High-risk security reports

UKDG is a Croatian non-profit association representing consulting companies in the construction sector. Founded in 2011, it aims to protect and enhance the business interests and reputation of its members by promoting professional standards and ethics. The website reflects a mature organization with clear business objectives, member services, and international affiliation through FIDIC membership. Technically, the site uses a modern stack including Bootstrap, jQuery, and various UI libraries, hosted under Croatian registrar CARNET with consistent domain registration data. Security posture is solid with HTTPS and cookie consent implemented, though it lacks explicit security policies and some security headers. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

Web studio Sto2 is a Croatian-based small technology company specializing in web design, online and mobile application development, graphic and print design, and software solutions. Established in 2012, the company serves primarily regional clients in Croatia and neighboring countries, with a portfolio including automotive, shipbuilding, healthcare, and other sectors. The website showcases a professional portfolio of client projects and emphasizes responsive design and custom CMS solutions. Technically, the site uses modern web technologies including Vue.js and jQuery, and integrates Google Analytics for user tracking. However, there are gaps in privacy compliance, notably the absence of privacy and cookie policies, which is critical for GDPR adherence given the regional focus. Security posture is moderate with no visible security headers or incident response information, but no critical vulnerabilities were detected in the content. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security practices.

The website kishymca.org currently serves a 403 Forbidden error page, indicating that access to the content is blocked or restricted. Due to this, no meaningful business information, contact details, or policies are accessible for analysis. The domain is registered since 2000 with Tucows Domains Inc., showing a long-standing registration consistent with a legitimate organization. However, the lack of DNSSEC and absence of visible security headers or HTTPS information suggests room for security improvements. The website does not expose any personal or sensitive data, but the lack of accessible content severely limits the ability to assess business operations, compliance, or security posture. Overall, the site appears to be either under maintenance, restricted, or misconfigured, resulting in a poor user and security experience.

Walle-Aktuell is a local community information portal focused on the Walle district in Bremen, Germany. It provides residents and visitors with event listings, local news, business directories, and promotes the community magazine 'ECHT WALLE'. The website is a project of Blaukontor für Gestaltung GmbH, a local design agency. The site is built on TYPO3 CMS, featuring structured data for SEO and clear contact information. The technical infrastructure is modern and supports HTTPS, but lacks some security headers and cookie consent mechanisms. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. Security posture is good but could be improved with additional headers and policies. Overall, the site is professional, trustworthy, and safe for general audiences.

The website at rabx.de is currently inaccessible, returning a 403 Forbidden error page with minimal HTML content. This prevents any meaningful extraction of business, technical, or security information. The domain uses GoDaddy name servers, but no registrant or business details are available to confirm legitimacy or business operations. Due to the lack of accessible content, no privacy, cookie, or terms of service policies are found, and no contact information is available. The security posture cannot be evaluated, and no technologies or analytics tools are detected. Overall, the site appears inactive or restricted, limiting any assessment of its business or security maturity.

Zagreb Film Office is a municipal entity representing the city of Zagreb, Croatia, as a filming destination. The website serves as an informational and facilitation platform for film industry professionals, providing services such as location scouting and permitting. The site is built on a modern WordPress platform with WooCommerce integration, SEO optimization via Yoast, and Google Analytics tracking, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, though some security headers could be improved. Privacy compliance is basic with a cookie consent mechanism but no explicit privacy or terms of service pages found. Overall, the website is professional and trustworthy, suitable for its governmental role.

Istarski filmski ured is a regional film commission established in 2015 under the Istarska kulturna agencija (IKA) to promote and facilitate audiovisual production in the Istria region of Croatia. The website serves as an informational and promotional platform targeting filmmakers and producers, offering services such as location scouting, permit facilitation, and liaison with public and private entities. Technically, the site is built on WordPress using the Divi theme and several plugins for multilingual support, SEO, accessibility, and cookie compliance. The security posture is adequate with HTTPS enabled and some security best practices observed, though there is room for improvement in security headers and incident response visibility. Privacy compliance is partial, with a cookie consent mechanism present but no clear privacy policy or terms of service. The absence of WHOIS data for the domain is a notable concern, impacting trust and legitimacy assessment. Overall, the site is professional, content-rich, and serves its business purpose well, but could enhance transparency and security practices.

Weidmüller Lanškroun s.r.o. is a manufacturing subsidiary of the multinational Weidmüller Holding Co&KGaA, specializing in the production of precise spare parts, tools, molds, and providing metal and plastic pressing along with simple automation solutions. The company targets industrial clients requiring high-quality manufacturing services. The website reflects a professional and consistent brand image with clear contact details and partner affiliations, positioning the company as a reliable manufacturing entity within its sector. Technically, the website employs a modern front-end stack including Bootstrap, jQuery, and various UI libraries, hosted on Active24 infrastructure. The site is mobile optimized with good navigation and moderate performance. However, no CMS or advanced frameworks were detected, indicating a straightforward static or custom-built site. From a security perspective, the site uses HTTPS (implied by domain status and typical practice), but lacks visible security headers and does not implement DNSSEC. There is no privacy or cookie policy present, which is a compliance gap. No incident response or security policy information is provided. No forms are present on the main page, reducing attack surface but also limiting user interaction. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices to improve its security posture and regulatory adherence.

