High-risk security reports

B

Bernd Pfelzer

ra-pfelzer.de

38

Bernd Pfelzer operates a professional legal and notary practice based in Bremen, Germany, offering services primarily in tenancy law, inheritance law, traffic accident law, and debt collection. The website is designed to serve local clients seeking legal counsel and notary services, presenting clear contact information and service descriptions. The business is positioned as a small, specialized legal entity with a focus on personal client service. Technically, the website is built on WordPress using Bootstrap and FontAwesome, hosted on kasserver.com. It demonstrates good mobile optimization and moderate performance. The site uses HTTPS with a valid SSL certificate, ensuring secure communications. However, it lacks some advanced security headers and cookie consent mechanisms, which are recommended for compliance and enhanced security. From a security perspective, the site shows a solid baseline with no visible vulnerabilities or exposed sensitive data. The absence of a published security policy or incident response contact limits transparency in security governance. No tracking or advertising scripts were detected, indicating minimal user tracking and a privacy-respecting approach. Overall, the site is trustworthy and professional but could improve in privacy compliance and security best practices.

R

Roistat

roistat.com

45

Roistat is a mature SaaS company founded in 2014, specializing in marketing analytics and automation solutions targeted at CEOs, marketers, business analysts, and sales leaders. The platform offers a comprehensive suite of tools including summary reports, lead generation, multichannel analytics, and CRM integrations, positioning itself as a key player in marketing intelligence. The website is professionally designed with consistent branding and clear navigation, supporting a positive user experience and trustworthiness. Technically, the site leverages modern web technologies such as jQuery, Bootstrap, and various UI libraries, hosted behind Cloudflare DNS services. The site is mobile optimized and performs moderately well, with good SEO practices and accessibility features. Tracking is implemented via Yandex.Metrika and VK retargeting pixels, reflecting moderate user tracking practices. Security posture is solid with HTTPS enforced and domain transfer protections in place, though there is room for improvement by enabling DNSSEC and adding security headers. Privacy compliance is well addressed with clear privacy and cookie policies including consent mechanisms. However, incident response and vulnerability disclosure policies are not publicly available. Overall, Roistat presents a trustworthy and professional online presence with a strong business model and technical foundation. Strategic improvements in security policies and transparency could further enhance its risk profile and customer confidence.

S

Silver Bell Group

silverbellgroup.com

42

Silver Bell Group is a professional business process outsourcing (BPO) provider specializing in scalable European nearshore sales and customer support teams. Their service offerings include sales outsourcing, customer support, lead generation, video customer experience, IT staffing, and a tech tool marketplace. The company targets global businesses seeking multilingual and on-demand BPO solutions based in Europe, with a physical presence in Belgrade, Serbia. The website is well-designed, mobile-optimized, and SEO-friendly, reflecting a mature digital presence. Technically, the website is built on WordPress using the Elementor framework, leveraging modern JavaScript libraries and multiple third-party marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Cookiebot for consent management. The site employs HTTPS with a strong SSL configuration and uses reCAPTCHA to secure forms. However, explicit security headers are not clearly visible and could be improved. From a security perspective, the site demonstrates good practices including encrypted connections and cookie consent mechanisms, but lacks visible incident response contacts or security certifications. The absence of WHOIS registration data for the domain is a significant concern, as it raises questions about domain legitimacy despite the professional website. Overall, the website presents a low to moderate risk profile with strong business and technical maturity but requires verification of domain registration and enhancement of security transparency to improve trustworthiness and compliance.

I

IVD Süd e.V.

ivd-sued.net

46

IVD Süd e.V. is a regional professional association for real estate consultants, brokers, managers, and experts in southern Germany, specifically Bavaria and Baden-Württemberg. The organization provides legal advice, training, exclusive partnerships, networking opportunities, and market data services to its members. The website reflects a mature digital presence with a WordPress CMS infrastructure, modern plugins like Smart Slider 3, and SEO optimization via Yoast. The site is well-structured and targets real estate professionals and consumers seeking qualified brokers. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, though improvements in security headers and cookie consent are recommended. Overall, the site is trustworthy and professionally maintained, supporting the association's business goals effectively.

P

Pur Jus

pur-jus.ch

47

Pur Jus is a specialized education provider based in Switzerland offering internationally recognized wine and spirits certifications, including WSET, Wine Scholar Guild, and RVFA programs. The company targets both amateur and professional wine enthusiasts, providing high-quality courses and workshops with a strong emphasis on recognized certifications and practical tastings. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the site is built on WordPress with modern plugins for SEO, analytics, and GDPR compliance, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the domain registration and business information are consistent and trustworthy, supporting a high legitimacy score.

