High-risk security reports

T

TEXET POLAND Sp. z o.o.

texet.pl

44

Texet Poland Sp. z o.o. is a medium-sized Polish company specializing in promotional clothing, workwear, bags, and corporate gifts tailored for branding purposes. Operating for over 25 years, it serves businesses and advertising agencies by providing a wide portfolio of brands under the umbrella of the Swedish New Wave Group. The website demonstrates a professional and consistent brand presence with clear navigation and a focus on B2B services. Technically, the site uses modern web technologies including Bootstrap, jQuery, and various analytics and marketing tools, ensuring a good user experience and mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though some security headers are not explicitly detected, suggesting room for improvement. The absence of WHOIS data from the .pl registry introduces some uncertainty regarding domain registration legitimacy, but the business content and social proof indicate a legitimate operation. Overall, the website scores well on content quality, technical implementation, privacy compliance, and business credibility.

G

Home

gruenland.it

49

Gruenland.it is an Italian website apparently related to an online shop focused on agriculture or related products, as indicated by the brief description. The domain is well-established, created in 2000, indicating a longstanding presence. The website uses WordPress CMS with common plugins such as Contact Form 7 and TranslatePress, and includes standard web technologies like jQuery and Font Awesome. The site is accessible without any WAF or security challenge blocking access. However, the content is minimal and lacks critical compliance and security documentation such as privacy policies, cookie consent mechanisms, terms of service, and incident response information. No explicit contact information or business details are provided on the accessible pages, limiting business credibility and user trust. The site is mobile optimized and uses HTTPS, but lacks advanced security headers and DNSSEC.

B

brigl consulting UG (hb)

takeoff-marketing.de

35

brigl consulting UG (hb) is a specialized consulting agency based in Germany focusing on Amazon and Google SEO optimization services. With over 10 years of experience, they position themselves as a leading agency in the German market, offering services such as Amazon listing optimization, product launches, PPC campaigns, and comprehensive SEO strategies. Their website reflects a professional and consistent brand image, targeting businesses seeking to improve their online visibility and sales performance on major platforms. Technically, the site is built on WordPress with modern plugins and SEO tools, ensuring good performance and mobile optimization. Security measures include HTTPS and Google reCAPTCHA integration, though explicit security headers and policies are not evident. Overall, the site is trustworthy and well-maintained, with clear contact information and compliance with GDPR via privacy and cookie policies.

P

Page Performance | Tobias Hock

page-performance.de

46

Page Performance | Tobias Hock is a small German-based digital services provider specializing in professional web design, SEO optimization, and Google Ads management targeted at small and medium enterprises (KMU) and self-employed professionals. The website demonstrates a clear market positioning as a local expert offering comprehensive digital marketing solutions to enhance online presence and profitability. Technically, the site is built on WordPress using the Divi theme, enhanced with performance and GDPR compliance plugins such as WP Rocket and Complianz. The infrastructure reflects a modern, fast-loading, and mobile-optimized platform with good SEO practices implemented. Security posture is solid with HTTPS enforced and no evident vulnerabilities, though some security headers and policies could be improved. Privacy compliance is partial, with cookie consent implemented but lacking a visible privacy policy or terms of service. Overall, the site is professional and trustworthy, though it would benefit from enhanced transparency and security documentation.

I

i-deesign

i-deesign.de

48

i-deesign is a small, established web design agency based in Cologne, Germany, with over 15 years of experience. The company specializes in creating customized, responsive websites primarily using WordPress and WooCommerce, complemented by SEO, graphic design, photography, and hosting services. Their market position is that of a trusted local agency with a strong focus on quality and client satisfaction, supported by numerous positive Google reviews and testimonials. Technically, the website is built on WordPress with modern plugins and themes, hosted on webgo.de servers, and implements good SEO and privacy compliance practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site is professional, well-structured, and trustworthy, with no signs of blocking or suspicious activity.

I

ImmoWire

immowire.de

43

ImmoWire is a specialized digital marketing and web development agency focused on the real estate sector in Germany. They provide tailored websites, online marketing, and integration services for real estate agents, associations, and portals. The company leverages WordPress with modern plugins and technologies to deliver professional, SEO-optimized, and mobile-friendly websites. Their market position is supported by premium partnerships and strong customer testimonials. Technically, the website is well-structured, performant, and secure with HTTPS and cookie consent mechanisms. However, there is room for improvement in security headers and formal security policies. Overall, the site is trustworthy, compliant with GDPR, and professionally maintained.

