Medium-risk security reports

Deutsche Oldtimer-Reisen is a niche tour operator specializing in organized travel tours for classic cars, youngtimers, and sports cars primarily targeting enthusiasts in Germany. The website presents a professional and consistent brand image with clear offerings of vintage car tours and package travel experiences. The business operates in the transportation and hospitality sectors, focusing on a small but dedicated market segment. Technically, the website is built on WordPress with modern plugins and themes, showing good SEO and mobile optimization, though performance is moderate. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and formal security policies. Privacy compliance is weak, with no cookie consent mechanism and only a basic privacy policy page. Contact information is limited to a phone number and social media links, with no verified company email found. Overall, the site is trustworthy but could improve privacy and security transparency.

2B Advice GmbH operates a professional website offering integrated risk management software solutions under the Ailance™ brand. The company targets businesses requiring comprehensive privacy, compliance, and governance tools, with a modular SaaS platform that supports customization and AI features. The website is well-structured, multilingual, and optimized for SEO and mobile devices, reflecting a mature digital presence. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC and security headers could be improved. No privacy policy or terms of service were detected in the provided content, but a cookie consent mechanism is present. Overall, the site demonstrates high business credibility and trustworthiness with recognized industry endorsements.

Rokka.io is a technology-focused SaaS platform specializing in digital image processing, storage, and delivery. Operated by Liip AG, a Swiss company, rokka.io offers a developer-centric service with APIs and libraries supporting multiple programming languages. The platform emphasizes ease of use, SEO optimization, and fast global delivery of images. The business model is pay-per-use with a free tier, targeting web developers and digital businesses needing efficient image management solutions. The website is professionally designed, mobile-optimized, and provides clear pricing and testimonials, indicating a mature market position in the niche of image services. Technically, the site leverages modern web technologies and is hosted on AWS infrastructure. It uses HTTPS with good SSL configuration and integrates Piwik PRO analytics with privacy-conscious settings (cookies disabled). The site offers extensive API documentation and client libraries, reflecting a high level of digital maturity. Performance and SEO are well addressed, and the site is accessible and user-friendly. From a security perspective, the site enforces HTTPS and uses domain transfer protection. However, it lacks DNSSEC, security headers, and published security policies or incident response contacts. No privacy or cookie policies are present, which is a compliance gap. The analytics setup respects privacy by disabling cookies. No vulnerabilities or suspicious content were detected, and no WAF or blocking mechanisms interfere with access. Overall, rokka.io presents a trustworthy and professional service with strong business credibility and technical implementation. The main risks relate to privacy compliance and security policy transparency. Strategic improvements in these areas would enhance trust and regulatory adherence.

Biskoui is a Swiss-based technology company specializing in consent management platforms designed to help websites comply with Swiss nLPD and European GDPR regulations. Their platform offers multilingual support, granular consent controls, and integration with popular tools like Google Consent Mode and Google Tag Manager. The company positions itself as a trusted Swiss Made Software provider with a focus on privacy and data protection, targeting businesses and website owners who require compliance solutions. Technically, the website is built on WordPress with Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. Security posture is strong with HTTPS and no visible vulnerabilities, though explicit security policies and incident response information are lacking. Overall, the website is professional, trustworthy, and well-optimized for its niche market.

The website biskoui.com is currently inaccessible due to an invalid SSL certificate on the origin server, resulting in a Cloudflare error 526 page being served. This prevents access to any meaningful business content or services. The domain is recently registered in early 2023 with Infomaniak Network SA as the registrar and uses Cloudflare DNS servers. No business information, contact details, or policies are available on the site. Technically, the site relies on Cloudflare for DNS and security, but the lack of a valid SSL certificate on the origin server is a critical security and accessibility issue. The absence of privacy, cookie, or terms of service policies indicates poor compliance posture. Overall, the site currently presents a very low trust and security profile due to these fundamental issues.

sozjobs.ch is a leading Swiss job portal specializing in social and healthcare professions, operated by webways AG. The platform offers job listings, employer portraits, and recruitment tools tailored to the niche market of social and healthcare employment in Switzerland. The website demonstrates a professional design with consistent branding and clear navigation, targeting both job seekers and employers in the sector. Technically, the site employs modern JavaScript libraries and analytics tools such as Matomo and Google Tag Manager, with a custom CMS and good mobile optimization. Security posture is solid with HTTPS enforced and error monitoring via Sentry, though explicit security headers and incident response policies are absent. Privacy compliance is well addressed through comprehensive privacy and cookie policies with user consent mechanisms. Overall, the site is trustworthy, safe, and professionally maintained, with a strong market position in its niche.

AxisOfEasy.com is a niche media website operated by easyDNS Technologies Inc., focusing on cybersecurity, privacy, AI, and technology news and commentary. The site offers podcasts, weekly digests, and articles targeting IT professionals and technology enthusiasts. The business model centers on content publishing supported by the parent company easyDNS. The website demonstrates consistent branding and professional content quality, positioning it as a trusted source within its niche. Technically, the site is built on WordPress with a modern tech stack including Google reCAPTCHA, Matomo, and MonsterInsights for analytics. Hosting is provided by easyDNS, ensuring domain and hosting consistency. Security posture is good with HTTPS enforced and use of CAPTCHA, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is functional, professional, and trustworthy but could improve transparency and security practices.

