Medium-risk security reports

OneTag operates an advertising system platform, targeting advertisers and businesses seeking advertising technology solutions. The website is minimalistic, providing basic information and links to a main homepage and privacy policy hosted on a related domain. The business appears small and focused on technology services related to advertising. The domain registration is consistent with the business age and purpose, indicating legitimacy. Technically, the website uses basic HTML and CSS without advanced frameworks or CMS detected. Hosting and DNS are managed via reputable providers, but the site lacks modern security features such as DNSSEC, security headers, and HTTPS enforcement visible in the provided data. The site is mobile responsive at a basic level but lacks SEO and accessibility optimizations. From a security perspective, the site does not expose sensitive data or use vulnerable libraries but lacks visible security best practices such as security headers and incident response information. Privacy compliance is minimal with a basic privacy policy but no cookie consent mechanism or GDPR indicators. No contact or incident response information is provided, limiting trust and transparency. Overall, the website presents a low-risk profile but would benefit from enhanced security measures, improved privacy compliance, and richer business information to increase trustworthiness and professionalism.

Refinery89 is a technology company specializing in programmatic advertising and ad monetization services targeted at publishers. Founded in 2018, the company positions itself as a revolutionary platform designed by publishers for publishers to optimize ad revenue. The website reflects a professional digital presence built on WordPress with modern tools such as Elementor and Yoast SEO, indicating a mature digital infrastructure. Multiple analytics and tracking technologies are employed to monitor user behavior and optimize marketing efforts. Security posture is adequate with HTTPS and reCAPTCHA integration; however, the absence of security headers and formal privacy and cookie policies indicates room for improvement in compliance and security best practices. Overall, the domain registration data is consistent and transparent, supporting the legitimacy of the business.

The domain c4t.cc is registered since 2013 with a reputable registrar and has a valid registration status. However, the website content is completely empty with no metadata, no visible text, no forms, no external links, and no contact information. This indicates the site is either inactive, under construction, or blocked by security mechanisms. The lack of HTTPS and security headers further reduces the security posture. No privacy or cookie policies are present, and no business information or branding is visible. Overall, the website lacks any digital maturity or business presence to assess. The domain registration is consistent and legitimate, but the absence of content and security features poses a risk for trust and usability.

Elmeloher Grill is a small hospitality business operating a restaurant and grill located in Ganderkesee, Germany. The business offers traditional grill dishes, daily lunch specials, weekly menus, and catering services branded as 'Brünings Partyservice'. The website is built on WordPress using Elementor and includes modern plugins for contact forms and GDPR compliance. The site is well-structured, mobile-optimized, and provides clear contact information and social media links, supporting good customer engagement. Technically, the site uses HTTPS and includes a cookie consent mechanism, but lacks advanced security headers and explicit security policies. Marketing is supported via Facebook Pixel tracking. Overall, the site presents a professional and trustworthy online presence for a local restaurant and catering service.

Kuckuck Familienmagazin is a German family-oriented media publication offering articles, event listings, recipes, and DIY tips targeted at parents and families. The website is well-structured, professionally designed, and provides rich, relevant content for its audience. It operates on the Metro Publisher CMS platform and leverages Amazon Cloudfront CDN for content delivery. Advertising is managed via Google Ad Manager and Google Adsense, with user tracking through Google Analytics configured for IP anonymization. The site includes a cookie consent banner compliant with GDPR requirements. Security posture is good with HTTPS enforced, but could be improved by adding additional security headers and publishing a formal security policy. WHOIS data is minimal but consistent with the hosting environment, indicating a legitimate domain. Overall, the website is safe, trustworthy, and professionally maintained.

Dosdoce.com is a Spanish digital cultural media portal established in 2004, focusing on trends and news in the book and cultural sectors. It serves as a digital nexus for publishers, bookstores, libraries, museums, and foundations, providing news, studies, interviews, and training services. The website demonstrates a mature digital infrastructure built on WordPress with common plugins for SEO, analytics, and user engagement. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks some advanced security headers and explicit incident response contacts. The absence of WHOIS data is a notable anomaly but does not detract from the site's professional content and user trust. Overall, Dosdoce.com presents a credible and well-maintained platform for its niche audience.

A.V.I. Allgemeine Verlags- und Informationsgesellschaft mbH operates a specialized media portal focused on educational content for teachers and schools in Germany. The company publishes official bulletins from education ministries and various association magazines, targeting educators, school administrators, and educational authorities. Their market position is niche and focused on the education sector with a small company size. Technically, the website is built on TYPO3 CMS and uses common JavaScript libraries such as jQuery and Flexslider. Hosting is provided by aditsystems.hosting. The site is moderately performant, mobile-optimized, and has basic SEO and accessibility features. Privacy and cookie policies are implemented with consent mechanisms, but no advanced analytics or tracking tools are detected. From a security perspective, the site enforces HTTPS and uses cookie consent but lacks explicit security headers and a dedicated security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. WHOIS data is limited, showing generic hosting nameservers without detailed registrant information, which slightly reduces trust but does not raise major concerns. Overall, the website is professional, trustworthy, and safe for general audiences. It effectively serves its educational publishing purpose with clear contact information and compliance with privacy regulations. Strategic improvements could focus on enhancing security headers, adding incident response details, and improving SEO and accessibility further.

