Low-risk security reports

codin GmbH is a Swiss-based managed IT service provider specializing in comprehensive IT solutions for small and medium-sized enterprises (KMU). Their offerings include IT support, Microsoft 365 services, cybersecurity, procurement, training, and backup management, all provided at a fixed monthly price. Positioned as an external IT department, codin GmbH aims to simplify and secure IT operations for SMEs, allowing clients to focus on their core business. The website reflects a professional and modern digital presence, leveraging Next.js and Vercel hosting for performance and scalability. Cookie consent is managed effectively through Cookiebot, ensuring compliance with data privacy norms. Security posture is strong with HTTPS and appropriate security headers, though explicit privacy policy and terms of service pages are currently missing, representing areas for improvement. Overall, codin GmbH demonstrates a credible and trustworthy business with a clear market focus and solid technical infrastructure.

OPAN® operates a leading digital platform in Switzerland for online patient registrations and healthcare coordination among hospitals, clinics, Spitex organizations, nursing homes, and patients. The platform streamlines communication and administrative processes in the healthcare sector, enhancing efficiency and reducing errors. The website reflects a professional and consistent brand presence targeting healthcare providers and patients within Switzerland. Technically, the site uses modern web technologies including the Uikit framework and secure HTTPS connections, with good mobile optimization and SEO practices. However, explicit privacy and cookie policies are not clearly found, and security headers are missing, indicating areas for improvement in compliance and security posture. Overall, the domain registration data aligns well with the website's claims, supporting its legitimacy and trustworthiness.

Landeshauptstadt Mainz operates an official municipal government website providing comprehensive information and services related to city administration, politics, tourism, culture, and public events. The site targets residents, tourists, and businesses, offering multilingual support and various online services. The technical infrastructure is based on the Sitepark Information Enterprise Server CMS, utilizing modern JavaScript libraries such as jQuery and Modernizr, with Matomo analytics integrated for user tracking under GDPR-compliant consent mechanisms. Accessibility and mobile optimization are well implemented, reflecting a mature digital presence. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response contacts are not evident. The WHOIS data aligns with the official city domain, confirming legitimacy and trustworthiness. Overall, the website demonstrates high professionalism, good security hygiene, and strong compliance with privacy regulations.

IHK Frankfurt am Main operates as a regional chamber of commerce and industry, providing a comprehensive platform called Startup-Pilot FrankfurtRheinMain that aggregates over 300 regional support offerings for startups. These include networking opportunities, financing, talent activation, accelerator programs, incubators, and competitions, targeting startups and innovation-driven enterprises in the FrankfurtRheinMain region. The website serves as a key resource for startups, investors, and academic institutions, positioning IHK Frankfurt am Main as a central facilitator in the regional startup ecosystem. Technically, the website is built on the CoreMedia CMS platform, utilizing modern web technologies including JavaScript, CSS, and HTML5. It integrates third-party services such as eTracker for analytics, Userlike for chat support, and CCM19 for cookie consent management, reflecting a mature digital infrastructure. The site demonstrates good mobile optimization, accessibility, and SEO practices, ensuring a positive user experience across devices. From a security perspective, the site enforces HTTPS, employs cookie consent mechanisms with granular user control, and uses secure forms with CSRF tokens. While explicit security policies and incident response information are not published, no vulnerabilities or exposed sensitive data were detected. The domain and WHOIS data align with the official branding and regional chamber identity, supporting legitimacy and trustworthiness. Overall, the website presents a professional, secure, and privacy-compliant digital presence that effectively supports its business mission. Strategic improvements could include publishing detailed security policies, incident response contacts, and vulnerability disclosure information to enhance transparency and trust further.

shop4runners.ch is a specialized e-commerce retailer focused on running shoes, apparel, and accessories targeting runners and sports enthusiasts primarily in Switzerland and German-speaking regions. The website presents a professional and consistent brand image with a clear business model centered on online retail of high-quality running products from top brands. The technical infrastructure is modern, leveraging Magento CMS with Hyvä Themes for frontend, integrated marketing automation via SalesManago, and Google Tag Manager for analytics. The site is mobile optimized and demonstrates good SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though it lacks explicit security policies and vulnerability disclosure mechanisms. WHOIS data confirms domain legitimacy with consistent registrant information and appropriate domain age. Overall, the site is trustworthy, safe, and professionally maintained, though improvements in privacy policy transparency and security disclosures are recommended.

Shop4Runners.eu is a specialized e-commerce retailer focused on running shoes and apparel, offering products from well-known brands such as Asics, Adidas, and New Balance. The website targets runners and sports enthusiasts primarily in Germany and surrounding regions, providing services like free shipping and a 30-day return policy. The business is operated by Knipp Medien und Kommunikation GmbH, which is consistent with the domain registration data, indicating a legitimate and established entity. Technically, the website is built on Magento CMS with a modern frontend stack including JavaScript libraries and marketing tools such as Google Tag Manager and SalesManago. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Consent management for cookies is implemented, reflecting awareness of privacy regulations. From a security perspective, the site uses HTTPS with good SSL configuration and employs cookie consent mechanisms. However, it lacks visible security headers and does not publicly disclose security policies or incident response contacts, which are areas for improvement. No vulnerabilities or suspicious activities were detected in the provided content. Overall, Shop4Runners.eu presents a trustworthy and professional online retail platform with moderate to good technical maturity and privacy compliance. Strategic enhancements in security transparency and policy disclosures would further strengthen its security posture and customer trust.

