Skip to main content

Is promotray.de a Scam? Security Check Results - Promotray Reviews

P

Is promotray.de Safe? Security Analysis for Promotray

Check if promotray.de is a scam or legitimate. Free security scan and reviews.

TechnologyGermanysmall
Nextcloud 31.0.7Vue.js
Analyzed 7/31/2025Completed 8:26:02 PM
46
Security Score
HIGH RISK

AI Summary

Promotray operates a secure data storage service accessible via a Nextcloud-based login portal. The website is primarily a login interface with minimal public-facing content, focusing on providing a safe home for user data. The technical infrastructure leverages Nextcloud version 31.0.7 and Vue.js for frontend interactivity, hosted on aditsystems.hosting. The site uses HTTPS and modern web technologies, indicating a moderate level of digital maturity. However, the absence of public privacy, cookie, and terms of service policies, as well as lack of contact information, limits transparency and user trust. Security posture is adequate with HTTPS and session management features, but could be improved by adding security headers and incident response contacts. Overall, the site is functional and secure for its purpose but lacks comprehensive compliance and business transparency features.

Detected Technologies

Nextcloud 31.0.7Vue.js

🧠AI Business Intelligence

Technology stack, business insights, and market analysis powered by AI.

Business Intelligence

Market & Strategic Analysis

Promotray appears to be a small technology entity focused on secure data storage solutions, targeting users seeking safe cloud storage. The business model likely revolves around providing cloud storage services, possibly subscription-based, leveraging Nextcloud's platform. Market positioning is not explicitly stated, but the branding emphasizes security and data safety. No detailed business or contact information is publicly available on the login page, limiting insights into revenue streams or partnerships. The hosting provider and domain registration are consistent, supporting legitimacy. The lack of marketing or social media presence on this page suggests a focus on existing customers rather than broad acquisition.

Extracted Contact Information

Marketing Intelligence Data

Email Addresses (1)

m*****@gmail.com

Security Posture Analysis

Comprehensive Security Assessment

The website demonstrates a basic to moderate security posture with HTTPS enabled and session management configurations visible in scripts. No explicit security headers were detected in the provided data, which is a recommended enhancement. No vulnerabilities or exposed sensitive data were found in the HTML content. The absence of a public security policy or incident response contacts is a gap in compliance and user assurance. The site uses Nextcloud, a well-regarded platform with built-in security features, but additional hardening such as CSP headers and documented incident response would improve posture. Overall, the security level is adequate for a login portal but could benefit from enhanced transparency and technical controls.

Strategic Recommendations

Priority Actions for Security Improvement

1

Publish and link a comprehensive privacy policy and cookie policy with GDPR compliance details.

Observations

AI-powered comprehensive website and business analysis.

AI-Enhanced Website Analysis

Business Insights

Company:

Promotray

Description:

a safe home for all your data

Content Quality:

basic

Branding:

consistent

Technical Stack

Technologies:
Nextcloud 31.0.7Vue.js
Frameworks:
Nextcloud
Performance:

moderate

Mobile:

good

Accessibility:

basic

SEO:

basic

Security Assessment

Security Score:
70/100
Best Practices:
  • HTTPS enabled
  • Session keepalive enabled
  • Password confirmation enabled

Analytics & Tracking

Tracking Level:minimal
Privacy Compliance:poor

Advertising & Marketing

Transparency Level:poor

Website Quality Assessment

Design Quality:basic
User Experience:basic
Content Relevance:basic
Navigation Clarity:basic
Professionalism:basic
Trustworthiness:moderate

Key Observations

1

Website is a Nextcloud-based login portal for Promotray.

🛡️Security Headers

HTTP security headers analysis and recommendations.

Security Headers

HTTP security headers analysis

0/100
Score
Analysis failed - content could not be retrieved

👤GDPR Compliance

Privacy and data protection assessment under GDPR regulations.

GDPR Compliance

Privacy and data protection assessment

25/100
Score

No Privacy Policy found

HIGH

GDPR requires a clear and accessible privacy policy

No Cookie Policy found

HIGH

GDPR requires clear information about cookie usage

No Cookie Consent Banner found

HIGH

GDPR requires explicit consent for non-essential cookies

EU business without adequate privacy measures

CRITICAL

EU businesses are subject to strict GDPR requirements

GDPR Compliance Analysis

Privacy Policy0% confidence
Cookie Policy0% confidence
Contact Information Found90% confidence
emailphone

🛡️NIS2 Compliance

Network & Information Security Directive compliance assessment.