K

Köln Dialog

koeln-dialog.de

44

Köln Dialog is a specialized online marketing agency based in Köln, Germany, offering a comprehensive suite of digital services including web design, web development, SEO, Google Ads, social media management, and reputation management. The company targets businesses seeking tailored digital marketing solutions, with a strong emphasis on individual client needs and measurable success. Their market position is that of a trusted regional agency with a portfolio spanning various sectors, notably real estate and legal marketing. The website reflects a professional and consistent brand image, supported by client testimonials and trust certifications. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Contact Form 7, ensuring good SEO and user engagement capabilities. Hosting is provided by kasserver.com, and the site demonstrates good mobile optimization and accessibility. Security practices include HTTPS enforcement and cookie consent mechanisms, although some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected. The security posture is solid with good SSL configuration and secure form handling, but the absence of a public security policy or incident response contact suggests room for improvement. Privacy compliance is strong, with clear privacy and cookie policies aligned with GDPR requirements. Business credibility is high, supported by transparent contact information, professional content, and trust signals. Overall, Köln Dialog presents a trustworthy and professional digital presence suitable for its business model. Strategic recommendations include enhancing security headers, publishing a security policy, and implementing a vulnerability disclosure mechanism to further strengthen trust and compliance.

M

Website is not found

mangomarketing.de

47

The website www.mangomarketing.de currently serves a placeholder page indicating that the site has been unpublished or deleted by the owner. No active business content, contact information, or policies are present. The domain uses name servers associated with rzone.de and is in a 'connect' status, but lacks detailed WHOIS registrant information. The absence of content and security features suggests the website is not operational at this time. From a technical perspective, the site uses basic HTML, CSS, and JavaScript with resources hosted on onecdn.io. There is no evidence of a CMS or advanced frameworks. The page is mobile responsive at a basic level but lacks SEO optimization and accessibility features. No security headers or HTTPS information were detected in the provided data. Security posture is weak due to the lack of HTTPS, security headers, and absence of privacy or cookie policies. No forms or data collection mechanisms are present, reducing immediate data protection concerns but also indicating no active user engagement. The WHOIS data is minimal and does not provide sufficient information to verify legitimacy or business claims. Overall, the website is inactive and does not currently represent an operational business presence. Strategic recommendations include reactivating the website with proper security configurations, publishing privacy and cookie policies, adding contact information, and improving technical and content quality to establish trust and compliance.

O

Owners Club

ownersclub.immo

49

Owners Club is a German real estate focused platform aiming to increase property ownership rates and provide access to previously inaccessible market segments. The website offers investment webinars, market news, and tools for property owners, targeting investors and homeowners primarily in Germany. The platform uses WordPress CMS with a moderate technical infrastructure including Matomo analytics and social media integrations. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website presents a professional and trustworthy image but could improve in compliance and security transparency.

The website 50epiuturismo.it currently presents only a maintenance placeholder page in Italian, indicating temporary unavailability. The domain is well-established, created in 2006, and registered with a valid status, suggesting a legitimate business presence. However, the lack of accessible content, metadata, or business information severely limits the ability to assess the company's operations, market position, or services. Technically, the site lacks visible security features such as HTTPS, security headers, or privacy policies, which are critical for user trust and regulatory compliance. The absence of contact information and business disclosures further reduces credibility. Overall, the website is not currently functional for end users or evaluators, and significant improvements are needed to restore full operational status and compliance.

The website su2cstreamteam.org is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. The domain is very recently registered (March 2024) with Network Solutions and uses SiteGround for hosting. No business, contact, or policy information is available on the site, indicating either a misconfiguration, restricted access, or an incomplete deployment. The lack of HTTPS, security headers, and privacy compliance features further diminishes the site's trustworthiness and security posture. Overall, the site appears to be in an early or restricted state, preventing a full assessment of its business or technical maturity.

A

Ambasciata Di Turchia Ufficio Cultura e Informazioni

turchia.it

49

The website www.turchia.it serves as the official cultural and tourism information portal of the Turkish Embassy's Cultural and Information Office in Italy. It provides comprehensive information about Turkey's destinations, cultural heritage, events, and UNESCO sites, targeting general audiences interested in Turkish tourism and culture. The site is positioned as an authoritative source for promoting Turkey's tourism in Italy, leveraging official branding and social media channels to enhance outreach. Technically, the website is built on WordPress using the Elementor page builder and Yoast SEO plugin, indicating a modern and maintainable infrastructure. It employs Google Analytics and Google Tag Manager for analytics and tracking, with asynchronous script loading to optimize performance. The site is mobile-optimized and demonstrates good SEO practices, though accessibility features are basic. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers such as Content-Security-Policy and HSTS, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. No incident response or vulnerability disclosure information is provided, which could be improved to bolster trust. Overall, the website is trustworthy and professional, with a strong business credibility score. The main risks relate to privacy compliance and security header implementation. Addressing these gaps would improve the site's security posture and regulatory adherence.

