High-risk security reports

P

PLR.Les Libéraux-Radicaux Neuchâtel

plrn.ch

49

PLR.Les Libéraux-Radicaux Neuchâtel is a regional political party in Switzerland serving the Neuchâtel canton. The website provides comprehensive political news, campaign information, organizational details, and engagement opportunities for members and the public. It targets local voters and party affiliates with a focus on liberal-radical political values. Technically, the site is built on TYPO3 CMS with modern web technologies including jQuery, Bootstrap, and social media integrations. It features a cookie consent mechanism compliant with GDPR and uses HTTPS for secure communications. Security posture is solid with no critical vulnerabilities detected, though improvements in security headers and published policies could enhance trust. Overall, the site is professional, trustworthy, and well-structured, supporting the party's mission and outreach effectively.

P

PLR.Les Libéraux-Radicaux Jura

plrj.ch

48

PLR.Les Libéraux-Radicaux Jura is a regional political party website serving the Jura canton in Switzerland. It provides comprehensive information about the party's news, events, election candidates, and engagement opportunities such as membership and donations. The site targets local residents and voters interested in the party's activities and political agenda. The business model is non-profit and focused on political communication and community engagement. The website is well-branded, consistent, and maintains a professional presence with active social media integration. Technically, the website is built on TYPO3 CMS with modern frontend technologies including Bootstrap and jQuery. It uses Google Analytics for visitor tracking and complies with GDPR through a cookie consent mechanism powered by tarteaucitron. The site is mobile-optimized and has good SEO and accessibility basics, though some improvements could be made in accessibility and security headers. From a security perspective, the site enforces HTTPS and uses secure forms. No critical vulnerabilities or exposed sensitive data were detected. However, it lacks published security policies or incident response contacts, and security headers could be improved. Privacy compliance is strong with clear cookie consent and a privacy policy page. Overall, the website presents a low-risk profile with good business credibility and technical maturity. Strategic recommendations include enhancing security headers, publishing security and incident response policies, adding terms of service, and improving accessibility features to further strengthen trust and compliance.

P

PLR.Les Libéraux-Radicaux Genève

plr-ge.ch

49

PLR.Les Libéraux-Radicaux Genève is the leading political party in the canton of Geneva, Switzerland, representing liberal values and affiliated nationally with the Parti Libéral-Radical suisse. Founded in 2011 through a merger, the party provides political representation, news, events, and membership services targeting politically engaged residents of Geneva. The website serves as an information hub with a professional design, clear navigation, and integration of donation payment processing via Payrexx. Technically, the site is built on TYPO3 CMS with modern libraries and frameworks, offering good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. Privacy compliance is evident through a privacy policy and cookie management, but terms of service and incident response policies are absent. Overall, the domain registration and WHOIS data align well with the party's identity, supporting legitimacy and trustworthiness.

F

FDP.Die Liberalen Basel-Stadt

fdp-bs.ch

49

FDP.Die Liberalen Basel-Stadt is a regional political party operating in the Basel-Stadt canton of Switzerland. The website serves as an information portal for party values, news, events, and membership engagement. It targets local residents and voters interested in liberal political activities. The organization maintains a consistent brand presence and provides clear contact details and social media links. Technically, the site is built on TYPO3 CMS with modern web technologies and includes a GDPR-compliant cookie consent mechanism. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers could be improved. Overall, the site is professional, trustworthy, and well-optimized for mobile and SEO.

P

PLR. Les Libéraux-Radicaux

initiative-resiliation-non.ch

49

The website initiative-resiliation-non.ch is a political campaign platform run by PLR. Les Libéraux-Radicaux opposing the UDC's initiative to terminate bilateral agreements with the EU. It provides detailed information about the initiative's risks, encourages public engagement through newsletter subscriptions, committee joining, testimonial submissions, and donations. The site targets Swiss voters and political supporters, emphasizing the economic and security consequences of the initiative. Technically, it is built on WordPress with modern JavaScript libraries and includes spam protection via Google reCAPTCHA. Social media integration and donation processing via Payrexx enhance user engagement. Security posture is adequate with HTTPS and form protections but lacks explicit security headers and a cookie consent mechanism. The domain registration aligns well with the website's political nature and Swiss location, indicating legitimacy.