T

TECNOLUMEN GmbH & Co.KG

tecnolumen.com

48

TECNOLUMEN GmbH & Co.KG is a medium-sized German company specializing in the manufacture and retail of original Bauhaus lamps, design classics, and related lighting products. The company emphasizes high-quality craftsmanship and sustainability, targeting retailers, design enthusiasts, and collectors. Their market position is that of a niche leader in Bauhaus and classic design lighting. The website is built on WordPress with modern SEO and analytics tools, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

The website grwapi.net serves as a platform showcasing various Google Reviews widgets primarily for Dentalzentrum Augsburg, a dental center located in Augsburg, Germany. The site demonstrates multiple widget templates in both light and dark themes, displaying aggregated review ratings and individual customer comments. The business model focuses on providing embeddable review widgets to enhance online reputation and customer trust for businesses. Technically, the site employs modern frontend technologies including Bootstrap 4.4.1, Google Fonts, and JSON-LD structured data for SEO and rich snippets. Hosting appears to be managed via netcup.net DNS infrastructure. Security posture is moderate with HTTPS likely enabled (though SSL details are not explicit), but lacks important security headers and privacy compliance documentation. No contact or incident response information is provided, limiting transparency and user trust. Overall, the site is functional and professional but would benefit from enhanced security and compliance measures.

S

Samet Privacy, LLC

kidsafeseal.com

46

The kidSAFE Seal Program, operated by Samet Privacy, LLC, is a specialized certification service focused on ensuring the safety and privacy of children-friendly online products such as games, apps, and connected devices. Established in 2008, the organization holds a niche market position as a trusted certifier for interactive children's technologies, emphasizing compliance with online safety standards and COPPA regulations. The website content is professionally presented, targeting families and product providers seeking safety certification. Technically, the site employs standard web technologies with Google Analytics and Tag Manager for user tracking, hosted behind Cloudflare DNS with HTTPS enabled, but lacks advanced security headers and cookie consent mechanisms. Security posture is moderate with room for improvement in DNSSEC adoption and security policy transparency. Overall, the domain registration is consistent with the business claims, showing a legitimate and stable online presence.

The website bayes-cid.com is currently inaccessible, presenting a 403 Forbidden error page that blocks access to any substantive content. This prevents any meaningful analysis of the business, services, or compliance posture from the website itself. The domain is relatively new, registered in March 2023, and hosted on SiteGround. No privacy policies, cookie notices, terms of service, or contact information are available on the page. The lack of HTTPS information and security headers further limits the security assessment. Overall, the site appears to be either under development, restricted, or misconfigured, resulting in a poor user experience and low trustworthiness. From a technical perspective, the site uses standard fonts from Google Fonts and is hosted on a reputable provider, but no modern frameworks or CMS are detectable. The absence of analytics or tracking scripts suggests minimal digital marketing or user tracking activity. The security posture is weak due to the lack of visible HTTPS and security headers, and no incident response or vulnerability disclosure information is present. Given the blocked content and minimal data, the risk assessment is elevated due to lack of transparency and accessibility. Strategic recommendations include enabling HTTPS, publishing privacy and cookie policies, providing clear contact and business information, and resolving the 403 access issue to allow proper content delivery and user engagement.

R

Real Centro Universitario Escorial - María Cristina

rcumariacristina.es

48

The Real Centro Universitario Escorial - María Cristina is a private university institution located in San Lorenzo de El Escorial, Spain, with a rich history dating back to 1892. It offers official undergraduate and postgraduate degrees in business administration, law, and related fields, affiliated with Universidad CEU San Pablo. The website reflects a well-established academic institution with a professional digital presence, including comprehensive academic program information, campus details, and active social media engagement. Technically, the website is built on WordPress with modern JavaScript libraries such as Swiper.js and jQuery, enhanced by SEO plugins and GDPR-compliant cookie consent mechanisms. The site is mobile-optimized and uses HTTPS with good SSL configuration, though some security headers are missing. Analytics and marketing tools are implemented with user privacy in mind, leveraging Google Tag Manager and consent mode. From a security perspective, the site demonstrates a solid baseline with HTTPS and cookie consent but lacks published security policies or incident response contacts. No vulnerabilities or suspicious content were detected. The absence of WHOIS data due to Red.es restrictions limits domain registration verification, but the website content and structured data strongly support legitimacy. Overall, the site is a credible, professional educational platform with good technical and privacy practices. Strategic improvements in security headers, incident response transparency, and accessibility could further enhance trust and compliance.

The website www.ems.gov represents the official online presence of the National Highway Traffic Safety Administration's Office of Emergency Medical Services (NHTSA OEMS). It serves as a comprehensive resource hub for emergency medical services professionals, government agencies, and the public, providing critical information, guidelines, and updates related to EMS systems across the United States. The site is well-branded with consistent government identity and offers a variety of resources including webinars, newsletters, and detailed issue areas relevant to EMS. Technically, the site employs modern web technologies such as Alpine.js and Tailwind CSS, ensuring good mobile responsiveness and accessibility. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is basic, with a privacy policy linked from the parent transportation.gov domain but lacking a cookie consent mechanism. Overall, the site is trustworthy, professional, and authoritative, reflecting its government status.