S

SemantycaWeb: Realizzazione siti web Prato | Web agency Prato

semantycaweb.it

49

SemantycaWeb is a small, established web agency based in Prato, Italy, specializing in custom website development, e-commerce solutions, SEO, web marketing, social media marketing, and mobile app development. With over 15 years of experience, the company targets businesses in the Tuscany region seeking to enhance their digital presence. The website demonstrates a good level of technical maturity, employing modern web technologies including PWA features, JavaScript libraries like jQuery and SweetAlert2, and integrates cookie consent management via Iubenda. The presence of structured data enhances SEO and local business visibility. Security posture is solid with HTTPS and DNSSEC enabled, though some security headers and policies could be improved. Privacy compliance is well addressed with comprehensive privacy and cookie policies and explicit consent mechanisms. Overall, the website is professional, trustworthy, and well-optimized for its target market.

B

Bee Queen Consulting Srl

agevolab.it

49

Agevolab, operated by Bee Queen Consulting Srl, is a specialized consulting firm established in 2009, focusing on financial facilitation and local development in Italy. The company offers personalized consulting services to public entities, businesses across various sectors, and non-profit organizations. Their key services include financial incentives consulting, tourism management, and marketing and communication. The website reflects a professional and consistent brand image with a clear target audience and business model. Technically, the site is built on WordPress with modern libraries and frameworks, ensuring good performance and mobile optimization. Security measures such as HTTPS, Google reCAPTCHA, and a comprehensive cookie consent mechanism are implemented, though some security headers could be improved. Privacy compliance is strong, leveraging Iubenda for privacy and cookie policies. Overall, the website demonstrates a mature digital presence with a high trustworthiness level.

The website felirent.it is currently inaccessible due to a 403 Forbidden error, indicating that access to the content is blocked or restricted. The page served is minimal, containing only an error message and no business or contact information. The domain is registered since 2018 and appears legitimate based on WHOIS data, but no registrant details are publicly available. The lack of DNSSEC and security headers suggests limited security hardening. No privacy, cookie, or terms of service policies are present, and no forms or tracking technologies are detected. Overall, the website's digital presence is minimal and inaccessible, preventing a full assessment of business operations or security posture.

1

1Stack Cloud

1stack.cloud

48

1Stack Cloud is a small cloud solutions provider targeting channel partners and resellers, founded in 2020. The website presents a minimalistic design with a clear focus on cloud solutions for the channel but lacks detailed business or contact information. The technical infrastructure uses common front-end libraries such as Bootstrap and Font Awesome, and integrates Google Analytics for visitor tracking. Hosting details are unclear, with name servers pointing to dynamic DNS domains. Security posture is basic, with no DNSSEC enabled, no visible security headers, and no published privacy or cookie policies. The domain registration is consistent with the business age and shows no privacy protection, indicating transparency in ownership. Overall, the website is functional but lacks comprehensive content, security best practices, and compliance documentation.

T

Ticket House - Ticket House – Assistenza semplice, veloce ed efficiente

tickethouse.it

42

Ticket House is a newly launched Italian IT support platform offering a ticketing system for customer assistance and remote support utilities. The website presents a clean, professional design built on WordPress with Oxygen builder, targeting customers seeking efficient IT problem resolution. The platform emphasizes simplicity and speed in opening support tickets and provides information about partner companies involved in service delivery. Technically, the site uses modern web technologies including HTTPS and DNSSEC for domain security, but lacks advanced security headers and privacy policies. No contact details or social media presence are visible, which limits direct customer engagement and trust signals. Overall, the site is functional and well-structured but requires enhancements in privacy compliance and security best practices.

O

Oierre | Officine Informatiche Riunite

oierre.it

38

Oierre is an established Italian consortium of IT and business service companies founded in 2012. It focuses on fostering collaboration, knowledge exchange, and business growth among SMEs and professionals in the technology sector. The website is professionally designed using WordPress and Oxygen Builder, with modern technologies and good mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. The domain registration is consistent and trustworthy, supporting the legitimacy of the business. Overall, Oierre presents a credible and professional digital presence aligned with its business goals.

S

Schloss Wolfsthurn – Südtiroler Landesmuseum für Jagd und Fischerei

wolfsthurn.it

48

Schloss Wolfsthurn operates as a regional cultural museum in South Tyrol, Italy, focusing on the history of hunting and fishing. The museum is housed in a historic baroque castle and offers exhibitions, educational programs, and events targeting tourists, families, and educational groups. The website reflects a professional and consistent brand image with clear contact details and social media presence. Technically, the site uses modern web technologies including JavaScript libraries and cookie consent management, ensuring GDPR compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site is trustworthy, well-maintained, and serves its audience effectively.

The website crossengage.io is currently inaccessible due to a Cloudflare 523 error indicating that the origin server is unreachable. This prevents any meaningful content or business information from being retrieved or analyzed. The domain is registered since 2015 with privacy protection via NameCheap, and DNS is managed through Cloudflare. However, the lack of accessible content severely limits the ability to assess the company's business model, services, or security posture. The technical infrastructure relies on Cloudflare for DNS and security, but the origin server appears offline or misconfigured, causing the site to be blocked. Security posture is weak due to the unavailability of the site and absence of security headers or policies. Overall, the risk is elevated due to lack of transparency and accessibility, and the site requires urgent remediation to restore service and enable proper evaluation.

