Other security reports

N

Niedersächsischer Fußballverband (NFV) and VGH Versicherungen

vghmasters.de

44

The VGH Masters website serves as a regional event portal for eSports tournaments organized by the Niedersächsischer Fußballverband (NFV) and VGH Versicherungen. It targets football clubs in Niedersachsen, Germany, promoting competitive gaming on PlayStation 5 with EA Sports FC 26. The site provides detailed tournament schedules, locations, and registration links, primarily directing users to an external platform for sign-ups. Technically, the site is built on WordPress using the Divi theme, with interactive features such as a Leaflet.js map and embedded YouTube videos enhancing user engagement. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers are missing. Privacy compliance is limited due to the absence of privacy and terms of service pages, representing an area for improvement. Overall, the site is professional, trustworthy, and well-branded, serving its niche audience effectively.

The Bad Wiesseer Kreis website represents a small, specialized organization focused on hosting academic and political events related to Universities of Applied Sciences in Germany. The site provides information about their key events such as the Parlamentarischer Abend and Bad Wiesseer Tagung, along with publications like position papers. The target audience includes academic leaders and policymakers. Technically, the site is built on WordPress with common libraries like jQuery and Font Awesome, showing moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled but lacking security headers and cookie consent mechanisms, which impacts GDPR compliance. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. Overall, the site is professional and trustworthy but could improve in privacy compliance and security best practices.

M

MTV v. 1848 Hildesheim e.V.

mtv48hildesheim.de

49

MTV v. 1848 Hildesheim e.V. is a well-established local sports club in Germany, offering a wide range of sports and health-related activities including courses, training, rehabilitation sports, and community events. The club targets a broad audience including families, children, seniors, and sports enthusiasts within the Hildesheim region. Their market position as the oldest sports club in Hildesheim supports a strong community presence and trust. Technically, the website is built with standard web technologies including HTML5, CSS, and JavaScript, enhanced by Matomo analytics for user tracking and Sliderm.js for interactive slideshows. Hosting is provided by rzone.de, and the site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks visible security headers, a cookie consent mechanism, and formal security or incident response policies. The use of Matomo suggests some privacy awareness, but GDPR compliance could be improved by adding explicit cookie consent and privacy notices. Overall, the website is professional, trustworthy, and content-rich, serving its community effectively. Strategic improvements in privacy compliance and security posture would enhance user trust and regulatory adherence.

T

TSV Burgdorf

tsv-burgdorf.de

63

TSV Burgdorf is a well-established non-profit sports club based in Germany, offering a wide range of sports departments including traditional sports like football, handball, and tennis, as well as modern activities such as E-Sport. The club serves the local community of Burgdorf and maintains a strong presence through its website and social media channels. The website is built on TYPO3 CMS and demonstrates good technical maturity with modern frontend technologies and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms in place, although formal security policies and incident response contacts are not published. Overall, the site reflects a professional and trustworthy organization with clear contact information and community engagement.

H

House of Winterthur

houseofwinterthur.ch

61

House of Winterthur operates as a regional tourism and cultural promotion organization for the city of Winterthur, Switzerland. The website serves as a comprehensive portal for visitors and locals to discover cultural events, museums, nightlife, and regional experiences. The organization positions itself as a key player in promoting Winterthur as a modern, innovative, and culturally rich destination. The business model focuses on destination marketing, event promotion, and regional economic development, targeting tourists, residents, and local businesses. The website content is well-structured, professionally designed, and available primarily in German with English translation support via Weglot.

K

Kunsthaus Baselland

kunsthausbaselland.ch

49

Kunsthaus Baselland is a prominent cultural institution specializing in contemporary art exhibitions and educational programs in the Basel region of Switzerland. The website reflects a well-established non-profit organization with a clear focus on regional, national, and international contemporary art. It offers a variety of services including exhibitions, artist showcases, educational events, and membership opportunities, targeting art enthusiasts and the general public interested in culture. The site is professionally designed with consistent branding and clear navigation, supporting both German and English languages. Technically, the website employs modern JavaScript libraries such as jQuery and Masonry for dynamic layouts and uses MailChimp for newsletter subscriptions. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. SEO practices are adequately implemented with proper meta tags and Open Graph data. However, no explicit CMS or hosting provider details are evident. From a security perspective, the site uses HTTPS and avoids exposing sensitive data in its HTML content. Nevertheless, it lacks visible security headers and formal security policies, including incident response contacts. Privacy and cookie policies are absent, which impacts compliance with GDPR and related regulations. The newsletter form collects user emails with consent confirmation but does not provide detailed data retention or privacy information. Overall, Kunsthaus Baselland's website is trustworthy, professional, and content-rich, but it would benefit from enhanced privacy compliance, security hardening, and formal policy disclosures to improve its security posture and regulatory adherence.