Kunst Raum Riehen is a publicly funded cultural institution serving as the official exhibition space for contemporary art in the municipality of Riehen, Switzerland. The website provides comprehensive information about current and upcoming exhibitions, events, and art mediation activities, targeting a general audience interested in culture and the arts. The institution operates with free public access and maintains active engagement through newsletters and social media channels. Technically, the website is built on Drupal 10, leveraging modern JavaScript frameworks such as Alpine.js and Splide.js for interactive components. It employs Matomo analytics with privacy-conscious settings and a cookie consent mechanism, reflecting a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with a professional design and clear navigation. From a security perspective, the site enforces HTTPS, uses cookie consent, and avoids exposing sensitive data. However, it lacks explicit security policies and incident response contacts, and could improve by adding security headers and formal vulnerability disclosure mechanisms. Overall, the security posture is solid but could benefit from enhanced transparency and formal documentation. The domain registration aligns well with the website's municipal identity, showing no suspicious patterns and indicating high legitimacy. The website content is safe for general audiences, with no adult or questionable material. The overall risk is low, and the site demonstrates good compliance with privacy regulations such as GDPR.

Schleswig-Holstein Netz GmbH operates as a regional energy network operator serving Schleswig-Holstein and parts of Nordniedersachsen in Germany. The company provides essential services including electricity and gas network connections, energy feed-in, and customer support portals. The website is professionally designed, well-structured, and targets both residential and commercial customers in the energy sector. The presence of multiple customer portals and detailed service information indicates a mature digital presence. Technically, the site leverages modern JavaScript frameworks like React, integrates consent management via Usercentrics, and uses analytics tools such as Matomo and Google Tag Manager, reflecting a good level of digital maturity. Security posture is strong with HTTPS enforced, consent mechanisms in place, and no obvious vulnerabilities detected. However, the absence of publicly available WHOIS registration data for the domain www.sh-netz.com raises concerns about domain legitimacy and ownership transparency. This discrepancy should be addressed to improve trust. Overall, the site is a reliable and professional resource for energy network customers but would benefit from clearer domain registration information and enhanced security policy disclosures.

The website www.hotel-in-gstaad.com serves as a regional hospitality and tourism platform focused on the Gstaad area in Switzerland. It provides hotel booking services, restaurant listings, event information, and sightseeing guides tailored to tourists and travelers seeking accommodation and leisure activities in the Swiss Alps. The business model centers on facilitating bookings and promoting regional tourism, positioning itself as a specialized local service provider. The website content is professionally presented with good design quality, clear navigation, and relevant information for its target audience. Technically, the site is built on the MASCH CM Studio CMS platform, utilizing standard web technologies such as JavaScript, CSS, and jQuery UI components. While the site is moderately optimized for performance and mobile use, there is room for improvement in accessibility and mobile responsiveness. The presence of a TripAdvisor conversion pixel indicates integration with third-party marketing tools, but no extensive analytics or tracking services are detected. From a security perspective, the website enforces HTTPS and implements a cookie consent banner compliant with GDPR. However, no explicit security headers are detected in the HTML source, and no dedicated security or incident response policies are published. The absence of WHOIS registration data for the domain is a notable concern, as it reduces transparency and trust in domain ownership. Despite this, the website itself appears legitimate and professional, with no signs of malicious activity or vulnerabilities visible in the content. Overall, the site demonstrates a solid foundation for a regional hospitality platform but would benefit from enhanced security practices, improved domain registration transparency, and clearer contact information to strengthen trust and compliance.

Pfeifer & Langen GmbH & Co. KG is a well-established German sugar manufacturing company founded in 1870, specializing in regional and sustainable sugar production. Their website reflects a mature digital presence with a focus on B2B customers across food, chemical, pharmaceutical, and feed industries, as well as agricultural partners. The company emphasizes sustainability and regional sourcing as key differentiators. Technically, the website is built on the Sitefinity CMS platform, integrates Google Tag Manager for analytics, and uses modern UI components like Swiper.js for interactive content. The site is mobile-optimized and provides a professional user experience with clear navigation and rich content. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure; however, the absence of security headers and explicit security policies indicates room for improvement. The lack of WHOIS domain registration data is a notable concern, though the website's branding and external social media presence support its legitimacy. Overall, the site scores well on content quality and privacy compliance but should address domain registration transparency and enhance security disclosures.

WestLotto.de is the official state lottery operator for North Rhine-Westphalia (NRW), Germany, providing a range of lottery and gaming services including LOTTO, Eurojackpot, KENO, TOTO, and GlücksSpirale. The website targets adult residents of NRW and positions itself as a secure and reliable state-run gaming platform. The business model is focused on regulated lottery services under government oversight, with a strong regional market presence.

Leichtathletik Shop is the official online merchandise store of the Deutscher Leichtathletik Verband (German Athletics Association), offering athletics apparel and related products primarily targeting athletes and fans in Germany. The website is built on the Shopify platform, leveraging modern e-commerce technologies and integrations such as Judge.me for customer reviews and Facebook Pixel for marketing analytics. The site demonstrates a good level of digital maturity with fast performance, mobile optimization, and clear navigation. Security posture is strong with HTTPS enforced, use of security headers, and form protection via hCaptcha, although explicit security and incident response policies are not publicly available. Privacy compliance is well addressed with comprehensive privacy and cookie policies aligned with GDPR requirements. Overall, the site presents a professional and trustworthy e-commerce presence with room for improvement in transparency of security and contact information.