The website vakzlin.cz is currently inaccessible, returning a 403 Forbidden error page served by an nginx web server. This prevents any meaningful analysis of the site's content, business model, or security posture. The domain is registered since 1999 with the registrar REG-ACTIVE24 and uses name servers consistent with this provider, indicating a legitimate registration history. However, the lack of accessible content and absence of metadata, contact information, or policies severely limits the ability to assess the company's operations or compliance status. Technically, the site is hosted on Active24 infrastructure but lacks visible security headers or HTTPS confirmation. The security posture cannot be evaluated due to the blocked content. Overall, the site appears to be either restricted intentionally or misconfigured, resulting in a poor user and security experience.

EKOME, spol. s.r.o. is a Czech company specializing in environmental emission measurements and ecological consulting, with a focus on stationary pollution sources and workplace risk factors. The company holds multiple accreditations and authorizations from the Ministry of the Environment, indicating a reputable position in its sector. Their website reflects a professional service provider targeting businesses and organizations requiring environmental compliance and consulting services. Technically, the website is built on WordPress with modern plugins and demonstrates good SEO and privacy compliance, including GDPR and cookie consent mechanisms. Security posture is solid with HTTPS and reCAPTCHA integration, though some security headers could be improved. The absence of WHOIS data limits full trust assessment but the visible business information and certifications support legitimacy.

Pro-Link is a Polish digital marketing and web development company specializing in building PrestaShop e-commerce stores, SEO/SEM services, hosting, and domain registration. Established in 2004, the company has a solid market presence with a focus on small to medium businesses seeking online store solutions and digital marketing support. Their website reflects a professional and consistent brand image, targeting businesses in Poland. Technically, the site is built on WordPress with modern technologies such as Bootstrap, jQuery, and integrates Google Analytics and Tag Manager for tracking and marketing purposes. Security measures include HTTPS and Google reCAPTCHA on contact forms, but lack advanced security headers and DNSSEC. The site complies well with GDPR, featuring a comprehensive privacy policy and cookie consent mechanism. Overall, Pro-Link demonstrates a mature digital infrastructure with room for security enhancements.

PRIMALAB d.o.o. is a Croatian company specializing in providing comprehensive laboratory and process analytical equipment solutions, including sales, service, calibration, validation, and expert consulting. Established in 2010, the company serves primarily B2B clients in laboratory and industrial process sectors, offering a broad portfolio of reputable brands. The website reflects a mature digital presence built on the DotNetNuke CMS platform, with modern JavaScript libraries and integration of analytics and marketing tools such as Google Analytics and Mailchimp. The site is well-structured, mobile-optimized, and compliant with GDPR and cookie regulations, providing clear contact information and social media links. Security posture is good with HTTPS and Cloudflare DNS, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, and the WHOIS data aligns well with the business claims, indicating a trustworthy domain.

Kuhuviia.ee is a localized Estonian platform focused on facilitating waste sorting and repair services by providing an interactive map and search functionality for users to find waste disposal points and repair locations. The service is supported by Zone Media OÜ, a local Estonian company, and has been operational since 2014. The platform integrates Google Maps API for geolocation and mapping, and offers user engagement features such as adding new repair points and saving favorites. The website targets general users interested in environmental sustainability and waste management within Estonia. Technically, the website employs a modern JavaScript stack including jQuery, jQuery UI, and Google Maps API, with asynchronous loading of data from a dedicated API. The site is mobile-optimized and provides a good user experience with clear navigation and search autocomplete. However, some minor server-side errors are exposed in the HTML source, and no advanced security headers are implemented, indicating room for improvement in security hardening. From a security perspective, the site uses HTTPS but lacks DNSSEC and security headers, and exposes a PHP warning which could leak information. Privacy compliance is basic, with a privacy policy and terms of service present but no cookie consent mechanism detected. No direct contact information or incident response contacts are found, which may impact trust and compliance. Overall, the security posture is moderate but could be enhanced with standard best practices. The overall risk assessment suggests the site is legitimate and functional but would benefit from improvements in security and privacy compliance to enhance trustworthiness and regulatory adherence. Strategic recommendations include fixing server-side errors, enabling DNSSEC, implementing security headers, and adding cookie consent mechanisms to align with GDPR requirements.

ALL FOR! EVENTS is a professional membership service by memo-media Verlags-GmbH, targeting event planners in the German-speaking market. It offers access to a large database of event industry contacts, project planning tools, personalized research support, and industry publications. The website is built on WordPress with Elementor and integrates HubSpot analytics and marketing tools. The site is well-structured, mobile-optimized, and SEO-friendly. Security posture is good with HTTPS and no visible vulnerabilities, though security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant. WHOIS data is privacy protected but the domain appears actively managed and legitimate. Overall, the site presents a trustworthy and professional digital presence for its niche market.