The website trafficsafetymarketing.gov is an official U.S. government site managed by the National Highway Traffic Safety Administration (NHTSA), a division of the U.S. Department of Transportation. It serves as a centralized resource hub for traffic safety communication materials, campaigns, and research targeted at states, partner organizations, and highway safety professionals. The site provides comprehensive and timely behavioral and vehicle safety outreach initiatives, supported by strong government branding and trust signals. The content is highly relevant, professionally presented, and designed for a general audience with a focus on public safety. Technically, the site is built on Drupal 10 CMS, leveraging modern web technologies including Google Tag Manager and Google Analytics for tracking and performance monitoring. The site is mobile-optimized, accessible, and SEO-friendly with proper meta tags and structured navigation. HTTPS is enforced with excellent SSL configuration, ensuring secure communications. However, some security headers like CSP and X-Content-Type-Options could be improved for enhanced protection. From a security and compliance perspective, the site demonstrates good practices with no visible vulnerabilities or exposed sensitive data. Privacy policies and terms of service are clearly linked and comprehensive, though a cookie consent mechanism is not explicitly present. WHOIS data is unavailable due to .gov domain privacy policies, which is standard and justified for government domains. The overall security posture is strong, with recommendations to enhance header policies and consider a security.txt file for vulnerability disclosures. Overall, trafficsafetymarketing.gov is a trustworthy, authoritative government resource with excellent content quality and a solid technical foundation. Strategic improvements in security headers and privacy consent mechanisms would further strengthen its posture and user trust.

E

EBSCO Information Services

ebscousergroup.org

46

The EBSCO User Group website serves as a professional platform for an annual event targeting academic library professionals across North America. It facilitates networking, knowledge sharing, and engagement with EBSCO's technology solutions. The site is well-branded, consistent, and provides comprehensive event information including schedules, registration, and session submissions. The parent company is EBSCO Information Services, a recognized entity in the education sector. Technically, the site is built on WordPress with modern plugins and tracking tools, hosted by InMotion Hosting. It demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is adequate with HTTPS enabled and cookie consent implemented, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is strong with a clear privacy policy and cookie banner. No direct contact emails or phone numbers are published, but a contact form is available. Overall, the site is trustworthy, professional, and safe for its intended audience.

The website at ileu.org is currently inaccessible to the public, returning a 403 Forbidden error page. This indicates that access is restricted or blocked, preventing any meaningful content or business information from being displayed. The domain is registered since 2000 with Tucows Domains Inc. and uses SiteGround nameservers for hosting. However, no privacy policies, cookie notices, terms of service, contact information, or business descriptions are available on the site. The lack of accessible content and security policies limits the ability to assess the company's market position or services. Technically, the site lacks visible security headers and DNSSEC is not enabled, which are areas for improvement. Overall, the site appears to be either under maintenance, restricted, or improperly configured for public access.

Fondation CHUV is a Swiss non-profit organization dedicated to supporting the Centre hospitalier universitaire vaudois (CHUV) through philanthropy focused on medical research, training, and patient care. The foundation plays a vital role in mobilizing community support to advance healthcare innovation and excellence in the Vaud region. The website reflects a mature digital presence with a professional design, clear navigation, and strong branding aligned with its healthcare mission. Technically, the site leverages TYPO3 CMS, modern JavaScript libraries, and Cloudflare services to ensure performance and security. Security posture is strong with HTTPS enforcement and bot protection, though explicit security policies and incident response contacts are not published. Overall, the foundation demonstrates high business credibility and trustworthiness with transparent contact information and social media integration.

N

Niklas Palmklint

palmklint.se

46

Niklas Palmklint operates a professional photography business based in Stockholm, Sweden, specializing in portrait, product photography, and image bank creation for businesses. The website presents a well-structured portfolio and service offering, targeting businesses and individuals seeking authentic and high-quality photographic content. The digital infrastructure is built on WordPress with modern plugins and SEO tools, hosted by ODERLAND, a Swedish registrar and hosting provider. Security posture is solid with HTTPS enforced and Google reCAPTCHA protecting forms, though some security headers and policies could be improved. Privacy compliance is basic but includes a cookie consent mechanism and a privacy policy page. Overall, the website is professional, trustworthy, and well-maintained, with no signs of malicious activity or content blocking.

Cavalleri Comunicazione is a small Italian communication agency specializing in communication strategies, brand and product communication, public relations, digital PR, international press office, events, fairs, and media planning. The company targets businesses and organizations seeking professional communication services and maintains a consistent and professional online presence. The website is built on WordPress using common frameworks and libraries such as Bootstrap and jQuery, with SEO optimization via Yoast and cookie compliance through Iubenda. The technical infrastructure is modern and mobile-optimized, though some security headers could be improved. The security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but lacks explicit security policies or vulnerability disclosure channels. WHOIS data is missing or privacy protected, which slightly reduces trust but is offset by the professional site and compliance features. Overall, the website is trustworthy and well-maintained, suitable for its business purpose.

N

Nimbus Group GmbH

nimbus-mockup.com

48

Nimbus Group GmbH operates a specialized showroom and manufacturing business focused on innovative LED lighting and acoustic room partitioning systems. The company targets B2B customers seeking advanced lighting solutions and acoustic design products, positioning itself as a niche player with a strong brand presence in Germany. The website serves as a digital showroom and brand portal, linking to related Nimbus and Rossoacoustic brands. Technically, the website uses a modern JavaScript stack including jQuery, Fotorama, and Pikaday, integrated with marketing and analytics tools such as Google Tag Manager and HubSpot. The site is mobile-optimized and well-structured, though no CMS or hosting provider details are evident. Performance is moderate with good SEO and accessibility basics. From a security perspective, the site uses HTTPS but lacks DNSSEC and visible security headers, which are recommended for enhanced protection. Cookie consent is implemented via OneTrust, indicating some GDPR compliance effort, but no privacy policy or terms of service are published. No contact emails or phone numbers are provided, limiting direct communication channels. Overall, the website is professional and trustworthy but could improve compliance and security posture by publishing privacy and security policies, enabling DNSSEC, and adding security headers. These steps would enhance user trust and reduce risk exposure.