DLRG-Jugend Bundesebene is a German non-profit youth organization affiliated with the German Life Saving Association (DLRG). It focuses on youth engagement, education, and community activities related to water safety and youth development. The website serves as an information hub for events, campaigns, and volunteer opportunities targeted primarily at German-speaking youth and volunteers. The organization maintains a consistent brand presence and provides comprehensive contact and privacy information, reflecting a mature digital presence. Technically, the website is built on TYPO3 CMS, leveraging modern responsive design frameworks such as Bootstrap and FontAwesome. Hosting is provided via Amazon AWS infrastructure, ensuring reliable performance and scalability. The site incorporates GDPR-compliant cookie consent mechanisms and uses both Google Analytics and Plausible Analytics for visitor tracking, with user opt-in consent. From a security perspective, the site enforces HTTPS and employs cookie consent for analytics tracking, but lacks explicit security headers and publicly available security or incident response policies. No vulnerabilities or suspicious content were detected. Overall, the site demonstrates a good security posture appropriate for a non-profit organization. The overall risk is low, with recommendations focusing on enhancing security headers, publishing incident response information, and considering a vulnerability disclosure policy to further strengthen trust and compliance.

The Evangelisch-reformierte Kirche des Kantons Basel-Stadt website serves as the official online presence for the regional Protestant church in Basel-Stadt, Switzerland. It provides comprehensive information about church services, events, community programs, and pension fund management. The site targets church members and the local community, offering timely updates and resources in German. The business model is non-profit and community-oriented, focusing on religious and social services within the canton. Technically, the website is built on the kirchenweb.ch CMS platform, utilizing common web technologies such as jQuery and Owl Carousel. The site is mobile-optimized and presents a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and includes some security headers, but lacks explicit security policies and vulnerability disclosure mechanisms. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is trustworthy and legitimate, with domain registration details consistent with the organization's identity.

Shop4Runners.fr is a French e-commerce website specializing in running shoes, apparel, and accessories from well-known brands such as Asics, Adidas, and New Balance. The site targets running enthusiasts primarily in France and French-speaking regions, offering competitive pricing, free delivery, and a 30-day return policy. The business appears to be a small-sized retailer founded in 2020, operating on a Magento platform with a modern Hyva theme frontend. The website infrastructure leverages Cloudflare for DNS and CDN services, ensuring good performance and security. Marketing and tracking tools such as Google Tag Manager, SalesManago, and Kwanko are integrated for analytics and advertising purposes. The site implements a GDPR-compliant cookie consent mechanism but lacks visible privacy policy and terms of service pages in the provided content. Contact information is limited to a company email address, with no phone or physical address found. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though security headers and incident response policies are absent. Overall, the website is professional, functional, and trustworthy with room for improvement in privacy disclosures and security transparency.

LEI Register is an official Legal Entity Identifier registration agent operating in Norway, providing fast and reliable LEI code issuance and renewal services. The company positions itself as a trusted intermediary partnering with accredited Local Operating Units (LOUs) such as Ubisecure Oy and Nasdaq CSD SE, ensuring compliance with global LEI standards. The website targets Norwegian legal entities requiring LEI codes for regulatory and financial transparency purposes. The business model revolves around facilitating LEI registrations, renewals, and providing related certificates and badges to demonstrate compliance and transparency.

South London Gallery is a well-established non-profit cultural institution in London, providing free access to contemporary art exhibitions, film, performance events, and educational programs for diverse audiences including children and adults. The gallery has a strong community focus and a history spanning over 125 years, positioning it as a key player in the local and broader art scene. The website reflects this with rich content, clear navigation, and consistent branding. Technically, the site is built on WordPress with modern JavaScript libraries and integrates Google Analytics, Tag Manager, and Klaviyo for marketing and analytics. Security measures include HTTPS and Google reCAPTCHA, though some security headers are not explicitly detected. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms. The absence of WHOIS data limits domain trust verification but does not detract significantly from the overall legitimacy given the institution's public presence and external references.

The Quality Assurance Agency for Higher Education (QAA) is a UK-based independent charity and the expert quality body for tertiary education. It provides impartial regulatory and collaborative quality assurance and enhancement services across the UK and internationally. The organization is trusted by governments, funding bodies, and higher education providers, offering services such as membership, accreditation, training, and sector resources. The website reflects a mature, professional entity with a clear focus on education quality and standards. Technically, the website is built on the Sitefinity CMS platform, leveraging modern analytics tools including Google Analytics and Microsoft Clarity, and employs Google Tag Manager for marketing and tracking. The site is mobile-optimized, accessible, and well-structured with comprehensive navigation and content. Security certifications such as ISO 27001 and Cyber Essentials are prominently displayed, indicating a strong commitment to information security. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place. However, explicit security headers and a public security policy or incident response contact are not found, representing areas for improvement. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good, with clear privacy and cookie policies aligned with GDPR requirements. Overall, the website and organization present a low-risk profile with high trustworthiness. Strategic recommendations include enhancing security headers, publishing a security policy and incident response details, and implementing a vulnerability disclosure program to further strengthen security and transparency.

zm-online.de is a German-language news portal specializing in dental medicine and healthcare news. It serves dental professionals and stakeholders with up-to-date articles, continuing education, job listings, and market information. The site is powered by TYPO3 CMS and integrates modern web technologies including Google Analytics and Traffective advertising. The website demonstrates a good level of technical maturity with mobile optimization, SEO best practices, and privacy consent mechanisms in place. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though explicit security headers and policies could be improved. Overall, the site is professional, trustworthy, and well-positioned in its niche market.