CircleID is a well-established online platform specializing in internet infrastructure news, opinions, and blogs. Founded in 2001, it serves a professional audience including cybersecurity experts, domain industry participants, and policy makers. The website offers rich content including featured blogs, news briefs, industry updates, and community engagement, supported by sponsored topics and advertising partnerships with recognized companies such as Verisign and DigiCert. Technically, the site uses a custom CMS with modern JavaScript libraries like jQuery, Google Analytics for tracking, and Cloudflare for DNS hosting, delivering fast performance and good mobile optimization. Security posture is solid with HTTPS enabled and domain transfer protections, though improvements are recommended in DNSSEC adoption and security headers. Privacy compliance is basic with a comprehensive privacy policy but lacking cookie consent mechanisms. Overall, CircleID demonstrates high business credibility and trustworthiness, with a strong market position as a leading source for internet infrastructure developments.

Clever Cloud is a European-based Platform as a Service (PaaS) provider specializing in automated application deployment and cloud hosting with a strong emphasis on digital sovereignty and compliance. The company offers a broad range of cloud products including managed databases, runtimes for multiple programming languages, and software factory tools, targeting developers, IT managers, and corporate executives. Their market position is strengthened by certifications such as ISO 27001 and SecNumCloud, and partnerships with recognized entities like IONOS and Solocal. Technically, the website is built on a modern stack with Docker, multiple programming runtimes, and WordPress CMS, delivering fast performance and excellent mobile optimization. Security posture is robust with HTTPS enforcement, security headers, and compliance with European data protection standards. However, the absence of WHOIS registration data introduces some uncertainty about domain legitimacy. Overall, the site is professional, trustworthy, and well-structured, serving a technology-savvy audience with clear business and compliance messaging.

Resultify is a professional HubSpot agency focused on accelerating business growth in the Nordic region. They provide a comprehensive suite of services including HubSpot implementation, customization, strategy consulting, migration, training, and growth programs. The company positions itself as a trusted HubSpot partner, evidenced by their Global Partner of the Year 2024 badge and a portfolio of client case studies. Their target audience includes businesses seeking to leverage HubSpot for digital marketing, CRM, and operational efficiency. Technically, the website is built on HubSpot CMS, integrates modern analytics and tracking tools such as Google Analytics 4, Google Tag Manager, and Hotjar, and uses Bootstrap for responsive design. The site is mobile-optimized and accessible, with good SEO practices and clear navigation. Security posture is strong with HTTPS enforced and cookie consent mechanisms implemented, though explicit privacy and terms of service pages are missing. WHOIS data is not publicly available, likely due to privacy protection, which slightly impacts trust but is common for commercial entities. Overall, the website demonstrates a mature digital presence with room for improvement in privacy transparency and incident response disclosures.

CookieScan is a technology-focused service provider specializing in helping website owners ensure their cookie disclosures comply with PECR and ePrivacy regulations. The website presents a professional and consistent brand image, targeting businesses and website operators who require compliance assistance. The technical infrastructure is based on WordPress CMS with Elementor and Astra theme, incorporating modern web technologies and Google Analytics for user tracking. The site is accessible and mobile-optimized, though some accessibility features are basic. Security posture is moderate with HTTPS enabled but lacks visible security headers and formal security policies. The absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Overall, the website serves its niche well but would benefit from enhanced transparency and security documentation.

B. Braun Australia Pty Ltd operates a comprehensive and professionally designed website showcasing its position as a leading medical technology company. The company provides a wide range of medical equipment and healthcare solutions targeting healthcare professionals, patients, and industry partners. The website reflects a global enterprise with a strong brand presence and multiple country-specific sites. Technically, the site is built on Adobe Experience Manager with modern JavaScript libraries and Adobe marketing tools, delivering a good user experience with mobile optimization and accessibility features. Security posture is strong with HTTPS, CSRF protection, and secure login mechanisms, although explicit security policies and incident response contacts are not publicly available. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the domain and website content indicate a legitimate and trustworthy enterprise healthcare business.

Momentus Technologies is a technology company specializing in providing a comprehensive, end-to-end venue and event management software platform. The company targets a broad audience including convention centers, higher education institutions, corporate event planners, stadiums, arenas, and arts and culture organizations. Their platform integrates CRM, booking, event management, accounting, reporting, and API capabilities to streamline event operations and maximize revenue. The company positions itself as a trusted leader with global customers and strong industry certifications such as ISO 27001 and SOC 2. Technically, the website is built on the HubSpot CMS platform, leveraging modern web technologies including Google Fonts, FontAwesome, Splide.js for carousels, and various marketing and analytics tools such as Google Analytics 4, Hotjar, and CookiePro for consent management. The site demonstrates good performance, mobile optimization, accessibility, and SEO practices, reflecting a mature digital infrastructure. From a security perspective, the website enforces HTTPS, employs best practices including email validation on forms, and prominently displays security certifications. However, DNSSEC is not enabled, and there is no visible security.txt or explicit incident response contact information. No vulnerabilities or exposed sensitive data were detected, indicating a strong security posture. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with extensive tracking and marketing tools in use. The domain registration data aligns with the business claims, supporting legitimacy. Strategic recommendations include enabling DNSSEC, publishing a vulnerability disclosure policy, and adding Terms of Service for legal completeness.

