Security Directory

P

Plesk Obsidian 18.0.70

alphavilletraduzioni.eu

0

The website alphavilletraduzioni.eu currently serves a default Plesk Obsidian control panel interface rather than a public-facing business website. This indicates that the domain is either under development or used solely for server management purposes. The technical infrastructure is based on Plesk 18.0.70 running on an nginx server, with JavaScript libraries such as Prototype.js and RequireJS. However, the site lacks a valid SSL certificate, resulting in no HTTPS support, which significantly impacts security posture. Security headers are partially implemented but insufficient without encryption. No privacy policy, terms of service, or contact information is present, limiting compliance and business credibility. The domain registration is consistent and legitimate, but the lack of active business content reduces trustworthiness and user engagement.

The PETRA-E Network website serves as an educational platform dedicated to literary translation, connecting institutions and individuals across Europe. It offers a professional framework for literary translation competences and fosters collaboration through resource sharing and events. The network is positioned as a niche educational entity with partnerships across multiple European universities and organizations. Technically, the website is built on WordPress with common web technologies such as jQuery and Bootstrap, hosted likely by Utrecht University. While the site provides good content quality and user experience, it lacks critical security implementations such as a valid SSL certificate and proper HTTPS configuration. Privacy and cookie policies are absent, which impacts compliance with GDPR standards. The site includes minimal user tracking via a lightweight analytics plugin and provides contact primarily through email and social media channels. Overall, the website is functional and professional but requires significant improvements in security and privacy compliance to enhance trust and protect users.

F

Fondazione Unicampus San Pellegrino

ssmlitalia.it

0

Fondazione Unicampus San Pellegrino is an educational and research institution accredited by the Italian Ministry of University and Research (MUR), specializing in linguistic mediation, translation, and intercultural communication. The foundation operates multiple campuses in Italy and offers a range of academic programs including bachelor's degrees, master's degrees, executive masters, and certification courses. The website reflects a well-structured and professionally designed platform targeting students and professionals in the linguistic and translation fields. Technically, the site is built on WordPress with modern plugins and LMS integration, but it lacks a valid SSL certificate, which is a critical security concern. Privacy and cookie policies are present and GDPR compliant, but no explicit security or incident response policies are found. Overall, the business credibility is strong, but the security posture requires urgent improvement to protect user data and enhance trust.

D

Detas SpA

detasultra.com

0

Detasultra, a division of Detas SpA, specializes in patented cable gland systems and related industrial products serving multiple sectors including manufacturing, energy, and transportation. The company maintains a mature online presence with a well-structured website offering detailed product categories and multilingual support. The technical infrastructure leverages modern web technologies such as Webflow CMS, Google Tag Manager, and Weglot for translation, but suffers from a critical lack of a valid SSL certificate, exposing the site to security risks. Privacy and cookie policies are present, indicating basic GDPR compliance, and contact information is clearly provided. However, the imminent domain expiry and absence of domain protection locks present operational risks.

H

Haake Technik GmbH

haake.it

0

Haake Technik GmbH is a family-run company specializing in the development and manufacturing of industrial safety equipment, including safety edges, bumpers, mats, switches, and locking systems. With over 30 years of experience and an international presence, the company serves industrial clients focused on workplace and machine safety. The website reflects a professional business with clear product offerings and strong customer references. Technically, the site uses modern tracking and consent tools but suffers from a critical lack of a valid SSL certificate, resulting in no HTTPS support and exposing users to security risks. Performance is slow, and security headers are missing, indicating room for improvement in technical and security infrastructure. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, the business credibility is strong, but the security posture requires urgent attention to protect user data and maintain trust.

REO ITALIA S.r.l. is a medium-sized Italian company specializing in the production and supply of inductive, resistive, and electronic components, serving industrial and energy sectors globally. The company emphasizes sustainability and offers customized product development, training, repair, and technical support services. The website is built on WordPress with WooCommerce and multilingual support, providing a professional and content-rich user experience. However, the absence of a valid SSL certificate and HTTPS implementation represents a critical security vulnerability that undermines user trust and data protection. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the business presents a credible and professional digital presence but must urgently address its security posture to protect users and comply with best practices.

D

Detas SpA

evchargers.it

0

Detas SpA operates the EVchargers division, providing a comprehensive range of electric vehicle charging solutions tailored for private users, businesses, and public infrastructures in Italy. Their offerings include WallBox home chargers, commercial charging stations, ultra-fast chargers, and complementary software platforms for mobile and desktop management. The company holds ISO9001 and ISO14001 certifications, indicating a commitment to quality and environmental standards, and serves notable clients such as Esselunga and Pirelli, positioning itself as a reputable player in the energy and transportation sectors. Technically, the website is built on a modern stack leveraging Webflow CMS, Cloudflare CDN, Weglot for multilingual support, and Plausible Analytics for privacy-conscious user tracking. The site demonstrates good design quality, mobile optimization, and SEO practices. However, performance metrics are unavailable, and accessibility is basic. From a security perspective, the site suffers from critical issues including the absence of a valid SSL certificate and HTTPS support, lack of TLS protocol enablement, and missing security headers like HSTS. While some security best practices are partially implemented (e.g., secure cookies), the overall security posture is weak, exposing users and the business to potential risks. Privacy compliance is adequate with visible privacy and cookie policies and GDPR adherence. Overall, the website presents a professional business front with solid content and branding but requires urgent security improvements to protect data integrity and user trust. Strategic enhancements in SSL deployment, security headers, and incident response transparency are recommended to elevate the security maturity and compliance posture.