Jobbnorge.no is a Norwegian online recruitment platform focused on connecting job seekers with employers across Norway. The website offers job search functionality and recruitment tools, positioning itself as an important player in the Norwegian recruitment market. The platform targets both job seekers and employers, providing a streamlined experience for finding and posting jobs. The business model revolves around providing digital recruitment services and tools to facilitate hiring processes. Technically, the website employs modern technologies including ASP.NET, Matomo analytics, and Cloudflare for hosting and security. It features a comprehensive cookie consent mechanism compliant with GDPR, enhancing user privacy and transparency. Security posture is strong with HTTPS enforced and device fingerprinting used for security purposes, although some security headers could be improved. Overall, the website is professional, well-branded, and trustworthy, with good mobile optimization and accessibility. However, the lack of publicly available WHOIS data slightly reduces trust but is likely due to privacy protection. Strategic recommendations include publishing a privacy policy page, terms of service, and a vulnerability disclosure policy to further enhance compliance and trust.

Pinterest is a globally recognized visual discovery and social media platform that enables users to find and share ideas such as recipes, home decor, and style inspiration. The Danish localized site (dk.pinterest.com) reflects the company's commitment to regional markets with tailored content and language support. Pinterest operates primarily on an advertising-based business model, leveraging user engagement to deliver targeted ads. The website demonstrates a mature technical infrastructure using modern JavaScript frameworks like React, advanced security measures including HTTPS and Content Security Policy, and integrations with reputable third-party services for advertising and fraud prevention. The security posture is strong, with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with comprehensive policies and consent mechanisms aligned with GDPR requirements. Overall, the site presents a professional, trustworthy, and user-friendly experience suitable for a broad audience.

ironDNS® is a specialized DNS service provider operated by Knipp Medien und Kommunikation GmbH, established in 2009 in Germany. The company focuses on delivering secure and compliant DNS infrastructure services to corporates, registrars, and registries. Their offerings include DNS provisioning APIs (SOAP and REST), control panel access, DNSSEC support, and advanced DNS features such as Zone Lock and ANAME records. The website reflects a professional and consistent brand presence with clear navigation and relevant business content.

Gatsby is a leading React-based open source framework designed for building performant, scalable, and secure websites and applications. It targets developers and enterprises seeking fast web development with modern technologies such as React and GraphQL. The company is positioned strongly in the web development ecosystem, supported by its parent company Netlify, which provides deployment and hosting services. The website reflects a mature digital presence with excellent design, mobile optimization, and SEO practices. Technically, Gatsby leverages modern JavaScript frameworks and integrates with reputable platforms, ensuring a robust infrastructure. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response details are not publicly documented. Privacy compliance is well addressed with comprehensive privacy and cookie policies, including GDPR considerations. Overall, the website and business demonstrate high professionalism and trustworthiness, though WHOIS data is unavailable likely due to privacy protection, which slightly impacts business credibility scoring.

Imbach Logistik AG is a Swiss-based logistics and transport company specializing in cargo, bottle, and event logistics. The company operates with approximately 340 employees and a fleet of 70 trucks, emphasizing innovative and sustainable transport solutions. It is part of the Galliker Group, which enhances its market position and operational capabilities. The website reflects a professional and modern digital presence, with clear service offerings and strong branding consistency. Technical infrastructure includes modern web technologies such as Google Tag Manager, Google Analytics, and a cookie consent framework, supporting compliance and user experience. Security posture is good with HTTPS enforced and privacy mechanisms in place, though some security headers and explicit security policies are missing. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and trustworthiness.

AXOR is a premium luxury brand specializing in avant-garde design for bathrooms and kitchens, collaborating with leading designers to offer high-end mixers, showers, and fixtures. The website targets discerning consumers and design professionals seeking luxury bathroom and kitchen products. The business operates primarily in the retail sector with a B2C and partner network model, positioning itself strongly in the luxury market segment. The website content is professionally presented, multilingual, and consistent with the brand's premium image. Technically, the website leverages a modern technology stack including SAP Hybris as the CMS, advanced analytics platforms such as Google Analytics, Piwik PRO, New Relic, and Visual Website Optimizer, and integrates a comprehensive GDPR-compliant consent management system. The site is well-optimized for performance and mobile devices, with good SEO and accessibility basics in place. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. While explicit security headers are not visible in the HTML, the use of CSRF tokens and asynchronous loading of scripts indicates adherence to security best practices. No vulnerabilities or suspicious content were detected. However, the absence of visible privacy policy, terms of service, and contact information pages in the provided content suggests areas for improvement. Overall, AXOR's website demonstrates a mature digital presence with strong business credibility and compliance posture. Strategic recommendations include publishing explicit privacy and terms pages, enhancing security headers, and providing clear contact and incident response information to further strengthen trust and compliance.

