Medium-risk security reports

booklookerforum.de is a German language community forum dedicated to supporting users and sellers on the booklooker.de marketplace, which specializes in used and antiquarian books as well as related media such as films, music, and games. The forum provides discussion areas for new features, user help, shipping, payment methods, and various book genres, fostering an engaged user base with thousands of topics and posts. The business model centers on community engagement to support and enhance the marketplace experience. Technically, the site runs on the phpBB forum platform with modern JavaScript libraries like jQuery and Font Awesome for UI elements. The hosting appears stable with dedicated nameservers, and the site is accessible via HTTPS, although explicit security headers are not visible in the provided content. Security posture is moderate with secure login forms but lacks published security policies or vulnerability disclosure mechanisms. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is professional, trustworthy, and well-maintained, serving a niche e-commerce community effectively.

timeanddate.de is a well-established German-language website operated by Time and Date AS, providing comprehensive and reliable information and tools related to time, calendars, weather, and astronomy. The site offers a broad range of services including world clocks, time zone converters, calendars, weather forecasts, astronomy data, countdown timers, and date calculators, targeting a general audience interested in accurate time-related information. The business model is primarily advertising-supported with options for supporters to subscribe for an ad-free experience and exclusive content. The company has a strong market position as a reputable media provider in this niche since 1995. Technically, the website employs modern advertising technologies such as Google Publisher Tags, Amazon APS, Prebid.js, and InMobi CMP for consent management, ensuring GDPR compliance. The site is hosted with DNS Made Easy nameservers and demonstrates good performance, mobile optimization, and accessibility. SEO practices are well implemented with proper metadata and structured data. The site uses HTTPS with excellent SSL configuration, but lacks explicit security headers and a published security policy. From a security perspective, the site shows good GDPR compliance with a consent management platform and privacy policy. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a published security policy, incident response contacts, and vulnerability disclosure mechanisms are areas for improvement. Advertising practices are transparent and use reputable ad networks and tracking services. Overall, timeanddate.de is a professional, trustworthy, and secure website with excellent content quality and user experience. Strategic recommendations include publishing a dedicated security policy, incident response information, and security.txt file to enhance transparency and trust. The domain WHOIS data is consistent with the business claims, showing a long-standing registration and no suspicious patterns.

The website autodoc.de is currently inaccessible due to a Cloudflare security challenge page requiring human verification via Turnstile captcha. This prevents access to any meaningful business or security content. The domain uses Cloudflare nameservers, indicating privacy protection and security measures at the DNS level. No metadata, contact information, or business details are available for analysis. The technical infrastructure relies heavily on Cloudflare services for security and performance. Due to the content block, no evaluation of privacy policies, cookie consent, or terms of service is possible. The security posture cannot be fully assessed beyond the presence of Cloudflare's WAF and challenge mechanisms. Overall, the site appears to be protected by strong security controls but lacks accessible content for further analysis.

Art Paper Editions (APE) is a niche independent publisher specializing in award-winning books on photography, art, and architecture. Founded in 2010 and based in Belgium, APE operates an e-commerce platform built on Shopify to sell its publications and related apparel. The company collaborates closely with artists, writers, and cultural institutions, positioning itself as a respected player in the art publishing market. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site leverages modern e-commerce technologies including Shopify, Google Tag Manager, and Facebook Pixel, ensuring robust performance and analytics capabilities. Security posture is solid with HTTPS and no exposed sensitive data, though improvements are recommended in DNS security and cookie consent compliance. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

RVB Books is an independent publisher and gallery specializing in fine arts books, operating primarily through an e-commerce Shopify platform. The company has a niche market position targeting art enthusiasts and collectors, offering curated collections of art books and exhibitions. The website is professionally designed with a clear catalog and artist listings, supporting a small business model founded in 2011 in France. Technically, the site leverages Shopify's robust infrastructure, modern JavaScript libraries, and GDPR cookie consent mechanisms, ensuring a good user experience and moderate performance. Security posture is solid with HTTPS enforced, domain status protections, and form protection via hCaptcha, though DNSSEC is not enabled and no explicit security or incident response policies are published. Overall, the site is trustworthy, safe, and compliant with basic privacy requirements, though improvements in transparency and security documentation are recommended.

Global-Tickets by TD Entertainment C.V. is a well-established e-commerce platform specializing in the sale of motorsport event tickets and related travel packages, focusing on Formula 1, MotoGP, and DTM events worldwide. With over 25 years of experience and a large customer base exceeding 850,000 satisfied clients, the company holds a strong market position supported by official partnerships with numerous racing circuits and high customer trust ratings on platforms like Trustpilot and Google. The website offers a comprehensive and user-friendly shopping experience, including VIP and group event options, with a focus on secure payment and insured ticket delivery. Technically, the website employs modern web technologies including Bootstrap, jQuery, Owl Carousel, and integrates multiple tracking and marketing tools such as Google Tag Manager, Facebook Pixel, Bing Ads, and Usercentrics for cookie consent management. The site is mobile-optimized and SEO-friendly, providing a professional and accessible user experience. Security practices include HTTPS encryption, secure payment processing, and ticket insurance, although explicit security headers could be improved. The security posture is solid with no detected vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a comprehensive privacy policy, cookie consent mechanisms, and GDPR adherence. Business credibility is reinforced by transparent company information, multiple trust indicators, and consistent WHOIS data matching the business claims. Overall, Global-Tickets presents a trustworthy, professional, and secure platform for motorsport ticket sales, with recommendations to enhance security headers and publish dedicated security policies to further strengthen their security posture.