D

Detas SpA

attraversamentipedonali.it

0

Detas SpA operates Attraversamenti Pedonali Luminosi, specializing in LED-based pedestrian crossing safety systems tailored for various road types and power sources. The company targets public entities and road safety professionals, offering configurable products and technical support. The website reflects a medium-sized Italian business with a professional online presence and ISO certifications, reinforcing its market credibility. Technically, the site leverages modern web technologies including Webflow CMS, Google Fonts, Weglot for multilingual support, and Plausible Analytics for privacy-conscious tracking. However, the absence of a valid SSL certificate and incomplete HTTPS implementation significantly undermines the security posture. While privacy and cookie policies are well addressed via Iubenda, the lack of explicit incident response or security policies is noted. Overall, the site is functional and professional but requires urgent security improvements to protect user data and enhance trust.

D

Detas SpA - Divisione Dleds

dleds.com

0

Detas SpA - Divisione Dleds is an Italian company specializing in the design and manufacture of advanced LED lighting solutions for street, industrial, office, and school environments. The company holds ISO9001 and ISO14001 certifications, indicating a commitment to quality and environmental management. Their website reflects a professional presence with clear product categories, technical resources, and multilingual support via Weglot, targeting business and public sector clients in the energy and transportation sectors. Technically, the website is built on Webflow, uses Cloudflare for hosting and CDN, and integrates modern web fonts and analytics tools. However, the absence of a valid SSL certificate and lack of modern TLS protocols significantly weaken the security posture. Privacy policies are present but lack a cookie consent mechanism, and no incident response or vulnerability disclosure information is provided. Overall, the website is functional and professional but requires urgent security improvements to protect user data and enhance trust.

D

DENVER USA Inc.

denverusamachinery.com

0

DENVER USA Inc. operates as the U.S. subsidiary of DENVER S.p.A., specializing in manufacturing and selling advanced CNC machinery for stone and glass processing. The company positions itself as a technologically innovative provider with a strong service and support presence in the U.S., including a parts warehouse and technicians. Their product range includes CNC routers, bridge saws, polishing machines, and vertical/horizontal CNC glass machines, supported by flexible financing options. The website is built on WordPress with common plugins and libraries, presenting professional content and clear contact information. However, the site lacks critical security configurations such as a valid SSL certificate and HTTPS, which significantly impacts its security posture. No privacy or cookie policies are present, indicating compliance gaps. Social media and contact channels are well established, supporting business credibility.

S

Studio Leonardo snc

studioleonardo.com

0

Studio Leonardo is a small Italian web agency established in 1996, specializing in communication, marketing, web solutions, and SEO services primarily targeting small and large companies. The website is built on WordPress with a modern but somewhat dated technology stack including jQuery, Bootstrap, and various WordPress plugins. While the site has good SEO metadata, structured data, and a consistent brand presence, it lacks critical security infrastructure such as a valid SSL certificate, which severely impacts its security posture. Cookie consent is managed via Cookiebot, indicating some level of privacy compliance, but no privacy policy or terms of service pages were found. Contact information is clearly provided, including phone numbers, physical address, and contact forms.

ABCNEWS Store is a small-scale e-commerce website offering select ABC News programs and reports for purchase. The site targets consumers interested in news media content and operates under the ABC brand umbrella, with links to official Disney privacy and terms pages indicating corporate affiliation. The business model centers on retailing media content with direct email contact for customer inquiries. Technically, the website is hosted on Amazon S3 with CloudFront CDN, utilizing basic web technologies such as JavaScript, CSS, and Google Fonts. The site exhibits slow performance with minimal optimization for mobile and accessibility. The design is basic with limited content and navigation, lacking modern CMS or frameworks. From a security perspective, the site lacks a valid SSL certificate and does not support HTTPS, exposing users to potential risks. No security headers or advanced protections are implemented, and no cookie or privacy consent mechanisms are present. These deficiencies significantly reduce the security posture and privacy compliance of the website. Overall, the website presents moderate business credibility due to brand association but suffers from critical security shortcomings. Strategic improvements in SSL deployment, security headers, and privacy compliance are essential to enhance trust and protect users.