Der Freitag is a German weekly newspaper focusing on politics, economy, and culture, serving a German-speaking audience interested in these topics. The website acts as a digital platform for the newspaper, offering news articles and subscription services. The business model centers on media publishing with a strong digital presence, positioning itself as an established player in the German media landscape. The company targets readers seeking in-depth political and cultural content. Technically, the website uses a modern stack including Plone CMS, Google Tag Manager, Matomo analytics, and advanced header bidding technologies for advertising. Consent management is implemented via Sourcepoint, indicating GDPR compliance efforts. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers are not explicitly detected. Privacy compliance is supported by consent mechanisms but lacks explicit privacy and terms of service pages. Overall, the website is professional, trustworthy, and well-optimized for mobile users. Recommendations include publishing clear privacy and security policies, enhancing security headers, and providing contact information for improved transparency and compliance.

Hessischer Rundfunk (hr) is the official public broadcasting institution for the German state of Hessen and a founding member of the ARD consortium. The website hr.de serves as a comprehensive portal for news, cultural programming, radio and television services, and public information. It targets the general public in Hessen and Germany, offering a wide range of media content including live streams, press releases, event information, and career opportunities. The business model is publicly funded broadcasting, emphasizing transparency and public service.

LITERADTOUR is a small cultural project based in Germany, focused on promoting reading and literature through a book ambassador traveling across the country. The website is professionally designed using Squarespace, featuring good mobile optimization and clear navigation. The project leverages social media platforms such as Instagram, YouTube, TikTok, and Facebook to engage its audience. Technically, the site uses modern web technologies and enforces HTTPS with HSTS, indicating a strong security posture. However, the absence of a privacy policy, terms of service, and verified contact information limits its privacy compliance and business credibility. Additionally, the WHOIS data is missing or indicates the domain may not be registered, which raises concerns about domain legitimacy. Overall, the site is safe and trustworthy for general audiences but would benefit from enhanced transparency and compliance documentation.

ZDF is a major German public television broadcaster offering a comprehensive streaming portal with films, series, documentaries, and live TV. The website is professionally designed, mobile-optimized, and uses modern web technologies such as Next.js and Apollo GraphQL, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and privacy policies are not clearly presented in the analyzed content. The domain is legitimate and consistent with the broadcaster's identity, though registrant details are restricted due to DENIC policies. Overall, the site serves a broad general audience with high-quality media content.

The Society for Scholarly Publishing (SSP) operates a professional membership website dedicated to advancing scholarly publishing. The organization provides educational events, career resources, community engagement, and industry news targeted at professionals in academic publishing and related sectors. The website is well-structured, professionally designed, and optimized for both desktop and mobile users. It employs a modern technology stack centered on WordPress with integrations for analytics, advertising, and user engagement. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and no visible vulnerabilities or exposed sensitive data. Privacy policies are comprehensive and GDPR compliant, reflecting a mature approach to data protection. Overall, the site represents a legitimate, established non-profit entity with a clear mission and professional online presence.

Berlin Review is a German-based cultural and literary magazine published by BLNR Publishing GmbH. The website offers a multilingual platform featuring essays, reviews, and memos focused on books and ideas, targeting readers interested in intellectual and cultural discourse. The business model centers on subscriptions, online reader editions, and donations, positioning itself as a niche media outlet with a consistent brand and good content quality. Technically, the site uses modern JavaScript libraries such as jQuery and Stripe for payment processing, with a cookie consent mechanism and Google Tag Manager for analytics. The site is mobile-optimized and provides a good user experience with clear navigation and multilingual support. Security posture is solid with HTTPS and basic best practices, though some security headers could be improved. Privacy compliance is adequate with a privacy policy and cookie consent, but lacks explicit terms of service or incident response contacts. Overall, the domain registration data aligns well with the business, indicating legitimacy and trustworthiness.

demoSlam.org is a German-based educational non-profit organization focused on facilitating dialogue and understanding among people with differing opinions through their demoSlam dialog format. The website presents a professional and consistent brand with clear descriptions of their services, events, and educational offerings. Their market position is niche, targeting individuals and organizations interested in social cohesion and dialogue facilitation. Technically, the site is built on the Tilda CMS platform, leveraging modern web technologies and providing a mobile-optimized experience. Security posture is adequate with HTTPS enforced and cookie consent implemented, though additional security headers and DNSSEC could improve resilience. Privacy compliance is supported by GDPR-consistent consent mechanisms and a privacy policy, though terms of service and security policies are absent. Overall, the domain registration data aligns well with the website content, indicating legitimacy and trustworthiness.