CIVIC is a UK-based digital innovation company specializing in improving everyday interactions through strategy, design, development, and support services. Their market position is strong within government, education, and non-profit sectors, offering key services such as UX design, accessibility evaluations, web development, and GDPR-compliant cookie control solutions. The website reflects a mature, professional business with consistent branding and a clear focus on compliance and user experience. Technically, the site is built on Drupal 10, uses Matomo for analytics, and implements a robust cookie consent mechanism, indicating a high level of digital maturity. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though formal security policies and incident response contacts are absent. Overall, the site is trustworthy, well-designed, and compliant with privacy regulations, supporting a high AI score and low risk profile.

Mapy.com is a well-established online mapping portal operated by Gransy, s.r.o., offering detailed global maps with specialized features such as hiking and cycling trails, route planning, and aerial/3D views. The platform targets tourists, outdoor enthusiasts, and general users seeking comprehensive map services. The website demonstrates a mature digital infrastructure leveraging modern JavaScript APIs, asynchronous loading, and integration with Seznam.cz services. Security posture is solid with HTTPS enforced and no evident vulnerabilities, though additional security headers and formal security policies could enhance protection. Privacy and cookie policies are present and GDPR compliant, supporting user trust. Overall, the site is professional, user-friendly, and trustworthy with a strong market position in the transportation and mapping sector.

HamburgerTRAUER operates a regional obituary and grief support website focused on the Hamburg area, providing users access to local obituary ads, memorial pages, grief advice, and related services. The platform is closely associated with the reputable Hamburger Abendblatt and FUNKE Medien Hamburg, enhancing its market credibility and regional relevance. The website offers a comprehensive suite of services including obituary search, ad placement, grief counseling, and a directory of funeral-related service providers, targeting individuals dealing with bereavement in the Hamburg region. Technically, the website employs a modern technology stack including Bootstrap for responsive design, jQuery, Swiper.js for carousels, and integrates Google Tag Manager and Snowplow Analytics for tracking and data collection. Consent management is implemented via Consentmanager.net, ensuring GDPR compliance. The site is hosted on secure infrastructure with HTTPS enforced and uses multiple authoritative name servers, indicating a stable hosting environment. From a security perspective, the site demonstrates good practices such as HTTPS, security headers, and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit incident response contacts and a security.txt file, which could enhance its security posture. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms in place. Overall, HamburgerTRAUER presents a trustworthy, professional, and well-maintained online presence with a clear business focus and solid technical and security foundations. It is suitable for general audiences seeking obituary and grief-related services without any adult or questionable content.

Opinary is a technology company founded in 2014 that specializes in interactive polling tools designed to engage audiences and provide data-driven insights for global brands and premium publishers. Their platform enables brands to reach over 125 million users through interactive voting tools embedded within a network of respected publishers. The company operates primarily in the technology and media sectors, targeting B2B clients such as advertisers and publishers. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support.

Transmatico GmbH is a German-based company specializing in sustainable local crossmedia advertising solutions for newspapers, magazines, and advertising papers. Their offerings include digital native advertising content preparation, landing pages, traffic management with SEO, and sales training. The company has a strong market presence with over 200 successful integrations and multiple industry awards, positioning them as a reputable player in the media advertising sector. The website is professionally designed, mobile-optimized, and provides comprehensive information about their products and client successes. Technically, the site runs on WordPress with Elementor and uses modern analytics tools like Matomo and Google Analytics, alongside a GDPR-compliant cookie consent mechanism. Security posture is good with HTTPS and security headers in place, though the absence of a public security policy and incident response contacts is noted. The WHOIS data for the domain is missing or unavailable, which raises some concerns about domain registration transparency. Overall, the website and business appear legitimate and professional, but the domain registration inconsistency slightly reduces trustworthiness.

journaway GmbH operates a professional online travel platform specializing in extraordinary multi-day trips across over 100 countries. The company targets adventure travelers seeking unique and bucket-list experiences. The website demonstrates a modern technical infrastructure built on React and Next.js, with optimized performance and mobile responsiveness. Security posture is strong with HTTPS enforcement and multiple security headers, though explicit security policies and incident response information are not published. Privacy compliance is well addressed with clear privacy and cookie policies. The absence of WHOIS data reduces domain registration transparency, but the overall digital maturity and business credibility remain solid. Strategic recommendations include publishing security policies, incident response contacts, and vulnerability disclosure information to enhance trust and compliance.