M

MECAL MACHINERY S.r.l

mecal.com

0

Mecal Machinery S.r.l is an Italian manufacturing company specializing in the production of machines and systems for processing aluminum, PVC, and light alloys. The company targets industrial clients requiring advanced machinery solutions and maintains a multilingual website to serve an international audience. Their business model focuses on manufacturing, technical support, and product distribution. The website demonstrates a good level of professionalism and content quality, with clear navigation and multilingual support. Technically, the site is built on WordPress with modern JavaScript libraries and CSS frameworks, but lacks HTTPS, which is a critical security gap. Privacy compliance is well managed through Iubenda, including cookie consent mechanisms. Contact information is comprehensive, enhancing business credibility.

SCM Foundry, part of SCM Group, is a medium-sized Italian manufacturing company specializing in grey and ductile iron castings for various industrial sectors including gear motors, machinery, pumps, compressors, agriculture, railways, and nautical industries. With over 70 years of experience and a production capacity of 12,000 tons per year, SCM Foundry offers comprehensive services from product conception to prototyping and production engineering. The website reflects a professional business presence with clear sector focus and good content quality. Technically, the site uses Pimcore CMS, Apache server, and integrates modern analytics tools such as Microsoft Clarity and Google Tag Manager, but the PHP version is outdated and performance data is unavailable. Security posture is weak due to the absence of a valid SSL certificate and HTTPS, exposing the site to significant risks. Privacy compliance is strong with comprehensive policies managed via Iubenda. Overall, the site is functional and credible but requires urgent security improvements to protect user data and enhance trust.

The website robopac.com is currently inaccessible due to a Cloudflare security challenge page that requires JavaScript and cookies to proceed. This prevents access to any substantive content, including business, contact, or policy information. The domain is registered and uses Cloudflare DNS and mail services, indicating a legitimate setup, but the lack of accessible content severely limits analysis. The SSL certificate is invalid or missing, resulting in no HTTPS security, which is a critical security issue. The site employs several security headers but lacks modern TLS protocols and HSTS, reducing its security posture. Overall, the site is not usable for visitors without bypassing the Cloudflare challenge, and no privacy or cookie policies are present.

UNA is an Italian association representing communication companies, providing networking, events, training, and sector-specific hubs to its members. The website serves as a portal for members and interested parties to access services, news, and industry information. The association holds a solid market position within Italy's communication sector, targeting companies and professionals seeking collaboration and industry representation. The business model is membership-based, offering value through events, awards, and specialized hubs. Technically, the website is built on WordPress with Elementor, integrating modern marketing and analytics tools such as Google Tag Manager and Iubenda for consent management. However, the site currently lacks a valid SSL certificate and HTTPS support, which is a critical security gap. Performance data is incomplete but suggests potential slowness. Mobile optimization and SEO are adequately addressed. From a security perspective, the absence of HTTPS and modern TLS protocols severely impacts the site's security posture. No advanced security headers or incident response policies are evident. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. The domain registration data aligns well with the business claims, indicating legitimacy. Overall, the site is professional and content-rich but requires urgent security improvements to protect user data and enhance trust. Strategic recommendations include implementing HTTPS, enabling security headers, and establishing incident response protocols.

A

ACT Alliance

actalliance.org

0

ACT Alliance is a large, global non-profit coalition comprising 152 members operating in 127 countries, focused on humanitarian aid, climate justice, gender justice, migration, peace, and advocacy. The website reflects a well-structured organization with clear thematic areas and a broad international presence. Technically, the site is built on WordPress with modern frameworks such as Bootstrap and uses various JavaScript libraries for UI and mapping functionalities. However, the security posture is weak due to the absence of a valid SSL certificate and lack of essential security headers, which exposes users to risks and undermines trust. Privacy compliance is partially met with a comprehensive privacy policy but lacks cookie consent mechanisms. Overall, the site is professional and credible but requires urgent security improvements to protect user data and enhance trust.

M

M.M.Warburg & CO

warburg-bank.de

0

M.M.Warburg & CO operates a professional online banking platform targeting banking customers primarily in Germany. The website offers secure login mechanisms including electronic TAN authentication and provides clear customer support phone contacts. The technical infrastructure is based on AngularJS with custom JavaScript and CSS, delivering a good user experience and mobile optimization. However, the absence of a valid SSL certificate and lack of modern TLS protocols represent critical security vulnerabilities that undermine trust and data protection. Security headers are well implemented, but the SSL/TLS configuration requires urgent remediation. Privacy compliance is strong with a clear cookie consent mechanism and a comprehensive privacy policy. Overall, the website is functional and professional but needs immediate security improvements to meet industry standards.

M

M.M.Warburg & CO (AG & Co.) KGaA

mmwarburg.com

0

M.M.Warburg & CO is a well-established independent private bank in Germany with a history dating back to 1798. The bank offers a broad range of financial services including private banking, asset management, corporate and investment banking, and institutional client services. The website targets private clients, business customers, and institutional investors, emphasizing personalized service and long-term client relationships. Technically, the website uses modern web technologies such as Apache server, UserCentrics consent management, Google Analytics, and Google Tag Manager, and is built on OpenCms. However, a critical security issue is the absence of a valid SSL certificate and HTTPS support, which severely impacts the security posture. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. The website is professionally designed with consistent branding and rich content, including reports and multimedia. Overall, the site reflects a reputable financial institution but urgently needs to address its SSL/TLS configuration to ensure secure communications.