The Chemours Company operates as a global leader in the chemical industry, specializing in the production and distribution of advanced chemical products such as fluoropolymers, titanium technologies, refrigerants, and high-performance lubricants. The website targets industrial clients, investors, and partners, emphasizing sustainability and innovation. The company maintains a strong market position with a comprehensive portfolio of trusted brands and a clear corporate responsibility commitment. Technically, the website employs modern analytics and tracking tools, is well-optimized for mobile devices, and demonstrates good SEO and accessibility practices. Security posture is robust with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly detailed. Overall, the domain registration and DNS setup align with the company's corporate identity, supporting legitimacy and trustworthiness.

The website www.nafion.com represents the Nafion™ brand, a product line of The Chemours Company specializing in membranes, dispersions, and resins primarily serving the chemical, chlor-alkali, energy, and transportation industries. The site positions Nafion™ as a leading provider with over 50 years of experience, offering advanced materials that improve process efficiency and support emerging clean energy applications. The business model is B2B, targeting industrial manufacturers and energy sector clients. The website is professionally designed, mobile-optimized, and rich in relevant content, including white papers and industry applications, reinforcing its market position. Technically, the site employs modern web technologies including Google Tag Manager, Microsoft Application Insights for analytics, and cookie consent management via CookieLaw.org. The site is hosted securely with HTTPS and shows good SEO and accessibility practices. However, explicit security headers are not detected, and no dedicated security policy or incident response information is published, indicating room for improvement in security transparency. From a security perspective, the site demonstrates a solid baseline with encrypted connections and no visible vulnerabilities or exposed sensitive data. The absence of WHOIS registration data for the domain www.nafion.com raises concerns about domain legitimacy or possible use of subdomains or aliases under the Chemours corporate umbrella. This discrepancy impacts trustworthiness and business credibility scores. No direct company contact emails or phone numbers are published, with contact facilitated via forms only. Overall, the website is a high-quality, professional resource for industry stakeholders but would benefit from enhanced security disclosures, domain registration transparency, and direct contact information to improve trust and compliance posture.

The Viton™ website represents a high-performance fluoroelastomer brand operated by The Chemours Company, a large and established chemical manufacturing entity. The site provides comprehensive product information, industry applications, technical resources, and sales support aimed at industrial and manufacturing sectors such as automotive, aerospace, chemical processing, and oil and gas. The brand is positioned as a leader in durable, chemical-resistant elastomer products, targeting engineers and industrial buyers. Technically, the website employs modern JavaScript libraries, Google Tag Manager, and Microsoft Application Insights for analytics and performance monitoring. It is well-structured with responsive design and accessibility considerations, delivering a professional user experience. The site uses HTTPS and secure external resources but lacks explicit security headers and a published security policy or incident response contacts. From a security perspective, the site shows good practices with no visible vulnerabilities or exposed sensitive data. Privacy compliance is supported by a comprehensive privacy policy and cookie consent mechanisms. However, the absence of a vulnerability disclosure program or security.txt file is noted. WHOIS data for the domain is unavailable publicly, likely due to privacy or registrar policies, but the site’s corporate affiliation and branding strongly support legitimacy. Overall, the website is professionally maintained, secure, and compliant with privacy standards, serving a clear B2B industrial market. Strategic recommendations include enhancing security headers, publishing incident response information, and improving transparency around vulnerability disclosures to further strengthen trust and security posture.

The website www.freon.com represents the Freon™ refrigerants brand, operated by The Chemours Company, a recognized enterprise in the energy and chemical manufacturing sector. The site provides detailed information about refrigerant products, industry applications, and support resources targeting HVAC professionals and commercial/residential users. The content is professionally curated, with strong branding consistency and linkage to the parent corporate site, indicating a mature business presence. Technically, the site employs modern tracking and consent management tools, is mobile optimized, and delivers a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and telemetry tools in place, though it lacks explicit security policies and incident response contacts. The absence of WHOIS data for the domain is a notable concern, reducing domain registration transparency and trustworthiness, but the overall site content and corporate association mitigate some risk. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site scores well on content quality, technical implementation, and privacy compliance, with room for improvement in security disclosures and domain registration transparency.

The website represents The Chemours Company's Teflon™ brand, a globally recognized name in fluoropolymer products serving multiple industries including automotive, communications, and industrial manufacturing. The site offers comprehensive product information, industry solutions, and consumer resources, reflecting a mature and well-established business model with both B2B and B2C elements. The digital infrastructure leverages modern technologies such as Google Tag Manager, Microsoft Application Insights, and OneTrust for privacy compliance, hosted likely behind Cloudflare for performance and security. Security posture is solid with HTTPS and consent mechanisms, though explicit security headers and incident response disclosures are absent. The absence of WHOIS data is unusual but does not detract significantly from the site's legitimacy given strong brand consistency and corporate linkage. Overall, the site is professional, secure, and privacy-conscious, suitable for its enterprise audience.