EGIA is a well-established organization founded in 2003, specializing in contractor training, financing solutions, utility services, and nonprofit workforce development within the HVAC and energy sectors. The company operates multiple subsidiary platforms including Contractor University, HVAC Distributor University, OPTIMUS Financing, and the EGIA Foundation, positioning itself as a comprehensive service provider in its industry. The website reflects a mature digital presence with consistent branding and clear navigation aimed at contractors, distributors, manufacturers, and utility partners. Technically, the site is built on WordPress with WooCommerce and Gravity Forms, leveraging modern web technologies and providing a moderate performance experience with good mobile optimization. Security posture is adequate with HTTPS and reCAPTCHA implemented, though there is room for improvement in security headers and formal security policies. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Overall, the website is professional, trustworthy, and safe for general audiences, with a strong business credibility score.

ConversionRuler is a specialized SaaS provider offering subscription-based PPC and online marketing campaign tracking and ROI measurement services. Established in 2002, the company targets SEO, SEM, and PPC professionals as well as ecommerce businesses seeking detailed insights into their marketing effectiveness. The website presents a clear business model with transparent pricing and a focus on usability and integration with various online marketing channels. Technically, the site uses standard web technologies with AWS DNS infrastructure, but lacks modern CMS or advanced frameworks. The design is professional though somewhat dated, with basic mobile optimization and accessibility features. Security posture is moderate; while domain registration is stable and protected against unauthorized changes, the absence of DNSSEC and security headers, as well as missing cookie consent mechanisms, indicate areas for improvement. No explicit privacy or incident response policies are published, which may affect compliance with GDPR and other regulations. Overall, the site is functional and trustworthy but would benefit from enhanced security and privacy practices to strengthen user trust and regulatory compliance.

Technische Hochschule Georg Agricola (THGA) is a specialized engineering university located in Bochum, Germany, offering a broad range of practice-oriented Bachelor and Master degree programs in engineering disciplines such as mechanical engineering, electrical engineering, and industrial engineering. The institution maintains strong industry partnerships to ensure excellent job prospects for its graduates. The website reflects a mature digital infrastructure built on TYPO3 CMS, leveraging modern web technologies and providing a mobile-optimized, accessible, and SEO-friendly user experience. Privacy and cookie compliance are well implemented with a consent management platform and a comprehensive privacy policy. Security posture is solid with HTTPS enforced and minimal exposure of sensitive data, though some improvements in security headers and incident response transparency are recommended. Overall, the website presents a professional, trustworthy, and user-friendly platform that effectively supports the institution's educational mission and stakeholder engagement.

The Max Planck Institute for Security and Privacy is a research institute founded in 2019 and affiliated with the Max Planck Society in Germany. It focuses on advancing security and privacy technologies through foundational research, systems development, and societal impact. The website serves academics, researchers, students, and professionals interested in security and privacy research, offering information about research areas, people, career opportunities, and contact details. The business model is centered on academic research and education within the technology sector, positioning itself as a leading institution in its field. Technically, the website is built on the JustRelate CX Cloud CMS platform, utilizing modern JavaScript libraries such as RequireJS and Slick Carousel for UI components. The site is mobile-optimized with good SEO practices and basic accessibility features. Performance is moderate with deferred loading of styles and scripts. Security is well implemented with HTTPS enforced and CSRF protection on forms, though explicit security headers are not detected. Privacy compliance is good with a comprehensive privacy policy, but lacks a cookie consent mechanism. Security posture is strong overall with no visible vulnerabilities or exposed sensitive data. However, improvements are recommended in adding security headers, publishing a security policy, and providing vulnerability disclosure information. The absence of WHOIS data reduces trust slightly, but the strong affiliation with the Max Planck Society and professional website design mitigate concerns. No advertising or tracking services are detected, supporting user privacy. Overall, the website is safe, professional, and trustworthy, serving its academic audience effectively. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing incident response and vulnerability disclosure information, and improving accessibility features to further strengthen compliance and user trust.

Fraunhofer-Gesellschaft is a leading German research organization specializing in applied sciences and technology transfer. The website presents comprehensive information about their research fields, strategic initiatives, and collaborations with industry and academia. Their market position is strong as a key player in innovation and technology development in Germany and internationally. The technical infrastructure of the website is modern, leveraging popular JavaScript libraries and Adobe Experience Manager CMS, with good mobile optimization and accessibility. Security posture is robust with HTTPS, DNSSEC, and security headers implemented, though explicit incident response contacts and vulnerability disclosure mechanisms are not prominently published. Overall, the website reflects a professional and trustworthy organization with a strong focus on research excellence and industry collaboration.

EBZ Business School GmbH is a specialized educational institution focused on real estate and related management disciplines, positioning itself as Germany's largest real estate university. The website offers comprehensive information about degree programs, financing options, and career services, targeting students and industry partners. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes accessibility and cookie consent features, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and privacy-conscious analytics, though it lacks explicit security policy disclosures. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, supporting the institution's credibility and market position.