G

Green & Durable Group

greenanddurablegroup.com

0

Green & Durable Group is a Belgian-based company specializing in sustainable energy solutions for both private individuals and businesses. Their business model focuses on wholesale distribution of solar and storage systems alongside installation services for energy-saving systems. The company positions itself as a leader in the green energy sector with ambitions to expand pan-Europe and achieve significant revenue growth. The website is professionally designed, multilingual, and provides clear contact information and privacy compliance via Iubenda. Technically, the site uses Google Tag Manager and Google Fonts, hosted on Combell infrastructure. However, a critical security weakness is the absence of a valid SSL certificate and lack of HTTPS support, which severely impacts the security posture. Privacy compliance is strong with a comprehensive cookie and privacy policy and consent mechanism. Overall, the site demonstrates good business credibility but requires urgent security improvements to protect user data and trust.

O

One Srl

oneinfo.it

0

One Srl is an Italian credit management and debt recovery agency based in Treviso, operating nationally with over 35 years of experience. The company offers a range of services including contractual consultancy, courtesy calls, out-of-court and judicial debt recovery, and credit assignment solutions. The business is positioned as a trusted and certified player in the finance sector, leveraging IT solutions for client transparency and efficiency. Technically, the website uses a traditional LAMP stack with Apache and PHP 5.6, complemented by modern front-end libraries and Google marketing tools. However, the absence of HTTPS and use of outdated PHP versions represent significant security weaknesses. The company maintains comprehensive legal and privacy documentation, demonstrating good privacy compliance and business credibility. Overall, the website is professional and content-rich but requires urgent security upgrades to meet modern standards.

The website htamedica.com currently serves as a parked domain page hosted by Aruba.it, indicating that the domain is registered but not actively used for business purposes. The page provides no business description, services, or contact information, limiting its utility and trustworthiness. The technical infrastructure is based on Microsoft IIS 10.0 and ASP.NET, hosted by Aruba.it, but lacks modern security configurations such as a valid SSL certificate and HTTPS support. This absence significantly impacts the site's security posture and user trust. No privacy, cookie, or terms of service policies are present, and no forms or data collection mechanisms are implemented. Overall, the site is minimalistic and does not provide any meaningful content or business insights.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 13 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 9 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

S

Studio legale e notarile

studiolegale.sm

0

Security assessment completed with an overall score of 0/100 (unknown risk). 3 critical issues require immediate attention. Total of 25 security findings identified across all modules.

A

ALMA MATER STUDIORUM - Università di Bologna

unibo.it

0

The Università di Bologna (University of Bologna) is a historic and prestigious public university based in Italy, recognized as the oldest university in the Western world. The website serves as a comprehensive portal offering extensive academic programs, research information, student services, and community engagement resources. It targets students, researchers, academic staff, and the general public, positioning itself as a leading institution in higher education. The business model focuses on education, research, and societal contribution, with a large organizational size and a strong market position in the education sector. Technically, the website is built on the Plone CMS platform, served by an Nginx server on Ubuntu, and utilizes modern web technologies including jQuery, Leaflet.js for maps, Splide.js for carousels, and Font Awesome for icons. Analytics are handled primarily via Matomo and Contentsquare, indicating a moderate level of user tracking with privacy compliance measures in place. The site is well-structured, mobile-optimized, accessible, and SEO-friendly, providing an excellent user experience. From a security perspective, the site lacks a valid SSL certificate and does not support HTTPS, which is a critical vulnerability. Other security headers like X-Frame-Options and X-Content-Type-Options are present, but the absence of HTTPS and modern TLS protocols significantly lowers the security posture. No WAF or content blocking mechanisms are detected, and no immediate vulnerabilities or exposed sensitive data are found. Overall, the site is highly credible and professional, with strong business legitimacy and comprehensive content. However, the lack of proper SSL/TLS configuration poses a significant risk that should be addressed promptly to protect user data and maintain trust.

The website pragmatainstitute.com is currently inaccessible for normal use and displays a maintenance page hosted by Aruba S.p.A. The page is a simple multilingual notification informing visitors that the service is under maintenance and directs users to Aruba's support site for assistance. There is no business or contact information, no privacy or cookie policies, and no interactive elements such as forms or scripts. The technical infrastructure is basic, relying on Aruba's proxy server without a valid SSL certificate, resulting in an insecure HTTP connection. Security headers are minimal and no advanced security configurations are present. The domain registration and DNS records are consistent with Aruba hosting, indicating a legitimate registration, but the lack of content and security features lowers the overall trust and professionalism of the site. The website currently provides no evidence of GDPR compliance or business credibility.