C

Clair et Net.

clair-et-net.com

45

Clair et Net. is a Paris-based independent digital agency established since 1998, specializing in digital transformation, website and mobile application development, and AI project consulting. The company targets businesses and organizations seeking to modernize and leverage digital technologies. Their market position is that of a specialized boutique agency with a strong focus on human-to-human digital intelligence and innovation. Technically, the website is built on WordPress with modern SEO practices, uses Google Analytics and Matomo for analytics, and integrates Google Fonts and Font Awesome for design. The site is mobile optimized and presents a professional user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS but lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. The WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency, although the website content and business information appear legitimate. Overall, the website scores well on content quality and business credibility but needs enhancements in privacy compliance and security posture.

The website at avads.net currently presents only minimal HTML content with no visible text, metadata, or interactive elements. The domain is registered with GoDaddy.com, LLC since 2016 and is not privacy protected, indicating transparency in registration. However, the lack of website content, contact information, and security features such as HTTPS significantly limits the ability to assess the business or its digital maturity. The absence of privacy and cookie policies also indicates non-compliance with common data protection regulations. Security posture is weak due to missing SSL and security headers, increasing risk exposure. Overall, the site appears inactive or under development, resulting in a low trust and credibility score.

The website www.collettiva.it is currently inaccessible due to a 403 Forbidden error generated by Amazon CloudFront, indicating that the request is blocked either due to traffic volume or configuration issues. As a result, no business content, metadata, or technical details are available for analysis. The lack of accessible content prevents evaluation of the company's business model, services, or market position. Technically, the site is hosted behind CloudFront, but no further infrastructure or technology stack details can be determined. Security posture cannot be assessed due to absence of accessible content and headers. Overall, the site is effectively blocked from public access, limiting any meaningful security, compliance, or business analysis.

A

Altreconomia

altreconomia.it

45

Altreconomia is an independent Italian media outlet focusing on economy, lifestyles, environment, and culture. The website provides news and analysis targeted at Italian-speaking audiences interested in these topics. The business operates primarily as a media and publishing entity with a small organizational size and a founding date around 2000. Technically, the site is built on WordPress and uses common web technologies and analytics tools such as Matomo and Google Tag Manager. The site is moderately optimized for performance and mobile devices but lacks advanced accessibility features. Security posture is basic with HTTPS enabled but no advanced security headers or DNSSEC. A critical concern is the domain's expired status, which poses risks to availability and trust. Privacy compliance is weak, with no visible privacy or cookie policies and no GDPR indicators. Contact information and incident response details are absent, limiting user trust and compliance. Overall, the site is functional and professional but requires urgent attention to domain renewal and privacy compliance to improve security and credibility.

D

D & T Immobilien GmbH & Co. KG

dt-immobilien.de

49

D & T Immobilien GmbH & Co. KG is a small, established real estate company based in Göttingen, Germany, with over 25 years of experience in property sales, rental, and management. The company targets property owners and prospective buyers and renters in the Göttingen region, offering comprehensive real estate services including valuation, marketing, contract preparation, and property management. The website reflects a professional and trustworthy business with clear contact channels and customer testimonials enhancing credibility. Technically, the site is built on WordPress using modern plugins such as Yoast SEO and Borlabs Cookie for privacy compliance, with good mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, and the domain WHOIS data aligns well with the business claims, indicating legitimacy. Overall, the website presents a secure, compliant, and professional digital presence suitable for its business sector.

Frölich Reisen is a German travel agency specializing in a variety of travel services including bus tours, flights, cruises, and premium travel packages. The website targets German-speaking travelers seeking well-organized and comfortable travel experiences. The company appears to be a medium-sized regional player in the transportation sector with a diversified portfolio of travel offerings. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site is hosted by webgo.de and uses HTTPS with good SSL configuration. Security posture is solid with HTTPS and cookie consent implemented, but lacks advanced security headers and explicit privacy or terms of service pages. No contact emails or phone numbers are explicitly found, which may affect user trust and compliance. Overall, the website is professional and well-branded with good SEO and mobile optimization but could improve privacy compliance and security practices.