The website www.lausitz-kultur.eu/en/erbe is currently inaccessible beyond a 404 error page indicating the requested resource is not found. The site is built on Joomla CMS but lacks any substantive content, metadata, or business information on the analyzed page. There are no visible contact details, privacy policies, or security disclosures, limiting the ability to assess the organization's digital maturity or compliance posture. The domain WHOIS data is unavailable due to EURid privacy restrictions and an invalid WHOIS query pattern, which is common for .eu domains but reduces transparency. Overall, the site appears to be either under maintenance or misconfigured, resulting in poor user experience and low trustworthiness.

M

My Blog

world-of-leading-golf.com

47

The website 'Exploring Golf: Legends and Iconic Tournaments' is a small-scale WordPress blog dedicated to providing educational content about golf history, legendary players, major tournaments, and related cultural aspects. It targets golf enthusiasts and general sports fans seeking knowledge about the sport's heritage. The site offers well-structured, relevant content with good design and navigation, optimized for mobile devices. Technically, it uses a modern WordPress stack with popular libraries and frameworks such as Bootstrap and jQuery, ensuring a moderate performance and good SEO practices. Security-wise, the site enforces HTTPS and avoids exposing sensitive data but lacks important security headers and formal privacy or cookie policies, which impacts compliance and trust. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency. Overall, the site is functional and informative but would benefit from enhanced privacy compliance, security hardening, and clearer business contact information to improve trust and credibility.

The website taminatherme.ch is currently inaccessible due to a Vercel Security Checkpoint that blocks content until browser verification is completed. As a result, no business information, contact details, or policy documents are available for analysis. The page serves solely as a security gate, indicating the site is protected by Vercel's security mechanisms. Technical infrastructure includes JavaScript and hosting on Vercel, but no further technical or business details can be extracted. The security posture cannot be fully assessed due to the blocked content, but the presence of a security checkpoint suggests some level of protection. Overall, the site cannot be evaluated for content quality, privacy compliance, or business credibility in its current state.

K

Kossmanndejong

kossmanndejong.nl

67

Kossmanndejong is a well-established design studio based in the Netherlands, specializing in spatial storytelling and experience design. The company targets global brands, institutions, NGOs, and museums, offering services that transform stories into impactful spatial experiences. Their market position is supported by a long domain history since 2002 and a professional online presence with rich multimedia content. Technically, the website is built on modern frameworks such as Next.js and React, hosted by team.blue nl B.V., and integrates privacy-conscious analytics via Piwik PRO. The site demonstrates excellent design quality, mobile optimization, and SEO practices. Security posture is strong with HTTPS and DNSSEC enabled, though some security headers and explicit policies are missing. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the website reflects a credible and professional business with room for improvement in privacy and security transparency.

P

PPG Private Partner Golf

ppg-schweiz.ch

47

PPG Private Partner Golf is a Swiss-based association focused on providing added value to its members by promoting golf and fostering collaboration among premium golf clubs in Switzerland. The website serves as a portal for members and interested parties, highlighting partner clubs, events, and membership benefits. The business model centers on a member-oriented network of golf clubs, aiming to enhance the attractiveness of golf for new players and strengthen traditional golf values. The market position is that of a niche premium golf club consortium within Switzerland.

The website nineapis.ch is currently inaccessible, returning an HTTP 403 Forbidden error indicating that anonymous users cannot access the root path. Due to this access restriction, no meaningful content, metadata, or business information could be extracted or analyzed. The lack of accessible content prevents assessment of the company's business model, services, or market positioning. Technically, the site appears to be either protected by a security mechanism or misconfigured, resulting in blocked access. No security headers, SSL configuration, or compliance policies are detectable, which raises concerns about the site's readiness for public interaction. Overall, the risk assessment is high due to the inability to verify any security or compliance posture, and strategic recommendations focus on resolving access issues and implementing standard security and privacy practices.

The website www.mjam.net is currently inaccessible due to a bot mitigation challenge page implemented via PerimeterX and Google reCAPTCHA Enterprise. This prevents any direct content analysis or extraction of business, contact, or policy information. The WHOIS query for the domain returned no match, indicating the domain may not be registered or WHOIS data is protected or unavailable. Consequently, the website's business profile, technical infrastructure, and security posture cannot be fully assessed. The presence of advanced bot mitigation suggests a focus on security but also limits transparency and accessibility. Overall, the site scores very low on content quality, business credibility, and privacy compliance due to lack of accessible information.

I

infect werbeagentur GmbH

infect.at

56

Talks at Work is a niche community platform focused on internal communication and employer branding professionals, operated by infect werbeagentur GmbH based in Austria. The website serves as a hub for pioneers and thought leaders in internal communication, offering community events and networking opportunities. The business is relatively young, founded in 2021, and targets a specialized audience within the communications sector. The platform positions itself as a professional and innovative community for internal communication experts.