The domain tbcsa.travel currently serves a 403 Forbidden error page, indicating that access to the website content is blocked or restricted. No meaningful business or contact information is available on the site. The WHOIS data for this domain is not accessible due to unsupported TLD WHOIS queries, providing no registrar, registrant, or creation date details. The only known WHOIS data is the expiry date set to November 1, 2025. The website uses minimal external resources, limited to Google Fonts, and lacks any visible security headers or HTTPS enforcement information. Overall, the digital maturity of the site is very low, with no privacy, cookie, or terms of service policies detected, and no analytics or tracking technologies in use. This severely limits the ability to assess the business credibility or security posture.

mudr.online is an online platform operated by SOLEN, s. r. o., providing online events, webinars, and AD tests primarily for medical professionals in Slovakia. The website is professionally designed with a clear focus on educational services in the healthcare sector. The platform leverages modern web technologies including jQuery, Vimeo API, and Cookiebot for consent management, ensuring GDPR compliance. The domain registration and business information are consistent and legitimate, supporting the credibility of the service. Security posture is good with HTTPS enforced and domain transfer protections in place, though DNSSEC is not enabled and some security headers could be improved. Overall, the site presents a trustworthy and compliant online educational service.

The European Board for Accreditation of Continuing Education for Health Professionals (EBAC) operates as a global accrediting body focused on interprofessional continuing education for health professions. The organization upholds IACPDA standards for CPD/CME accreditation, targeting health professionals worldwide. Their website presents a professional and consistent brand image, offering services such as accreditation document submission, updates, and resource links. The business model centers on accreditation services within the healthcare sector, positioning EBAC as a specialized, small-sized entity based in Germany. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. The site is mobile-optimized with good SEO practices and moderate performance. Security-wise, the site enforces HTTPS with valid SSL certificates but lacks some security headers and cookie consent mechanisms, which are recommended for enhanced protection and compliance. The security posture is solid with no visible vulnerabilities or exposed sensitive data, but the absence of a vulnerability disclosure policy and incident response information suggests room for improvement. WHOIS data is incomplete or unavailable, which slightly reduces domain trustworthiness, though the website content and professional contact details support legitimacy. Overall, EBAC's website is a credible and professional platform for healthcare accreditation services, with recommendations to improve security headers, privacy compliance, and WHOIS transparency to strengthen trust and compliance further.

Onepix. Digital Design Studio 360° is a Polish digital design agency specializing in precise digital product creation, branding, and web application development primarily for startups and new businesses. The company positions itself as a creative studio focused on delivering pixel-perfect digital solutions. The website is built on WordPress with modern plugins and technologies, offering a professional and visually appealing user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and formal privacy policies. Overall, the business appears legitimate and well-presented, with clear contact information and social media presence.

DANIELO Sportswear is a specialized Polish e-commerce retailer focused on professional cycling and sportswear for both groups and individual customers. The website offers a range of cycling clothing and accessories, positioning itself as a niche player in the sports apparel market. The business appears to be small-sized and founded in 2018, with a clear focus on quality and targeted audience engagement. Technically, the website is built on WordPress with WooCommerce, leveraging popular plugins such as Yoast SEO and Google Analytics for SEO and analytics. The site is mobile-optimized and uses modern web technologies, although some accessibility features could be improved. Security-wise, the site enforces HTTPS and includes GDPR-compliant cookie consent mechanisms, but lacks explicit security policies or incident response information. Overall, the site is professional and trustworthy with a moderate risk profile.

The International Sava River Basin Commission operates as an intergovernmental organization dedicated to the sustainable management and development of the Sava River Basin. It provides a platform for cooperation among basin countries focusing on water management, navigation, flood protection, sediment management, and environmental preservation. The website reflects a professional and authoritative presence with comprehensive content and official documentation supporting its mandate. Technically, the website employs a modern technology stack including jQuery, Bootstrap, and Slick Carousel, with integration of Google Analytics and Tag Manager for user tracking. The site is mobile optimized and exhibits good performance and SEO practices. However, there is room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS and secure login forms but lacks important security headers and published security policies such as privacy, cookie, and incident response information. The absence of WHOIS data reduces domain trust verification, though the website content and contact details support legitimacy. Overall, the security posture is moderate with recommendations to enhance compliance and transparency. The overall risk assessment is low to moderate, with strategic recommendations focusing on publishing privacy and cookie policies, implementing security headers, adding vulnerability disclosure mechanisms, and improving WHOIS transparency to strengthen trust and compliance.

Grünbauer BV is a small manufacturing company based in the Netherlands specializing in steel processing services including cambering, straightening, splitting, sawing, cold rolling, and production of various steel girders and beams. The company targets steel fabricators and steel traders with a niche B2B business model. The website provides multilingual content describing their services and contact information but lacks modern web technologies and advanced digital features. The technical infrastructure is basic, with no detected CMS or analytics tools, and the site appears static and somewhat outdated. Security posture is weak due to lack of HTTPS enforcement and missing security headers, although DNSSEC is enabled on the domain. Privacy compliance is minimal with no privacy or cookie policies present. Overall, the website is functional but requires improvements in security, privacy, and technical modernization to enhance trust and compliance.