V

Vitos Kurhessen

vitos-kurhessen.de

42

Vitos Kurhessen is a prominent healthcare provider specializing in psychiatric and psychosomatic care for children, adolescents, and adults across nine locations in Northern Hesse, Germany. The organization operates under the umbrella of Vitos Holding, a large healthcare group with multiple subsidiaries. The website reflects a mature digital presence built on TYPO3 CMS, featuring comprehensive service descriptions, clear navigation, and compliance with GDPR and cookie regulations. The use of Matomo analytics and Usercentrics consent management demonstrates a privacy-conscious approach. Security measures such as HTTPS and security headers are properly implemented, contributing to a strong security posture. However, explicit incident response contacts and vulnerability disclosure mechanisms are not evident, representing areas for improvement.

The website yrkesstadarna.se currently presents a security challenge page that blocks direct access to its content, indicating the presence of a Web Application Firewall or similar security mechanism. The domain is very recently registered in June 2024 with Forss.se as the registrar and hosting provider, showing consistency but limited historical data. The site appears to be built on outdated CMS platforms Joomla 1.5 and WordPress 2.5, which are known to have security vulnerabilities. No meaningful business content, contact information, or compliance policies are accessible due to the blocking mechanism. The security posture is weak with no visible HTTPS or security headers, and no privacy or cookie policies are present, indicating poor compliance with modern standards.

K

kruvebo

kruvebo.se

48

Kruvebo Konsulting, led by Oskar Sardi, is a specialized consulting firm focused on media and technology sectors, offering services in advisory, M&A, business development, and board assignments. The company demonstrates a strong market position within its niche, supported by a professional and content-rich website. Technically, the site is built on modern frameworks such as Nuxt.js and Vue.js, hosted via Brucy.io CDN, ensuring fast performance and excellent mobile optimization. Security posture is generally good with HTTPS enforced, but lacks some security headers and formal policies, which could be improved. The absence of WHOIS data for the domain raises legitimacy concerns, though the website content and business information mitigate some risk. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security transparency.

N

NewsMachine AB

newsmachine.com

40

NewsMachine AB is a Swedish technology company specializing in AI-powered tools for public relations professionals. Their website presents a professional and modern interface built on WordPress with the Divi theme, targeting businesses and PR professionals seeking to enhance and measure their PR efforts using AI technology. The company appears to have been founded around 2021 and maintains an active digital presence with social media integration. Technically, the site employs common analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, and Google reCAPTCHA to enhance user experience and security. However, the absence of explicit privacy and cookie policies and missing WHOIS data for the subdomain reduce the overall trust and compliance posture. Security measures like HTTPS are assumed but not fully verifiable from the data, and no advanced security headers were detected. Overall, the website is functional and professional but would benefit from enhanced transparency and security practices.

G

Guldägget

guldagget.se

40

Guldägget is a well-established Swedish creative communication competition, recognized as the largest and oldest in its sector. The website serves as a platform to showcase winners, provide competition information, and engage the creative community in Sweden. The business model revolves around promoting creativity through awards, supported by sponsors and partners. Technically, the site is built on WordPress with a custom theme, hosted by Loopia AB, and demonstrates moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled but lacks advanced security headers and DNSSEC, indicating room for improvement. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or terms of service. Overall, the site is professional and trustworthy but could enhance security and compliance to better protect users and data.

S

StockholmMediaWeek

stockholmmediaweek.com

43

StockholmMediaWeek is a prominent Swedish media industry event organized by Sveriges Mediebyråer, serving as a key forum for marketing communication and media professionals. The event features seminars, awards (StockholmMediaAward), and networking opportunities, positioning itself as a major industry gathering in Sweden. The website reflects a professional and consistent brand presence with strong partner and sponsor associations. Technically, the site is built on WordPress with modern JavaScript libraries, offering good mobile optimization and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though the absence of security headers and a privacy policy page are notable gaps. The WHOIS data is missing or unavailable, which raises concerns about domain transparency despite the professional appearance and partner credibility. Overall, the site is trustworthy but would benefit from enhanced transparency and security documentation.