T

TECNOLUMEN

tecnoline.de

42

TECNOLINE is a specialized manufacturer and retailer of high-quality fittings, door handles, and switches inspired by renowned designers from Bauhaus and other design eras. The company emphasizes authentic, detail-conscious manufacturing of original designs by famous designers such as Walter Gropius and Wilhelm Wagenfeld. The website positions TECNOLINE as a niche market leader catering to architects, designers, and retailers seeking premium designer hardware. Technically, the website is built on WordPress with modern JavaScript libraries and integrates Google Maps and Matomo analytics, reflecting a moderate level of digital maturity. The site is mobile-optimized with good navigation and professional design. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks explicit security headers and published security policies. Overall, the website is trustworthy and professional, with room for improvement in security documentation and contact transparency.

T

Top-Light GmbH & Co.KG

top-light.shop

46

Top-Light GmbH & Co.KG operates a professional B2B e-commerce platform specializing in high-quality lighting products for indoor and outdoor applications. The company is well-established in Germany, with a strong market position supported by multiple design and quality awards. Their website targets professional dealers and offers a comprehensive catalog of lighting solutions, emphasizing handcrafted production and high standards. Technically, the site uses a mix of established JavaScript libraries and frameworks, delivering a moderate performance with good mobile optimization. Security posture is adequate with HTTPS assumed, but lacks explicit security headers and published security policies. Privacy compliance is mostly met with a comprehensive privacy policy, though cookie consent mechanisms are missing. Overall, the website is professional, trustworthy, and well-aligned with the company's business model and market presence.

P

PLR.Les Libéraux-Radicaux PRR Bienne

prr-bienne.ch

49

The website represents the local branch of the Liberal-Radical Party (PLR) in Bienne, Switzerland, serving as an informational and engagement platform for party members, voters, and the general public interested in local politics. It provides news, event agendas, party vision, elected officials information, and donation options. The site targets residents and politically engaged citizens in the Bern canton region. Technically, the site is built on TYPO3 CMS with modern front-end technologies including Bootstrap and jQuery, ensuring a responsive and user-friendly experience. Cookie consent is implemented with a high privacy standard, and Google Analytics is used with user opt-in. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are lacking. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, suitable for its non-profit political organization context.

P

PLR Jura bernois

plrgrandchasseral.ch

48

PLR Grand Chasseral is a regional political party website serving the Jura bernois area in Switzerland. The site provides political information, event announcements, and community engagement for local residents and voters. It is positioned as a small, regional government entity with a clear focus on local political activities. Technically, the website is built on WordPress using the Divi theme and Yoast SEO plugin, indicating a moderate level of digital maturity with good SEO and mobile optimization. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and formal privacy or terms of service documentation. Overall, the site is safe, professional, and trustworthy but could improve privacy compliance and security best practices.

T

Taberg Media Group

tabergmediagroup.se

44

Taberg Media Group is a well-established Swedish media and communication company founded in 2005, offering a broad range of services including print production, expo solutions, profile products, creative marketing, and digital solutions. The company operates across multiple Swedish cities, positioning itself as a full-service communication partner for businesses seeking integrated marketing and print services. Their website reflects a mature digital presence with professional design, clear service segmentation, and active marketing integrations. Technically, the site is built on WordPress with the Divi theme and leverages modern JavaScript libraries and marketing tools such as HubSpot, Google Tag Manager, and Facebook Pixel. Security posture is generally good with HTTPS enabled and no critical vulnerabilities detected, though some security headers like Content-Security-Policy are missing, and DNSSEC is not enabled. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent mechanism in place, aligned with GDPR requirements. Contact information is primarily via web forms, with no explicit emails or phone numbers visible on the homepage. Overall, the site is trustworthy, professional, and well-suited for its business purpose.

S

Stockholm Waterfront

stockholmwaterfront.com

45

Stockholm Waterfront is a well-established event venue located in central Stockholm, offering flexible spaces for conferences, congresses, corporate events, exhibitions, concerts, and banquets. The venue caters to a diverse audience including event organizers and corporate clients, with capacity for up to 3,000 participants. The website reflects a professional and consistent brand presence with detailed information about services and event spaces. Technically, the site is built on WordPress using Elementor and includes common plugins for SEO and cookie management. The site is mobile-optimized and provides a cookie consent mechanism compliant with GDPR principles, although no explicit privacy policy or terms of service were found in the provided content. Security posture is moderate with HTTPS enforced and domain transfer protection enabled, but lacks DNSSEC and security headers. No contact emails or phone numbers were found in the analyzed content, which limits direct contact transparency. Overall, the domain registration data is consistent and supports the legitimacy of the business.