networkteam GmbH is a well-established German digital agency specializing in custom web and mobile application development, content management systems, e-commerce, and digital transformation services. Founded in 1997, the company has a strong market presence with a diverse client portfolio and a focus on sustainable, future-proof digital solutions. Their website reflects a professional and modern digital maturity with a robust technical infrastructure leveraging React, Next.js, Kubernetes, and other contemporary technologies. Security posture is solid with HTTPS enforcement and security headers, though there is room for improvement in DNS security and explicit security policy disclosures. Privacy compliance is good with comprehensive privacy and cookie policies and consent mechanisms in place. Overall, networkteam GmbH demonstrates high business credibility and trustworthiness.

UChat is a technology company offering a no-code AI agent platform designed to automate sales and customer support across multiple communication channels such as WhatsApp, Instagram, and Messenger. The platform targets businesses seeking to enhance customer engagement and operational efficiency through AI-driven automation workflows. The website is built using modern web technologies including Framer and integrates common marketing and analytics tools like Google Analytics and Facebook Pixel. Security posture is adequate with HTTPS enabled, but lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. The domain registration is consistent with Australian domain administration practices, though WHOIS data is limited due to privacy protections. Overall, the website presents a professional and business-focused digital presence with moderate risk and room for enhanced compliance and security measures.

Bussgeldrechner.org is a specialized German website offering updated online calculators for traffic fines, points, and driving bans based on the 2025 traffic fine catalog. It targets drivers and vehicle owners in Germany seeking quick and reliable information about traffic violations and their legal consequences. The site is well-positioned in its niche with a clear business model relying on free tools and monetization through advertising and affiliate links. Technically, the site runs on WordPress with modern plugins for SEO, caching, and GDPR compliance, ensuring good performance and user experience. Security posture is strong with HTTPS, security headers, and consent management, although explicit vulnerability disclosure and incident response contacts are not present. Overall, the site is professional, trustworthy, and compliant with privacy regulations, making it a reliable resource for its audience.

The website www.dfktv2.com presents itself as a chatbot application focused on conversation marketing and business automation without coding. The content is minimal but indicates a technology-oriented service aimed at businesses seeking automation solutions. The technical infrastructure is basic, utilizing standard web technologies such as HTML5, CSS3, JavaScript, and external font and CDN services from Bunny Fonts and Bunny CDN. The site appears mobile-optimized with moderate performance but lacks advanced frameworks or CMS identification. Security posture is weak due to the absence of visible security headers, privacy policies, and incident response information. The domain WHOIS data is unavailable, raising concerns about domain legitimacy and trustworthiness. Overall, the site lacks critical compliance and contact information, which impacts its credibility and security standing.

Addviso is a French digital agency based in Rennes, specializing in a broad range of digital services including digital strategy, web design, website creation, SEO, social media management, web analytics, web marketing, and digital event solutions. The company targets businesses and organizations seeking to develop and succeed in their digital projects. The website content is professionally presented in French, reflecting a small-sized agency founded around 2018. Technically, the site is built on WordPress, utilizing common plugins such as Contact Form 7 and Tarteaucitron for cookie consent management, and employs Matomo and Google Analytics for visitor tracking. The site is mobile-optimized with good SEO practices and moderate performance.

Viaplay Group Sweden AB operates a leading Nordic streaming platform offering a wide range of entertainment including movies, series, children's content, and live sports. The service targets a broad audience in Finland and other Nordic countries, providing subscription-based access with options for rental and purchase. The website demonstrates a mature digital presence with modern technologies such as Next.js and AWS hosting, ensuring fast and responsive user experience across devices. Privacy and cookie policies are clearly presented, reflecting compliance with GDPR and related regulations. Security posture is strong with HTTPS enforcement and no visible vulnerabilities. Overall, Viaplay presents a professional, trustworthy, and well-established streaming service in the Nordic media market.

Plezi is a French-based technology company specializing in B2B marketing automation software designed to simplify and optimize lead generation, nurturing, and CRM synchronization. The company positions itself as a user-friendly and intelligent platform tailored for busy marketers and sales teams, offering a SaaS solution complemented by dedicated support and training services. The website is professionally designed, mobile-optimized, and leverages modern web technologies including WordPress, Yoast SEO, and Google Tag Manager for analytics and marketing. From a technical perspective, the site demonstrates good SEO practices and performance optimization but lacks explicit security headers and visible privacy or cookie policies, which are critical for GDPR compliance and user trust. The security posture is solid with HTTPS enforced and no exposed sensitive data, but improvements are recommended in security policy transparency and form security. Overall, the website is trustworthy and credible with consistent domain registration data and a clear business model. However, the absence of explicit privacy and cookie policies and security headers slightly lowers the privacy compliance and security posture scores. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, and providing clear incident response contacts to improve compliance and user trust.