EXPERTsuisse is a well-established Swiss professional association specializing in auditing, taxation, and fiduciary services, celebrating its 100-year anniversary in 2025. The organization positions itself as a trusted expert body providing knowledge, industry insights, and events to professionals and companies in the Swiss finance sector. The website reflects this with rich content including expert Q&A, event information, and historical milestones. Technically, the site is built on the Contao CMS, uses modern web technologies including Lottie animations, and integrates Google Tag Manager for analytics. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit security policies are absent. Contact information is complete and transparent, enhancing trust. Overall, the site is professional, credible, and well-maintained.

J

Jaguar Land Rover Global Diplomatic Sales

jaguarlandroverdiplomatic.com

48

Jaguar Land Rover Global Diplomatic Sales operates a specialized website offering diplomatic vehicle solutions, focusing on Range Rover, Defender, and Discovery models. The business targets diplomatic and government clients, providing comprehensive logistics and ownership services tailored to this niche. The website reflects a medium-sized enterprise with consistent branding and a professional online presence, although explicit contact details are not readily available. Technically, the website employs modern JavaScript libraries and frameworks such as Bootstrap, Splide.js, and LiveChat, indicating a moderate level of digital maturity. The site is mobile-optimized and structured for good user experience, though accessibility features could be improved. Performance is moderate with no critical technical issues detected. From a security perspective, the site uses HTTPS and integrates third-party marketing and chat tools. However, the absence of security headers and cookie consent mechanisms, along with missing WHOIS registration data, lowers the overall security posture. No explicit security policies or incident response contacts are published, which could be a compliance gap. Overall, the website presents a professional front for a niche diplomatic vehicle sales business but suffers from legitimacy concerns due to missing domain registration data and limited contact transparency. Strategic improvements in security, privacy compliance, and domain registration clarity are recommended to enhance trust and reduce risk.

The website infojaguarlandrover.com is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. This prevents any detailed analysis of the business, services, or compliance posture. The domain is registered since 2012 with Interdominios, Inc., but no registrant details or business information are publicly available. The lack of accessible content and absence of privacy, cookie, or terms policies indicate the site is either inactive, restricted, or improperly configured. Technically, no scripts, analytics, or security headers are detectable, and no HTTPS status is provided, suggesting poor security posture. Overall, the site presents a high risk due to lack of transparency and accessibility.

M

Marcia per la pace

perugiassisi.org

45

The website www.perugiassisi.org represents a well-established non-profit organization dedicated to promoting peace and fraternity through the historic Marcia PerugiAssisi. The organization targets a broad audience including individuals, schools, groups, and local entities interested in social activism and peace initiatives. The site offers donation options, event information, and engagement opportunities, reflecting a mature digital presence. Technically, the site is built on WordPress with Elementor and several plugins, providing a modern and responsive user experience with good SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though some security headers and vulnerability disclosure policies could be improved. Overall, the domain WHOIS data is unavailable, likely due to privacy protection, which is justified for this type of organization. The website is trustworthy, professional, and safe for general audiences.

C

Comité de la Charte du Don en confiance

donenconfiance.org

49

Don en Confiance is a French non-profit organization dedicated to promoting ethics, recognition, and continuous oversight of organizations soliciting donations. It operates a trust label that certifies and monitors 99 organizations, providing donors with assurance about the legitimacy and transparency of charitable entities. The website is professionally designed, well-branded, and targets donors, charitable organizations, and journalists. It leverages modern web technologies including jQuery, Google Analytics, and reCAPTCHA to provide a secure and user-friendly experience. However, the absence of a publicly accessible privacy policy and WHOIS data limits full trust assessment. Security posture is moderate with HTTPS and reCAPTCHA implemented but lacks security headers and incident response information. Overall, the site is trustworthy and serves an important role in the French non-profit sector, but improvements in privacy transparency and security best practices are recommended.