The Center for Advanced Internet Studies (CAIS) GmbH operates a professional academic research website focused on digital age internet studies. The site targets researchers and stakeholders interested in internet research and digital society. The business model is that of a specialized research institute, likely non-profit, with a small organizational size and a focus on collaboration, events, and publications. The website is built on WordPress using the Divi theme and several plugins including Yoast SEO and Borlabs Cookie for privacy compliance. The technical infrastructure is modern and supports good SEO and mobile optimization, although accessibility features are basic. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit security policies. No privacy policy or terms of service were found, which is a compliance gap. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

Hochschule Bochum is a large public University of Applied Sciences in Germany offering a wide range of bachelor and master degree programs across disciplines such as construction, economics, technology, health, computer science, and sustainability. The website is professionally designed, content-rich, and well-structured to serve students, prospective students, and academic stakeholders. Technically, the site is built on TYPO3 CMS with modern web technologies and demonstrates good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled, but lacks explicit security headers and privacy compliance documentation. No signs of blocking or WAF interference were detected, allowing full content access. Overall, the site is trustworthy and credible but would benefit from enhanced privacy and security disclosures.

AKAFÖ Akademisches Förderungswerk A.ö.R. is a regional non-profit student services organization serving the Bochum area and nearby campuses. It provides a broad range of services including student housing, financial aid (notably BAföG), cultural programs, inclusion services, and childcare. The website is well-structured, professionally designed, and targets students and stakeholders in higher education institutions in Germany. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes multilingual support via Google Translate. Analytics are implemented using Matomo and Google Analytics with a GDPR-compliant cookie consent mechanism. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security policies and incident response information are not publicly disclosed. Overall, the site is trustworthy, compliant, and serves its audience effectively.

The website wirtschaft.nrw is the official portal of the Ministry for Economic Affairs, Industry, Climate Protection and Energy of North Rhine-Westphalia, Germany. It serves as a comprehensive information hub for economic policy, industry, energy, climate protection, innovation, and digitalization initiatives within the state. The site targets businesses, entrepreneurs, policymakers, and the general public interested in these sectors. It is positioned as a trusted government source with extensive content and clear navigation. Technically, the site is built on Drupal CMS with modern web technologies including Bootstrap and Modernizr. It employs Matomo analytics with strong privacy controls respecting user consent and Do Not Track settings. The site is mobile-optimized, accessible, and performs moderately well. Hosting and domain registration are consistent with a German government entity. From a security perspective, the site uses HTTPS with good SSL configuration and cookie consent mechanisms. However, some security headers are not explicitly detected and DNSSEC is not enabled, which could be improved. There is no public security policy or incident response contact information visible. No vulnerabilities or suspicious content were found. Overall, wirtschaft.nrw demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. It is a safe and reliable resource for its audience. Strategic recommendations include enabling DNSSEC, enhancing security headers, publishing a security.txt file, and improving incident response visibility to further strengthen its security posture.

Vzdělávací institut Středočeského kraje is a well-established educational organization founded in 2009, providing a broad range of training and seminars primarily targeting educators, public administration employees, and social service workers in the Central Bohemian Region of the Czech Republic. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its audience. Technically, the site employs modern JavaScript frameworks such as Vue.js, integrates Google Analytics and Tag Manager for analytics, and uses responsive design techniques to ensure good mobile usability. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers and incident response policies are not publicly disclosed. Overall, the domain registration data aligns well with the website's identity, supporting its legitimacy and trustworthiness.

Integrovaná doprava Středočeského kraje (IDSK) is a public organization focused on managing and developing an integrated transport system for the Central Bohemian Region and Prague. Established in 2017, it plays a key role in coordinating rail and bus transport services, economic administration, quality standards, and marketing efforts in the region. The website reflects a professional and consistent brand presence with clear information targeting residents and travelers in the region. Technically, the site uses standard web technologies including HTML5, CSS, JavaScript, and jQuery, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS usage and no exposed sensitive data, but lacks advanced security headers and uses an outdated JavaScript library. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and credible, supported by official contact details and partner links.

The website portalpo.cz serves as a government portal for contributory organizations in the Czech Republic, providing login and instance selection services. It is developed and maintained by BISON, a Czech organization, and targets regional government entities and their contributory organizations. The portal is relatively new, with domain registration in May 2024, indicating a recent launch or redevelopment. The site uses a modern technology stack centered on the Nette PHP framework, Bootstrap for styling, and common JavaScript libraries such as jQuery and TinyMCE. The infrastructure includes SQL Server as the backend database and is hosted under a Czech registrar with DNS servers from Forpsi, a known Czech hosting provider.

T-MAPY spol. s r.o. is a Czech company specializing in information technology and geographic information systems, providing a range of GIS-based solutions primarily targeting public administration, integrated rescue systems, transport, and commercial sectors. Their product portfolio includes digital technical maps, facility management applications, crime analytics, cemetery management, and electronic record services. The company has a strong market presence with over three decades of experience and a substantial client base including government entities and public organizations. Technically, the website is built on WordPress with modern integrations such as Google Tag Manager and reCAPTCHA, indicating a moderate level of digital maturity. The site is mobile-optimized and uses HTTPS, but lacks some advanced security headers and explicit privacy or cookie policies, which are areas for improvement. From a security perspective, the site demonstrates basic good practices like HTTPS and bot protection but could enhance its posture by implementing comprehensive security headers and publishing clear security and incident response policies. The absence of WHOIS data limits domain trust verification, though the website content and client references support legitimacy. Overall, the website is professional and trustworthy with good content quality and business credibility. Strategic improvements in privacy compliance and security transparency would further strengthen its risk profile and user trust.

