing cloud-based location scouting and project management tools for the film and production industry. The platform offers AI-powered tagging and search capabilities, enabling users to organize and share location data securely. The company targets location managers, production companies, film commissions, and agencies, positioning itself as a niche player with a collaborative hub to enhance industry synergies. Technically, the website uses modern frameworks like Bootstrap and Django, hosted on AWS, with good mobile optimization and basic accessibility features. Security measures include HTTPS, CSRF protection, and Google reCAPTCHA, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is strong with a clear privacy policy and cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with its business goals.

Feria de Valladolid operates as a regional event venue and organizer based in Valladolid, Spain, hosting a variety of trade fairs, congresses, and public events across multiple sectors including technology, wine, tourism, and sports. The website serves as a comprehensive portal for event information, ticket sales, and venue details, targeting businesses and the general public interested in these events. The company is well-established with a domain age dating back to 1999, indicating a mature presence in the market. Technically, the website is built on WordPress with a modern plugin ecosystem including EventON for event management, Slider Revolution for visual content, and integrations with social media platforms and analytics tools such as Google Analytics and Facebook SDK. The site is hosted with DNS managed by Cloudflare and secured with HTTPS, although DNSSEC is not enabled. Performance and mobile optimization are good, with a professional design and clear navigation. From a security perspective, the site employs HTTPS and has domain transfer protections in place, but lacks advanced security headers and DNSSEC, which are recommended for enhanced security. Privacy compliance is partially addressed with a cookie consent banner, but no explicit privacy policy or terms of service are found on the homepage. Contact information is clearly provided, enhancing business credibility. Overall, Feria de Valladolid presents a professional and trustworthy online presence with room for improvement in security hardening and privacy policy transparency. Strategic enhancements in these areas would strengthen user trust and compliance posture.

Marché du Film is the premier global film market and event organizer affiliated with the Festival de Cannes, serving as a central hub for film industry professionals worldwide. The website showcases a comprehensive range of services including film market exhibitions, screenings, conferences, and networking opportunities. It targets producers, distributors, buyers, and programmers, positioning itself as the world's leading film market with a strong international presence. Technically, the site is built on WordPress with modern web technologies, optimized for performance and mobile use, and incorporates privacy and security best practices such as HTTPS, reCAPTCHA, and cookie consent mechanisms. Security posture is solid with room for improvement in DNSSEC and content security policies. Overall, the site is professional, trustworthy, and compliant with GDPR regulations, reflecting a mature digital presence for a large-scale media event.

The European Film Academy e.V. operates Europe's largest filmmaker community, supporting and connecting approximately 4,000 to 5,000 members. The organization promotes European cinema through membership services, events such as the European Film Awards, and media engagement. The website reflects a professional and consistent brand image, targeting filmmakers and media professionals primarily in Europe, with a focus on Germany. Technically, the site is built on WordPress with modern plugins like Yoast SEO and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized and provides a good user experience with clear navigation and structured content. Security posture is solid with HTTPS enforced and consent management implemented, though some security headers are missing and no explicit security or privacy policies are found. WHOIS data is unavailable, likely due to privacy protection, which is typical for such organizations. Overall, the site is trustworthy and well-maintained but could improve transparency around privacy and security policies.

items GmbH & Co. KG is a well-established German company specializing in IT and process solutions for the energy and public transportation sectors. With over 25 years of experience and a workforce of approximately 400 employees across five locations, the company supports municipal utilities and public transport providers in optimizing their operations and embracing innovation. The website promotes their annual items-Forum event, targeting decision-makers and experts in these industries. Technically, the site is built on WordPress using modern tools like Elementor and Yoast SEO, with privacy-conscious analytics via Matomo. Security posture is solid with HTTPS and no exposed sensitive data, though some security headers are missing. Contact information is comprehensive, including phone, email, and social media channels. Overall, the site reflects a professional and credible business presence.

The NAVIGATE Kongress website represents a well-established online IT conference organized by viadee Unternehmensberatung AG, a medium-sized German IT consultancy founded in 1994. The company focuses on holistic software development and organizational development, hosting an annual free online event targeting IT decision makers, architects, and developers. The website content is professional, comprehensive, and well-structured, reflecting a mature digital presence with strong SEO and user experience. Technically, the site is built on WordPress with modern tools such as Yoast SEO, Matomo Analytics, and CookieFirst for privacy compliance, hosted on Azure DNS infrastructure. Security posture is solid with HTTPS enforced and privacy-conscious analytics, though some security headers and explicit security policies could be improved. Overall, the site is trustworthy, safe, and compliant with GDPR, though it lacks explicit contact information and incident response details. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information.