H

henge.it

henge.it

7

The website henge.it is a long-registered domain primarily used as a parked domain with advertising and related search content. There is no clear business description or contact information available on the site, indicating it is not actively used for direct business operations. The technical infrastructure relies on basic HTML, CSS, and JavaScript with monetization through Google Adsense and Bodis domain parking scripts. The site lacks advanced security features such as security headers, DNSSEC, and cookie consent mechanisms, which limits its compliance with privacy regulations like GDPR. Overall, the security posture is minimal, with no visible vulnerabilities but also no proactive security measures. The domain registration data is consistent and legitimate, but the site itself offers limited business credibility or user engagement. Strategic improvements in security, privacy compliance, and content development are recommended to enhance trust and usability.

A

Alcova

alcovamilano.com

61

Alcova is a specialized platform focused on design exhibitions and collaborations, primarily operating in Milan and Miami. It serves designers, companies, institutions, and researchers interested in the future of living and making. The platform organizes recurring international exhibitions and maintains a design shop for curated products. Technically, the website is built using modern frameworks such as Nuxt.js and Vue.js, with a headless CMS (Directus) and Shopify integration for e-commerce. The site is performant, mobile-optimized, and professionally designed, though accessibility and SEO could be improved. Security posture is adequate with HTTPS enforced but lacks important security headers and published security policies. Privacy compliance is limited, with no cookie consent mechanism and only a basic privacy policy. Overall, the domain registration aligns well with the business claims, indicating legitimacy and trustworthiness.

F

FC Zürich

fcz.ch

66

FC Zürich operates an official website serving as both an information portal and an e-commerce platform for club merchandise. The site targets football fans and customers interested in official FC Zürich products and club news. The business holds a strong market position as a leading Swiss football club with a professional digital presence. Technically, the website is built on the Shopify platform, leveraging modern web technologies and multiple analytics and marketing tools, including Google Analytics, Microsoft Clarity, and Facebook Pixel. The site employs a consent management platform (Usercentrics) to address privacy compliance. Security posture is solid with HTTPS enforced and no visible sensitive data exposure; however, some security headers are missing, and no explicit security or incident response policies are published. Overall, the website is professional, trustworthy, and well-branded, with room for improvement in privacy policy transparency and security header implementation.

P

Performancepreis Schweiz | Swiss Performance Art Award

performanceartaward.ch

59

The website www.performanceartaward.ch is dedicated to the Swiss Performance Art Award, presenting information primarily in French with multilingual support. It serves as a cultural platform to promote performance art in Switzerland, targeting artists and the general public interested in this art form. The site uses modern web technologies such as Next.js and React, indicating a contemporary digital infrastructure with moderate performance and good mobile optimization. However, the site lacks visible privacy and cookie policies, contact information, and security headers, which are important for compliance and trust. No analytics or tracking scripts were detected, suggesting minimal user tracking. Overall, the security posture is moderate but could be improved with better policy disclosures and security best practices. The site content is safe for general audiences with no adult or explicit material detected.

S

Studio Lukas Raeber

lukasraeber.ch

48

Studio Lukas Raeber is a small architectural studio based in Switzerland, presenting a portfolio of architectural projects primarily through video and image content. The website serves as a digital showcase for their work, targeting potential clients and collaborators interested in architectural design. The business model is service-oriented, focusing on architectural design and project presentation. The site is built on Drupal CMS and features modern web technologies with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled, but lacks security headers and formal privacy or cookie policies, which are recommended for compliance and trust. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. Overall, the website is professional and safe, with no adult or questionable content detected.

Z

Zimmerer Westfalen

zimmerer-westfalen.de

51

Zimmerer Westfalen is a trade association representing 20 carpentry and wood construction guilds in the Westfalen region of Germany, forming the third largest carpentry association in the country. The organization provides member services including representation, training, information dissemination, and industry events. Their website is professionally designed using WordPress with Elementor and Astra theme, featuring modern SEO and privacy compliance tools such as Rank Math and Complianz. The site is well-structured, mobile-optimized, and provides clear contact information and active social media engagement. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response details are not publicly available. Overall, the domain registration and website content are consistent and trustworthy, supporting a medium-sized regional trade association.