A

ASB Deutschland e.V.

wuenschewagen.de

43

Der Wünschewagen is a non-profit project operated by ASB Deutschland e.V. that fulfills last wishes of terminally ill people by providing free transportation to their desired locations. Established in 2014, it operates 23 regional vehicles across Germany, supported by nearly 2,000 volunteers and funded exclusively through donations. The website is professionally designed, mobile-optimized, and provides comprehensive information about the project, donation options, volunteer opportunities, and regional contacts. Technically, the site uses Concrete CMS with modern libraries like jQuery, Bootstrap, and Vue.js, and implements cookie consent and third-party content blocking mechanisms. Security posture is good with HTTPS enforced, though some security headers could be improved. No critical vulnerabilities or suspicious indicators were found. Overall, the site demonstrates high trustworthiness and strong alignment between domain registration and business claims.

S

Grands Sites du Gout – Entrez dans l'univers des Grands Sites du Goût

sites-du-gout.ch

40

The website 'swisstastes.ch' presents itself as a platform dedicated to the 'Grands Sites du Goût', likely focusing on Swiss gastronomy and culinary heritage. The site targets a general audience interested in food culture and regional specialties. The technical infrastructure is based on WordPress using the Enfold theme, with integrations such as MapPress for Google Maps and FontAwesome for icons. Google Tag Manager is employed for analytics, indicating some level of user tracking and data collection. However, the site lacks visible privacy and cookie policies, which are critical for GDPR compliance and user trust. Security posture appears weak due to the absence of security headers and explicit security policies. No contact information or forms were detected, limiting user engagement and support options. Overall, the site is functional but requires improvements in privacy, security, and business transparency to enhance trust and compliance.

L

Lac Souterrain de Saint-Leonard

lac-souterrain.com

40

Lac Souterrain de Saint-Leonard operates a tourism website promoting the largest natural navigable underground lake in Europe, located in Switzerland. The site offers guided boat tours, group visits, school visits, private events, and concerts. The business targets tourists and visitors interested in unique natural experiences within the hospitality sector. The website is built on WordPress using Elementor and related plugins, with integrations for booking and chatbot services. The technical infrastructure is modern and moderately performant, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and domain protection flags, but lacks explicit security headers and formal privacy or security policies. No email contacts are publicly listed, but a clear phone contact is provided. The site includes a cookie consent mechanism, indicating some GDPR awareness, though no privacy policy was found. Overall, the website is professional and trustworthy, but could improve privacy compliance and security transparency. Hidden spam links found in the content should be addressed to maintain reputation.

M

MC Handlaren

mchandlaren.se

44

MC Handlaren is a Swedish company specializing in the quick and secure purchase of used motorcycles. Operated by Nilskog Bilgruppen, it leverages over 10 years of experience in the automotive sector to provide free valuations, direct purchase offers, and convenient services such as motorcycle pickup and immediate payment. The website is professionally designed, mobile-optimized, and uses modern web technologies including Nuxt.js and Vue.js, hosted on a CDN for fast performance. Security measures include HTTPS, security headers, and reCAPTCHA on forms, though cookie consent mechanisms and terms of service pages are absent. WHOIS data for the domain www.mchandlaren.se is missing, which slightly reduces trust but the business information and website content appear legitimate and consistent. Overall, the company presents a trustworthy and user-friendly platform for motorcycle sellers in Sweden.

M

Maskrosbarn

maskrosbarn.org

46

Maskrosbarn is a Swedish non-profit organization dedicated to supporting children and youth aged 13-19 who have parents suffering from mental illness, addiction, or who expose them to violence. The organization offers a range of services including chat support, educational materials, activities, and advocacy efforts. It operates regionally in Stockholm, Göteborg, Malmö, and provides nationwide support. The website is well-structured, professionally designed, and targets both youth and adults interested in supporting them. The organization holds recognized certifications such as 90-konto and Tryggt Givande, enhancing its trustworthiness. Technically, the website is built on WordPress with modern technologies including React and jQuery. It uses Yoast SEO for optimization and Cookiebot for cookie consent management. Hosting is provided via Loopiagroup nameservers. The site is mobile-optimized and performs moderately well. Analytics and marketing tools include Google Tag Manager, Snapchat Pixel, and LinkedIn Insight Tag, with moderate user tracking and good privacy compliance. From a security perspective, the site enforces HTTPS with an excellent SSL configuration but lacks DNSSEC and security headers such as Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a clear privacy policy and cookie consent mechanism. However, there is no visible incident response or vulnerability disclosure information. Overall, the website presents a low-risk profile with a strong business credibility and good technical implementation. Recommendations include enabling DNSSEC, adding security headers, publishing incident response contacts, and providing a terms of service page to further enhance trust and security posture.

T

Top Light GmbH & Co.KG

orange-one.de

41

Orange One is a German-based lighting brand operating under the parent company Top Light GmbH & Co.KG. The company specializes in high-quality, innovative lighting solutions primarily targeting B2B customers such as architects, light planners, and retailers. Their product portfolio includes architectural and indoor lighting designed for both private and commercial applications. The website reflects a professional and consistent brand image with clear business contact information and a partner program to support business customers. Technically, the website uses a modern frontend stack including Bootstrap, jQuery, and slick slider for UI elements. It is mobile responsive and provides a good user experience with clear navigation and relevant content. However, no CMS or hosting provider details are explicitly detected. Performance is moderate with room for optimization. From a security perspective, the site uses HTTPS (implied by domain and external links), but no explicit security headers were detected in the provided HTML content. Cookie consent is implemented, supporting GDPR compliance. No incident response or security policy pages were found. The WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, the website presents a trustworthy and professional business presence with moderate technical maturity and basic privacy compliance. Security posture can be improved by implementing recommended HTTP headers and formalizing security policies.