The domain dcscoating.nl is registered since 2000 and is active, but the website content is completely empty, containing no metadata, text, or functional elements. This lack of content prevents any meaningful analysis of the business, its services, or its security posture. The absence of HTTPS information, security headers, and contact details indicates a minimal or inactive web presence. Without accessible content, the website cannot demonstrate compliance with privacy regulations or provide trust signals to visitors. The domain age suggests a potentially established business, but the lack of online presence raises concerns about current operational status or website maintenance.

Materials innovation institute (M2i) is a well-established network organization specializing in materials research, connecting industry, academia, and research institutes primarily in The Netherlands and Europe. The website reflects a professional and focused business model aimed at facilitating collaboration and innovation in materials science. The organization targets industry professionals and academic researchers, providing support in product development and production processes. The site is built on a mature WordPress infrastructure using the Avada theme and integrates modern web technologies and analytics tools with privacy considerations.

LinkmasterMonkey is a small web design and hosting service provider based in the Netherlands, targeting businesses or individuals seeking website creation and hosting solutions. The website presents basic information about ongoing projects and offers contact via email. The technical infrastructure is built on WordPress with Oxygen Builder and uses common web technologies such as jQuery and Google Fonts. Performance and mobile optimization are moderate to good, but accessibility and SEO are basic. Security posture is limited with no detected security headers or privacy policies, and WHOIS data is unavailable, raising concerns about domain legitimacy. Overall, the website is functional but lacks comprehensive security and compliance features.

Indianwebs is a well-established digital agency based in Spain, specializing in web design, SEO, and online marketing services. With over 20 years of experience and a strong presence in Barcelona and Madrid, the company positions itself as a leader in the national market. Their service offerings include web design, social media management, search engine positioning, online advertising, hosting, and domain registration. The website is professionally designed, mobile-optimized, and integrates modern analytics and marketing tools such as Google Tag Manager and Facebook Pixel. Security posture is solid with HTTPS and reCAPTCHA implemented, though there is room for improvement in security headers and explicit security policies. Privacy compliance is basic with a cookie consent mechanism but lacks a visible privacy policy and terms of service. Overall, the website reflects a credible and professional business with a strong technical foundation and good market positioning.

Scomedica is a Moroccan company specializing in the sale and servicing of scientific and laboratory equipment, with over 30 years of experience since 1994. The company targets businesses in pharmaceutical, education, agro-food, petrochemical, environmental, and other industrial sectors. Their offerings include sales, after-sales service, specialized training, maintenance, and technical support. The website is professionally designed using WordPress with WooCommerce and Elementor, reflecting a medium-sized business with a solid market presence in Morocco. Technically, the site uses modern technologies and is hosted under a Moroccan registrar, consistent with its business claims. Security posture is adequate with HTTPS and no exposed sensitive data, but lacks explicit security headers and incident response information. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and safe for general audiences.

Primalab d.o.o. is a Slovenian company established in 2006 specializing in the sale and support of laboratory and process equipment. The company offers a comprehensive range of products from reputable suppliers, alongside technical consulting, training, and maintenance services. Their market position is that of a trusted regional supplier with a focus on quality and customer service. Technically, the website is built on the DNN CMS platform, utilizing common JavaScript libraries and hosted behind Cloudflare, indicating a moderate level of digital maturity. The site is mobile-optimized and provides clear navigation and professional content. Security-wise, the site uses HTTPS and Cloudflare DNS but lacks some modern security headers and uses slightly outdated JavaScript libraries, which could be improved. Privacy compliance is addressed with clear privacy and cookie policies and consent mechanisms, though incident response and vulnerability disclosure information are absent. Overall, the website is professional and trustworthy with room for security enhancements.

Alfa Analytical Instruments Ε.Π.Ε. is a Greek company specializing in the supply and support of laboratory instruments and chemical analysis devices. Established in 1995, it serves laboratories and industrial clients across Greece, representing internationally recognized manufacturers and providing comprehensive technical and application support. The company offers chemical analysis services for various sectors including food, pharmaceuticals, and petrochemicals. The website reflects a professional and consistent brand image with clear business information and contact details. Technically, the site is built on WordPress using the Elementor page builder and Astra theme, employing modern web technologies such as jQuery and Swiper.js. Security posture is solid with HTTPS and security headers implemented, though privacy and cookie policies are absent, indicating compliance gaps. Overall, the site is well-structured, mobile-optimized, and trustworthy, supporting the company's established market position.