L

Link

linkitaly.com

0

Link S.r.l. is a mature Italian company established in 1998 specializing in the distribution and e-commerce of cables, connectors, accessories, and sanitization products. The company operates internationally with subsidiaries in the USA, UK, and France, serving diverse sectors including entertainment, civil, military, and heavy industry. Their business model focuses on B2B distribution and online sales, supported by recognized certifications such as ISO 9001-2015 and Dante level 3. The website reflects a professional presence with good content quality and consistent branding, targeting industry professionals and corporate clients. Technically, the website uses a custom or proprietary CMS platform with modern JavaScript libraries like jQuery, Bootstrap 5, and GSAP for UI effects. However, performance is slow and SEO and accessibility are basic. The hosting is managed via Register SPA with Apache server. The site lacks a valid SSL certificate and HTTPS enforcement, which is a critical security gap. Privacy and cookie policies are present and reasonably comprehensive, indicating some GDPR compliance. Security posture is weak due to missing HTTPS, lack of HSTS, DNSSEC, and domain protection locks. No explicit security or incident response policies are published. The site uses Facebook Pixel and Google Tag Manager for analytics and marketing, with moderate user tracking. Overall, the domain registration is consistent and mature, supporting legitimacy, but security improvements are urgently needed. Strategic recommendations include implementing a valid SSL certificate, enabling HSTS and DNSSEC, publishing security and incident response policies, and enhancing performance and accessibility to improve user trust and compliance.

The website for the Segreteria di Stato per la Giustizia e la Famiglia serves as the official digital presence of San Marino's Secretariat of State for Justice and Family. It provides citizens and stakeholders with access to information on justice policies, family mediation, judicial council activities, and official communications. The site targets local citizens, legal professionals, and government officials, positioning itself as a trusted government information portal. The business model is purely informational and public service-oriented, with no commercial activities. Technically, the site runs on an Apache server with a Magnolia CMS backend, utilizing jQuery and Font Awesome for frontend functionality and styling. While the site is functional and content-rich, it suffers from slow DNS resolution and lacks HTTPS, which is a significant security and trust concern. Mobile optimization and accessibility are basic but present, and SEO practices are minimal. From a security perspective, the absence of a valid SSL certificate and HTTPS is a critical vulnerability, exposing users to potential interception risks. The site lacks modern security headers such as HSTS and does not implement DNS security extensions like DNSSEC or DMARC. No cookie consent mechanisms or privacy compliance features are evident, which may pose regulatory risks under GDPR. However, the site does not appear to collect personal data via forms on the homepage, reducing immediate privacy risks. Overall, the website is a credible and authoritative government resource but requires urgent improvements in security infrastructure and privacy compliance to protect users and maintain trust. Strategic recommendations include implementing HTTPS, enhancing DNS security, adding cookie consent mechanisms, and improving security headers to align with best practices.

The website com-saint-martin.fr currently serves a 404 error page indicating that the requested content is not found, resulting in no accessible business information or user-facing content. The domain is mature, registered since 2007 with a French registrar, and uses Google hosting infrastructure. However, the lack of a valid SSL certificate and HTTPS support severely impacts the security posture and user trust. Minimal security headers are present but some are misconfigured, and no privacy or cookie policies are found, indicating poor compliance with data protection regulations. Overall, the site appears abandoned or misconfigured, offering no business or contact information to visitors. Technically, the site is hosted on Google infrastructure with DNS managed by eolas.fr name servers. DNSSEC and CAA records are not enabled, which could improve DNS security. The site lacks modern TLS protocols and cipher suites, and no session resumption or OCSP stapling is configured. Performance data is unavailable due to the lack of content, but the minimal HTML suggests poor user experience and SEO. Security-wise, the absence of HTTPS and a valid SSL certificate is a critical vulnerability. The X-XSS-Protection header is disabled, and no advanced security headers like Content Security Policy are present. The DMARC policy is set to quarantine, which is a positive indicator for email security. No incident response or vulnerability disclosure information is available, limiting the ability to respond to security events. Given these findings, the overall risk level is high due to the lack of content, security controls, and compliance measures. Strategic recommendations include obtaining a valid SSL certificate, enabling HTTPS, improving security headers, publishing privacy and cookie policies, and providing clear contact information to enhance trust and compliance.

The website evolutionforum.it is currently a parked domain page hosted by Aruba.it, indicating the domain is registered but not actively used for business or content delivery. The page provides minimal information, only stating that the domain is already taken, with no business description, contact details, or user engagement features. The technical infrastructure is based on Microsoft IIS 10.0 with ASP.NET, hosted by Aruba.it, but lacks a valid SSL certificate and does not support HTTPS, which is a significant security shortfall. The absence of privacy, cookie, or terms of service policies further indicates the site is not operational as a business or service platform. Overall, the site has a very low digital maturity and security posture.