The website for www.tribunalconstitucional.es represents the Spanish Constitutional Court, a key government judicial institution. However, the current accessible content is minimal and appears to be a security or anti-bot challenge page, preventing access to substantive information. The domain WHOIS data is not accessible due to Red.es restrictions, which is typical for official Spanish government domains. The site lacks visible privacy, cookie, or terms of service policies, and no contact information or social media links are present. This limits the ability to fully assess the website's digital maturity and user engagement capabilities. From a technical perspective, the site uses basic JavaScript and minimal HTML content, likely as part of a security verification process. There is no evidence of modern CMS, analytics, or advertising technologies. The security posture is difficult to evaluate fully due to the blocking mechanism, but the presence of a WAF or similar protection is indicated. No security headers or SSL details were available for review. Overall, the website's security posture appears cautious with protective measures in place, but the lack of accessible content and policies reduces transparency and user trust. The domain is likely legitimate and government-owned, but the inability to access full content or WHOIS data limits comprehensive analysis. Strategic recommendations include improving transparency by providing accessible privacy and cookie policies, contact information, and ensuring security headers and HTTPS are properly configured once the security challenge is passed. Given the current blocking, the risk assessment is moderate with no indications of malicious activity but with significant limitations on content and compliance visibility.

D

Daxa Nema

daxanema.com

38

Daxa Nema is a small technology company specializing in cloud-hosted eCommerce solutions, primarily developing Shopify apps under a SaaS model. The company has established a credible market presence since 2016 as a Shopify Partner with over 2,000 active users and a strong app rating. Technically, the website is built on WordPress using the Divi theme, leveraging common plugins for analytics and cookie consent. The site demonstrates moderate performance and basic SEO and accessibility features. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit security policies. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, but lacks visible direct contact emails or phone numbers on the homepage.

Midvox is a German-based company specializing in modern book marketing and social media solutions aimed at promoting printed books. Their services include digital previews ('Blick ins Buch'), flippable covers, social media widgets, and virtual book shelves, targeting publishers and book retailers. The company has established a significant network with over 1,400 publishers and thousands of online and physical retailers, positioning itself as a key player in the German book marketing industry. Technically, the website employs a variety of older JavaScript libraries such as jQuery, MooTools, and Fancybox, indicating some technical debt and potential security risks. The site lacks visible privacy and cookie policies, and no HTTPS enforcement or security headers were detected, which weakens its security posture. Overall, the website is functional with moderate content quality but requires improvements in security and privacy compliance to enhance trust and user safety.

T

TECNOLUMEN GmbH & Co.KG

tecnolumen.de

44

TECNOLUMEN GmbH & Co.KG is a German company specializing in the manufacture and retail of Bauhaus and design classic lighting, fittings, and design objects. The company targets design enthusiasts, retailers, and businesses with a focus on high-quality, timeless design products. Their market position is that of a niche leader in Bauhaus lighting and design classics, supported by a dealer network and an online shop. The website reflects a mature digital presence with WordPress CMS, SEO optimization via Yoast, and privacy-conscious analytics using Matomo. The technical infrastructure is solid, hosted via kunde24.de, and includes modern web technologies such as jQuery and Bootstrap. Security posture is good with HTTPS enforced and secure data collection forms, though some security headers and explicit security policies are missing. Privacy compliance is strong with GDPR-aligned policies and cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-structured, supporting the company’s business credibility and customer engagement.

T

Top Light GmbH & Co.KG

top-light.de

43

Top Light GmbH & Co.KG is a well-established German manufacturer and retailer specializing in premium bathroom lighting and illuminated mirrors. The company holds a strong market position as a leader in its niche, supported by multiple industry awards and a professional online presence. Their business model includes both B2B and B2C channels, with a dedicated online shop and comprehensive customer support. The website reflects a mature digital infrastructure utilizing modern web technologies and integrates Google Analytics for performance insights. Privacy and cookie policies are present and indicate GDPR compliance, enhancing user trust. Security posture is adequate but could benefit from explicit security headers and incident response information. Overall, the domain registration data aligns well with the business identity, supporting legitimacy and trustworthiness.

I

IP44 Schmalhorst GmbH & Co KG

ip44.de

47

IP44 Schmalhorst GmbH & Co KG operates the website ip44.de, offering a comprehensive portfolio of outdoor lighting products including wall, ceiling, portable, movable, ground, and solar lighting solutions. The company emphasizes sustainability and design, targeting architects, designers, retailers, and end customers. The website is professionally designed, multilingual, and provides extensive product information, catalogs, and service options such as repair and storefinder. Technically, the site is built on Drupal CMS with modern JavaScript libraries, video integration, and cookie consent mechanisms, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and privacy compliance evident through GDPR-aligned policies and cookie consent. No critical vulnerabilities or suspicious content were detected, and the WHOIS data aligns with a legitimate business entity. Overall, the site demonstrates a mature digital presence with strong business credibility and user experience.