Středočeský kraj operates an official regional government web portal serving the Central Bohemian Region of the Czech Republic. The website provides comprehensive information about regional government activities, public services, news, projects, and contact details. It targets residents, businesses, and stakeholders within the region, offering services such as public transport information, social services, education, and grant programs. The portal is well-positioned as a trusted government information hub with a large audience and established presence since 2005. Technically, the website is built on the Liferay CMS platform with React components, leveraging modern web technologies and frameworks. It integrates third-party analytics and performance monitoring tools such as Google Analytics and AppDynamics. The site demonstrates good mobile optimization, accessibility, and SEO practices, ensuring a positive user experience across devices. From a security perspective, the site enforces HTTPS and uses nonce-based Content Security Policy for inline scripts. While explicit security headers are not fully confirmed, no critical vulnerabilities or exposed sensitive data were detected. Privacy policies and GDPR compliance information are present, though the cookie consent mechanism could be improved. No vulnerability disclosure or incident response policies are published, representing an area for enhancement. Overall, the website is a professional, secure, and credible government portal with minor gaps in privacy and security transparency. Strategic improvements in cookie consent, security policy publication, and vulnerability disclosure would further strengthen its security posture and user trust.

Webstudio is a specialized service provider focused on bringing healthcare data to the web through interactive visualizations, graphic design, editorial work, and web development. Their market position is niche, serving state and academic sectors in the Czech Republic with a focus on healthcare and medical education projects. The website demonstrates a good level of digital maturity with modern technologies such as Google Analytics and Microsoft Clarity integrated for analytics and user behavior insights. The site is well-designed, mobile-optimized, and accessible, providing a professional user experience. Security posture is solid with HTTPS enforced and appropriate security headers, although explicit security and privacy policies are not publicly available. Overall, the domain and website appear legitimate and trustworthy, with privacy-protected WHOIS data typical for small specialized businesses.

Ústav zdravotnických informací a statistiky ČR (ÚZIS ČR) is a Czech government agency responsible for collecting, processing, and publishing healthcare statistical data. It operates the National Health Information System (NZIS) and collaborates with other governmental and international health organizations. The website serves healthcare professionals, statisticians, researchers, and the public with comprehensive data and reports. The organization is positioned as the authoritative source for healthcare statistics in the Czech Republic, supported by its affiliation with the Ministry of Health.

The website https://mv.gov.cz/ is the official online presence of the Ministry of Interior of the Czech Republic, a key government entity responsible for internal affairs including public order, security, migration, and eGovernment services. The site provides comprehensive information and services targeted at Czech citizens, foreigners, and public institutions. It is positioned as a central authoritative source for internal state administration and security-related matters. Technically, the site employs legacy jQuery scripts alongside modern tracking tools such as Google Tag Manager and Analytics, with HTTPS and Content Security Policy headers ensuring a secure browsing environment. Privacy compliance is well addressed with cookie consent mechanisms and a comprehensive privacy policy in Czech. Security posture is strong with no visible vulnerabilities, though some additional security headers and modern script upgrades are recommended. Overall, the site is professional, trustworthy, and well-structured, reflecting its government status and mission.

TOPlist s.r.o. operates a Czech web analytics and visitor counting service, providing online traffic auditing and advertising listings primarily targeting website owners and businesses interested in monitoring their web traffic. The company has a long-standing presence since 1997, positioning itself as a trusted local provider in the web analytics niche. The website is professionally designed with clear navigation and a focus on delivering relevant content and services. Technically, the site employs modern frontend technologies including Bootstrap, FontAwesome, jQuery, and the Ace Admin Template, ensuring a responsive and user-friendly experience. However, some technical aspects such as security headers and privacy compliance require improvement. Security posture is moderate with HTTPS enabled and obfuscated email addresses, but lacks explicit security policies and headers. Overall, the site is safe, trustworthy, and well-maintained but would benefit from enhanced privacy and security practices to align with modern compliance standards.

The Ravestijn Gallery is a leading photography gallery based in the Netherlands, specializing in exhibitions, artist representation, exclusive artwork editions, and a bookshop. The website reflects a professional art gallery business model targeting photography collectors and art enthusiasts. The company positions itself as a prominent player in the Dutch photography art market with a focus on quality and exclusivity. Technically, the website is built on the Artlogic CMS platform, utilizing jQuery and integrates Google Analytics and Google Tag Manager for visitor tracking. The site is hosted with secure HTTPS and uses Cloudinary for image hosting. Performance is moderate with good mobile optimization and accessibility features, indicating a mature digital presence. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR. However, explicit security headers are not detected, and no dedicated security or incident response policies are publicly available. No vulnerabilities or exposed sensitive data were found. The WHOIS data is consistent with the business claims, supporting domain legitimacy. Overall, the website is professional, secure, and compliant with privacy regulations, though improvements could be made in security header implementation and transparency of security policies. The risk level is low, with recommendations focusing on enhancing security posture and compliance documentation.