The analyzed page is an access denied message in Swedish indicating that the user has been denied access to a directory. The content is minimal and primarily provides instructions related to cookie settings and session inactivity. There is no business description, contact information, or policy documents present. The domain is registered with a Swedish registrar since 2000, indicating a long-standing presence, but the page content does not reflect an active business site. The technical infrastructure appears minimal with basic JavaScript and DNS hosting by DNS Made Easy. No security headers or HTTPS status were identified from the data provided. The security posture is weak due to lack of HTTPS and absence of security best practices. Overall, the site is not currently providing meaningful business or compliance information and appears to be a restricted access page rather than a public-facing website.

Podme is a Finnish digital media company specializing in premium podcasts and audiobooks, offering ad-free content through subscription plans. The service targets Finnish-speaking users, including students who benefit from discounts. The website is professionally designed, mobile-optimized, and uses modern web technologies such as Next.js and React, hosted likely on Microsoft Azure. The business is part of the Schibsted group, a reputable media conglomerate, which enhances its market credibility. The domain is well-established since 2009, supporting the company's maturity and legitimacy. Security posture is strong with HTTPS, clientTransferProhibited domain status, and no evident vulnerabilities, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, Podme presents a trustworthy and professional digital media platform with a solid technical foundation and clear business model.

Viaplay Group Sweden AB operates Viaplay, a leading Swedish streaming service offering a broad portfolio of entertainment including films, series, children's content, live sports, and TV channels. Established in 2008, Viaplay has positioned itself as a major player in the Nordic media market, leveraging premium sports broadcasting rights such as Premier League and Champions League to attract a wide audience. The service operates on a subscription model with additional options for renting and purchasing films, targeting general audiences including families and sports enthusiasts. Technically, Viaplay employs a modern web infrastructure built on Next.js and React, hosted likely on AWS, with integration of Google Tag Manager and OneTrust for analytics and privacy compliance. The website is well-optimized for performance, mobile responsiveness, and accessibility, providing a seamless user experience. Security practices include HTTPS enforcement and use of security headers, although DNSSEC is not enabled, and explicit security policies or incident response contacts are not publicly disclosed. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms in place, aligning with GDPR requirements. However, the absence of a published security policy and vulnerability disclosure program suggests room for improvement in transparency and incident readiness. Overall, Viaplay presents a trustworthy and professional digital presence with excellent content quality and user experience. Strategic enhancements in security transparency and DNS security would further strengthen its risk profile and stakeholder confidence.

Juristfirman De juris est AB is a small Swedish legal services firm specializing in business and private law, tech law, and dispute resolution. Founded in 2017, the firm offers expert legal advice on accessibility law, professional web and software development, co-ownership and forced sales, and personal assistance and legal aid. The website is professionally designed with comprehensive content including specialist areas and detailed legal articles referencing recent case law. The firm targets Swedish businesses and private individuals requiring specialized legal services. Technically, the website uses modern HTML5, CSS3, JavaScript, and Font Awesome icons, hosted by One.com, with good mobile responsiveness and SEO optimization. Security posture is moderate with HTTPS implied but lacks explicit security headers and DNSSEC is not enabled. Privacy and cookie policies are missing, representing compliance gaps. Contact information is clearly presented including phone, email, physical address, and LinkedIn profile. Overall, the site is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices.

The Autowissensportal website is an online automotive knowledge portal primarily serving German-speaking users interested in cars and mobility. It is closely associated with the AvD Automobilclub von Deutschland e.V., a recognized automobile club in Germany, which lends credibility and trust to the platform. The portal offers expert tips, tutorials, and information on vehicle maintenance, new technologies, and member-exclusive benefits such as roadside assistance and discounts. The website is well-branded, consistent, and professionally designed with a focus on delivering relevant automotive content to a broad audience. From a technical perspective, the site employs a modern technology stack including jQuery, Bootstrap 5, and Animate.css, hosted behind Cloudflare CDN services ensuring good performance and security. Cookie consent is managed via Cookiebot, and marketing tracking pixels from Facebook and TikTok are implemented with user consent. The site is mobile-optimized and accessible, though some accessibility features could be enhanced. No forms are directly visible on the main page, indicating limited direct data collection at this entry point. Security posture is solid with HTTPS enforced and no visible sensitive data exposure. However, explicit security headers are not detected, and no published security or incident response policies are available on the site. The domain registration is consistent with the business claims, using Cloudflare DNS without privacy protection, indicating transparency. Overall, the site demonstrates a good balance of usability, compliance, and security for its business purpose. Strategic recommendations include enhancing security headers, publishing a formal security policy and incident response contacts, and implementing a vulnerability disclosure program to further strengthen trust and compliance. These steps will improve the security maturity and reassure users and partners about the portal's commitment to data protection and cybersecurity.

The website avd-desk.com/login serves as a login portal for a service named 'AvD Desk'. The domain is newly registered in 2023 and uses Cloudflare for DNS hosting. The site employs modern frontend technologies such as Vue.js and integrates Google Maps API, indicating a moderate level of technical maturity. However, the site lacks publicly accessible business information, privacy policies, cookie consent mechanisms, and terms of service, which limits transparency and compliance. Security posture is basic with HTTPS enabled but no DNSSEC or security headers detected. There are no signs of adult or suspicious content, and the site appears safe for general audiences. Overall, the site is functional but lacks comprehensive compliance and security best practices.