S

Splash

eleven.sm

0

The website eleven.sm currently serves as a minimal splash page indicating a temporary pause in service or activity. It provides very limited business information, with the only contact method being a WhatsApp chat link. The site uses modern web technologies such as Webflow for CMS, Cloudflare for hosting and CDN, Google Tag Manager for analytics, and third-party widgets like Jetboost and Elfsight. However, the content is minimal and lacks detailed business descriptions, legal information, or privacy policies. From a security perspective, the site lacks a valid SSL certificate and does not support any TLS protocols, resulting in no HTTPS protection. Critical security headers and best practices are partially implemented but insufficient. The absence of privacy and cookie policies indicates non-compliance with GDPR and related regulations. The domain is mature and active but lacks domain protection mechanisms such as DNSSEC or CAA records, which could pose risks. Overall, the website's risk profile is elevated due to missing HTTPS, minimal content, and lack of compliance documentation. The technical infrastructure is modern but underutilized, and the business credibility is low due to the absence of clear company information. Strategic improvements in security, privacy compliance, and content development are recommended to enhance trust and operational readiness.

W

Whirlpool Corporation

whirlpoolcorp.com

0

Whirlpool Corporation is a leading global manufacturer of home appliances with a rich history spanning over 110 years. The company operates multiple well-known brands and focuses on innovation, sustainability, and social responsibility to improve life at home. Their website reflects a mature enterprise with comprehensive corporate information, investor relations, and brand portfolios targeting consumers, investors, and trade partners worldwide. Technically, the website is built on Adobe Experience Manager and delivered via Akamai CDN, using modern JavaScript libraries and cookie consent mechanisms. However, a critical security gap exists as the site lacks HTTPS support, exposing users to potential risks. Security headers are partially implemented, but the absence of SSL/TLS significantly lowers the security posture. Privacy compliance is well addressed with cookie consent and privacy policies, and business credibility is high given the consistent branding and WHOIS data. Overall, the site is professional and trustworthy but urgently requires SSL implementation to meet modern security standards.

T

Traderlink Italia s.r.l.

traderlink.it

0

Traderlink Italia s.r.l. operates a mature and comprehensive financial information website focused on stock market quotes, news, analysis, and educational content primarily for the Italian and international financial markets. The platform targets investors, traders, and financial professionals, offering a wide range of services including market data, trading signals, video analysis, and portfolio management tools. The business model is based on providing valuable financial content supported by advertising and possibly subscription services. The company is well-established with a domain age of 28 years and clear legal presence in Italy. Technically, the website uses a modern tech stack including Bootstrap, jQuery, Vue.js, and integrates Google Tag Manager, Google Ads, and Matomo analytics. Hosting and DNS services are provided by Cloudflare, ensuring reliable performance, although the site suffers from slow load times and lacks a valid SSL certificate, which is a critical security flaw. The site is mobile-optimized and SEO-friendly with good navigation and content structure. From a security perspective, the site has SPF and DMARC records configured properly, indicating good email security practices. However, the absence of a valid SSL certificate and HTTPS support severely undermines the security posture, exposing users to risks such as data interception. Other security best practices like HSTS, OCSP stapling, and modern TLS protocols are missing. Privacy compliance is strong, with comprehensive GDPR-compliant privacy and cookie policies implemented via Iubenda, including consent mechanisms. Overall, the website is trustworthy and professional in its business presentation and content quality but requires urgent improvements in SSL/TLS security to protect user data and maintain credibility. Strategic recommendations include immediate installation of a valid SSL certificate, enabling HTTPS, and enhancing security headers and DNS security features.

E

Entheos Academy

entheosacademy.org

0

Entheos Academy operates as a free public charter school serving K-8 students in Utah with two campuses. The school emphasizes experiential learning through programs like 4-H, Adventure, Discovery, and Service Learning, aiming to develop leadership and community commitment among students. The website reflects a well-established educational institution with a clear mission and community focus. Technically, the site uses modern web technologies including Bootstrap 4, jQuery, and integrates third-party services such as YouTube and Weglot for translation. However, the site suffers from a lack of a valid SSL certificate, resulting in no HTTPS protection, which is a critical security flaw. Additionally, privacy and cookie policies are absent, indicating compliance gaps with data protection regulations. The site has moderate performance and good mobile optimization but lacks advanced security headers and incident response information. Overall, the domain registration data aligns well with the website content, supporting the legitimacy of the organization.

L

Lepida S.c.p.A.

cup2000.it

0

Lepida S.c.p.A. is a well-established regional ICT consortium founded in 1997, serving the Emilia-Romagna region in Italy. It provides a broad range of digital infrastructure and software services primarily targeting public administration, healthcare, and social assistance sectors. The company holds multiple ISO certifications, indicating a strong commitment to quality, security, and environmental standards. The website reflects a mature digital presence with comprehensive content, clear navigation, and good user experience. However, the lack of a valid SSL certificate and HTTPS implementation is a significant security gap that undermines the overall security posture. Privacy and cookie policies are well implemented with consent mechanisms, and the use of Matomo analytics shows a privacy-conscious approach to user tracking. The domain is mature and consistent with the business claims, enhancing trustworthiness. Strategic improvements in SSL/TLS deployment and enhanced security configurations are recommended to elevate the security and trust levels.