P

PK-Media Consulting GmbH

proholz.nrw

39

proHolz.NRW is a regional cluster initiative focused on the forestry and wood industry in North Rhine-Westphalia, Germany. The website currently displays a maintenance mode page indicating ongoing updates. The business is operated by PK-Media Consulting GmbH, established in 2017, and serves stakeholders in the forestry and wood sectors by promoting collaboration and development within the region. The website's content is minimal but consistent with the business purpose. Technically, the website is built on WordPress using the SeedProd Coming Soon Pro plugin to display the maintenance page. It uses modern web technologies such as Tailwind CSS, FontAwesome, and Google Fonts. HTTPS is enabled, but DNSSEC is not configured, and no advanced security headers are present. The site lacks privacy and cookie policies, contact information, and analytics or tracking scripts, indicating a basic digital maturity level. From a security perspective, the site benefits from HTTPS but lacks DNSSEC and security headers, which are recommended to enhance protection. No forms or data collection mechanisms are present, reducing immediate data protection risks. The absence of privacy and cookie policies is a compliance gap under GDPR. No incident response or vulnerability disclosure information is provided. Overall, the website is safe with no adult or questionable content, but it is limited in content and functionality due to maintenance mode. Strategic recommendations include enabling DNSSEC, adding security headers, publishing privacy and cookie policies, and providing clear contact and incident response information to improve trust and compliance.

T

Terrific Project

terrificproject.eu

54

The Terrific Project website represents a European initiative focused on advancing the packaging sector through innovative bio-based and circular economy solutions. The project aims to develop and demonstrate sustainable packaging materials and processes that contribute to ecological transition and resource efficiency. The website is professionally designed using WordPress with Elementor and includes multimedia content such as videos and images to communicate its mission and progress. Social media integration is present with links to Twitter, LinkedIn, and YouTube, enhancing outreach and engagement. Technically, the site employs modern web technologies and privacy-conscious tools such as Cookiebot for consent management and Matomo for analytics, reflecting a commitment to GDPR compliance and user privacy. The site is mobile-optimized and SEO-friendly, leveraging Yoast SEO plugin and structured data for enhanced search visibility. However, explicit privacy policy and terms of service pages are not detected in the provided content, representing an area for improvement. From a security perspective, the website uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers and published security policies or incident response information. No vulnerabilities or suspicious activities are detected, indicating a generally secure posture. The domain registration is consistent and trustworthy, registered through a reputable registrar without privacy protection, aligning with the project's transparency. Overall, the website is a credible and professional platform for the Terrific Project, with strong technical foundations and privacy practices. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and providing clear contact information to improve trust and compliance further.

The website pico.coop is currently inaccessible due to a security challenge page implementing a JavaScript proof-of-work CAPTCHA. This indicates the presence of a Web Application Firewall or similar security mechanism designed to block automated or suspicious traffic. As a result, no meaningful business, contact, or policy information is available for analysis. The page content is minimal and focused solely on verifying the visitor's legitimacy before granting access. The technical infrastructure includes advanced client-side cryptographic computations to solve the challenge, served via Amazon CloudFront CDN. Security posture is partially demonstrated by the challenge mechanism, but lacks visible security headers or compliance documentation. Overall, the site cannot be fully assessed for business credibility, privacy compliance, or content quality due to this blocking mechanism.

The website specialcraftbox.com currently contains no accessible content beyond an empty HTML skeleton, indicating either a placeholder or an unconfigured site. The domain WHOIS data is highly suspicious, showing a creation date set in the future (March 2025), which undermines trust and legitimacy. There is no evidence of business information, contact details, or any form of user engagement mechanisms such as forms or policies. Technically, the site lacks any metadata, scripts, or security headers, and no SSL/TLS configuration is detected, suggesting it is not served over HTTPS. This results in a very low digital maturity and security posture. Overall, the site appears inactive or improperly configured, with significant risks related to trust and compliance.

The domain aapopuskala.fi is registered to User Point Oy, a Finnish company established in 2006. The website currently returns a 403 Forbidden error page, indicating that access is blocked or restricted. Due to this, no business description or services can be derived from the website content. The domain registration data is consistent with the company's Finnish location and shows no privacy protection, supporting legitimacy. However, the lack of accessible content and absence of privacy, cookie, or contact information on the website limits the ability to assess the company's digital maturity or market position. Technically, the site uses Google Fonts but no other detectable technologies or CMS. Security posture cannot be fully evaluated due to lack of accessible content and security headers. Overall, the website appears to be down or access restricted, resulting in a low AI score and limited insights.