Sigdal is a well-established Norwegian company specializing in high-quality kitchen, bathroom, and wardrobe solutions. With over 70 years of history, it operates primarily in the retail sector, offering both products and design services. The website reflects a mature digital presence with comprehensive content, professional design, and multiple customer engagement channels including free design meetings and installation services. The company maintains consistent branding and leverages modern web technologies to deliver a responsive and user-friendly experience. Technically, the site uses a modern JavaScript framework (Vue.js), integrates telemetry and analytics via Microsoft Application Insights and Google Tag Manager, and employs cookie consent management to comply with privacy regulations. Security posture is generally strong with HTTPS enforced and no visible vulnerabilities, though the absence of explicit security policies and incident response contacts is noted. The WHOIS data for the domain is missing or unavailable, which is unusual for a commercial entity and slightly impacts trustworthiness. Overall, Sigdal presents a professional and trustworthy online presence with room for improvement in transparency of security policies.

Duravit.no is the Norwegian localized website of Duravit, a well-established international brand specializing in bathroom furniture and porcelain products. The company has a long history dating back to 1817 and collaborates with renowned designers to offer high-quality, stylish, and functional bathroom solutions. The website provides rich content including product categories, design inspiration, and tools for customers to plan their bathrooms. Technically, the site uses modern JavaScript libraries, consent management tools, and performance monitoring, hosted likely on a CDN with good SSL configuration. Security posture is solid but could be improved with additional headers and explicit security policies. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a clearly accessible privacy policy page in the provided content. No WHOIS data is publicly available due to Norwegian domain registry privacy policies, but the domain appears legitimate and consistent with the brand. Overall, the website is professional, trustworthy, and well-positioned in the retail bathroom products sector.

Senab Eikeland is a Norwegian company specializing in furniture and interior solutions with a strong emphasis on sustainability and circular economy principles. The company offers a range of services including furniture sales, refurbishment, flexible leasing, and digital portfolio management. Their market position is that of a medium-sized, reputable player in the Norwegian real estate and interior design sector, targeting businesses and organizations seeking tailored and sustainable furniture solutions. Technically, the website is built on modern frameworks such as Next.js and uses Sanity CMS, ensuring a good level of digital maturity and performance. Security-wise, the site employs HTTPS and Google reCAPTCHA v3, with standard security headers, but lacks explicit security policies and incident response information. Overall, the website is professional and trustworthy, though improvements in privacy compliance and contact transparency are recommended.

INR is a Scandinavian bathroom furnishing company offering customizable, high-quality products such as shower solutions, bathroom furniture, mirrors, storage, mixers, and towel warmers. The company targets consumers seeking stylish and functional bathroom designs with a focus on Scandinavian aesthetics. Their market position is that of an established brand with Swedish production and long-term warranties, emphasizing quality and design. Technically, the website uses modern web technologies including jQuery, Google Tag Manager, OneTrust for cookie consent, and Swiper.js for UI components. The site is mobile-optimized and SEO-friendly but lacks explicit privacy and security policies. Security posture is good with HTTPS and cookie consent but could be improved by adding security headers and incident response information. Overall, the website is professional, trustworthy, and safe for general audiences.

Talus Informatik AG is a Swiss IT service provider specializing in comprehensive IT solutions for municipalities, communities, and energy supply companies. The company positions itself as a one-stop provider for IT total solutions, focusing on sectors such as energy and municipal administration. Their website reflects a professional and consistent brand image, targeting primarily Swiss municipal and energy sector clients. Technically, the website is built on the Weblication® CMS platform and utilizes modern web technologies including Font Awesome and Matomo analytics for user tracking. While the site is well-structured and mobile-optimized, it lacks explicit privacy and cookie policies, as well as visible security headers and incident response information, which are important for compliance and trust. The security posture is moderate due to these omissions, but no critical vulnerabilities or blocking mechanisms were detected. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security transparency.

DFL Stiftung is a well-established German non-profit foundation founded in 2008, focused on supporting children, youth, and young sports talents through social and sports-related projects. The foundation leverages a strong network and expertise from professional football to promote social participation, healthy development, and elite sports success. The website reflects a professional and consistent brand presence with comprehensive content in German and English, targeting a broad audience interested in youth development and sports. Technically, the site is built on WordPress with modern plugins and frameworks, hosted on AWS infrastructure, and employs SEO and analytics tools such as Yoast SEO, Google Tag Manager, and Matomo. Security posture is good with HTTPS enforced, though some security headers and explicit policies are missing. Privacy compliance is adequate with a comprehensive privacy and cookie policy but lacks a cookie consent mechanism. Overall, the site is trustworthy, well-maintained, and aligned with its mission.

Electronic Arts (EA) is a leading global publisher of video games across console, PC, and mobile platforms. The company positions itself as an industry leader with a strong brand presence and a focus on inspiring the world through play. The website reflects a mature digital infrastructure with modern technologies such as Google Tag Manager, Google Optimize, and New Relic for analytics and performance monitoring. The site is well-optimized for mobile and accessibility, providing an excellent user experience with professional design and clear navigation. Security posture is moderate with HTTPS and cookie consent mechanisms implemented, though explicit security policies and incident response information are not evident in the provided content. WHOIS data is unavailable, likely due to privacy protections common for large enterprises, but the website's branding and structured data confirm legitimacy. Overall, EA's website demonstrates a strong business and technical foundation with room for improvement in transparency around security and privacy policies.