AvD (Automobilclub von Deutschland) is a well-established automotive club in Germany focusing on motorsport events, particularly oldtimer rallies such as the AvD-Histo-Tour. The website showcases their event information and services targeting automobile enthusiasts and motorsport fans. The digital infrastructure is modern, built on Next.js and React, with integration of advanced cookie consent management via Cookiebot and marketing/analytics tools from major providers like Google and Meta. Security posture is solid with HTTPS and consent mechanisms, though some security headers and incident response details are missing. Overall, the site is professional, trustworthy, and compliant with GDPR requirements. Strategic improvements could include publishing explicit security policies and enhancing accessibility.

Classic Car Analytics GmbH operates a professional online platform specializing in classic car valuations, market analysis, and connecting customers with a large network of over 1,100 appraisal partners across Europe. The company holds a strong market position in Germany as the largest classic car appraisal network, providing services accepted by all classic car insurance companies. Their offerings include online and in-person valuations, auction results, insurance consulting, and expert appraisals. The website is well-designed, mobile-optimized, and provides clear navigation and comprehensive content tailored to classic car enthusiasts, experts, and fans. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, and integrates Google Tag Manager for analytics. It employs HTTPS with strong SSL configuration and includes CSRF tokens in forms, indicating attention to security best practices. However, some security headers are missing, and no explicit security or incident response policies are published. Privacy compliance is well addressed with a clear privacy policy, cookie consent modal, and GDPR indicators. The security posture is solid with no detected vulnerabilities or WAF blocking. WHOIS data confirms domain legitimacy and consistency with the business history. Overall, the site presents a trustworthy and professional digital presence with moderate to high technical maturity. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, and adding a vulnerability disclosure policy to further improve trust and compliance.

The Zentralverband Deutsches Kraftfahrzeuggewerbe (ZDK) is a prominent German trade association representing over 39,000 car dealerships, body shops, and master automotive workshops with nearly 470,000 employees. The website serves as a comprehensive platform for industry news, initiatives, and member services, positioning ZDK as a central voice in the automotive trade sector in Germany. The site targets industry professionals, policymakers, and the general public interested in automotive trade developments. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies including SVG graphics and Vite for asset bundling. It employs Matomo analytics with privacy-conscious configurations and implements consent-based loading for third-party content such as YouTube videos. The site is hosted on networkteam.com infrastructure, with fast performance and excellent mobile optimization. From a security perspective, the site enforces HTTPS and uses privacy-respecting analytics. However, it lacks explicit published security policies and incident response contacts, and could benefit from additional security headers and a vulnerability disclosure policy. Privacy compliance is strong, with a clear privacy policy and cookie consent mechanism in place. Overall, the website is professional, trustworthy, and well-maintained, reflecting the organization's authoritative position in the automotive trade industry. Strategic improvements in security transparency and incident response readiness would further enhance trust and resilience.

SERMA GmbH operates a professional website focused on providing SERMI certification services and access to security-relevant repair and maintenance information for the automotive sector. The company targets automotive service providers requiring secure access to vehicle data, offering a digital portal for registration and management. The website is well-structured, professionally designed, and consistent with the company's business focus in Germany. Technically, the site is built on TYPO3 CMS, employs Matomo analytics with privacy-conscious configurations, and uses modern JavaScript modules. The site is mobile-optimized and accessible, with good SEO practices. Security posture is strong with HTTPS enforced and cookie consent implemented, though additional security headers and a published security policy would enhance trust. The WHOIS data is privacy protected by EURid, which is common for EU domains, and no registrant details are publicly available. Despite this, the website content and contact information indicate a legitimate and trustworthy business. No blocking or WAF mechanisms were detected, allowing full content access and analysis. Overall, SERMA GmbH presents a credible, secure, and professional online presence supporting its niche certification services in the automotive industry.

TAK OnlineAkademie operates as a specialized online learning platform focused on technical automotive (Kfz) education, offering interactive courses for official exam preparation and continuing education. The business targets professionals and trainees in the automotive sector within Germany, positioning itself as a niche educational provider. The website is built on a modern technology stack including jQuery and Bootstrap, hosted on reputable German servers (Hetzner), and incorporates a GDPR-compliant cookie consent mechanism via Usercentrics. Security measures include CSRF tokens and secure login forms, though HTTP security headers are not explicitly detected. Overall, the site is accessible, professionally designed, and provides relevant content for its audience.