CloudPit is a cloud platform service operated under dogado GmbH, a German company established in 2015. The website analyzed is primarily a login portal for users to access cloud infrastructure management services. The business targets IT professionals and organizations requiring cloud hosting and management solutions. The platform appears to be a niche player in the cloud technology sector with a medium-sized company profile. Technically, the website employs standard web technologies including JavaScript and CSS, with scripts loaded from its own domain. The site uses HTTPS with a valid CSRF token for form security, but lacks advanced security headers and visible privacy or cookie policies. The site is moderately optimized for performance and mobile use but could improve accessibility and SEO features. From a security perspective, the site demonstrates basic good practices such as HTTPS and CSRF protection but lacks DNSSEC and security headers that would enhance protection. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms a consistent and legitimate domain registration with no privacy protection, matching the business location and entity. Overall, the website is functional and trustworthy but would benefit from enhanced privacy compliance, security hardening, and more comprehensive business transparency. Strategic improvements in these areas would strengthen user trust and regulatory compliance.

Datatrans is a Swiss-based payment solutions provider offering a flexible and customizable payment platform tailored for companies demanding advanced payment capabilities. The website presents a professional image with consistent branding and a clear focus on payment services, targeting business clients. The technical infrastructure leverages modern web technologies including Vue.js, and integrates reputable analytics and marketing tools such as Google Analytics, Microsoft Clarity, and Cookiebot for privacy compliance. Security posture is strong with HTTPS enforcement, cookie consent mechanisms, and CSRF protection, although explicit security policies and incident response contacts are not published. Overall, the site demonstrates good digital maturity and compliance with GDPR, supporting trustworthiness and business credibility.

The website bonnespratiquestms.fr is a specialized platform focused on the prevention of musculoskeletal disorders (TMS) among cordistes, professionals working at heights using ropes. It is supported by OPPBTP and partners such as France Travaux sur Cordes, providing practical fiches, resources, and tools to improve occupational health and safety in the construction sector in France. The platform targets cordistes and safety professionals, offering educational content and prevention best practices. Technically, the site uses modern JavaScript libraries, Google Tag Manager, reCAPTCHA v3, and a consent management platform (Didomi), hosted on GANDI infrastructure. The site is mobile-optimized with good SEO and accessibility basics. Security posture is solid with HTTPS and consent mechanisms, though explicit security policies and incident response contacts are not published. The WHOIS data shows an anomalous future domain creation date, which reduces trust from a domain registration perspective but does not detract from the professional content and partner associations. Overall, the site is a credible resource in its niche with room for improvement in transparency and security documentation.

The Gemeinsame Glücksspielbehörde der Länder (GGL) is the official German government authority responsible for regulating the cross-state online gambling market. Its core mission is to ensure player protection, prevent gambling addiction, and enforce compliance among licensed gambling providers. The agency also combats illegal gambling and promotes research in the gambling sector. The website reflects a well-structured, professional government portal with comprehensive information for gambling providers, players, and other stakeholders. It serves as a central coordination point for regulatory matters in Germany's gambling landscape. Technically, the website is built on Joomla CMS with modern frameworks such as UIkit and jQuery, hosted likely on rzone.de infrastructure. It demonstrates good mobile optimization, accessibility features, and a clean, professional design. Security measures include HTTPS enforcement, CSRF tokens, and frame busting scripts, although explicit security headers could be improved. No signs of tracking or advertising scripts were found, indicating a privacy-conscious approach. The security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the absence of a cookie consent mechanism and published incident response or vulnerability disclosure policies are areas for improvement. The WHOIS data aligns with the website's official nature, supporting its legitimacy. Overall, the site scores highly on content quality, technical implementation, security, privacy compliance, and business credibility, making it a trustworthy source for gambling regulation in Germany.

Freie Sachverständigenbüro-Kooperation Sauerbrey GmbH + Peter Schulze is a well-established German company specializing in expert appraisals and assessments for vehicles and real estate. With over 35 years of experience, they serve clients primarily in Ulm and surrounding regions, offering services such as accident damage reports, oldtimer valuations, building damage assessments, and technical consulting. Their business model focuses on providing on-site expert evaluations for both private and commercial customers. The website reflects a professional and trustworthy presence with multiple physical locations and a free hotline for customer contact. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics with IP anonymization, and Usercentrics for consent management, indicating a mature digital infrastructure. The site is mobile optimized and SEO friendly, though it appears to use a custom CMS. Performance is moderate with good user experience and navigation clarity. From a security perspective, the site enforces HTTPS and integrates privacy-compliant analytics and consent mechanisms. However, it lacks explicit security headers and does not publish a security policy or incident response contacts, which are areas for improvement. No vulnerabilities or suspicious patterns were detected, and WHOIS data confirms domain legitimacy consistent with the business claims. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic enhancements in security policy transparency and technical security headers would further strengthen their security posture.