H

Hogrefe Testsystem

hogrefe-online.com

58

The website represents a test system interface branded as Hogrefe Testsystem, likely used for psychological or educational testing purposes. The content is minimal and technical, indicating an internal or client-facing application rather than a public marketing site. The technical infrastructure relies on ExtJS 4, log4javascript, dayjs, and pdf.js libraries, reflecting a moderately modern but somewhat dated technology stack. The site lacks comprehensive SEO and accessibility features and shows basic mobile optimization. Security posture is moderate with HTTPS assumed but no visible security headers or advanced protections. The login form is present but posts to a dummy endpoint, suggesting a test or staging environment. WHOIS data is unavailable, raising concerns about domain registration legitimacy. Overall, the site is functional for its apparent purpose but lacks public-facing business and compliance information.

stafftastic GmbH is a German-based recruiting company specializing in sourcing suitable talents for businesses. Founded in 2020, the company operates a professional website primarily in German, targeting companies seeking recruitment services. The website demonstrates a good level of digital maturity, employing modern technologies such as Bootstrap, FontAwesome, and Cookiebot for cookie consent management, alongside Plausible Analytics for privacy-friendly analytics. Hosting is supported by Google Cloud DNS infrastructure, indicating reliable hosting services. Security posture is solid with HTTPS enabled and cookie consent implemented, although additional security headers could enhance protection. Privacy compliance is strong, with a comprehensive privacy policy and GDPR-aligned cookie consent mechanisms. Overall, the website is professional, trustworthy, and safe for general audiences.

D

Shop Ufficiale del Duomo di Milano

duomoshop.com

58

The website www.duomoshop.com appears to be an e-commerce retail site built on the Wix platform. However, the absence of WHOIS registration data raises significant concerns about the legitimacy and ownership of the domain. The site lacks essential business information such as privacy policies, contact details, and terms of service, which are critical for trust and compliance. Technically, the site uses standard Wix scripts and includes LinkedIn tracking pixels for marketing purposes, but SEO and accessibility are minimal. Security posture is weak due to missing security headers and lack of incident response information. Overall, the site presents a basic online presence with limited content and low trustworthiness.

The website rhmerchandise.com is currently inaccessible due to a security challenge page implementing a proof-of-work captcha mechanism. This prevents access to any business-related content, contact information, or policies. The domain is registered since 2017 with GoDaddy and uses Amazon Cloudfront CDN for content delivery. The security challenge page indicates an intent to protect the site from automated access or abuse but severely limits external analysis. No privacy, cookie, or terms of service policies are visible, and no contact details or business information can be extracted. The technical infrastructure includes modern JavaScript with Web Workers and cryptographic functions for the captcha. However, no security headers or DNSSEC are enabled, representing minor security gaps. Overall, the site’s security posture is difficult to assess fully due to the blocking mechanism, but the domain registration appears legitimate.

The Wilhelm Exner Medaillen Stiftung is a prestigious Austrian foundation dedicated to awarding the Wilhelm Exner Medal, a respected scientific prize with a history of laureates who have also received Nobel Prizes. The foundation operates under the umbrella of the Österreichischer Gewerbeverein, reflecting a strong institutional backing. The website serves as an informational and event platform, providing news, lecture schedules, and historical retrospectives related to the award and its recipients. The target audience includes the scientific community, industry professionals, and the general public interested in scientific achievements. Technically, the website is built on WordPress 6.8.3, utilizing modern plugins such as Yoast SEO for optimization, Ninja Forms for data collection, and ShiftNav for navigation. The site is mobile-optimized with good SEO practices and moderate performance. Security measures include HTTPS enforcement and plugins to prevent user enumeration, though some security headers are missing. Privacy compliance is partially addressed through a linked privacy policy on the parent organization's site, but cookie consent mechanisms are absent. From a security perspective, the site shows a moderate security posture with no visible vulnerabilities or exposed sensitive data. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement. The WHOIS data is unavailable due to a malformed query response, which slightly impacts trust but is mitigated by the professional presentation and institutional association. Overall, the website is a credible and professional platform for the Wilhelm Exner Medal foundation, with good content quality and technical implementation. Strategic improvements in privacy compliance and security transparency would enhance trust and compliance with regulatory standards.

Ö

ÖVT

oevt.info

52

ÖVT is an established Austrian non-profit association founded in 1980, serving small and medium-sized travel businesses including travel agencies, airlines, and tour operators. The organization focuses on providing networking opportunities, framework contracts, education, and IT support to its approximately 200 members. The website is professionally designed using WordPress and Elementor, with good SEO practices and clear navigation. Contact information is transparent, enhancing business credibility. Technically, the site uses modern plugins and Google Tag Manager for analytics, but lacks some security headers and cookie consent mechanisms. WHOIS data is unavailable due to TLD restrictions, but the website content and structure indicate legitimacy. Overall, the site demonstrates a solid digital presence with room for security and privacy improvements.