Pevně Spolu is a Czech-based corporate group website associated with RADKA Group, focusing on recruitment and corporate services primarily in real estate and energy sectors. The site targets job seekers and partners, offering open positions and a CV submission form. The business model revolves around employment and corporate group services, positioning itself as a medium-sized regional player with several subsidiaries under the RADKA brand. Technically, the website is built on WordPress CMS, utilizing Gravity Forms for data collection and CookieHub for cookie consent management. It employs modern web technologies including jQuery and Google Fonts, and integrates Plausible Analytics for privacy-conscious visitor tracking. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a moderate to good level of digital maturity. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms aligned with GDPR requirements. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure information. The absence of WHOIS registration data is a notable concern, impacting domain trustworthiness despite the professional presentation and corporate affiliations. Overall, Pevně Spolu presents a professional and compliant web presence with room for improvement in transparency and security documentation. Strategic enhancements in security headers, incident response visibility, and WHOIS data transparency would strengthen its risk posture and trustworthiness.

RADKA Group is a medium-sized holding company based in Czechia with over 30 years of tradition. It operates multiple subsidiaries across Europe specializing in chemical production and distribution, industrial real estate rental and management, specialized industrial technology development, and water treatment solutions. The company targets B2B clients in the chemical and industrial sectors, leveraging a family-owned business model with strong local and international presence. The website reflects a professional and consistent brand image with clear navigation and relevant business content. Technically, the website uses modern web technologies including jQuery and Google Fonts, with integration of Plausible Analytics for user tracking. The site is mobile optimized and loads with moderate performance. However, it lacks advanced security headers and comprehensive privacy or cookie policies, which limits its privacy compliance maturity. No CMS or hosting provider details are evident, and no forms or direct contact information are provided on the main site. From a security perspective, the site uses HTTPS and defers analytics scripts, but lacks visible security headers and incident response information. The WHOIS data is fully privacy protected under EURid, which is common for European businesses but limits transparency. No critical vulnerabilities or suspicious content were detected. Overall, the security posture is moderate but could be improved with better policy disclosures and security headers. The overall risk is moderate with no blocking or WAF detected. Strategic recommendations include implementing privacy and cookie policies with consent mechanisms, adding security headers, publishing contact and incident response information, and improving accessibility and compliance features to enhance trust and security culture.

Mirek Beneš operates as a freelance frontend developer based in the Czech Republic, offering specialized services in HTML template coding, JavaScript programming, WordPress development, graphic design, and email newsletter coding. The website serves as a professional portfolio showcasing client references and detailed service offerings, targeting businesses and clients across the Czech Republic seeking quality frontend development and web design solutions. The business model is focused on external collaboration and contract work, with a clear emphasis on usability and modern web standards. Technically, the website is well-constructed using modern web technologies including HTML5, CSS3, SVG graphics, and JavaScript libraries such as Swiper.js for carousels. The site is mobile-optimized, fast-loading, and SEO-friendly, with minimal but privacy-conscious analytics implemented via Plausible Analytics. However, there is no detected CMS or hosting provider information, and no advanced frameworks are identified. From a security perspective, the site uses HTTPS and does not expose sensitive data. However, it lacks explicit security headers and formal privacy or cookie policies, which are important for GDPR compliance and user trust. There is no visible incident response or vulnerability disclosure information, which could be improved to enhance security posture and transparency. Overall, the website presents a professional and trustworthy image for a small freelance business but would benefit from improved privacy compliance and security best practices. The absence of WHOIS data reduces domain trustworthiness slightly, but the content quality and business transparency mitigate this concern. Strategic recommendations include implementing privacy and cookie policies, adding security headers, and publishing incident response contacts to strengthen compliance and security.

StromKompass® is a German educational platform focused on energy efficiency, electrical engineering, and building automation. It offers multimedia content including podcasts, expert videos, and technical fact sheets targeting professionals and students in the electrical and energy sectors. The website is built on WordPress and uses modern JavaScript libraries and consent management tools, reflecting a moderate level of digital maturity. Security posture is solid with HTTPS and consent mechanisms, though it lacks explicit security policies and headers. Overall, the site is professional, trustworthy, and compliant with GDPR, serving a niche audience effectively.

BigMedia, spol. s r.o. is a well-established leader in the Central European outdoor advertising market, specializing in a broad range of advertising formats including billboards, digital displays, and transport advertising. The company offers comprehensive services from rental to production and installation, targeting businesses and advertisers seeking out-of-home advertising solutions. Their market position is strong, supported by a domain registered since 2008 and active social media presence. Technically, the website employs modern JavaScript libraries and tracking tools such as Google Analytics and Quantcast Choice for consent management, indicating a moderate level of digital maturity. The site is mobile-optimized with good navigation and professional design. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and published security policies. Privacy compliance is partial, with cookie consent present but no dedicated privacy policy page found. Overall, the website is professional and trustworthy but could improve transparency and security practices.

The website www.econoxx.com is currently inaccessible due to a client-side Proof of Work challenge that blocks direct access to any meaningful content. The domain WHOIS query returned no match, indicating the domain may not be registered or is extremely new, which raises concerns about legitimacy. No business information, contact details, or legal policies are available on the site, limiting the ability to assess the company's operations or compliance posture. Technically, the site uses JavaScript and CryptoJS for the challenge but lacks HTTPS and security headers, which are critical for secure web presence. Overall, the site presents a low trust profile and minimal digital maturity.