Gusto is a well-established technology company specializing in online payroll and HR solutions targeted primarily at small and medium-sized businesses. The company offers a comprehensive people platform that facilitates employee onboarding, payroll processing, benefits administration, and insurance management. Positioned as a leader in customer satisfaction, Gusto leverages modern SaaS delivery models to serve a large customer base with a focus on ease of use and compliance support. The website reflects a mature digital presence with professional design, clear navigation, and extensive content relevant to its business domain. Technically, the website is built on a modern stack including Next.js and React, hosted with Cloudflare DNS and CDN services. It employs advanced analytics and tracking tools such as Snowplow, FullStory, and Tealium, alongside a robust cookie consent mechanism powered by OneTrust. The site demonstrates excellent performance, mobile optimization, and accessibility features, indicating a high level of digital maturity. From a security perspective, Gusto enforces HTTPS with strong SSL configurations and implements key security headers to protect users. The presence of SOC 2 Type II and ISO 27001 certifications further underscores its commitment to security and compliance. However, there is room for improvement in publishing explicit security policies, incident response procedures, and vulnerability disclosure mechanisms to enhance transparency and trust. Overall, Gusto presents a low-risk profile with strong business credibility, technical sophistication, and privacy compliance. Strategic recommendations include enabling DNSSEC, publishing dedicated security and incident response pages, and providing clear contact information for data protection officers to further strengthen its security posture and regulatory compliance.

The website amzcon.de presents itself as a German-language deal aggregator offering discounted products across multiple categories such as electronics, home & kitchen, beauty, clothing, and toys. The business model appears to be affiliate marketing, leveraging Amazon product links to generate revenue. The domain is currently marked as for sale, and WHOIS data indicates the domain is unregistered or expired, which raises concerns about the legitimacy and continuity of the business. Technically, the site uses modern HTML5, CSS3, and JavaScript with Google Fonts integration and basic client-side search functionality. However, there is no evidence of HTTPS enforcement or security headers, and no privacy or cookie policies are present, indicating poor compliance with data protection regulations. Security best practices such as delayed activation of affiliate links to prevent bot clicks are observed, but overall security posture is weak due to missing HTTPS and security headers. The site contains no adult or explicit content and targets general consumers looking for deals. Overall, the site is functional but lacks critical trust and compliance elements, and the domain status undermines its credibility.

rami.io GmbH is a small German software development company founded in 2013 by Raphael Michel, specializing in bespoke software projects and notably the pretix ticketing solution. The company is undergoing a rebranding to pretix GmbH in July 2025, reflecting its strategic focus on the ticketing market. The website content is professional, well-structured, and targeted at businesses and organizations requiring software and ticketing solutions. Technically, the site uses standard web technologies with moderate performance and good mobile optimization but lacks advanced frameworks or CMS. Security posture is moderate with domain transfer protections but missing DNSSEC and security headers. Privacy compliance is supported by a clear privacy policy and cookie consent mechanism, though no explicit security or incident response policies are published. Overall, the domain registration data aligns well with the website claims, supporting legitimacy and trustworthiness.

Lawinen.report is a specialized informational platform focused on avalanche forecasting, weather data, and avalanche safety education primarily serving the Alpine regions of Tirol, Südtirol, and Trentino. It operates as a non-commercial, likely government or non-profit affiliated entity, providing critical safety information and community resources to outdoor enthusiasts and professionals. The website integrates modern web technologies including JavaScript modules and Leaflet.js for interactive mapping, delivering a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements in security headers and explicit cookie consent mechanisms are recommended. Privacy compliance is good with a comprehensive privacy policy, but cookie consent and incident response information could be enhanced. Overall, the site is trustworthy, professionally maintained, and aligned with its public safety mission.

Württembergische Gemeinde-Versicherung a.G. (WGV) is a German insurance company offering a broad range of insurance products including vehicle, household contents, accident, cyber, and legal protection insurance. The company targets private individuals, municipal clients, and young people through its SmartStart program. The website reflects a well-established regional insurer with a strong market position and a focus on competitive pricing and customer service. The digital presence is modern, leveraging Angular framework and consent management platforms to ensure privacy compliance and user experience. The site is well-structured, accessible, and optimized for mobile devices, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with GDPR requirements.

Petzoldts OHG operates a specialized e-commerce platform focused on automotive care products, including polishes, waxes, cleaning clays, and microfiber cloths. With over 30 years of market presence, the company targets both automotive enthusiasts and professional users such as vehicle detailers and painters. The website is well-structured, professionally designed, and provides clear product information and contact details, supporting a trustworthy retail experience. Technically, the website employs standard web technologies including jQuery and Bootstrap, ensuring responsive design and moderate performance. The absence of a known CMS suggests a custom or proprietary platform. Security posture is solid with HTTPS enforced and cookie consent implemented, though the lack of explicit security headers and incident response information indicates room for improvement. Overall, the site is accessible without WAF or blocking mechanisms, contains no adult or questionable content, and complies with GDPR through clear privacy and cookie policies. Contact information is transparent and consistent with WHOIS data, reinforcing legitimacy. The security score is good but could be enhanced by adding security headers and incident response details. Strategic recommendations include implementing security headers, publishing a security policy, and enhancing analytics transparency to further improve compliance and trustworthiness.