A

Al Masaood LLC

masaood.com

53

Al Masaood LLC is a well-established diversified conglomerate based in Abu Dhabi, UAE, with a strong presence across multiple sectors including automotive, industrial equipment, business services, retail, marine, and real estate. The company holds significant market leadership in the UAE, distributing major automotive brands such as Nissan, Infiniti, and Renault, and maintains a broad portfolio of services and partnerships. The website reflects a mature business with a professional digital presence, including comprehensive corporate information, sustainability reporting, and active social media engagement. Technically, the website is built on ASP.NET Web Forms with Umbraco CMS, leveraging modern front-end libraries such as jQuery and Bootstrap. It is mobile optimized and includes standard SEO and accessibility features. Google Analytics and Tag Manager are used for analytics and user tracking, with a moderate level of user tracking observed. Security practices include HTTPS enforcement and a Content-Security-Policy header, though additional security headers and DNSSEC are recommended to enhance security posture. The security posture is solid but could be improved by publishing explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. Privacy compliance is strong with clear privacy and cookie policies and GDPR consent mechanisms. WHOIS data confirms the domain's legitimacy and long-standing registration consistent with the company's history. Overall, Al Masaood LLC presents a trustworthy and professional online presence with room for incremental security enhancements to further strengthen its digital resilience.

The website alqaryan.com currently presents a robot challenge screen designed to block automated access, indicating the presence of a Web Application Firewall or similar security mechanism. Due to this blocking, no substantive business content, contact information, or policies are accessible for analysis. The domain is long-registered since 2002 with GoDaddy.com, LLC, suggesting a stable registration history but no further legitimacy indicators are visible on the page. The technical infrastructure includes JavaScript-based CAPTCHA challenges and uses a Cloudfront CDN for some assets. Security posture cannot be fully assessed due to lack of accessible content and missing security headers or SSL details. Overall, the site appears to be protected by security measures that limit direct content access, resulting in a low AI score and incomplete analysis.

S

standard404

standard404.com

47

The website standard404.com is a minimal portfolio or personal site hosted on the Cargo Collective platform. It contains very limited content, primarily navigation links labeled 'WORK' and 'ABOUT', with no detailed business description, contact information, or legal policies. The technical infrastructure is based on Cargo Collective's CMS and hosting, utilizing standard web technologies such as HTML5, CSS3, JavaScript, and jQuery. The site is served over HTTPS with a clientTransferProhibited domain status, but lacks DNSSEC and security headers, indicating room for improvement in security posture. No privacy or cookie policies are present, and no contact or incident response information is provided, which impacts compliance and trust. Overall, the site is safe for general audiences but lacks comprehensive business and security information, resulting in a moderate risk profile.

P

Phedre Barbas

phedrebarbas.com

49

The website phedrebarbas.com serves as an online portfolio for a French-Greek artist and designer based in Paris, showcasing various artistic installations and design projects. The content is rich with images and descriptions of art pieces spanning from 2021 to 2024, targeting a general audience interested in contemporary art and design. The business model is primarily a portfolio presentation without e-commerce or direct sales functionalities, positioning itself within a niche artistic community. Technically, the site is built on the Cargo Collective platform, utilizing standard web technologies such as HTML5, CSS3, JavaScript, and jQuery. The site demonstrates moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. Hosting and domain registration are managed via eNom and Cargo Collective, with HTTPS enabled but missing DNSSEC and security headers. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks DNSSEC and critical security headers, which could expose it to certain risks. No privacy, cookie, or terms of service policies are present, indicating compliance gaps. The WHOIS data is suspicious due to a future domain creation date, which undermines trust in the domain registration legitimacy. Overall, the website is a well-designed artist portfolio with good content quality but has notable deficiencies in privacy, security policies, and domain registration transparency. Strategic improvements in security headers, privacy compliance, and domain registration accuracy are recommended to enhance trust and security posture.

P

Pepe Valenti

pepevalenti.com

60

Pepe Valenti is a creative professional specializing in product and installation design with a focus on materiality and hands-on experimentation. The website serves as a portfolio showcasing artistic works and installations, targeting an audience interested in design and art. The site is built on Squarespace, leveraging its hosting and CMS capabilities, and includes multimedia content such as images and videos. Security posture is strong with HTTPS and HSTS enabled, but lacks comprehensive privacy and security policies. WHOIS data is unavailable, which slightly reduces trust but the professional presentation and consistent branding mitigate major concerns. Overall, the site is functional and visually appealing but would benefit from enhanced privacy compliance and security transparency.

P

PANORAMMMA

panorammma.com

49

PANORAMMMA is an artistic and design-focused website showcasing collections, exhibitions, and interiors. The site targets art and design enthusiasts and potential buyers, offering a portfolio-style presentation with image galleries and a shop feature, although e-commerce functionality appears limited. The business is relatively new, with domain registration dating back to 2021, and operates on the Cargo Collective platform. Technically, the site uses modern web technologies including Google Tag Manager and Google Analytics for tracking, but lacks advanced security headers and privacy policies. Security posture is moderate with HTTPS enabled and domain transfer protections in place, but improvements are needed in DNS security and compliance documentation. Overall, the website is professional and functional but would benefit from enhanced privacy, security, and contact transparency to improve trust and compliance.