SCHENK STAHL GmbH is a German company established in 1986 specializing in the trading of stainless, heat-resistant, and acid-resistant steel products including pipes, tubes, fittings, and special alloys. The company targets industrial clients requiring high-quality steel materials for demanding applications. The website reflects a traditional B2B business model with a focus on product range and technical specifications. The digital infrastructure is based on TYPO3 CMS version 4.4, with legacy Flash content still present, indicating a need for modernization. The site includes multiple language options, suggesting an international audience. Security posture is moderate but lacks modern security headers and visible HTTPS enforcement. Privacy compliance is weak, with no privacy or cookie policies detected and tracking scripts active without consent mechanisms. Overall, the site is functional but requires updates to improve security, privacy, and user experience.

Van Geenen is a specialized B2B company offering comprehensive metal finishing and processing solutions targeting industrial, high-tech, and aesthetic sectors. The company positions itself as a one-stop-shop for metal refinement services including polishing, grinding, coating, and cleanroom packaging. The website reflects a professional and consistent brand image with clear service offerings and a project portfolio, catering primarily to industrial clients in the Netherlands and surrounding regions. Technically, the website employs modern JavaScript frameworks such as Alpine.js and Livewire, integrates Google Tag Manager for analytics, and uses Cookiebot for cookie consent management, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and consent mechanisms in place, but lacks advanced security headers and published security policies. The domain is newly registered in 2025 with minimal WHOIS registrant information, which slightly reduces trust but is offset by the professional website presentation and clear contact details. Overall, the website is well-structured, user-friendly, and business-focused, with room for improvement in privacy and security transparency.

Rolf Kind GmbH is a medium-sized German manufacturing company specializing in the production of high-quality forged steel components, including rings, shafts, and custom shapes made from high-alloy stainless steels and special materials such as nickel and titanium alloys. Founded in 1969, the company has a strong market position as a family-owned business with over 50 years of experience, serving industrial clients requiring precision and customized forging solutions. Their website reflects a professional digital presence built on TYPO3 CMS, featuring multimedia content, a cookie consent mechanism, and multilingual support (German and English). Technically, the website employs modern web technologies including HTML5 video, jQuery, and Google Maps API integration. The site is mobile-optimized and SEO-friendly, though some accessibility features could be enhanced. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data, but security headers are not explicitly detected and no dedicated security or incident response policies are published. Overall, the website demonstrates good privacy compliance with a comprehensive privacy policy and cookie consent mechanism aligned with GDPR. Contact information is clearly presented, and social media channels are active, enhancing business credibility. No critical security or content safety issues were found, and the domain registration appears legitimate and consistent with the business profile. Strategic improvements could focus on enhancing security headers, publishing incident response and vulnerability disclosure policies, and improving accessibility compliance.

PRECHEZA a.s. is a well-established large European manufacturer specializing in titanium dioxide and related chemical products. The company operates primarily in the manufacturing sector, serving industrial and commercial clients with a diverse product portfolio including pigments, ferrous sulfate, calcium sulfate, and sulfuric acid. It is part of the AGROFERT holding group, which enhances its market position and credibility. The website reflects a professional business presence with clear product offerings and legal disclosures. Technically, the website employs modern web technologies such as Google Tag Manager, Bootstrap, and slick carousel, and is built on the Kentico CMS platform. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Performance is moderate, and SEO practices are adequately implemented. Privacy compliance is addressed through a cookie consent mechanism and a dedicated privacy policy page. From a security perspective, the site uses HTTPS and implements cookie consent controls, but lacks visible security headers and explicit security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data reduces transparency but does not significantly detract from the overall trustworthiness given the professional presentation and business information. Overall, PRECHEZA a.s. demonstrates a solid digital presence with good security hygiene and compliance practices. Strategic improvements in security headers, incident response transparency, and WHOIS data availability would further enhance trust and security posture.

RADKA spol. s r.o. is a Czech-based chemical distribution company with over 30 years of history, specializing in high-quality chemical products including plastics, elastomers, coatings, adhesives, and water treatment chemicals. As a member of the RADKA Group, it holds a solid market position in the manufacturing and chemical distribution sectors, targeting industrial and commercial clients. The website reflects a professional and consistent brand image with clear business information and certifications such as ISO 9001 and ISO 14001, enhancing trustworthiness. Technically, the website is built on WordPress 6.8.3 with modern performance optimizations including WP Rocket and Rank Math SEO. It uses Google Fonts and integrates Plausible Analytics for privacy-conscious tracking. The site is mobile-optimized and loads quickly, with good SEO practices and basic accessibility features. However, explicit privacy and cookie policies are not found, which is a gap in compliance. From a security perspective, the site uses HTTPS with excellent SSL configuration and secure form handling. No major vulnerabilities or exposed sensitive data were detected. Security headers are not explicitly present, and there is no visible vulnerability disclosure or security.txt file, which could improve the security posture. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for commercial entities. Overall, RADKA.cz presents a trustworthy and professional online presence with strong business credibility and technical implementation. To further enhance security and compliance, the company should publish clear privacy and cookie policies, implement security headers, and consider a vulnerability disclosure policy. These steps will improve user trust and regulatory compliance.