B

Biologische Heilmittel Heel GmbH

vertigoheel.de

43

The website www.vertigoheel.de represents Biologische Heilmittel Heel GmbH, a medium-sized German healthcare company specializing in natural homoeopathic treatments for dizziness under the brand Vertigoheel®. The site is professionally designed, content-rich, and targets patients and healthcare professionals seeking natural remedies for vertigo. It leverages modern web technologies including Next.js and React, with integrated consent management and analytics tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and privacy compliance mechanisms in place, though explicit security policies and incident response contacts are absent. Overall, the site is trustworthy, well-branded, and compliant with GDPR, supporting its market position as a reputable pharmaceutical provider.

B

Biologische Heilmittel Heel GmbH

neurexan.de

45

Neurexan.de is the official website for Neurexan®, a natural medicinal product by Biologische Heilmittel Heel GmbH, focused on helping individuals manage nervous unrest and sleep disorders. The site positions itself as a trusted source for product information, dosage guidance, and purchase options, targeting consumers seeking natural health solutions. The website leverages modern web technologies including Next.js and React, with integrated consent management and optimization tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be explicitly confirmed or enhanced. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates high professionalism, good user experience, and strong trust indicators, making it a credible and reliable resource for its target audience.

B

Biologische Heilmittel Heel GmbH

traumeel.de

45

The website traumeel.de represents Biologische Heilmittel Heel GmbH's product line Traumeel® S, offering natural homeopathic remedies in cream, tablet, and drop forms to support musculoskeletal health. The site targets consumers seeking natural solutions for muscle and joint complaints, providing detailed product information, dosage instructions, and educational content. The business maintains a strong market position in Germany with a professional online presence and partnerships with reputable online pharmacies. Technically, the site is built on modern frameworks including Next.js and Storyblok CMS, with integrated consent management and analytics tools, ensuring good performance, SEO, and mobile optimization. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the site is trustworthy, compliant with GDPR, and provides a positive user experience.

M

Médiateur national de l'énergie

sollen.fr

46

The website www.sollen.fr serves as an official online platform provided by the Médiateur national de l'énergie in France, offering a free and secure service to consumers and small businesses for resolving disputes with energy suppliers and distributors. The platform facilitates mediation for issues related to electricity, natural gas, LPG, fuel oil, wood, and heat networks. It targets a broad audience including individuals, artisans, small enterprises, associations, and local authorities. The site is well-branded with official logos and certifications such as Certilis, enhancing its credibility. Technically, the website employs modern JavaScript libraries including jQuery and jQuery UI, uses Google Fonts for typography, and implements responsive design for mobile devices. The site includes secure forms with CSRF tokens and integrates Xiti analytics for user tracking. However, explicit privacy and cookie policies are not present on the main page, and security headers are not evident, indicating room for improvement in privacy compliance and security hardening. From a security perspective, the site uses HTTPS and secure form handling but lacks visible advanced security headers and incident response contact information. The absence of WHOIS data reduces trust slightly, though the official nature of the platform and certifications mitigate concerns. Overall, the site is safe, professional, and trustworthy, with moderate technical maturity and some gaps in privacy and security best practices. Strategically, the platform is positioned as a key public service in the French energy sector, providing an essential dispute resolution mechanism. Enhancing transparency around privacy, security policies, and contact information would further strengthen user trust and compliance posture.

The website pinkribbon.at is currently inaccessible beyond a robot challenge screen that implements a proof-of-work CAPTCHA mechanism. This indicates the presence of a Web Application Firewall (WAF) or security gateway designed to block automated or suspicious traffic. Due to this, no meaningful business content, contact information, or policies are accessible for analysis. The domain WHOIS data is unavailable due to quota restrictions, preventing verification of registration details and reducing trustworthiness. The technical infrastructure includes JavaScript-based cryptographic functions and Cloudfront CDN hosting, but lacks visible HTTPS enforcement and security headers. Overall, the site appears to be in a protective mode rather than serving end-user content.

Sonne ohne Reue is a health awareness initiative operated by the Österreichische Krebshilfe, focusing on educating the public about safe sun exposure and skin cancer prevention. The website offers comprehensive educational content, including skin type tests, early detection information, downloadable brochures, and a podcast series. It targets the general public, aiming to reduce skin cancer incidence through informed behavior. Technically, the site is built on TYPO3 CMS, employs modern web technologies, and integrates Google Tag Manager and Cookiebot for analytics and consent management. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though it lacks a dedicated security policy or incident response information. Overall, the website is professional, trustworthy, and compliant with GDPR, providing clear contact details and social media presence. The domain WHOIS data aligns well with the website's claims, reinforcing legitimacy.