NIS2 Compliance

Network & Information Security Directive

25/100
Score

No information security framework found

HIGH

NIS2 requires documented cybersecurity and information security measures

No vulnerability disclosure policy

MEDIUM

NIS2 encourages coordinated vulnerability disclosure

No security policy documentation found

HIGH

NIS2 requires documented cybersecurity governance and risk management

No incident response procedures found

HIGH

NIS2 requires documented incident response and business continuity plans

No security contact information

HIGH

NIS2 requires clear incident reporting channels

No vulnerability reporting mechanism

MEDIUM

Clear vulnerability reporting supports coordinated disclosure

No NIS2 reference found

LOW

Consider explicitly mentioning NIS2 compliance efforts

📧Email Security

SPF, DKIM, and DMARC validation and email security assessment.

Email Security

SPF, DKIM, and DMARC validation

60/100
Score

No DKIM record found

MEDIUM

DKIM adds cryptographic signatures to emails

No BIMI Record

LOW

BIMI displays brand logos in email clients

No MTA-STS Policy

MEDIUM

MTA-STS enforces TLS for email delivery

No TLS-RPT Record

LOW

TLS-RPT provides reporting for email TLS issues

No email authentication configured

CRITICAL

Domain is vulnerable to email spoofing

SPF
Sender Policy Framework
DKIM
DomainKeys Identified Mail
DMARC
Domain-based Message Authentication
MX Records
Mail Exchange Records
BIMI
Brand Indicators
MTA-STS
Mail Transfer Agent Security
TLS-RPT
TLS Reporting
DNSSEC
DNS Security

🏆SSL/TLS Security

Certificate validity and encryption analysis.

SSL/TLS Security

Certificate validity and encryption analysis

95/100
Score

SSL Certificate Expires Within 90 Days

MEDIUM

SSL certificate expires in 48 days

Partial SSL/TLS Assessment

LOW

Completed 2 of 4 security checks due to time constraints

Certificate Details

Subject:promotray.de
Issuer:R10
Valid Until:9/18/2025 (48 days)
SANs:promotray.de, www.promotray.de

OCSP Status

OCSP Stapling Disabled

📊DNS Health

DNS configuration and security assessment.

DNS Health

DNS configuration and security assessment

60/100
Score

DNSSEC Not Enabled

MEDIUM

DNSSEC is not configured for this domain

CAA Records Not Configured

LOW

Certificate Authority Authorization (CAA) records not found

Domain Transfer Lock Not Enabled

MEDIUM

Domain can be transferred without authorization

Domain Delete Lock Not Enabled

LOW

Domain can be deleted without additional verification

No DMARC Record

MEDIUM

DMARC policy not configured

Domain Registration Details

Protection Level
none
Suspicious Indicators Detected
  • No domain protection locks enabled

DNS Records

A Records:185.115.179.236
AAAA Records:2a02:74a0:a008:2015:f816:3eff:fece:6709
Name Servers:
ns1.aditsystems.hosting
ns2.aditsystems.hosting
ns3.aditsystems.hosting
MX Records:
10: mail.mcollection.de
SOA:Serial: 2020111133, TTL: 1800s

DNSSEC Status

DNSSEC Not Enabled

DNS Performance

Resolution Time:43ms

Network Security

Port scanning and network exposure analysis.

Network Security

Port scanning and network exposure analysis

40/100
Score

Service Exposed: SSH

MEDIUM

Port 22 (SSH) is publicly accessible - SSH - Secure but can be brute-forced

🔧Technical Analysis

Detailed technical findings and analysis from AI assessment.

Technical Analysis

Comprehensive security assessment findings

Additional Findings

The website is built on Nextcloud 31.0.7 with Vue.js frontend components, indicating a modern and modular technology stack. Hosting is provided by aditsystems.hosting, with multiple name servers configured. The site uses HTTPS with a good SSL configuration. Performance is moderate given the use of deferred JavaScript loading and responsive design. The login page is minimalistic, focusing on functionality rather than marketing content. There is room for improvement in SEO, accessibility, and security header implementation. No analytics or tracking scripts were detected, which aligns with privacy-conscious design but limits marketing insights.
Analyze Another Website