The domain holtkoetter.com is currently a parked domain with no active website content beyond a Sedo parking iframe and advertising scripts. The website lacks any business-related information, contact details, or policies, indicating it is not currently used for an operational business. The domain is registered with Network Solutions, LLC since 1998, which suggests it has been held for a long time but is not actively developed or maintained as a business site. Technically, the site uses basic HTML and JavaScript to display the parking page and ads, with no modern frameworks or CMS detected. Security posture is weak due to lack of HTTPS enforcement, absence of security headers, and no privacy or cookie policies. There are no forms or data collection mechanisms, and no analytics services are detected beyond advertising scripts. Overall, the site presents a low trust profile and minimal business credibility.

A

Artimeta BV

artimeta.nl

36

Artimeta BV is a Netherlands-based B2B company specializing in the distribution of design lighting products. Their clientele includes light, design, and furniture stores as well as project designers in sectors such as yachting and hotel interiors. The company has an established online presence with a domain registered since 1998, reflecting a mature business. The website showcases a curated collection of lighting products from various brands, targeting professional partners rather than end consumers. Technically, the website is built on WordPress using the Astra theme and Elementor page builder, indicating a modern and flexible infrastructure. The site is mobile optimized and provides a good user experience with clear navigation and professional design. However, some technical improvements are recommended, including enabling DNSSEC, adding security headers, and properly configuring analytics tools. From a security perspective, the site uses HTTPS but lacks advanced security headers and DNSSEC, which are important for enhancing protection against common web threats. The absence of a cookie consent mechanism and incomplete privacy compliance features indicate potential regulatory gaps, especially under GDPR. No incident response or security policy information is publicly available, which could be improved to enhance trust. Overall, Artimeta presents as a credible and professional business with a solid market position in the lighting distribution sector. Strategic improvements in security and privacy compliance would strengthen their digital maturity and reduce potential risks.

The Fachverband Raumbegrünung und Hydrokultur im Zentralverband Gartenbau (ZVG) e.V. is a small German industry association focused on promoting indoor greening and hydroponics to improve human wellbeing in indoor environments. The website serves as an informational platform offering educational content, quality certifications, and industry networking opportunities. It targets professionals and enthusiasts in the indoor plant cultivation sector. Technically, the site is built on the Contao CMS platform and uses common JavaScript libraries for UI enhancements. While the site is functional and well-structured with good content relevance and navigation, it lacks advanced SEO optimization and mobile responsiveness is basic. Security posture is moderate with HTTPS enabled but missing important security headers and no cookie consent mechanism, which impacts GDPR compliance. No explicit contact emails or phone numbers are present on the homepage, but a contact form and privacy policy page exist. Overall, the site is trustworthy but could improve in security and privacy compliance to better serve its audience and meet regulatory requirements.

FDP Frauen Stadt Bern is a small, non-profit political association of women based in Bern, Switzerland, with a long history dating back to 1935. The organization focuses on political advocacy and engagement for women in the local community. The website is built on WordPress using Elementor and Yoast SEO, providing a modern and moderately optimized digital presence. The site is well-structured with good navigation and mobile optimization but lacks comprehensive privacy and cookie policies. Security posture is adequate with HTTPS enabled but missing important security headers and incident response information. Contact information is limited to an email address and Facebook social media link, with no phone or physical address provided. Overall, the website is professional and trustworthy but could improve in privacy compliance and security best practices.

F

FDP.Die Liberalen Kanton Bern

bernwaehlt.ch

43

FDP.Die Liberalen Kanton Bern is a regional political organization representing liberal interests in the Canton of Bern, Switzerland. The website serves as an information hub for voters, providing details about the party's liberal compass, electoral districts, and candidates. It targets residents and voters in the region interested in liberal political representation. The business model is non-profit and focused on political engagement and information dissemination. Technically, the website is built on WordPress using the Elementor page builder, leveraging common web technologies such as jQuery and PHP. The site is moderately optimized for performance and mobile devices, with good SEO practices and basic accessibility features. Hosting details are not explicitly identified. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is addressed with a privacy and cookie policy that includes consent mechanisms, aligning with GDPR requirements. Contact information is clearly provided, enhancing business credibility. Overall, the website presents a professional and trustworthy front for the political party, with moderate technical sophistication and a solid security posture. Recommendations include implementing security headers, adding a vulnerability disclosure policy, and enhancing accessibility and incident response information to further strengthen trust and compliance.

F

Friedrich Reinhardt Verlag

reinhardt.ch

43

Friedrich Reinhardt Verlag is a regional Swiss publishing company specializing in books, periodicals, and eBooks focused on Basel and its surroundings. The website serves as an e-commerce platform for their products, showcasing a well-structured catalog with clear navigation and professional design. The company maintains a credible online presence with verified contact information and social media channels. Technically, the site is built on the PrestaShop platform, leveraging modern JavaScript libraries and responsive design to provide a good user experience across devices. Security posture is adequate with HTTPS enforced and CSRF tokens in forms, though some security headers are not visibly implemented. Privacy compliance is basic with cookie consent mechanisms and a terms of service page, but no dedicated privacy or security policies are published. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the website is trustworthy, professional, and suitable for its target audience.