Ö

Österreichische Krebshilfe (implied)

loosetie.at

44

Loose Tie is a well-established Austrian healthcare campaign focused on prostate cancer awareness and early detection. The website provides comprehensive educational content including videos, podcasts, brochures, and event information targeting men, especially those aged 45 and above. The campaign is supported by the Österreichische Krebshilfe, enhancing its credibility and trustworthiness. Technically, the site is built on TYPO3 CMS and integrates modern web technologies such as Google Tag Manager and Cookiebot for analytics and cookie consent management. The site is mobile-optimized and accessible, with good SEO practices and clear navigation. Security-wise, the website enforces HTTPS and implements key security headers, although it lacks explicit security policies and vulnerability disclosure mechanisms. Overall, the website presents a professional and trustworthy front for its healthcare mission, with moderate tracking and basic privacy compliance.

G

Gerhard Ettmayer - Institut für Personalentwicklung e.U.

gbv-akademie.at

47

GBV Akademie is a specialized educational institution serving the non-profit housing sector in Austria. It offers a range of seminars, webinars, certified courses, and inhouse training programs tailored to professionals in this niche market. The organization is closely affiliated with the Austrian Association of Non-Profit Housing Associations (GBV), reinforcing its market position and credibility. The website reflects a professional and consistent brand image, emphasizing quality and compliance through certifications such as ISO 17024 and EBQ. Contact and legal information are clearly provided, supporting transparency and trust. Technically, the website is built on Joomla CMS with modern frameworks like Bootstrap 5 and integrates essential security features such as HTTPS and Google reCAPTCHA v3. The site demonstrates good mobile optimization and SEO practices, although accessibility features could be enhanced. No blocking mechanisms or WAF challenges were detected, allowing full content access and analysis. From a security perspective, the site maintains a good posture with encrypted connections and no visible vulnerabilities or exposed sensitive data. However, some security headers are not confirmed and could be implemented to strengthen defenses. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms aligned with GDPR requirements. Overall, GBV Akademie presents a trustworthy, professional, and secure online presence suitable for its educational mission. Strategic improvements in security headers, incident response transparency, and accessibility would further enhance its posture and user trust.

Art Screen TV is a Swiss-based company specializing in representing contemporary artists and sponsoring prestigious international art events such as the Florence Biennale. The website serves primarily as an informational platform showcasing the company's partnerships, artist roster, and upcoming events. Technically, the site is built with basic HTML and CSS, leveraging external fonts and icon libraries, and hosted by Infomaniak Network SA, a reputable Swiss hosting provider. The website is accessible via HTTPS but lacks advanced security headers and DNSSEC, indicating room for improvement in security posture. Privacy and cookie policies are absent, which may impact compliance with GDPR and user trust. Overall, the site is functional but basic, with limited interactive features and minimal tracking or analytics.

V

VIBRACION LATINA - Escuchar la radio en vivo

vibracionlatina.com

44

Vibracion Latina is a small, niche online radio station focused on streaming Latin music live to Spanish-speaking audiences, primarily in Switzerland's Valais region. The website promotes mobile applications on iOS and Android platforms and maintains active social media channels to engage listeners. The business model revolves around media streaming supported by advertising and promotional content. Technically, the site uses jQuery and jPlayer for audio streaming and integrates third-party widgets such as Elfsight's Instagram feed. Hosting is provided by Infomaniak Network SA, a reputable Swiss hosting provider. Security posture is basic with HTTPS enabled but lacks important security headers and DNSSEC. Privacy compliance is weak, with no visible privacy or cookie policies, which is a compliance risk. Overall, the site is functional and provides a good user experience but requires improvements in security and privacy practices to enhance trust and compliance.

A

Agglomération Fribourg

agglo-fr.ch

46

Agglomération Fribourg is a public autonomous institution coordinating regional development for ten central cantonal communes in Switzerland. It focuses on territorial planning, mobility, environmental protection, economic and cultural promotion. The website is professionally designed using TYPO3 CMS and integrates modern analytics and consent management tools. Security posture is strong with HTTPS and Content Security Policy in place, though explicit security policies and incident response contacts are absent. Overall, the site is trustworthy, well-maintained, and compliant with GDPR cookie consent requirements.