D

Dauphin Telecom

dauphintelecom.fr

0

Dauphin Telecom is a regional telecommunications provider serving the French Antilles, including Saint Martin and Saint Barthélemy. The company offers a comprehensive range of services including mobile plans (unlimited, blocked, prepaid), fiber internet, TV packages, and bundled offers. With over 26 years of market presence and multiple local agencies, Dauphin Telecom holds a strong position in its regional market. The website reflects a professional and well-branded digital presence, targeting both residential and business customers in the region. Technically, the website is built on WordPress with Elementor and various Jet plugins, indicating a modern CMS-based infrastructure. However, performance metrics suggest slow loading times, and there is no SSL/TLS certificate installed, which is a significant security concern. The site is mobile-optimized and includes SEO best practices, but accessibility features are basic. From a security perspective, the absence of HTTPS and modern TLS protocols severely impacts the security posture, exposing users to potential risks. Some security headers are present, but critical improvements are needed. Privacy compliance is well addressed with a clear privacy policy, cookie consent mechanism, and GDPR adherence. Contact information is clearly provided, enhancing business credibility. Overall, while the business and content quality are strong, the lack of HTTPS is a critical issue that must be addressed immediately to protect users and improve trust. Strategic recommendations include implementing SSL, enhancing security configurations, and maintaining compliance documentation.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 10 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

L

Leagel S.r.l.

leagel.com

0

Leagel S.r.l. is a medium-sized manufacturing company based in San Marino specializing in the production and commercialization of semi-finished products and ingredients for gelato and pastry artisans. The company has a strong international presence and a well-established brand with over 20 years of experience. Their website reflects a professional and consistent brand image, offering multilingual content, downloadable catalogs, and recipe books to support their B2B customers. Technically, the website is built on WordPress with Bootstrap and integrates modern marketing and analytics tools such as Google Tag Manager and HubSpot. However, the security posture is weak due to the absence of a valid SSL certificate and modern TLS protocols, exposing the site to risks and reducing user trust. Privacy compliance is strong, with clear GDPR-aligned policies and consent mechanisms. Overall, the site is functional and professional but requires urgent security improvements to protect user data and enhance trust.

T

TITANKA! Spa

mvmedicalsolutions.com

0

The website mvmedicalsolutions.com currently serves as a minimal placeholder page indicating that TITANKA! Spa is preparing a new website. There is no substantive business content, contact information, or user engagement features present. The technical infrastructure is basic, with Apache server hosting and no SSL/TLS certificate, resulting in an insecure HTTP-only connection. The site uses Google Fonts for typography but lacks modern frameworks or CMS indications. Security posture is weak due to the absence of HTTPS, security headers, and privacy policies. No analytics or tracking mechanisms are detected, indicating minimal data collection. Overall, the site is not yet operational as a business platform and lacks essential compliance and security features.

C

Candyclouds di Danila Bigazzi

candyclouds.it

0

Candyclouds is a small creative business operated by Danila Bigazzi, specializing in web design, graphic design, and UX/UI strategy based in Bologna, Italy. The website serves as a portfolio showcasing various graphic, logo, and web projects, targeting clients seeking personalized design services. The business model includes service provision and an online shop presence via Etsy. Technically, the site is built on WordPress with common plugins such as WooCommerce, Yoast SEO, and Contact Form 7, hosted on SiteGround. While the site demonstrates good content quality and SEO optimization, it suffers from critical security shortcomings, notably the absence of a valid SSL certificate and HTTPS support, which severely impacts its security posture. Privacy compliance is addressed with a privacy policy and cookie consent mechanism, but no terms of service or security policies are present. Overall, the site is functional and professional but requires urgent security improvements to protect user data and enhance trust.

O

Organizzazione Sammarinese degli Imprenditori

osla.sm

0

Organizzazione Sammarinese degli Imprenditori (OSLA) is a mature, small-sized association dedicated to supporting small and medium enterprises (SMEs) across multiple sectors in San Marino, including commerce, tourism, industry, services, craftsmanship, liberal professions, and agriculture. The website serves as an informational and service portal offering consultancy, legal advice, training, and representation for its members. The organization holds a key market position as a representative body for SMEs in San Marino. Technically, the website is built on Drupal 7 with an Apache server and PHP 5.4.16, indicating an outdated technology stack. The site includes modern web features such as responsive design and social media integration but suffers from slow performance and basic SEO and accessibility implementations. Security posture is weak due to the absence of a valid SSL certificate and lack of modern TLS support, despite some security headers being present. Privacy compliance is partially addressed with visible privacy and cookie policies and a consent mechanism, but GDPR compliance is not fully evident. Contact information is limited to a physical address with no direct email or phone contacts displayed. Overall, the site is functional but requires significant improvements in security and technical modernization to enhance trust and compliance.