Lebenshilfe Gießen e.V. is a well-established non-profit organization based in Germany, dedicated to supporting people with and without disabilities through a wide range of social services, educational programs, and community initiatives. The organization operates over 70 facilities and services in the Gießen region, employing approximately 1,800 staff members. Their business model focuses on inclusive social support, vocational training, and community integration, supported by several subsidiaries and a strong partnership network with umbrella organizations. The website reflects a professional and comprehensive digital presence, showcasing their extensive service offerings and community engagement. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as Swiper.js for interactive elements and Usercentrics for GDPR-compliant consent management. The site is mobile-optimized, accessible, and SEO-friendly, hosted on domaincontrol.com infrastructure. Performance is moderate with good responsiveness and accessibility features. From a security perspective, the site enforces HTTPS and uses a consent management platform, but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is strong with clear privacy and cookie policies in German, aligned with GDPR requirements. Overall, Lebenshilfe Gießen e.V. presents a trustworthy, professional, and secure online presence suitable for a broad audience, with recommendations to enhance security posture by adding formal security policies, incident response information, and security headers to further strengthen trust and compliance.

Momentus Technologies offers a comprehensive, cloud-based venue and event management software platform designed to streamline operations for a diverse range of clients including convention centers, higher education institutions, corporate entities, stadiums, arenas, and arts and culture organizations. The company positions itself as a trusted technology provider with a growing global customer base and a strong emphasis on integrated solutions that enhance operational efficiency and customer engagement. The website reflects a mature digital presence with professional design, clear navigation, and extensive use of marketing and analytics tools. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in publishing explicit security policies and headers. Overall, the domain registration and WHOIS data align well with the business claims, supporting legitimacy and trustworthiness.

Cadillock is a German-based company specializing in innovative vehicle safety technologies, particularly focusing on battery jump-start systems and monitoring solutions for 12V and 24V vehicles. The company offers premium products such as the Cadillock Power K2000 and K4800, which feature advanced lithium-polymer batteries and intelligent safety features. Their market position is that of a niche player providing high-quality, technologically advanced automotive safety products primarily to German-speaking customers. The website is built on a modern WordPress platform with WooCommerce for e-commerce capabilities and Elementor for design, reflecting a moderate level of digital maturity. While the site is well-structured, mobile-optimized, and uses HTTPS, it lacks explicit privacy and security policies, which are important for compliance and trust. Security posture is generally good with domain protections in place, but improvements can be made by enabling DNSSEC and adding security headers. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security transparency.

Classic Trader operates an international online marketplace specializing in classic cars, offering over 10,000 listings. The website targets classic car enthusiasts and buyers globally, providing a platform to browse and purchase vintage automobiles. The business model centers on facilitating transactions between sellers and buyers through a digital marketplace. Technically, the site employs modern web technologies including Google Analytics, Facebook Pixel, Cookiebot for consent management, and payment integrations with Stripe and PayPal. Hosting and security are enhanced by Cloudflare services, ensuring good performance and protection against bots. Security posture is strong with HTTPS enforced and cookie consent implemented, though some security headers and explicit incident response policies are absent. Privacy compliance is well addressed with a comprehensive privacy policy and GDPR-aligned cookie consent. However, the absence of WHOIS data limits domain legitimacy verification, which is a notable risk factor. Overall, the website is professional, secure, and user-friendly, but would benefit from enhanced transparency in domain registration and contact information.

Kuhn und Bieri AG is a well-established Swiss company specializing in medical technology and care supplies, serving healthcare institutions such as nursing homes, hospitals, rehabilitation clinics, and medical practices. With over 50 years of experience, the company offers tailored solutions, a broad product range, and personal consultation services, positioning itself as a trusted regional player in the healthcare supply market. The website reflects a professional e-commerce platform built on Shopware 6, featuring comprehensive product categories and customer service options. Technically, the site employs modern web technologies, including Google Tag Manager, reCAPTCHA v3, and Doofinder search, ensuring a functional and user-friendly experience with good mobile optimization and SEO practices. Security-wise, the site enforces HTTPS, uses security headers, and integrates bot protection, though it lacks a dedicated security policy or vulnerability disclosure page. Overall, the website is secure, compliant with GDPR, and credible, with transparent business and contact information.

Coolstuff is a well-established Swedish e-commerce retailer specializing in unique and personalized gifts and gadgets. The website targets consumers primarily in Sweden and other Nordic countries, offering a wide range of products including personalized apparel, advent calendars, and gift boxes. The company operates multiple country-specific domains, indicating a broad regional presence. Technically, the website is built using modern frameworks such as SvelteKit, ensuring fast performance and excellent mobile optimization. The use of Google Tag Manager indicates active marketing and analytics efforts. Security posture is generally good with HTTPS enabled and cookie consent implemented, but the absence of security headers and explicit privacy and terms pages suggests room for improvement. WHOIS data for the www subdomain is not available, but this is likely due to querying the subdomain rather than the root domain. Overall, the site presents a professional and trustworthy front with moderate risk due to minor compliance and security gaps.

Xelab srl is a specialized consulting company based in Italy, offering a broad range of services focused on workplace safety, occupational health, food hygiene (HACCP), privacy compliance (GDPR), training, and custom software development. With over 20 years of experience and a portfolio of more than 400 projects, Xelab positions itself as a trusted partner for businesses seeking to comply with regulatory requirements and improve operational efficiency. Their offerings include in-person and e-learning courses, software solutions, and digital marketing services through their web agency. The company targets small to medium enterprises in Italy requiring compliance and training services. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Google Analytics, ensuring a responsive and user-friendly experience. The site is well-structured with clear navigation and optimized for mobile devices. Privacy and cookie policies are implemented with a consent mechanism, reflecting good compliance with GDPR requirements. However, some security headers are missing, and there is no explicit incident response or vulnerability disclosure information. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. The presence of cookie consent and privacy policies indicates awareness of data protection obligations. No critical vulnerabilities or suspicious content were detected. WHOIS data aligns with the business claims, supporting legitimacy. Overall, Xelab's website demonstrates a professional and trustworthy online presence with good content quality, technical implementation, and privacy compliance. Strategic improvements in security headers and incident response transparency could further enhance their security posture.