B

Blumen Au Bouquet AG

aubouquet.ch

36

Blumen Au Bouquet AG is a well-established family-run florist business based in Basel, Switzerland, operating since 1953. The company offers a wide range of floristry services including flower subscriptions, orchids, cacti, succulents, green plants, creative workshops, and event floristry, supported by an online shop. Their market position is strong locally, recognized as a leading address for elevated floristry in Basel. The website reflects a professional retail business model targeting general consumers interested in quality floral products and services. Technically, the website is built on the Contao Open Source CMS platform and uses jQuery for interactive elements. The site is mobile optimized with good SEO practices and clear navigation, though performance is moderate. The absence of advanced security headers and cookie consent mechanisms indicates room for improvement in security and privacy compliance. The site uses HTTPS with a good SSL configuration, and forms are secured via POST methods. From a security perspective, the website demonstrates a solid baseline with HTTPS and secure form handling but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent banner. Business credibility is high, supported by consistent WHOIS data, clear contact information, and a professional online presence. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced security headers, explicit cookie consent, and published security policies to improve compliance and user trust.

E

Ecom20

veikaliem.lv

34

VEIKALIEM.LV is a Latvian e-commerce platform primarily serving as a supplier login portal for retail businesses. The platform facilitates supplier account management and product listings, targeting B2B customers within the regional market. The website is basic in design and content, focusing on functionality over marketing or public information. Technically, it uses a custom UI framework named Elephant, Google Fonts, and PHP backend scripts, but lacks modern CMS or advanced platform integrations. Security posture is minimal with no visible HTTPS enforcement or security headers, and no privacy or cookie policies are present. Contact information is clearly provided, indicating some level of business credibility. Overall, the site is functional but requires significant improvements in security, privacy compliance, and content richness to enhance trust and professionalism.

The website e-latts.lv operates as an online grocery retail platform serving primarily Latvian consumers. It offers a wide range of food and household products with a focus on convenience through online ordering and delivery services. The business is represented by Latvijas tirgotaju savieniba, SIA, a Latvian legal entity, indicating a legitimate commercial presence in the local market. The website's content is rich with product listings, promotions, and categories tailored to grocery shopping needs. From a technical perspective, the site employs common web technologies including Bootstrap, jQuery, FontAwesome, and Owl Carousel for UI components and animations. It integrates Google Tag Manager, Google Analytics, and Facebook Pixel for marketing and analytics purposes. The site appears moderately optimized for performance and mobile usage, though accessibility features are basic. No CMS or hosting provider details were identified. Security posture shows room for improvement. While HTTPS is presumably enabled (not explicitly confirmed), no security headers were detected in the provided data, and no explicit privacy or cookie policies are visible. The WHOIS data is incomplete but consistent with the business entity and location. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the site presents a professional and functional e-commerce platform with moderate technical maturity and business credibility. Enhancements in security headers, privacy compliance, and transparency would strengthen trust and compliance posture.

D

Daxa Nema

modules4u.biz

44

Daxa Nema is a small eCommerce technology company specializing in cloud-hosted SaaS solutions for Shopify merchants. Their business model focuses on providing easy-to-use Shopify apps that require no installation or maintenance, allowing merchants to focus on their core business. The company has established itself as a Shopify partner since 2016, serving over 2,000 active users with a strong app rating. Technically, the website is built on WordPress using the Divi theme, with standard plugins for analytics and cookie compliance. While the site is functional and professionally designed, there is room for improvement in SEO, accessibility, and security headers. Security posture is adequate with HTTPS and cookie consent but lacks DNSSEC and advanced security headers. Overall, the site is safe, trustworthy, and compliant with GDPR, though it lacks explicit incident response and vulnerability disclosure policies.

The website at fdp-plr.ch currently serves only a 404 error page indicating that the requested content is not available or does not exist. There is no accessible business information, contact details, or policy documentation on the site. The site is built on the TYPO3 CMS platform as evidenced by the error page branding. Due to the lack of content, the website's market position, business model, and services cannot be determined. Technically, the site shows minimal implementation with no visible security headers or analytics, and no evidence of HTTPS from the provided data. The security posture is weak due to lack of visible security best practices and absence of privacy or cookie policies. Overall, the site is not currently functional for end users or business purposes, resulting in a low trust and credibility score.

The website observatoriodemedios.org is currently inaccessible, returning a 403 Forbidden error page. This prevents access to any meaningful content or business information. The domain is registered with Nominalia Internet SL since December 2022 and is hosted on SiteGround servers. Due to the lack of accessible content, no privacy, cookie, or terms of service policies are found, nor any contact or security-related information. The technical infrastructure cannot be fully assessed, but the absence of security headers and SSL details is concerning. Overall, the website's security posture is weak, and the business credibility cannot be established from the available data.

R

Revista Haz

hazrevista.org

46

Revista Haz is a Spanish-language media outlet specializing in news, analysis, and opinion on transparency, sustainability, social innovation, and corporate social responsibility. It positions itself as a leader in these sectors with a focus on providing independent and relevant content to professionals and the general public interested in these topics. The website operates on a WordPress platform with a moderate technical infrastructure supported by common plugins and third-party services for advertising, analytics, and GDPR compliance. Hosting is provided by Acens Technologies, a reputable provider. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though improvements such as enabling DNSSEC and adding security headers are recommended. The domain registration is transparent and consistent with the business profile, enhancing trustworthiness. Overall, the site demonstrates good digital maturity and compliance with privacy regulations, supporting its credibility as a professional media source.