Eure Trainer Gesucht is a German-language platform dedicated to promoting and honoring volunteer sports trainers across Germany. Supported primarily by the Sparkassen-Finanzgruppe and partners such as Deka and Deutsche Leasing, the initiative encourages public nominations and voting to award financial grants and special prizes to deserving trainers and their clubs. The website is professionally designed with clear navigation, mobile optimization, and a focus on community engagement in amateur sports. Technically, the site leverages modern web technologies including ES modules, Bootstrap 5, and Cloudflare services for DNS and CDN. It employs secure form handling with CSRF tokens and client-side validation, alongside a comprehensive cookie consent mechanism compliant with GDPR. Google Analytics is used for moderate user tracking with transparent privacy controls. From a security perspective, the website demonstrates good practices such as HTTPS enforcement, secure cookies, and input validation. However, it lacks explicit security policy or incident response pages and does not provide a vulnerability disclosure mechanism. No critical vulnerabilities or suspicious content were detected, and the domain registration is consistent with the website's branding and purpose. Overall, Eure Trainer Gesucht presents a trustworthy, well-maintained platform with strong business credibility and a clear mission to support volunteer sports engagement in Germany. Strategic improvements could include enhanced accessibility, formal security policies, and incident response contact information to further strengthen trust and compliance.

Watterott electronic operates an e-commerce platform specializing in open-source hardware, electronic kits, development boards, and photovoltaic components. The website targets electronics hobbyists, developers, and renewable energy enthusiasts primarily in Germany. The business model focuses on retail sales through a well-structured online catalog with clear product categories and multilingual support. The company appears to be a small-sized entity with a niche market position in technology and retail sectors. Technically, the website employs modern web technologies including jQuery, Bootstrap, and Slick Carousel, with a CMS likely based on JTL Shop. The site is mobile-optimized and uses HTTPS, ensuring secure communication. However, some security best practices such as security headers and explicit privacy and cookie policies are missing or not detected in the provided content. From a security perspective, the site demonstrates basic security hygiene with HTTPS and CSRF tokens on login forms but lacks visible security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data for the subdomain is unavailable, which is expected for subdomains, but no registrant information is present to cross-verify legitimacy. Overall, the website is professional and trustworthy with moderate security posture and good technical implementation. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance trust and compliance.

Roberta is a well-established educational initiative by the Fraunhofer-Gesellschaft focused on teaching children and young people programming and robotics skills through hands-on learning and teacher training. The website serves as a portal for information, resources, and news related to the initiative and its programming platform, Open Roberta Lab. The site is professionally designed using TYPO3 CMS, with responsive and accessible features, and provides clear navigation and relevant content for its target audience of educators and learners. Security posture is good with HTTPS and cookie consent mechanisms implemented, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected. The domain and website show strong legitimacy with consistent branding and multiple trust signals including awards and certifications. Overall, the site is a credible and trustworthy educational resource with moderate tracking and good privacy compliance.

d.velop AG is a well-established enterprise software company specializing in digital document management, business process automation, and enterprise content services. The company serves a broad range of industries including finance, healthcare, public administration, and commercial sectors, with a strong presence in Germany and Europe. Their solutions are designed to support digital transformation initiatives through on-premises, cloud, and hybrid deployments, leveraging AI and integration with major platforms such as SAP and Microsoft. The website reflects a mature digital presence with comprehensive product offerings, customer success stories, and a robust partner ecosystem. Technically, the website is built on WordPress with modern SEO and user experience optimizations. It employs advanced consent management tools and integrates multimedia content effectively. The technical stack includes jQuery, Wistia for video, HubSpot for forms, and Usercentrics for privacy compliance, indicating a focus on user engagement and regulatory adherence. Performance and mobile optimization are good, supporting a positive user experience. From a security perspective, the site enforces HTTPS, uses security headers, and manages user consent for tracking and data collection. However, there is no explicit security policy or incident response information publicly available, and the WHOIS data is missing, which is unusual for a company of this scale. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, d.velop AG presents a professional, trustworthy, and secure online presence aligned with its business objectives. The missing WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy and quality of the website and business. Strategic recommendations include publishing a dedicated security policy, incident response contacts, and vulnerability disclosure information to enhance transparency and trust.

The analyzed website is a CAPTCHA verification page for the French domain of KAYAK, a well-known global travel metasearch engine. The page is designed to verify that visitors are legitimate users and not automated bots, employing Google reCAPTCHA Enterprise technology. Due to this security mechanism, the actual website content is inaccessible, limiting the ability to perform a full content and compliance analysis. KAYAK operates under Booking Holdings Inc., serving travelers seeking flights, hotels, and car rentals by aggregating offers from multiple providers. The domain WHOIS data is unavailable, which restricts verification of domain legitimacy and ownership details. The presence of advanced bot mitigation indicates a mature security posture, but the lack of visible privacy, cookie, or contact information on this page reduces transparency and user trust.

Gruenland.it is an Italian website apparently related to an online shop focused on agriculture or related products, as indicated by the brief description. The domain is well-established, created in 2000, indicating a longstanding presence. The website uses WordPress CMS with common plugins such as Contact Form 7 and TranslatePress, and includes standard web technologies like jQuery and Font Awesome. The site is accessible without any WAF or security challenge blocking access. However, the content is minimal and lacks critical compliance and security documentation such as privacy policies, cookie consent mechanisms, terms of service, and incident response information. No explicit contact information or business details are provided on the accessible pages, limiting business credibility and user trust. The site is mobile optimized and uses HTTPS, but lacks advanced security headers and DNSSEC.