WeChat is a globally recognized messaging and calling platform operated by Tencent, offering a wide range of communication services including text, voice, video, and group chats. The website serves as a central hub for app downloads across multiple platforms such as iOS, Android, Windows, and Mac, and provides links to related services like WeChat Pay. The platform targets a broad general audience, emphasizing connectivity and social interaction. Technically, the website uses standard web technologies including jQuery and modern HTML/CSS, with a moderate performance profile and good mobile optimization. Security posture is moderate due to lack of visible security headers and unknown SSL configuration, though HTTPS is implied by app store links. Privacy compliance is supported by a comprehensive privacy policy and terms of service, but lacks a cookie consent mechanism. The absence of WHOIS data for the domain reduces domain registration trustworthiness, though the website content and official app links support legitimacy.

Resultify i Sverige AB is a Swedish digital marketing and communications agency specializing in optimizing the digital customer journey through creative communication, data-driven marketing, and HubSpot platform expertise. Positioned as a certified HubSpot Diamond Partner, Resultify offers a comprehensive suite of services including strategy consulting, CRM and sales enablement, marketing, advertising, analytics, web development, and integrations. Their market focus is on businesses seeking to grow and enhance their digital presence with measurable results. The website demonstrates a professional and consistent brand image with good content quality and clear navigation. Technically, the website is built on the HubSpot CMS platform, leveraging modern web technologies and multiple marketing and analytics tools such as Google Tag Manager, Matomo, and various social media pixels. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. Security posture is solid with HTTPS enforced and use of reCAPTCHA on forms, though explicit security headers could be better documented. Privacy compliance is strong, featuring a comprehensive privacy policy and cookie consent mechanism aligned with GDPR. The security analysis reveals no critical vulnerabilities or exposed sensitive data. However, the WHOIS data for the domain could not be retrieved, limiting the ability to fully verify domain registration legitimacy. Despite this, the professional presentation, clear contact information, and social media presence support a high trustworthiness rating. Overall, Resultify presents as a credible and competent digital marketing partner with a mature digital infrastructure. Strategic recommendations include enhancing security header implementation, publishing a formal security policy and incident response contacts, and considering a vulnerability disclosure policy to further strengthen trust and compliance.

Jobbland.se is a Swedish job portal website established in 2018, offering job listings and career-related services primarily targeting job seekers and employers in Sweden. The site features a modern React-based frontend with Material-UI styling and is hosted with Cloudflare DNS services. The website presents a professional design and good user experience, optimized for mobile devices, and provides relevant content for its audience. However, it lacks key compliance elements such as privacy and cookie policies, which are critical for GDPR adherence. Security-wise, the site uses HTTPS but does not implement DNSSEC or security headers, which could be improved to enhance protection against common web threats. Overall, the domain registration is consistent and legitimate, supporting the business's credibility.

InTech is a professional IT consulting and software company based in Luxembourg, specializing in application integration, web/object environments, and blockchain technologies. The company targets businesses and organizations seeking advanced IT services and consulting. The website presents a consistent and professional brand image with good content quality and clear navigation, supported by a WordPress CMS infrastructure enhanced with SEO and job board plugins. Technical maturity is moderate with modern technologies and Google Analytics integration. Security posture is good with HTTPS and reCAPTCHA usage, though explicit security headers and privacy policies are lacking. The absence of WHOIS data limits domain trust assessment but the website itself appears legitimate and business-focused. Strategic recommendations include enhancing privacy compliance, adding explicit contact information, and improving security headers to strengthen trust and compliance.

Webikeo is a French webinar platform established in 2014, offering free access to over 5,000 webinars focused on professional training and solutions. The platform targets professionals seeking knowledge and training resources through webinars. The website is built on modern web technologies including Next.js and React, with integrations such as Algolia for search and Didomi for consent management, indicating a mature digital infrastructure. Security monitoring is implemented via New Relic, and HTTPS is enforced, contributing to a strong security posture. However, explicit privacy policies and terms of service pages were not found in the provided content, which could be improved to enhance compliance and user trust. Overall, the website is professional, well-branded, and trustworthy with a solid domain registration history.

easyDNS is a well-established Canadian technology company specializing in domain registration, DNS hosting, email hosting, and web hosting services since 1998. The company positions itself as a reliable and professional DNS provider with a broad portfolio of services including Anycast DNS, enterprise DNS solutions, and premium email hosting. Their market presence is supported by a consistent brand image, comprehensive service offerings, and a focus on customer support and professional services such as WordPress development and SEO optimization. The website reflects a mature digital infrastructure with modern technologies and analytics integration, indicating a high level of digital maturity.