Dashwood Books operates as a niche retailer and publisher specializing in art and photography books. The website presents a curated selection of featured books, events, and press information, targeting collectors and enthusiasts in the art book market. The business model centers on e-commerce sales and publishing, supported by a professional and consistent brand presence online. Technically, the site leverages Bootstrap for responsive design, jQuery for interactivity, and New Relic for performance monitoring, indicating a moderate level of digital maturity. However, the absence of explicit privacy and terms of service pages suggests room for improvement in compliance and transparency. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks visible security headers and detailed incident response contacts. Overall, the site is functional and trustworthy but would benefit from enhanced privacy disclosures and security hardening.

Rie Koizumi's website serves as a professional portfolio showcasing the artist's illustrations and works, targeting art enthusiasts and potential buyers. The site includes galleries of artwork, links to an external shop, and social media presence on Instagram. The business model is primarily personal branding and direct-to-consumer sales through an external platform. Technically, the site is built on WordPress with a child theme and uses common web technologies like jQuery. SEO is supported by the All in One SEO plugin, and the site is mobile optimized with good navigation and design quality. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and DNSSEC. Privacy and cookie policies are absent, indicating compliance gaps. No contact emails or phone numbers are provided, limiting direct communication channels. Overall, the site is a well-maintained artist portfolio with room for improvement in security and compliance.

Generation Press is a small, niche sustainable printing company specializing in litho, digital, and foil-blocking printing services for international clients and artists. The company positions itself as a sustainable and corporate-certified printer, targeting environmentally conscious brands and individuals. The website is built on the Webflow platform, leveraging modern web technologies such as jQuery and Webflow's own scripts and CDN for content delivery. The site features a rich visual design with a carousel of high-quality images showcasing their work, indicating a focus on branding and visual appeal. From a security perspective, the website lacks visible security headers and privacy-related policies, which suggests room for improvement in compliance and security posture. The WHOIS data for the domain www.generationpress.co.uk is unavailable due to a registration error indicating the domain name contains too many parts, which is unusual for an active website and raises questions about domain legitimacy or alternative domain usage. No contact emails, phone numbers, or social media links were found, limiting direct communication channels and trust signals. Overall, the website presents a professional and visually appealing front for a sustainable printing business but requires enhancements in security, privacy compliance, and transparency to improve trustworthiness and regulatory adherence. The domain registration inconsistency is a notable risk factor that should be addressed to ensure legitimacy and reduce potential reputational risks.

Lézard Graphique is a specialized printing and screen printing company with over 40 years of experience, focusing on high-quality communication and signage supports. The company serves graphic designers, cultural institutions, and private/public commissioners primarily in France but also internationally. Their website reflects a professional and well-established business with clear service offerings and a strong market position supported by awards and client trust. Technically, the website is built on WordPress with modern plugins and technologies, including Gravity Forms and Google reCAPTCHA, ensuring a good user experience and security posture. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Security practices are solid with HTTPS and form protections, though some improvements in security headers and DNSSEC could enhance the posture further. Overall, the website is trustworthy, well-maintained, and provides comprehensive contact and business information.

Harvey Lloyd Screens is a small, established UK-based business specializing in bespoke screen printing services for artists, illustrators, and graphic designers. The company has a long history dating back to 1976 and operates an e-commerce platform hosted on Shopify, targeting creative professionals seeking high-quality screen printing solutions. The website presents a professional and consistent brand image with good content quality and user experience. Technically, the site leverages modern Shopify infrastructure and scripts, ensuring moderate performance and mobile optimization. Security posture is adequate with HTTPS enforced and use of hCaptcha for form protection, though explicit security headers are minimal. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. However, the WHOIS data for the domain is unavailable due to domain naming rules errors, which raises concerns about domain registration legitimacy. Overall, the site is trustworthy and functional but would benefit from enhanced security headers and clearer business contact information.

EducaThyssen is an educational platform associated with the Museo Nacional Thyssen-Bornemisza in Madrid, Spain. It serves as a cultural and educational resource, complementing major art institutions in the city. The website provides educational content and resources aimed at a general audience interested in art and culture. The platform is positioned as a trusted source for museum-related educational materials, leveraging its association with a renowned national museum. Technically, the website is built on Drupal 10, utilizing modern tracking and consent management tools such as Google Tag Manager and CookiePro. The site demonstrates good mobile optimization and SEO practices, although accessibility features could be enhanced. Security posture is strong with HTTPS enforcement and standard security headers, but lacks explicit security policy or vulnerability disclosure mechanisms. The absence of a clear privacy policy and terms of service pages slightly reduces compliance confidence. WHOIS data is unavailable or malformed, limiting domain trust verification, but the website content and official affiliations suggest legitimacy. Overall, EducaThyssen presents a professional, secure, and content-rich platform with room for improvement in privacy transparency and accessibility.