Sozialhelden e.V. is a German non-profit organization dedicated to promoting inclusion and accessibility for people with disabilities. Founded in 2004 by Raúl Krauthausen and others, the organization engages in political campaigns, app development, consulting, and empowerment initiatives. Their website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content focused on their mission. The target audience includes people with disabilities, companies, media professionals, and the general public interested in disability mainstreaming. Technically, the site is built on Webflow CMS, hosted via Cloudflare, and uses modern web technologies including Matomo for analytics and Klaro for cookie consent, ensuring GDPR compliance. Security posture is strong with HTTPS and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the website is trustworthy, well-maintained, and aligned with the organization's mission.

The Victoria and Albert Museum (V&A) is a prominent UK-based family of museums dedicated to art, design, and performance. It offers a wide range of exhibitions, educational programs, and membership opportunities, positioning itself as a leading cultural institution with a strong public and international presence. The website reflects this stature with comprehensive content, clear navigation, and consistent branding. Technically, the site is built on a modern Ruby on Rails framework, employs responsive design, and integrates privacy and consent management tools such as OneTrust. Security practices are robust, with HTTPS enforced, CSRF protection, and no visible vulnerabilities. However, explicit security policies and incident response contacts are not publicly detailed, representing an area for improvement. Overall, the site demonstrates a mature digital infrastructure aligned with its institutional mission.

The Paul Mellon Centre is a UK-based non-profit educational charity dedicated to supporting original research into the history of British art and architecture across all periods. The organization offers key services including research support, publishing, events, conferences, grants, and fellowships, targeting academics, researchers, and students interested in British art history. The website reflects a professional and consistent brand image with good content quality and clear navigation, supporting its mission effectively. Technically, the site employs modern web technologies including JavaScript libraries, Google Analytics, and Cookiebot for privacy compliance, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and cookie consent implemented, though the absence of visible security headers and lack of published security policies suggest room for improvement. WHOIS data is unavailable due to privacy protection, which is justified for this type of organization. Overall, the site is trustworthy, safe, and compliant with GDPR, but could enhance transparency by publishing contact and security-related policies.

Margaret Howell is a well-established British fashion brand specializing in contemporary design for men and women since 1970. The company operates a professional e-commerce website hosted on the Shopify platform, targeting fashion consumers primarily in the UK and internationally. The website showcases their collections and provides a seamless online shopping experience. Technically, the site leverages modern web technologies including Shopify Liquid, TailwindCSS, and integrates marketing and security services such as Klaviyo, Forter, and Global-e. The site is well-optimized for mobile devices and includes essential SEO and accessibility features. Security posture is strong with HTTPS enforced, security headers present, and cookie consent mechanisms implemented, reflecting compliance with GDPR and privacy regulations. However, WHOIS data is unavailable due to querying the www subdomain rather than the base domain, which slightly impacts domain trust analysis. Overall, the website is professional, secure, and trustworthy, with room for improvement in publishing explicit security policies and contact information.

Vitsœ is a specialized furniture company focused on modular, timeless designs created by Dieter Rams since 1959. The company operates a direct-to-consumer business model selling high-quality furniture designed for longevity and adaptability. Their market position is niche premium retail with a strong emphasis on sustainability and design heritage. Technically, the website is well-constructed using modern JavaScript libraries, Google Tag Manager, and OneTrust for privacy compliance, hosted on a performant CDN. Security posture is solid with HTTPS and bot protection via reCAPTCHA, though it lacks explicit security policies and incident response information. The absence of WHOIS data reduces transparency but the website content and branding are professional and trustworthy. Overall, the site demonstrates a mature digital presence with good privacy compliance and user experience.

The Modern House is a well-established UK-based estate agency specializing in the sale of architecturally significant and design-led homes. Founded in 2000, it has carved a niche in the luxury real estate market with a strong editorial and curated approach to property listings. The website reflects a mature digital presence with excellent design, clear navigation, and mobile optimization, targeting affluent buyers and sellers interested in contemporary and period homes across the UK. Technically, the website leverages modern web technologies including React and Next.js, hosted likely on Vercel, with Cloudflare DNS services. Performance and SEO optimizations are well implemented, and the site integrates marketing and analytics tools such as Google Analytics and Klaviyo for user engagement and tracking. Privacy and cookie policies are comprehensive and include consent mechanisms, indicating good compliance with GDPR requirements. From a security perspective, the site enforces HTTPS, employs standard security headers, and avoids exposing sensitive data. However, there is no publicly available security policy or incident response information, and no vulnerability disclosure mechanism is present. The WHOIS data is consistent with the business claims, showing a long-standing domain registration without privacy protection, enhancing trustworthiness. Overall, The Modern House website demonstrates a strong business and technical foundation with good security hygiene and privacy compliance. Strategic improvements could include publishing a formal security policy, incident response details, and vulnerability disclosure information to further enhance trust and transparency.