The Czech chemical society is a well-established professional organization serving the chemical science community in the Czech Republic and Europe. It provides membership services, organizes conferences, publishes journals, and supports young chemists. The website reflects a medium-sized non-profit entity with a consistent brand and professional content. Technically, the site is built on WordPress with common plugins and demonstrates moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced but lacks advanced security headers and formal privacy and cookie policies, indicating compliance gaps. Overall, the domain's age and WHOIS data support legitimacy and trustworthiness.

Bouwen met Staal organizes the annual Staalbouwdag event, a leading Dutch trade fair and congress focused on steel construction. The event targets decision-makers across the steel and construction sectors, offering networking, knowledge sharing, and showcasing innovations. The website is professionally designed using WordPress and the Divi theme, with good SEO practices and structured data implementation. However, it lacks privacy and cookie policies, and the Google Analytics plugin is installed but not configured. Security posture is adequate with HTTPS but missing security headers and incident response information. Overall, the site is trustworthy and serves its business purpose well but should improve compliance and security transparency.

Nationale staalprijs is a Dutch organization dedicated to promoting and awarding excellence in steel construction projects. The website serves as a platform to showcase nominations, winners, and project submissions related to steel construction within the Netherlands. It targets professionals and companies in the steel construction industry, providing information and recognition to encourage innovation and quality in this sector. The business model appears to be non-profit or industry promotional in nature, focusing on national recognition rather than commercial sales. Technically, the website is built on Drupal 10 CMS and integrates modern web technologies including Google Tag Manager, Google Analytics, YouTube and Vimeo APIs, and Google reCAPTCHA for form security. The site is mobile optimized with good navigation and SEO practices, although some accessibility features could be improved. Performance is moderate with asynchronous loading of scripts. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA on user registration and login forms to mitigate automated abuse. However, no explicit security headers were detected in the provided content, and there is no published security policy or incident response information. No vulnerabilities or exposed sensitive data were found in the analysis. Privacy compliance is limited as no privacy or cookie policies were found on the homepage content, which could be improved to meet GDPR standards. Overall, the website is professional, trustworthy, and well-targeted to its audience. The main risks relate to privacy compliance and security policy transparency. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, and providing vulnerability disclosure information to enhance trust and compliance.

Brandveiligmetstaal.nl is a specialized Dutch digital information platform dedicated to fire safety in steel constructions. It provides comprehensive resources, including practical design tools, publications, and expert support, primarily targeting construction professionals such as architects and engineers. The website is supported by recognized industry partners, enhancing its credibility and market position within the niche of fire-safe steel construction. Technically, the site employs a modern but standard web technology stack including Bootstrap, jQuery, and Font Awesome, ensuring a responsive and user-friendly experience. However, there is room for improvement in security practices, particularly in implementing security headers and privacy compliance mechanisms. The security posture is moderate with HTTPS usage but lacks advanced protections. Overall, the site is professional, trustworthy, and content-rich, but would benefit from enhanced privacy and security policies to align with best practices and regulatory requirements.

Bouwen met Staal operates the Conserveringsinformatiesysteem, a specialized digital information portal focused on the design and assessment of steel constructions for durability, particularly addressing corrosion protection in infrastructure projects such as bascule bridges. The website serves a niche audience of engineers and construction professionals by providing curated, phase-based technical content supported by industry partners. The business model centers on knowledge sharing and industry collaboration rather than direct commercial sales. Technically, the website employs legacy technologies including Prototype.js and Adobe GoLive for content management, with JavaScript-based UI elements such as slideshows and lightbox galleries. While HTTPS is used, there is a lack of modern security headers and cookie consent mechanisms, indicating room for improvement in security and privacy compliance. The site performance is moderate with basic mobile optimization and accessibility features. From a security perspective, the site shows basic best practices such as HTTPS and form POST methods but lacks advanced protections like CSP or HSTS headers. No privacy or cookie policies are published, which is a compliance gap under GDPR. Contact information is clearly provided, enhancing business credibility. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the website is a moderately professional and trustworthy resource within its niche but would benefit from enhanced security measures, privacy compliance, and modernization of its technical stack to improve user trust and regulatory adherence.

Duurzaam in Staal is a specialized information platform focused on promoting steel as a sustainable building material in the Netherlands. The website provides comprehensive content on sustainability themes such as energy use, light construction, recycling, and reuse, targeting professionals and stakeholders in the construction and steel industries. It maintains a niche authoritative position by offering access to publications, events, and tools related to sustainable steel construction. Technically, the site uses a traditional web stack including Bootstrap, jQuery, and common CSS/JS libraries, with moderate performance and basic mobile optimization. Security posture is average, with HTTPS implied but lacking advanced security headers and privacy compliance mechanisms such as cookie consent. Contact information is clearly presented, including phone and physical address, and social media presence is established on LinkedIn and Twitter. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.