Tiny.cc is a well-established URL shortening service operating since 2006, offering free and premium plans to general internet users and businesses. The service provides core features such as URL shortening, link editing, click statistics, QR code generation, and custom domains. The website is professionally designed with good mobile optimization and clear navigation, supporting a positive user experience. The presence of a cookie consent banner and privacy policy indicates awareness of privacy compliance requirements. Technically, the site uses modern JavaScript libraries and third-party advertising and sharing tools, with HTTPS enforced ensuring secure communications. However, security headers and explicit security policies are not published, representing an area for improvement. WHOIS data confirms the domain's legitimacy and consistent registration details, supporting trustworthiness. Overall, the site is functional, secure, and credible with room for enhanced security transparency and contact information.

The website www.gofundme.com is currently inaccessible, returning a 502 Bad Gateway error page with minimal HTML content. Due to this, no meaningful content, metadata, or business information could be extracted or analyzed. The lack of accessible content prevents assessment of the company's privacy policies, security posture, or technical infrastructure. Consequently, the overall risk assessment is limited and the site is considered blocked or down at this time.

The domain prf.hn currently serves a 403 Forbidden error page, indicating that the website content is inaccessible or restricted. There is no visible content, metadata, or business information available on the site. The domain is registered with Gandi SAS since 2010, suggesting a long-standing registration, but no further business details or digital presence are evident. The technical infrastructure includes multiple authoritative DNS servers but lacks DNSSEC and visible security headers. The absence of HTTPS and security policies further limits the security posture assessment. Overall, the site appears inactive or intentionally blocked, resulting in a low confidence analysis and limited business insights.

Gorgias is a technology company specializing in conversational AI platforms tailored for ecommerce businesses. Their platform integrates AI agents, helpdesk solutions, chat, and FAQ automation to enhance customer support and drive sales. Positioned as a leading solution trusted by over 15,000 brands, Gorgias targets ecommerce merchants seeking to automate and improve customer interactions. The website reflects a mature digital presence with professional design, clear messaging, and extensive use of modern marketing and analytics technologies. The technical infrastructure leverages Webflow CMS, Google Analytics, Amplitude, Facebook Pixel, and advanced A/B testing tools like VWO, indicating a high level of digital maturity and performance optimization. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly disclosed. WHOIS data is unavailable, which slightly impacts trust but the overall business credibility remains high based on website content and technology use. Strategic recommendations include publishing detailed security and incident response policies and establishing a vulnerability disclosure program to enhance transparency and trust.

Online-ticket.de operates as a German e-commerce platform specializing in the direct sale of tickets for a variety of events including concerts, festivals, comedy shows, musicals, and sports. The platform targets a broad audience of event-goers in Germany, providing official tickets directly from event organizers. The business is positioned as a niche player in the ticket retail market, leveraging a partnership with white label eCommerce GmbH for its platform infrastructure. The website demonstrates consistent branding and offers key services such as newsletter and event alarm subscriptions to engage customers. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google Tag Manager, and custom scripts from the Youtix ticketing platform. Hosting is provided via Google Cloud DNS, indicating a reliable and scalable infrastructure. The site is moderately performant with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS with a valid GeoTrust SSL certificate and implements a detailed cookie consent mechanism compliant with GDPR. However, it lacks explicit security policies, incident response contacts, and security.txt disclosures. No critical vulnerabilities or exposed sensitive data were detected. The site uses recognized payment methods and maintains trust signals such as social media presence and legal compliance links. Overall, online-ticket.de presents a trustworthy and professional e-commerce platform with a solid technical foundation and good privacy compliance. Strategic improvements in security headers, incident response transparency, and accessibility could further enhance its security posture and user trust.

LACTLD is a non-profit association representing the community of country code top-level domain (ccTLD) administrators in Latin America and the Caribbean. Founded in 1998 and based in Uruguay, it serves as a regional leader providing coordination, services, and advocacy for ccTLD operators. The website highlights key services such as a unified domain search tool and an Anycast DNS network to strengthen regional DNS infrastructure. The organization maintains an active presence through publications, events, and working groups, targeting domain administrators and stakeholders in the region. Technically, the website is built on WordPress using Elementor and Yoast SEO plugins, indicating a modern CMS infrastructure with good SEO practices. The site is mobile-optimized and uses HTTPS, but lacks DNSSEC and security headers, which are recommended for enhanced security. Performance is moderate, with no significant issues detected. The site does not appear to use analytics or tracking tools, suggesting a privacy-conscious approach. From a security perspective, the domain registration is consistent and legitimate, with protective domain status flags in place. However, the absence of explicit privacy, cookie, and security policies on the website is a compliance gap. No incident response or vulnerability disclosure information is provided. Overall, the security posture is adequate but could be improved by enabling DNSSEC and adding security headers. The website content is professional, relevant, and safe for general audiences, with no adult or questionable content detected. Contact information is limited to a phone number and physical address, with no email or contact forms visible. Social media links are present and active, enhancing trust and engagement. The overall risk is low, but strategic improvements in privacy compliance and security practices are recommended.