The Welsh Government website serves as the official digital portal for the devolved government of Wales, providing comprehensive information and services across a broad range of policy areas including health, education, environment, and public services. It targets residents, businesses, and public sector organizations within Wales, positioning itself as an authoritative and trusted source of government information. The website's business model is focused on public service and information dissemination, with a large-scale operational footprint and consistent branding. Technically, the site is built on Drupal 11, leveraging modern web technologies such as jQuery and Google Tag Manager for analytics and tracking. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The use of Sentry indicates proactive error monitoring. However, some security best practices like explicit security headers and a published security policy are absent. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, reflecting a strong privacy posture. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the official government entity, confirming legitimacy and trustworthiness. However, the absence of a security.txt file or incident response contact information suggests room for improvement in vulnerability disclosure and incident management. Overall, the website is professional, secure, and compliant with privacy regulations, making it a reliable resource for its audience. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, and adding a vulnerability disclosure mechanism to further strengthen trust and security posture.

Storefront.com Online Inc. is a medium-sized technology and retail-focused company specializing in personalized print-on-demand and imaging solutions for enterprise retailers and industry suppliers. Established since 1999, the company offers a suite of services including online platforms, secure kiosk sales, backlab production workflows, and systems management solutions. The website reflects a professional business presence with consistent branding and clear service offerings but lacks comprehensive privacy, cookie, and security policy disclosures. Technically, the website employs Bootstrap 4.1.3 and jQuery 3.3.1, indicating a moderately modern tech stack with good mobile responsiveness and navigation clarity. However, the absence of DNSSEC, security headers, and HTTPS status information suggests room for improvement in security hardening. No analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the domain is well-established with a long registration period and domain locking, supporting legitimacy. Yet, the lack of published security policies, incident response contacts, and vulnerability disclosures points to a low maturity in security governance. No critical vulnerabilities or adult content were found, and the site is accessible without WAF blocking. Overall, the website scores moderately in content quality and business credibility but scores lower in privacy compliance and security posture. Strategic improvements in security policies, privacy disclosures, and technical security controls are recommended to enhance trust and compliance.

MasterCraft Boat Company is a leading manufacturer and marketer of premium performance inboard wakesurfing, wakeboarding, and ski boats. The company holds a strong market position as an innovator with numerous patents and awards, targeting watersports enthusiasts and boat buyers. Their business model includes direct sales supported by a dealer network and a comprehensive digital presence. The website reflects a mature digital infrastructure with modern technologies such as Google Analytics, Facebook Pixel, Microsoft Application Insights, and reCAPTCHA for security. The site is well-optimized for mobile and accessibility, featuring a professional design and clear navigation. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security headers and incident response contacts could be improved. Overall, the domain appears legitimate despite missing WHOIS data, supported by trust signals including NASDAQ listing and ISO certifications. Strategic recommendations include enhancing security header transparency, publishing vulnerability disclosure information, and improving incident response visibility.

Agentur Frontal AG is a Swiss advertising agency specializing in branding and digital marketing with over 20 years of experience. The company offers a broad range of creative services including branding, communication design, campaigns, packaging, websites, social media, trade shows, and storytelling. Their website reflects a professional and consistent brand image targeting businesses seeking comprehensive branding and digital solutions. Technically, the site uses modern JavaScript libraries and a CMS platform (Contens CMS), with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though some HTTP security headers are missing and no explicit security or incident response policies are published. Overall, the website is trustworthy, content-rich, and well-maintained, supporting the company's credibility and market position.

Bookiply is a vacation rental management platform focused on helping hosts maximize bookings and reduce administrative workload. It operates primarily in Europe and is part of the Holidu Group, a recognized entity in the hospitality sector. The website offers a comprehensive suite of services including property listing, channel management, and personal support for hosts. The company targets vacation rental owners and agencies, providing an all-in-one solution to increase visibility and revenue. Technically, the website is built using modern web technologies such as React and Next.js, hosted on AWS in Ireland, and integrates multiple analytics and marketing tools including Google Analytics, Hotjar, and Facebook Pixel. The site is well-optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, employs standard security headers, and uses cookie consent mechanisms aligned with GDPR requirements. However, explicit security policies and incident response contacts are not publicly disclosed, which could be improved. The WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but is mitigated by the professional presentation and detailed imprint. Overall, Bookiply presents a trustworthy and professional online presence with strong compliance and technical maturity. Strategic improvements in transparency around security policies and incident response would enhance its security posture and trustworthiness further.

The Collectivité européenne d'Alsace (CeA) is a regional governmental entity serving the Alsace region in France. The website provides comprehensive information about public services, social aid, cultural events, transport, environment, and education, targeting residents and stakeholders of Alsace. The site is well-branded, consistent, and professionally maintained, reflecting its official government status. Technically, the website uses modern web standards including HTML5, CSS3, and JavaScript, with privacy-conscious analytics via Matomo and a cookie consent mechanism powered by OreJime. The site is mobile-optimized and accessible, with good SEO practices and structured data for enhanced search engine understanding. From a security perspective, the site enforces HTTPS and uses script integrity checks but lacks some recommended security headers such as Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with GDPR-aligned policies and clear cookie consent. Overall, the website presents a low risk profile with high trustworthiness and professionalism. The lack of WHOIS data is due to EURid privacy policies and is typical for .eu domains. Strategic improvements include adding security headers and publishing a security policy or vulnerability disclosure to enhance transparency and security posture.