Odd Matter Studio is a small, niche design studio based in Rotterdam, Netherlands, founded by Els Woldhek and Georgi Manassiev. The studio focuses on exploring materials, processes, and concepts to create unique design products, interiors, and commissions. Their market position is that of a creative and curious design entity targeting clients interested in innovative and place-specific design solutions. Technically, the website is built on WordPress with common libraries such as jQuery and Vue.js, and uses Google Analytics and Tag Manager for tracking. The site is moderately optimized for performance and mobile use but lacks advanced accessibility features. Security posture is basic with HTTPS enabled but missing security headers and using an outdated jQuery version, which poses some risk. Privacy compliance is weak due to absence of privacy and cookie policies and no consent mechanisms. Business credibility is supported by clear contact information and company registration details. Overall, the website is professional but could improve in security and compliance areas.

N

Niki Danai

nikidanai.com

44

Niki Danai's website serves as a professional portfolio showcasing a multidisciplinary artist's work in sculpture, ceramics, product design, and multimedia installations. The site targets art enthusiasts and cultural institutions, emphasizing recent and upcoming exhibitions primarily in Europe. The business model is centered on personal branding and exhibition promotion, with a small-scale operation reflected in the site's content and domain age. Technically, the website employs standard web technologies including HTML5, CSS3, and JavaScript, with Google Fonts integration. Hosting is provided by Contabo, a reputable provider. The site is mobile-optimized with moderate performance and basic SEO and accessibility features. However, there is no CMS detected, and the technical stack is relatively simple. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but lacks DNSSEC and security headers, which are recommended for enhanced security. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. Contact information is limited to a contact form, with no direct emails or phone numbers provided. Overall, the website is functional and professional but would benefit from improved security practices, privacy compliance, and enhanced contact transparency to increase trustworthiness and reduce risk.

N

Natalia Triantafylli

nataliatriantafylli.com

51

The website nataliatriantafylli.com serves as a personal portfolio for artist and photographer Natalia Triantafylli, showcasing her visual artwork and photography. The site is built on the Cargo Collective platform, featuring a clean and consistent design optimized for mobile devices. It targets art enthusiasts and potential collaborators, focusing on artistic exposure rather than commercial transactions. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript, and jQuery, with web fonts for typography. Hosting and domain registration are consistent and reputable, with HTTPS enabled ensuring secure connections. However, the site lacks privacy and cookie policies, contact information, and security incident response details, which are important for compliance and trust. No advanced security headers or analytics tools are detected, indicating a basic security posture. Overall, the site is functional and professional but could improve in privacy compliance and security best practices.

M

WORK | Astronauts

madebyastronauts.com

57

The website www.madebyastronauts.com appears to be a minimal Wix-built site with very limited content and no visible business or contact information. The domain WHOIS data is unavailable, indicating the domain may not be registered or the data is withheld, which raises concerns about legitimacy. Technically, the site uses standard Wix platform technologies and includes some security hardening scripts, but lacks essential security headers and privacy compliance mechanisms. There are no forms or data collection points detected, and no privacy or cookie policies are present. Overall, the site has a low trustworthiness score and minimal business credibility.

L

Lucas Muñoz Muñoz

lucasmunoz.com

47

Lucas Muñoz Muñoz is a designer and artist specializing in sustainable, experimental, and upcycled furniture and installations. The website serves as a comprehensive portfolio showcasing a wide range of projects from 2006 through 2025, including collaborations with galleries and participation in international design festivals. The target audience includes design enthusiasts, galleries, and cultural institutions interested in innovative and sustainable design. Technically, the website uses modern JavaScript libraries such as jQuery, Masonry, and Vimeo API for dynamic content presentation, with a responsive design suitable for mobile devices. However, there is no evidence of HTTPS or security headers, and no privacy or cookie policies are present, indicating compliance and security gaps. The WHOIS data is missing, raising concerns about domain legitimacy, though the website content is professional and active. Overall, the site demonstrates good content quality and technical implementation but requires improvements in security, privacy compliance, and domain legitimacy verification.

J

Jean-Baptiste Durand

jeanbaptistedurand.com

9

Jean-Baptiste Durand's website is a personal portfolio showcasing artistic works, hosted on the Cargo Collective platform. The site is professionally designed with good navigation and mobile optimization, serving a general audience interested in art. The technical infrastructure leverages modern web technologies and integrates Stripe for e-commerce, indicating readiness for online sales of artworks. Security posture is adequate with HTTPS enabled and domain registration transparency, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is minimal, with no visible privacy or cookie policies, which could expose the site to regulatory risks. Overall, the site is legitimate and functional but would benefit from improved security and privacy practices.