Modular DS is a Spanish-based technology company founded in 2021 that offers a SaaS platform focused on centralized management and automation of WordPress websites. Their platform provides key services such as automated maintenance, backups, uptime monitoring, vulnerability analysis, and reporting, targeting WordPress site managers, agencies, and freelancers. The website is professionally designed, mobile-optimized, and integrates modern web technologies including WordPress CMS, WP Rocket for performance, and Google Analytics for tracking. Security posture is good with HTTPS enforced and domain transfer protection, but could be improved by enabling DNSSEC and adding security headers like Content-Security-Policy. Privacy compliance is basic with a cookie policy and consent mechanism present, but no explicit privacy policy or terms of service pages were found. Overall, the domain registration data is consistent and legitimate, supporting the business credibility. The site is free from adult or questionable content and is safe for general audiences.

Booklooker.de operates as a specialized online marketplace focused on the buying and selling of used and antiquarian books, audiobooks, music, films, and games. Established since 1999, it serves a large customer base exceeding 4.1 million users, offering a secure shopping experience with buyer protection and personalized customer service. The platform provides extensive search and filtering capabilities, user account management, and a seller depot system, positioning itself as a trusted intermediary in the German retail media sector. Technically, the website employs modern web technologies including jQuery and jQuery UI for dynamic user interface elements, and integrates a consent management platform to ensure compliance with privacy regulations. The site is served over HTTPS with no detected blocking or WAF interference, indicating good accessibility and security practices. However, some security headers are missing, which could be improved to enhance protection against common web threats. From a security perspective, the site demonstrates a mature posture with encrypted communications, secure login forms, and no visible exposure of sensitive data. Privacy policies and cookie consent mechanisms are clearly implemented, supporting GDPR compliance. The absence of direct contact emails or phone numbers is mitigated by a contact form, though adding verified contact details could improve trust. The domain registration is consistent with the website branding, though WHOIS data is limited due to DENIC privacy restrictions. Overall, booklooker.de presents a professional, secure, and user-friendly platform with a strong market position in the German used media retail sector. Strategic improvements in security headers and enhanced transparency in contact information could further strengthen its trustworthiness and compliance posture.

Plone.org represents the Plone Foundation, a well-established non-profit organization that develops and maintains Plone, an open-source content management system with over 20 years of history. The website serves a diverse audience including content editors, developers, and decision makers, offering software downloads, documentation, training, and community engagement. The foundation's market position is strong within the open-source CMS space, emphasizing security, stability, and extensibility. Technically, the site leverages a modern stack including Python backend and React frontend, with Cloudflare DNS and Matomo analytics, ensuring good performance, mobile optimization, and accessibility. Security posture is robust with HTTPS, domain transfer protections, and active security advisories, although DNSSEC is not enabled and explicit security policies could be more visible. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and technically sound, reflecting the maturity and community-driven nature of the Plone project.

People to People is a German-based small business specializing in socially conscious group travel, cultural products, books, and specialty goods. Their website reflects a niche market focus with offerings that combine e-commerce and travel services. The technical infrastructure is based on Shopware CMS with Matomo analytics, indicating a moderate level of digital maturity and privacy awareness. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy compliance mechanisms. The absence of direct contact emails and phone numbers reduces immediate customer trust signals. Overall, the website is accessible, well-structured, and professionally presented but could improve in privacy compliance and security best practices.

Tito is a technology company specializing in simple and powerful event registration software, offering SaaS solutions for event organizers to sell tickets and manage check-ins efficiently. The website demonstrates a modern technical infrastructure built on Vue.js and BootstrapVue frameworks, with good mobile optimization and moderate performance. Security posture is solid with HTTPS enforcement and GDPR-compliant cookie management, though explicit privacy and terms of service pages are absent. Overall, the site is professional and trustworthy, targeting event organizers and attendees with clear business focus and minimal tracking.

RaveCapture is a SaaS platform specializing in ecommerce reviews, user-generated content (UGC), and customer experience surveys. Founded in 2023 and based in the United States, it targets ecommerce merchants seeking to build trust and increase sales through authentic customer feedback and visual content. The company positions itself as a user-friendly alternative to larger review platforms, emphasizing personalized support and no-contract pricing. The website is professionally designed with comprehensive content, clear navigation, and strong branding consistency, supported by customer case studies and testimonials that enhance credibility. Technically, the website is built on WordPress using the Divi theme, integrating modern marketing and analytics tools such as Google Analytics, Google Tag Manager, and Intercom. Hosting is via Amazon AWS, and the site employs HTTPS with a good SSL configuration. While performance and mobile optimization are good, there is room for improvement in accessibility and security headers. The site lacks DNSSEC and some recommended security headers like Content-Security-Policy and Referrer-Policy. From a security perspective, the site enforces HTTPS and uses domain transfer protection, but could enhance its security posture by enabling DNSSEC and adding missing headers. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is generally good with a comprehensive privacy policy and terms of service, though no explicit cookie consent mechanism was found. Contact information is available, including a physical address and verified support email. Overall, RaveCapture presents a trustworthy and professional online presence with a solid technical foundation and good security practices. Strategic improvements in security headers and privacy consent mechanisms would further strengthen its posture. The domain registration details align well with the company's claimed history and operations, supporting legitimacy and trustworthiness.