WebsiteDemos.net is a technology-focused website providing a comprehensive archive of website templates and demos, primarily targeting web designers, developers, and businesses seeking ready-made website designs. The site leverages WordPress with the Astra theme and several advanced Gutenberg plugins, indicating a modern and flexible technical infrastructure. The presence of Google Analytics, Google Tag Manager, and Facebook Pixel shows an emphasis on user behavior tracking and marketing analytics. Security posture is adequate with HTTPS enabled and domain registration protections in place, but lacks advanced DNS security features like DNSSEC and visible security headers. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Overall, the site is professionally designed with good SEO and mobile optimization but would benefit from enhanced privacy and security disclosures.

Gumroad, Inc. operates a well-established e-commerce platform that enables creators and entrepreneurs to sell digital products, subscriptions, and side projects directly to customers. Founded in 2009, the company has positioned itself as a simple and effective solution for individuals seeking to monetize their knowledge and creative work. The platform supports multiple payment options, storefront customization, and integration with various third-party applications, catering primarily to digital creators and small business owners. Technically, Gumroad leverages a modern Ruby on Rails backend, integrates Stripe for payment processing, and uses Cloudflare for DNS services. The website is fast, mobile-optimized, and employs contemporary web technologies including JavaScript frameworks and CSS utilities. The presence of CSRF tokens and HTTPS indicates a strong baseline security posture, although DNSSEC is not enabled and some advanced security headers could be added. From a security and compliance perspective, Gumroad demonstrates good practices such as HTTPS enforcement, CSRF protection, and domain registration safeguards. However, explicit cookie consent mechanisms and published security policies or incident response contacts are absent, representing areas for improvement. No vulnerabilities or suspicious indicators were detected in the publicly accessible content. Overall, Gumroad presents a professional, trustworthy, and user-friendly platform with a mature technical infrastructure and solid business credibility. Strategic enhancements in privacy compliance and security transparency would further strengthen its market position and user trust.

OWIBA AG operates the website iba.ch, the largest B2B office supplies distributor in Switzerland, offering over 13,000 products with next-day delivery and professional consulting services. The company targets business customers with a comprehensive e-commerce platform featuring a broad product catalog and loyalty programs. Technically, the website employs modern JavaScript libraries, Google Tag Manager, and Dynamic Yield for personalization and analytics, with good mobile optimization and SEO practices. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though a dedicated security policy and incident response information are absent. Privacy compliance is robust with clear cookie consent and GDPR-aligned privacy policies. Overall, the site demonstrates high professionalism, trustworthiness, and market credibility.

Publicare AG is a Swiss market-leading company specializing in the supply and consultation of medical aids, including incontinence, stoma, tracheostomy care, and wound treatment. The company targets both private individuals and business customers, offering high-quality advice and fast delivery services. Their business model combines e-commerce with direct billing to health insurers, positioning them as a trusted healthcare supplier in Switzerland. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their audience. Technically, the website is built on modern frameworks such as Next.js and React, leveraging Cloudflare for hosting and security. It employs Cookiebot for comprehensive cookie consent management and Google reCAPTCHA for form protection. The site demonstrates good mobile optimization and moderate performance, with SEO and accessibility features implemented at a basic to good level. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes essential security headers. The use of consent management and bot detection cookies indicates a mature approach to privacy and security. However, the absence of a dedicated security policy or incident response information suggests room for improvement in transparency and readiness. Overall, Publicare AG's website presents a trustworthy and professional digital presence with strong compliance to privacy regulations and a solid technical foundation. Strategic enhancements in security policy disclosure and accessibility could further strengthen their security posture and user trust.

SmartLife Care AG is a Swiss company specializing in emergency call solutions for seniors, offering devices such as emergency buttons, watches, and bracelets combined with 24/7 call center services. The company holds a leading market position in Switzerland with a clear focus on safety and independence for elderly users. The website reflects a mature digital presence with professional design, multilingual support, and integrated e-commerce capabilities. Technically, the site uses modern technologies including Google Tag Manager and a consent management platform, ensuring compliance with privacy regulations. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the domain registration and website content align well, indicating a trustworthy and legitimate business.

spitexjobs.ch is a specialized online job portal dedicated to the Spitex healthcare sector in Switzerland, connecting job seekers with Spitex organizations. The platform offers comprehensive job listings, employer profiles, and advanced search and filtering capabilities tailored to healthcare roles such as ambulatory care and specialized nursing. The website is professionally designed, mobile-optimized, and provides a seamless user experience with clear navigation and relevant content for its target audience. Technically, the site employs modern JavaScript frameworks, integrates analytics via Matomo and Google Tag Manager, and uses Sentry for error monitoring, reflecting a mature digital infrastructure. Security is robust with HTTPS enforced, appropriate security headers, and privacy compliance including GDPR-aligned privacy and cookie policies with user consent mechanisms. No critical vulnerabilities or suspicious content were detected, and WHOIS data confirms the domain's legitimacy and consistency with the business profile. Overall, the site demonstrates a strong security posture, good privacy practices, and a credible business presence in the Swiss healthcare job market.