Jotform Inc. is a well-established technology company specializing in online form building and related productivity tools. Founded in 2006 and headquartered in San Francisco, it serves a global audience with a comprehensive SaaS platform that includes form creation, surveys, e-signatures, PDF editing, and AI-powered agents. The company has a strong market presence with over 30 million users and a consistent brand identity. Technically, the website demonstrates modern web development practices, including the use of JavaScript frameworks, lazy loading, and structured data for SEO. It is optimized for performance, mobile responsiveness, and accessibility, with robust security measures such as HTTPS and security headers in place. The integration of Google Tag Manager and analytics indicates mature digital marketing and user tracking capabilities. From a security perspective, the site follows best practices with no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response information are not publicly available, representing an area for improvement. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms aligned with GDPR requirements. Overall, Jotform presents a low-risk profile with a professional online presence, strong business credibility, and a secure technical foundation. The absence of WHOIS data is noted but does not detract significantly from the trustworthiness given the company's established reputation and transparent contact information.

SearchKings is a well-established digital advertising agency founded in 2010, specializing in managing profitable and measurable Google and Microsoft advertising campaigns for small and mid-size businesses across North America and globally. The company leverages award-winning AI technology, notably its proprietary Call Intelligence™, to optimize lead generation and campaign performance. With over 5,000 customers and 1,800+ Google reviews, SearchKings holds a strong market position as a Google Premier Partner and Microsoft Elite Partner, recognized for innovation and customer satisfaction. Technically, the website employs a modern tech stack including Google Tag Manager, Facebook Pixel, Microsoft Clarity, and Outbrain for marketing and analytics. The site is well-optimized for mobile and accessibility, with fast performance and clear navigation. Hosting and domain management are professional, with domain registration dating back to 2010, consistent with the company's claimed history. However, DNSSEC is not enabled, and some security headers are missing. From a security perspective, the site uses HTTPS with good SSL configuration and domain transfer protections. There is no publicly available security policy or incident response information, and no cookie consent mechanism is present despite extensive tracking scripts, indicating partial privacy compliance. No vulnerabilities or suspicious content were detected. Overall, SearchKings presents a professional and trustworthy digital presence with strong business credibility and technical maturity. Strategic improvements in privacy compliance and security transparency would further enhance its security posture and user trust.

Q4 Inc. operates a professional blog focused on investor relations solutions, targeting IR professionals, CFOs, and corporate communications teams. The company is positioned as a leading IR platform provider offering services such as investor relations websites, events management, CRM, surveillance, and engagement analytics. The website content is well-structured, professionally designed, and consistent with the company's branding and market positioning. The technical infrastructure is based on WordPress CMS with integration of multiple analytics and marketing tools, hosted under Amazon Registrar, Inc. The site demonstrates moderate to good performance and mobile optimization but lacks some accessibility features and comprehensive privacy compliance mechanisms. Security posture is adequate with HTTPS enabled and domain protections in place, though DNSSEC is not enabled and security headers are not evident. No explicit privacy policy, cookie consent, or terms of service documents were found, indicating room for improvement in compliance. Overall, the website is credible, trustworthy, and safe for general audiences.

PAKUFOL Folienprodukte GmbH is a German-based manufacturer specializing in sustainable plastic film products, including plastic sacks produced with a closed-loop recycling process. The company is certified with the Blauer Engel eco-label since 1991 and operates as part of the REMONDIS Group, a major international recycling and service provider. Their business model focuses on environmentally friendly production from recycled granulate to finished products, targeting businesses and organizations requiring sustainable packaging solutions. The website reflects a professional and consistent brand image with clear product and sustainability messaging.

CleanManager is a German-based software provider specializing in facility management solutions tailored for cleaning companies and professional building cleaners. The website presents a professional and well-structured digital presence targeting the cleaning industry in German-speaking countries, with localized versions for Denmark, the UK, and global audiences. The business model is primarily SaaS, offering software tools to optimize cleaning and building management operations. The company positions itself as a specialized provider with a consistent brand and good market presence in its niche.

Jeikner GmbH & Co. KG operates a professional cleaning and hygiene product retail website targeting businesses and professionals in the cleaning industry. The company offers a broad range of products including cleaning technology, professional cleaning chemicals, hygiene and disinfection products, and vehicle installation systems. The website is built on the Shopware 6 e-commerce platform and hosted on servers associated with creolineserver.com. It features a professional design with clear navigation and mobile optimization, supporting both online ordering and physical store presence in Wilnsdorf, Germany. The site integrates modern technologies such as Google Tag Manager and Doofinder for search and analytics. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms, indicating a baseline compliance with privacy regulations. However, it lacks explicit privacy policy, terms of service, and incident response contact information, which are important for full GDPR compliance and user trust. No security vulnerabilities or suspicious content were detected in the provided data. The WHOIS data shows partial consistency with the website's business claims, though registrant details are minimal. Overall, the website demonstrates a solid technical infrastructure and business credibility but would benefit from enhanced privacy and security documentation. Strategic improvements in publishing comprehensive privacy policies, terms of service, and incident response contacts would strengthen compliance and trust. The current risk level is moderate with no critical security issues identified.