W

World Association of Girl Guides and Girl Scouts

wagggs-shop.org

41

The World Association of Girl Guides and Girl Scouts Shop is an official e-commerce platform serving a global non-profit organization dedicated to supporting Girl Guides and Girl Scouts worldwide. The website offers a range of branded merchandise including clothing, badges, pins, and accessories, targeting members and supporters of the organization. The business model focuses on retail sales to support the non-profit's mission, with a clear market position as a niche provider of official scouting merchandise. The site is well-branded and consistent with the organization's identity, featuring multilingual support and clear navigation. Technically, the website employs legacy JavaScript libraries such as jQuery 1.7.1 and Cufon for font rendering, indicating an older technology stack. The site appears to be custom-built or uses an unknown CMS, hosted under a domain registered with GoDaddy. Performance and mobile optimization are moderate to basic, with room for modernization. SEO and accessibility features are present but not advanced. From a security perspective, the domain is protected with standard domain status locks but lacks DNSSEC and visible security headers. The use of outdated JavaScript libraries introduces potential vulnerabilities. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism. However, no explicit security policy or incident response information is published. No analytics or tracking scripts were detected, indicating minimal user tracking. Overall, the website is trustworthy and professional, with a strong business credibility score. Security posture is moderate but could be improved by updating libraries, enabling DNSSEC, and adding security headers. The site is safe for general audiences with no adult or questionable content. Strategic recommendations include modernizing the tech stack, enhancing security configurations, and publishing security policies to improve transparency and trust.

A

Austrian Energy Agency

sharerenewables.eu

46

The SHAREs Blueprint website serves as an informational and template platform designed to support citizen-driven energy communities across several European countries. Developed under the H2020 SHAREs project and managed by the Austrian Energy Agency, it provides resources such as best practices, guidelines, tools, and communication materials to empower energy community initiatives. The site targets citizens and organizations interested in renewable energy collective actions, offering a WordPress template for national one-stop-shops. Technically, the site is built on WordPress using the Genesis Framework and related plugins, ensuring a modern and responsive user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks some security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is professional, trustworthy, and well-aligned with its mission, though improvements in privacy and security transparency are recommended.

Ს

საქართველოს ახალგაზრდა ენერგეტიკოსთა ასოციაცია

energy4all.ge

44

SHAREs Gateway Georgia is an informational portal dedicated to supporting citizen energy communities and collective energy projects in Georgia. The platform provides resources such as best practices, news, videos, assessment tools, and guidelines to empower citizens and accelerate the transition to clean energy systems. The website is operated in partnership with the Georgian Young Energy Professionals Association and is EU-funded, positioning it as a niche but credible resource in the Georgian energy sector. Technically, the website is built on WordPress using the Genesis Framework and related plugins, hosted by HostGator. It employs modern web technologies including jQuery and Ionicons, and is mobile-optimized with a moderate performance profile. However, there is room for improvement in accessibility and SEO optimization. The site uses HTTPS but lacks security headers and cookie consent mechanisms, indicating partial security and privacy maturity. From a security perspective, the site has no visible vulnerabilities or exposed sensitive data, but the absence of security headers and privacy policies represents compliance gaps. No incident response or vulnerability disclosure information is provided. The domain is relatively new (created in 2022) and uses privacy protection, which is justified given the organization's profile. Social media presence is limited to partner organization accounts on Facebook and LinkedIn. Overall, the website is a good informational resource with moderate technical and security posture. Strategic improvements in privacy compliance, security headers, and accessibility would enhance trust and compliance with GDPR and related regulations.

The website energetke-zajednice.hr is currently inaccessible, returning a 403 Forbidden error page. This indicates that access to the site is blocked or restricted, preventing any meaningful content or business information from being retrieved. The domain is registered in Croatia with a reputable local registrar and has a recent creation date in October 2022, suggesting a new or developing business presence. However, the lack of accessible content, contact information, and policies severely limits the ability to assess the company's market position, services, or credibility. Technically, the site appears to be hosted on SiteGround and uses Google Fonts, but no CMS or advanced technologies are detected. Security posture cannot be fully evaluated due to lack of accessible content and headers. Overall, the site is currently non-functional for public users and requires remediation to provide business and compliance information.

Ч

Черноморски изследователски енергиен център

sharerenewables.bg

32

SHARES Gateway Bulgaria is an informational portal dedicated to supporting the development of citizen energy communities in Bulgaria. It provides comprehensive resources including project ideas, financing options, legal frameworks, best practices, and communication materials to empower citizens, SMEs, and local authorities to engage in renewable energy initiatives. The portal is positioned as a niche non-profit platform facilitating active citizen participation in the energy transition. Technically, the website is built on WordPress using the Genesis Framework and related plugins, hosted by a Bulgarian provider, and demonstrates moderate performance with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and no exposed sensitive data, though it lacks some security headers and formal incident response documentation. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy, professional, and well-aligned with its mission, though improvements in security headers and privacy mechanisms are recommended.

Ö

Österreichische Energieagentur – Austrian Energy Agency

energie-teilen.at

44

Energie teilen is an Austrian informational platform dedicated to supporting the creation and operation of energy communities, primarily focusing on renewable energy sharing within Austria. It is funded by the EU initiative SHAREs and operated in close cooperation with the Austrian Energy Agency and the Austrian Coordination Office for Energy Communities. The platform offers decision matrices, communication campaign materials, and a collection of free tools to facilitate energy community projects. Technically, the website is built on WordPress using the Genesis Framework and related plugins, providing a modern and responsive user experience with good SEO and accessibility basics. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks some advanced security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy, professional, and well-aligned with its stated mission and business context.