Staalsupport.nl is a specialized digital information platform operated by Bouwen met Staal, focused on providing technical guidance and support for steel construction professionals in the Netherlands. The website serves as a knowledge base with over 300 questions and answers related to steel design, connections, fire safety, materials, sustainability, and execution. It is supported by the Koninklijke Staalfederatie, enhancing its credibility and industry relevance. The platform also offers direct helpdesk support for unanswered queries, positioning itself as a trusted resource in the niche market of steel construction. Technically, the website employs standard web technologies including HTML, CSS, JavaScript, and external libraries such as Font Awesome and Google Fonts. It uses HTTPS and includes analytics tools like Mtrack and MonkeyStats for user tracking. While the site is mobile responsive at a basic level and has good navigation and content structure, it lacks advanced security headers and formal privacy or cookie policies, which are areas for improvement. From a security perspective, the site benefits from HTTPS encryption and absence of exposed sensitive data or vulnerable libraries. However, the lack of security headers and absence of privacy and cookie policies reduce its compliance posture. No WAF or blocking mechanisms are detected, and the domain registration data aligns well with the website's business claims, indicating a trustworthy and legitimate online presence. Overall, Staalsupport.nl is a professionally maintained, niche informational website with good business credibility and moderate technical maturity. Enhancing privacy compliance and security best practices would further strengthen its risk profile and user trust.

Vin De Constance is a premium wine brand website showcasing a rich history of over 300 years in winemaking. The site targets adult consumers interested in high-quality alcoholic beverages and brand heritage. The business model focuses on brand marketing and storytelling through multimedia content, including images and videos, to engage visitors and promote their products. The website is professionally designed with consistent branding and good user experience, optimized for mobile devices and featuring clear navigation.

The Hrvatski audiovizualni centar (HAVC) is a Croatian public institution dedicated to supporting and promoting the audiovisual sector, including film production and cultural initiatives. The website serves as an authoritative portal providing news, event calendars, film catalogs, and official publications relevant to the Croatian and international film community. It targets industry professionals, cultural stakeholders, and the general public interested in audiovisual culture. The business model is primarily public funding and cultural promotion, positioning HAVC as a key national player in the media sector. Technically, the website employs a modern JavaScript-based frontend with libraries such as jQuery, Nivo Slider, and Google Fonts, alongside integrations with Google Maps API, Facebook Pixel, and Google Analytics for tracking and user engagement. The site is mobile-optimized and accessible, with features to adjust contrast and font size, enhancing usability. Hosting and domain registration are consistent with a Croatian academic network registrar, indicating a stable and legitimate infrastructure. From a security perspective, the site uses HTTPS and includes tracking scripts responsibly. However, it lacks visible security headers and does not publish a security policy or incident response contacts, which are areas for improvement. Privacy compliance is partial; while a cookie banner is present, it lacks explicit consent mechanisms, and no privacy policy or terms of service are directly linked or found on the homepage. The absence of vulnerability disclosure mechanisms also suggests room for maturity in security practices. Overall, HAVC's website is professional, content-rich, and trustworthy, with a strong business credibility score. The main risks relate to privacy compliance and security best practices, which if addressed, would enhance user trust and regulatory adherence. Strategic recommendations include publishing comprehensive privacy and security policies, implementing security headers, and improving cookie consent mechanisms.

Dineplan operates a digital platform focused on providing universal restaurant vouchers primarily targeting the South African hospitality market. The website promotes the benefits of accepting Dineplan vouchers, aiming to increase restaurant exposure and revenue through a seamless voucher redemption process. The platform leverages HubSpot CMS technology, integrating forms and analytics to engage restaurant partners effectively. The website is professionally designed, mobile-optimized, and includes clear calls to action and contact mechanisms. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not published. Privacy compliance is supported by comprehensive privacy and terms pages hosted on the main domain. Overall, the site reflects a mature digital presence suitable for its business model and audience.

SCI operates a specialized certification scheme focused on steel-based construction products and building design, providing assurance to manufacturers, specifiers, and warranty providers that products meet rigorous standards. The company leverages UKAS accreditation and ISO/IEC 17065 compliance to maintain credibility and trust in the construction industry. The website presents clear information about their schemes, contact details, and certification documentation, positioning SCI as a trusted independent certifier with over 30 years of expertise. Technically, the website uses a modern frontend stack including Bootstrap and jQuery, delivering a responsive and professional user experience. However, there is room for improvement in SEO, accessibility, and security best practices such as enabling DNSSEC and security headers. The absence of privacy and cookie policies indicates a compliance gap that should be addressed. From a security perspective, the domain is well-managed with clientTransferProhibited status and a long registration period, supporting legitimacy. No WAF or blocking mechanisms were detected, and no critical vulnerabilities or exposed sensitive data were found. However, the lack of security headers and incident response information suggests moderate security maturity. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening to reduce risk and improve user trust.