WasSchBer CORE is a specialized ERP software solution tailored for the building cleaning and facility management sector in Germany. The website presents a professional business offering flexible, automated, and practical ERP tools designed to improve operational efficiency and customer satisfaction for small to medium-sized cleaning service providers. The market positioning is niche, focusing on digital process optimization within the German cleaning industry. Technically, the website uses modern web standards with HTML5, CSS3, and JavaScript, hosted on UI-DNS infrastructure. Mobile optimization and SEO appear adequate, though accessibility features are basic. Security posture is moderate but lacks visible security headers and published privacy or cookie policies, which are critical for GDPR compliance. No contact or incident response information is provided, limiting transparency and trust. Overall, the domain and website appear legitimate but would benefit from enhanced security and compliance disclosures.

PlanD is a specialized SaaS provider offering an all-in-one cloud-based software solution tailored for commercial cleaning companies primarily in Germany, Austria, and Switzerland. The platform integrates shift planning, time tracking, payroll, invoicing, and other administrative functions to streamline operations and support business growth. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content targeting cleaning businesses and their employees. Technically, the site leverages modern web technologies including Webflow CMS, Google Tag Manager, PostHog analytics, and cookie consent management, ensuring good performance and compliance with GDPR. Security posture is strong with HTTPS, security headers, and encrypted communications, though explicit security policies and incident response information are absent. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

Johannes Kiehl KG is a well-established company with over 120 years of experience specializing in innovative and environmentally friendly cleaning products. Their product portfolio includes high-quality detergents for professional building cleaning and car wash sectors. The company emphasizes sustainability and environmental protection while delivering effective hygiene solutions. The website targets professional cleaning businesses, hospitals, nursing homes, and car wash operators, positioning itself as a trusted and environmentally conscious market player. Technically, the website is built on a modern CMS platform (likely eZ Platform) with JavaScript frameworks and libraries such as Flickity for carousels and Matomo for analytics. The site is mobile optimized, has good SEO practices, and integrates privacy-compliant cookie consent mechanisms. The presence of CAPTCHA and CSRF tokens on login forms indicates attention to security in user interactions. From a security perspective, the site enforces HTTPS and uses cookie consent with opt-in/out options. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data for the domain is a concern, slightly reducing trustworthiness, though the website content and business information appear professional and consistent. Overall, the website presents a professional and trustworthy front for the company, with good technical and privacy compliance. Strategic improvements include publishing security policies, enhancing security headers, and clarifying domain registration details to improve trust and compliance.

BUZIL-WERK Wagner GmbH & Co KG is a German manufacturer specializing in sustainable cleaning products, including the Planta brand which holds Cradle to Cradle certification. The company targets professional cleaning services and industrial clients, emphasizing environmental responsibility and quality. Their website reflects a medium-sized enterprise with a consistent brand presence and a focus on sustainability and training services. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes GDPR-compliant consent management via Usercentrics. Analytics are handled through Matomo, ensuring privacy-conscious tracking. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. The absence of WHOIS data reduces domain trust slightly but is mitigated by transparent contact information and certifications. Overall, the website is professional, trustworthy, and well-structured, supporting the company's market position as a reputable cleaning product manufacturer.

Blink is a German-based company offering a specialized app designed for building cleaning professionals and companies. Their digital solution aims to optimize and streamline cleaning processes, positioning them in a niche market focused on cleaning industry digitalization. The website is built on WordPress using the Divi theme and enhanced with Yoast SEO, hosted on Microsoft Azure infrastructure, indicating a moderate level of technical maturity. The site is accessible, mobile-optimized, and presents a professional design with clear navigation, although explicit privacy and terms of service documents are not found in the provided content. Security posture is adequate with HTTPS enabled and Azure DNS usage, but lacks some security headers and formal security policies. Overall, Blink demonstrates a solid business presence with room for improvement in privacy compliance and security transparency.

Telematik Partner GmbH is a specialized provider of telematics and fleet management solutions, positioned as a leading Webfleet Premium Partner in Southern Germany. The company offers a range of services including vehicle tracking, time tracking, camera systems, and integration interfaces, targeting businesses managing vehicle fleets. Founded in 2013, the company maintains a professional online presence with clear branding and consistent messaging. The website is built on WordPress with WooCommerce, leveraging modern SEO and privacy compliance tools such as Yoast SEO and Cookiebot. The technical infrastructure is solid, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or suspicious activities were detected. Overall, the website reflects a trustworthy and credible business with a focus on compliance and user privacy.

Stahl Wäschereimaschinen GmbH is a well-established German manufacturer specializing in commercial and industrial laundry machines with over 100 years of experience. The company emphasizes high-quality German production, energy efficiency, and customized solutions tailored to various industries including healthcare, hospitality, fire departments, and industrial laundries. Their website reflects a professional business model focused on manufacturing and service, targeting commercial laundry operators and related sectors. Technically, the website is built on WordPress with Elementor, leveraging modern plugins such as Borlabs Cookie for privacy compliance and Yoast SEO for search optimization. The site is well-structured, mobile-optimized, and includes multilingual support, enhancing accessibility for international users. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Overall, the website presents a trustworthy and professional image with room for improvement in privacy and security transparency.