M

Médecins Sans Frontières (MSF)

msf.ch

47

Médecins Sans Frontières (MSF) is a globally recognized humanitarian medical organization providing emergency aid to populations lacking access to healthcare due to conflicts, epidemics, or natural disasters. The website reflects a professional and consistent brand presence, targeting a general audience interested in humanitarian aid. The technical infrastructure is modern, leveraging Drupal 10 CMS, with integrated analytics and cookie consent management, indicating a mature digital presence. Security posture is solid with HTTPS and security headers properly configured, though explicit privacy policies and incident response contacts are not found, representing areas for improvement. Overall, the website is trustworthy and well-positioned for its non-profit healthcare mission.

W

Domain Default page

waxmann-verlag.de

34

The website waxmann-verlag.de currently hosts only a default placeholder page generated by Plesk, indicating that no active website content or business information is published. The domain is configured with AWS DNS nameservers, suggesting hosting on Amazon infrastructure, but no SSL certificate or HTTPS enforcement is evident. The absence of privacy policies, contact information, or terms of service further indicates that the site is not yet operational or publicly serving business purposes. From a technical perspective, the site uses basic HTML, CSS, and JavaScript with Plesk platform integration but lacks advanced frameworks or CMS. Security posture is weak due to missing HTTPS and security headers, and no incident response or vulnerability disclosure mechanisms are present. Overall, the site presents a low trust profile and minimal digital maturity.

F

Fondazione Cologni

mestieridarte.it

49

Mestieri d'Arte e Design is a niche Italian magazine operated by Fondazione Cologni, focusing on the excellence of craftsmanship, high manufacturing, and creative design. The website serves as a digital platform for the magazine, offering articles, editorials, albums, and archives related to arts and design. The target audience is general, primarily Italian-speaking users interested in cultural and artistic content. Technically, the site is built on WordPress using the Divi theme and incorporates modern web technologies such as jQuery and Masonry.js for layout. It employs Google Analytics for traffic analysis and a cookie consent mechanism compliant with GDPR requirements. Security posture is good with HTTPS enabled and basic security best practices observed, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with cookie consent but no visible privacy policy or terms of service. Business credibility is supported by consistent branding and WHOIS data matching the foundation's identity. Overall, the site is professional, secure, and well-positioned within its niche media sector.

The website ctaonline.it is currently a parked domain landing page with minimal content primarily aimed at advertising the domain for sale. There is no visible business presence, contact information, or privacy and security policies. The technical infrastructure relies on basic HTML, CSS, JavaScript, and an iframe loading external content over HTTP, which poses security concerns. The domain is newly registered in January 2024 and lacks DNSSEC and other trust indicators. Overall, the site lacks professionalism, security maturity, and compliance, making it unsuitable for business operations in its current state.

M

Musikvertrieb AG

muve.ch

41

Musikvertrieb AG is a Swiss indie music distributor and record label founded in 1935, specializing in marketing national and international artists and labels such as PIAS and muve recordings. The company targets music industry professionals and consumers interested in indie music distribution. The website is built on WordPress using the Brooklyn theme and incorporates modern technologies including Google Analytics, Facebook Pixel, and reCAPTCHA, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and use of reCAPTCHA, but lacks visible security headers and published security policies, indicating room for improvement. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy with a moderate risk profile.

The Schweizer Musik & Medien Verband (SMMV) is a Swiss music and media association founded in 1998, serving musicians, producers, studios, independent labels, and managements. It offers cost-saving services such as product coding (EAN, ISRC), website and booklet design, promotional materials, legal advice, and distribution partnerships. The website is built on Joomla CMS with Bootstrap and jQuery, featuring a professional design and moderate technical maturity. Contact information is clearly provided, including email, phone, physical address, and a contact form with integrated Google Maps. However, the site lacks privacy and cookie policies, and no security headers are detected, which are areas for improvement. Google Analytics is used for user tracking with event monitoring on downloads and outbound links.

A

Alice Authoring Art

authoringart.ch

45

Alice Authoring Art is a small Swiss-based service provider specializing in professional text quality assurance, offering individually crafted and carefully edited texts for companies, organizations, cultural creators, and private individuals. The website is built on WordPress using Elementor and integrates common analytics tools such as Google Analytics and Clicky Analytics. The technical infrastructure is modern and mobile-optimized, providing a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers and explicit security policies are absent. Privacy compliance is weak due to missing privacy and cookie policies and lack of GDPR indicators. Contact information is limited to social media links without explicit emails or phone numbers. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security disclosures.