J

JacobT.link

jacobt.link

56

JacobT.link is a small-scale website registered in 2022, utilizing modern web technologies such as React and Next.js. The site content is minimal, primarily showing a loading animation and branding elements without substantive business or contact information. The technical infrastructure is modern but lacks advanced SEO, accessibility, and security features. Security posture is limited due to absence of security headers and unclear SSL status, while privacy compliance is non-existent as no privacy or cookie policies are present. Overall, the site appears to be in early development or a personal project with limited business presence and low trust indicators.

E

Emilio Ferro

emilioferro.it

51

The website www.emilioferro.it serves as the official online presence for contemporary artist Emilio Ferro, showcasing his artwork and providing information about the artist. The site targets art enthusiasts and potential collectors within a niche contemporary art market. The business model is primarily promotional, focusing on portfolio display rather than direct e-commerce or service transactions. The website is built on the Wix platform, leveraging Wix's hosting and content management capabilities. It uses standard Wix scripts and Google Analytics for visitor tracking. The technical infrastructure is modern but basic, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and incident response contact information. Privacy and cookie policies are absent, indicating gaps in compliance with data protection regulations. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security measures to improve compliance and user trust.

C

Clara Schweers

claraschweers.com

56

Clara Schweers is a contemporary artist specializing in glass and mixed media artworks, presenting a professional portfolio website that showcases her artistic creations and collaborations. The website serves as a platform for exhibiting her work and facilitating contact for potential sales or exhibitions. The site is hosted on DreamHost and built using the Cargo CMS platform, featuring a modern and visually appealing design optimized for desktop and mobile users. However, the site lacks explicit privacy and cookie policies, which are important for GDPR compliance and user trust. Security-wise, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and security headers, which could be improved to enhance security posture. Overall, the website is credible and professional but would benefit from enhanced privacy compliance and security best practices.

A

Age Of Digital - AOD

ageofdigital.com

57

Age Of Digital (AOD) presents itself as a digital platform dedicated to the storage of physical creations in digital form. The website is minimalistic, featuring a video background and a slogan emphasizing its core purpose. The technical infrastructure is modern, leveraging React and Next.js frameworks hosted on Vercel, with basic analytics via Vercel Analytics. However, the site lacks essential business and compliance information such as privacy policies, contact details, and terms of service, which impacts its credibility and trustworthiness. The absence of WHOIS registration data raises concerns about the domain's legitimacy and registration status. Security posture is weak due to missing security headers and unclear SSL configuration. Overall, the site appears to be in an early or placeholder stage with significant gaps in compliance and security.

voll.werbung GmbH operates a website focused on advertising and marketing services, targeting business clients primarily in Austria. The website is built on WordPress using the Enfold theme and includes minimal content with links to terms and data protection documents. The technical infrastructure is modern with jQuery and WordPress core up to date, but lacks advanced security headers and explicit privacy or cookie policies. No contact information or social media presence is visible on the homepage, which limits direct engagement and trust signals. The site is accessible without any WAF or blocking mechanisms, and HTTPS is properly configured, ensuring secure communication.

L

Landis & Gyr Foundation

lg-stiftung.ch

55

The Landis & Gyr Foundation is a Swiss non-profit organization dedicated to supporting artistic and cultural projects, primarily focusing on professional and contemporary creative work by artists and writers within Switzerland. The foundation emphasizes collaboration with recognized organizations and has a regional interest in Zug and central Switzerland, while also supporting projects from non-urban areas across the country. The website reflects a niche cultural foundation with a clear mission and professional presentation, targeting artists and cultural entities. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript libraries such as Swiper.js and Leaflet.js, and uses Matomo for analytics, indicating a moderate level of digital maturity. Hosting and resources are served from computedby.com domains, suggesting a specialized hosting or development provider. The site is mobile-optimized and has good design quality, though accessibility and SEO optimizations are basic. From a security perspective, the site uses HTTPS and defers scripts for performance, but lacks visible security headers and does not provide privacy or cookie policies, which are compliance gaps. No contact information or incident response channels are explicitly provided, limiting transparency. The use of Matomo analytics suggests some privacy awareness, but absence of consent mechanisms reduces privacy compliance. Overall, the website is professional and trustworthy for its purpose but would benefit from enhanced privacy compliance, security headers, and clearer contact information to improve user trust and regulatory adherence.

The website at trinity.ch presents an extremely minimal digital presence, consisting solely of a black background with a single image and a relative link to a local HTML page. There is no substantive content describing the business, its services, or its market positioning. The lack of metadata, structured data, or contact information indicates a placeholder or underdeveloped site. Technically, the site does not utilize modern web technologies, frameworks, or analytics tools, and there is no evidence of HTTPS or security headers, which raises concerns about security posture. The absence of privacy, cookie, or terms of service policies further indicates non-compliance with common data protection regulations. Overall, the site is accessible but provides no meaningful information or trust signals to visitors.