I

In Scientia Fides

inscientiafides.com

0

In Scientia Fides is a specialized healthcare biobank located in San Marino, offering private stem cell preservation services with international FACTNetCord accreditation. The company targets families and parents seeking biological insurance for their children through stem cell storage. The website is professionally designed, content-rich, and provides comprehensive information about services, accreditations, and procedures. Technically, the site is built on WordPress with common marketing and analytics tools integrated, but lacks HTTPS security, which is a critical vulnerability. Privacy policies and cookie consent mechanisms are well implemented, reflecting good GDPR compliance. Overall, the business presents a trustworthy and professional image but must urgently address its lack of SSL to improve security posture and user trust.

H

H.J. Opdyke Lumber Company

opdyke.com

0

H.J. Opdyke Lumber Company is a well-established regional supplier of lumber and building materials, servicing residential and multifamily properties since 1955. The company offers a broad range of products and design services including kitchens, baths, decking, doors, windows, and closets, targeting contractors, builders, and homeowners primarily in New Jersey, Pennsylvania, and New York. Their market position is solid with multiple physical locations and a medium-sized business footprint. Technically, the website is built on WordPress with modern plugins and accessibility features, but lacks a valid SSL certificate, which is a critical security shortfall. The site uses Sucuri Cloudproxy for WAF protection, Google Analytics and Tag Manager for tracking, and hCaptcha for form security. Privacy and cookie policies are present and GDPR compliant, but no terms of service or security policies are found. Overall, the website is professional and trustworthy but requires urgent improvements in SSL/TLS security to protect user data and improve trust.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 10 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

K

KOITOTO

tmsap.com

0

KOITOTO operates as an online bandar toto macau platform providing real-time data on toto macau lottery results primarily targeting Indonesian-speaking users. The website claims to be the number one provider of toto macau data in 2025, offering updated and transparent lottery results with a responsive design optimized for mobile users. Technically, the site employs AMP HTML technology and is hosted behind Cloudflare CDN, which aids in content delivery and performance. However, the site lacks a valid SSL certificate and does not serve content over HTTPS, significantly impacting its security posture. No privacy or cookie policies are present, and no contact information is provided, which further reduces trust and compliance with privacy regulations. The site links to partner domains related to gambling and prediction services but does not use analytics or tracking technologies. Overall, KOITOTO presents a basic but functional online gambling data service with significant security and compliance gaps.

B

BAUER Foundation Corp.

bauerfoundations.com

0

BAUER Foundation Corp. is a specialized foundation engineering company operating globally as part of the BAUER Group. The company offers comprehensive geotechnical solutions, construction methods, and equipment services, targeting clients with complex foundation engineering needs. Their mature domain and extensive content reflect a well-established market presence. Technically, the website is built on Drupal 10 with modern CSS frameworks but suffers from slow load times and lacks HTTPS, which is a critical security shortfall. Security posture is weak due to missing SSL certificates, absence of security headers, and no DNSSEC or HSTS implementation. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional and credible but requires urgent security improvements to protect user data and enhance trust.

E

Evolved Novelties

myevolved.com

0

Evolved Novelties operates as a niche e-commerce retailer specializing in premium adult pleasure products, featuring well-known brands such as Playboy Pleasure and Gender X. The website is built on the BigCommerce platform and leverages Cloudflare for hosting and CDN services. The site demonstrates good content quality, clear navigation, and a consistent branding approach targeting adult consumers seeking luxury sexual wellness products. However, the absence of a valid SSL certificate and HTTPS implementation significantly undermines the security posture, exposing users to potential data interception risks. Cookie consent mechanisms are present, indicating some level of privacy compliance, but no explicit GDPR or security policies are found. Overall, the business appears legitimate with consistent domain registration data, but urgent improvements in security infrastructure are recommended to protect customer data and enhance trust.

The website is a parked domain landing page for isosistemi.it, offering the domain for sale with no active business content or services presented. The site primarily serves as a placeholder with advertising scripts and domain inquiry links. The technical infrastructure is minimal, hosted on Hetzner Online with nginx and Caddy components, but lacks a valid SSL certificate and modern security configurations. The absence of HTTPS and security headers significantly weakens the security posture. Privacy compliance is minimal, with only a basic privacy policy linked via a popup and no cookie consent mechanisms. No contact or business information is provided, limiting business credibility and trust. Overall, the site represents a low-risk but low-value digital asset with poor content and security maturity.

S

Stefano Boeri Architetti

stefanoboeriarchitetti.net

0

Stefano Boeri Architetti is a mature and internationally recognized architecture and urban planning firm headquartered in Milan, with offices in Shanghai and Tirana. Established in 1993, the firm specializes in innovative architectural design and urbanism, with notable projects such as the Bosco Verticale in Milan. The website reflects a professional digital presence with multilingual support and active social media engagement, targeting clients and professionals interested in architecture and urban development. Technically, the site is built on WordPress with a range of plugins for SEO, content management, and user interaction, but lacks a valid SSL certificate, which impacts security and trust. The absence of HTTPS and security headers represents a critical vulnerability that should be addressed promptly. Privacy compliance is well managed with a cookie consent mechanism and a comprehensive privacy policy. Overall, the site demonstrates good business credibility but requires significant security improvements to align with best practices.