A

Appmulti AG

adon.ch

39

Appmulti AG is a Swiss media production company with over 25 years of experience, specializing in manufacturing CDs, DVDs, Blu-ray discs, USB sticks, and vinyl LPs. The company has taken over the customer base of Adon Production AG, which ceased operations in 2023. Their market position is strong within Switzerland, targeting musicians, filmmakers, and artists seeking physical media production services. The website reflects a professional and consistent brand image with clear service offerings and customer testimonials. Technically, the site is built on WordPress using the Divi theme and includes modern features like Google reCAPTCHA for form security. However, it lacks some advanced security headers and cookie consent mechanisms, which are recommended for compliance and enhanced security. Overall, the site is trustworthy and well-positioned but could improve privacy compliance and security transparency.

I

Istituto Pace Sviluppo Innovazione Acli

ipsia-acli.it

49

Istituto Pace Sviluppo Innovazione Acli (IPSIA) is a well-established Italian non-governmental organization founded in 1985 and promoted by ACLI. The organization focuses on international cooperation, social development, volunteering, and professional training. It operates primarily in Italy and several international countries, offering projects related to migration, human rights, environment, and social entrepreneurship. The website reflects a mature digital presence with a Joomla CMS infrastructure, modern web technologies, and active social media engagement. Privacy and cookie policies are clearly presented with consent mechanisms, demonstrating compliance with GDPR requirements. Security posture is adequate with HTTPS and DNSSEC enabled, though improvements are recommended in HTTP security headers and incident response transparency. Overall, the website is professional, trustworthy, and serves its target audience effectively.

H

Hotel Adriatica

casacli.it

35

CasAcli is a hospitality business offering accommodation services near the Vatican in Rome, targeting families, groups, and pilgrims. The website is professionally designed using WordPress with Elementor and optimized for SEO using Yoast. It provides key services including group religious travel accommodation, business meeting events, room rentals, and hospitality services. The business appears to be small-sized and established since 2015, with consistent domain registration data supporting legitimacy. Technically, the site uses modern web technologies and includes Google Analytics for visitor tracking. Security posture is solid with HTTPS and DNSSEC enabled, but lacks some advanced security headers and published security policies. Privacy compliance is limited due to missing explicit privacy and cookie policies. Overall, the website is functional, trustworthy, and safe for general audiences.

Ö

Österreichische Energieagentur

shares-project.eu

45

SHAREs is a Horizon 2020 funded project focused on empowering local communities to establish and expand energy communities across multiple European countries. The project provides centralized gateways and a WordPress-template blueprint to facilitate national one-stop-shops for energy communities. The website is professionally designed using TYPO3 CMS, integrates modern technologies including Matomo analytics and YouTube embeds, and demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and cookie consent mechanisms are lacking. The domain registration is consistent with the project's legitimacy and European origin. Overall, the website serves as a credible resource for energy community stakeholders with a clear business focus and good technical implementation.

U

UNIV - Unione Nazionale Imprese di Vigilanza e Servizi di Sicurezza

univigilanza.it

37

UNIV - Unione Nazionale Imprese di Vigilanza e Servizi di Sicurezza is a prominent Italian national association representing private security companies. The organization provides legal, fiscal, and union assistance to its members and acts as a liaison with public authorities. The website reflects a mature and professional presence with clear communication of its services, partner affiliations, and recent news updates. The target audience includes private security firms and public sector stakeholders in Italy. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Google Analytics, ensuring a responsive and user-friendly experience. Security posture is adequate with HTTPS enabled and cookie consent implemented, though some security headers and explicit policies could be improved. Overall, the site is trustworthy, well-branded, and compliant with GDPR requirements.

B

Bundeskammer der Ziviltechniker:innen | Arch+Ing

arching.at

48

The website www.arching.at represents the official online presence of the Austrian Federal Chamber of Civil Engineers and Architects (Bundeskammer der Ziviltechniker:innen | Arch+Ing). It serves as a professional portal providing comprehensive information and services to civil engineers, architects, and related professionals in Austria. The site offers detailed navigation to membership services, events, publications, legal and contractual guidance, and professional regulations, positioning itself as a key authoritative body in the Austrian architecture and engineering sector. Technically, the website is built on TYPO3 CMS and leverages a variety of modern JavaScript libraries including jQuery, Bootstrap, Shadowbox, and DataTables to deliver a functional and structured user experience. The site is served over HTTPS with good SSL configuration, though some improvements could be made in mobile optimization and accessibility. No blocking or WAF challenges were detected, indicating full accessibility. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks explicit security headers such as Content-Security-Policy and cookie consent mechanisms, which are recommended for enhanced security and compliance with EU regulations. The privacy policy is comprehensive and GDPR compliant, but cookie consent and incident response information are absent. Overall, the website demonstrates a strong professional and trustworthy presence with good content quality and business credibility. The lack of WHOIS data is typical for .at domains with privacy protection and does not detract from the site's legitimacy. Strategic recommendations include implementing security headers, adding cookie consent, and improving mobile and accessibility features to further enhance security posture and user experience.