The CLEAN PRO EXPO website represents a professional trade fair platform organized by Messe Friedrichshafen GmbH, focusing on cleaning technologies and facility management for the DACH region and neighboring markets. The site effectively communicates the event's purpose, target audience, and key services, positioning itself as an innovative marketplace launching in 2026. Technically, the website employs modern web technologies including Bootstrap, Algolia Autocomplete, and Usercentrics for consent management, ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site is trustworthy, professional, and compliant with privacy standards, though explicit privacy and terms of service pages were not found in the provided content.

Deutscher Museumsbund e.V. is a well-established non-profit association representing German museums and their staff since 1917. The organization focuses on advocacy, networking, and promoting the societal role of museums, including organizing the International Museum Day. The website reflects a mature digital presence built on WordPress, employing modern plugins and privacy-conscious analytics (Matomo). It offers comprehensive content, clear navigation, and strong branding consistency. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. Contact information is transparent and professional, supporting trustworthiness.

Newsload is a German-based digital visibility platform founded in 2016, offering content creation, distribution, and networking services primarily targeting businesses, associations, cities, and organizations. The website is professionally designed with good content relevance and clear navigation, supporting a medium-sized business profile. Technically, the site employs modern JavaScript modules, uses Cookiebot for consent management, and integrates analytics via Posthog, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and domain transfer protection, though DNSSEC is not enabled and some security headers are not evident. Privacy compliance is well addressed through comprehensive cookie consent and GDPR-aligned privacy policies. However, explicit terms of service and direct contact information are not readily found, which could be improved to enhance trust and compliance. Overall, the site is safe, business-focused, and trustworthy with room for technical and policy enhancements.

Contiago GmbH is a German technology company specializing in digital multichannel content distribution and network management through its Newsload platform. The company targets organizations such as companies, associations, publishers, and municipalities, providing tools for content creation, licensing, and monetization. Their platform is designed to simplify communication processes and expand digital reach with integrated payment and rights management features. Technically, the website is built on WordPress with Elementor, uses modern libraries like Swiper.js and FontAwesome, and integrates Matomo for analytics. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the website is professional, well-structured, and compliant with GDPR requirements, reflecting a trustworthy and credible business presence.

MEHRSi gemeinnützige GmbH is a German non-profit organization dedicated to enhancing road safety, particularly for motorcyclists. Established in 2005, it operates primarily through advocacy, awareness campaigns, and technical initiatives such as underride protection. The organization engages its audience via social media channels and offers merchandising products to support its mission financially. The website reflects a well-structured and consistent brand presence with clear calls for donations and support. Technically, the website is built on the Contao Open Source CMS platform and utilizes several JavaScript libraries including jQuery, WOW.js, and Headroom.js to enhance user experience. Hosting is provided by Hetzner, a reputable German hosting provider. The site is mobile-optimized and performs moderately well, though SEO and accessibility features are basic. Security practices include HTTPS enforcement and domain transfer protection, but lack DNSSEC and advanced security headers. From a security perspective, the site shows a moderate security posture with no critical vulnerabilities detected. Privacy compliance is good, with a visible privacy policy and cookie consent mechanism aligned with GDPR requirements. However, there is no explicit security policy or incident response information available. The domain registration data is consistent and supports the legitimacy of the organization. Overall, MEHRSi.org presents a trustworthy and professional online presence suitable for its non-profit mission. Strategic improvements in security headers, DNSSEC implementation, and transparency around security policies would further enhance its security posture and user trust.

MC Rodenkirchen e. V. is a small motorcycle club based in Germany, focused on organizing motorcycle-related events such as season openings and summer meetings. The website serves as a community hub for motorcycle enthusiasts, providing event information, photo galleries, and contact options. The digital infrastructure is built on the cm4all CMS platform hosted by Strato, utilizing common web technologies like jQuery and Font Awesome. The site is moderately optimized for mobile devices and provides basic accessibility features. Security posture is average, with cookie consent implemented but lacking advanced HTTP security headers and explicit security policies. No evidence of terms of service or incident response mechanisms was found. Overall, the website is functional and trustworthy for its purpose but could benefit from enhanced security and compliance documentation.

MOTORRAD SHOW Oldenburg is a well-established regional motorcycle trade fair organized by Weser-Ems Halle Oldenburg GmbH & Co. KG, targeting motorcycle enthusiasts and industry stakeholders in the Oldenburg region of Germany. The event showcases new motorcycle models, accessories, and offers an engaging program including contests and social spaces. The website is professionally designed with good content quality and consistent branding, supporting a positive market position as a leading regional event. Technically, the site uses modern web technologies and Matomo analytics, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and explicit privacy and terms policies. Overall, the site is trustworthy and functional but could improve compliance and security transparency.