Electronic Arts (EA) operates the EA SPORTS website as a leading publisher of sports video games including FIFA, Madden NFL, NHL, UFC, PGA TOUR, and F1 titles. The website targets gamers and sports enthusiasts globally, offering rich content and branding consistent with a major enterprise in the technology and gaming sector. The technical infrastructure leverages modern web technologies such as New Relic for performance monitoring, Google Tag Manager and Optimize for analytics and marketing, and TrustArc for privacy consent management, indicating a mature digital presence. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response information are not present in the analyzed content. Privacy compliance is partially addressed with cookie consent mechanisms but lacks visible privacy policy or terms of service links in the provided content. Overall, the site is professional, trustworthy, and well-optimized for user experience and SEO.

Bundesliga International GmbH operates as the global marketing and media rights arm of the Bundesliga, Germany's premier football league. The company focuses on international sales of media rights, commercial partnerships, and marketing initiatives to engage football fans worldwide. The website reflects a professional and consistent brand presence aligned with the parent company DFL Deutsche Fußball Liga. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses Google Tag Manager for analytics. Security posture is good with HTTPS and cookie consent implemented, though security headers are not evident and could be improved. The absence of WHOIS data for the domain is a notable anomaly, raising questions about domain registration transparency despite the site's legitimacy and official branding. Overall, the site is well-structured, GDPR compliant, and serves its business purpose effectively.

The website represents the official digital presence of the Bundesliga, Germany's premier professional football league. It offers comprehensive sports content including live scores, news, match highlights, and club information, targeting football fans and sports media worldwide. The site is professionally designed with consistent branding and high-quality content, reflecting its position as a leading sports media entity. Technically, the site leverages modern web technologies such as Angular framework, Google Tag Manager for analytics, and Dynatrace for performance monitoring. It is hosted likely on AWS infrastructure, optimized for fast loading and excellent mobile responsiveness. The site employs robust security measures including HTTPS, security headers, and cookie consent mechanisms, indicating a mature digital infrastructure. Security posture is strong with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. However, no explicit contact information or incident response channels are publicly visible, which could be improved for transparency. Overall, the website is trustworthy, secure, and professionally maintained, though the lack of WHOIS data introduces some uncertainty about domain registration details. Strategic recommendations include enhancing visible contact and security incident response information and maintaining regular security audits to uphold the high security standards.

Komm.ONE is a public law institution and IT service provider dedicated to supporting municipalities across Baden-Württemberg, Germany. The organization develops and operates software and IT services tailored for local government administration, positioning itself as a key regional player in the public sector IT market. Their offerings include consulting, cloud services, security, innovation management, and training, targeting municipal administrations and public entities. The website reflects a professional and consistent brand image aligned with their mission. Technically, the website is built on a modern stack including jQuery, Bootstrap, and specialized CMS templates, with good mobile optimization and accessibility features. The presence of a cookie consent mechanism and Matomo analytics indicates a mature digital infrastructure with privacy considerations. Performance is moderate, and SEO practices are well implemented. From a security perspective, the site enforces HTTPS and uses cookie consent controls but lacks explicit published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, likely due to privacy protection, but the domain and website content strongly indicate legitimacy as a public institution. Overall, Komm.ONE presents a trustworthy and professional online presence with room for improvement in transparency around security policies and incident response. The risk level is low, and the site is suitable for its target audience of public sector entities.

The Collectivité européenne d'Alsace operates as a regional government entity providing a comprehensive range of public services and information to residents and stakeholders in the Alsace region of France. The website serves as an official portal with detailed information on social services, culture, transport, environment, and citizen engagement. It maintains a strong market position as the authoritative regional government body with a clear focus on transparency and public communication. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with privacy-conscious analytics via Matomo and a cookie consent mechanism powered by OreJime. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure suitable for a government portal. From a security perspective, the site enforces HTTPS and demonstrates good security hygiene with no exposed sensitive data or vulnerable libraries detected. However, it lacks explicit security headers and a published security policy or incident response contact, which are recommended for enhanced security posture. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. The absence of WHOIS data is standard for .eu domains and does not detract from the legitimacy of the site. Strategic recommendations include implementing security headers, publishing a security policy, and adding a vulnerability disclosure channel to further strengthen trust and security.

Chatlio LLC operates a specialized SaaS platform offering live chat services integrated directly with Slack, targeting businesses that use Slack for communication. The company positions itself as a niche provider simplifying customer engagement by eliminating the need for separate chat clients. Founded in 2014, Chatlio maintains a small company profile with a consistent and professional web presence emphasizing ease of integration and customer support. Technically, the website is built using modern technologies including the Hugo static site generator, JavaScript, and Cloudflare for DNS and hosting. The site is performant, mobile-optimized, and uses frameworks such as AOS and Bootstrap for UI enhancements. The integration with Slack APIs is a core technical feature. However, some improvements could be made in accessibility and security headers. From a security perspective, the site enforces HTTPS and uses domain transfer protection, but lacks DNSSEC and visible security headers. There is no published security policy or incident response information, and no cookie consent mechanism was detected despite GDPR compliance indications. No vulnerabilities or exposed sensitive data were found in the HTML content. The domain registration is consistent and transparent, supporting legitimacy. Overall, Chatlio presents a trustworthy and professional online presence with a solid technical foundation and good business credibility. Strategic improvements in privacy compliance and security transparency would enhance trust and regulatory adherence.