L

La Cimade

migrantscene.org

43

Festival Migrantscene is a cultural and social awareness festival organized by the non-profit organization La Cimade, focusing on migration themes through artistic and community events across France. The website serves as an information hub for the festival, providing event details, regional activities, and multimedia resources. The technical infrastructure is based on WordPress CMS with modern JavaScript libraries and analytics tools such as Matomo and Google Tag Manager, indicating a moderate level of digital maturity. The site is well-structured, mobile-optimized, and uses HTTPS, but lacks some advanced security headers and explicit incident response information. Privacy compliance is addressed with cookie consent mechanisms and a privacy policy in French, consistent with GDPR requirements. Overall, the website is professional and trustworthy, though the absence of WHOIS data limits domain trust assessment.

L

L'œil de la Maison des journalistes

oeil-maisondesjournalistes.fr

37

L'œil de la Maison des journalistes is a French media platform dedicated to promoting freedom of information and press freedom. It provides news, analysis, and opinion pieces focused on journalism, human rights, and geopolitical issues. The website targets journalists, media professionals, and advocates interested in press freedom, primarily in the French-speaking community. Affiliated with the Maison des journalistes association, it operates as a non-profit entity with a niche focus in the media sector. Technically, the website is built on WordPress, leveraging common plugins such as Yoast SEO, Contact Form 7, and Cookie Law Info to enhance SEO, user interaction, and compliance. The site uses HTTPS and includes a cookie consent mechanism, reflecting a moderate level of digital maturity and privacy compliance. Performance and mobile optimization are good, though some improvements in accessibility and security headers could be made. From a security perspective, the site enforces HTTPS and has no visible vulnerabilities or exposed sensitive data. However, it lacks advanced security headers and explicit security policies or incident response information. The absence of WHOIS data limits domain trust analysis, but the professional presentation, consistent branding, and affiliation with a known organization support its legitimacy. Overall, the website presents a trustworthy and professional platform for its audience, with room for improvement in security best practices and transparency. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining up-to-date software to mitigate risks.

P

proste.NGO

proste.ngo

43

proste.NGO is a Polish non-profit organization dedicated to simplifying the formal and legal conditions for Polish non-governmental organizations. The website serves as an advocacy and informational platform targeting NGOs and social activists in Poland. The business model is focused on non-profit advocacy and support, with a clear niche in the Polish NGO sector. The website is built on WordPress using modern plugins such as Yoast SEO and W3 Total Cache, indicating a moderate level of digital maturity. The design is professional and mobile-optimized, with good SEO practices implemented. Security posture is moderate; HTTPS is used, but security headers and explicit privacy policies are missing, representing areas for improvement. No WAF or blocking mechanisms were detected, and the domain registration data aligns well with the website's claims, supporting legitimacy. Overall, the site is functional and credible but would benefit from enhanced privacy compliance and security hardening.

The website assetroma.it is currently non-functional, displaying a server-side error indicating the PHP mysqli extension required by WordPress is missing. This prevents access to any meaningful content or business information. The domain is long-registered since 2001 with DNSSEC enabled, suggesting legitimacy at the domain registration level, but the lack of accessible content severely limits business and security analysis. The site uses WordPress CMS but is misconfigured or improperly maintained, resulting in poor technical and content quality. No privacy, cookie, or terms of service policies are present, and no contact information or social media links are available. Security posture is weak due to missing critical PHP extensions and lack of security headers or HTTPS confirmation. Overall, the site is currently inaccessible and presents a high risk for users and visitors.

Α

ΑΜΚΕ ΙΑΣΙΣ

iasismed.eu

47

The website www.iasismed.eu represents ΑΜΚΕ ΙΑΣΙΣ, a small non-profit organization founded in 2005 in Greece, focused on providing psychosocial rehabilitation and counseling services to individuals in need. The organization emphasizes therapeutic and community support services, including food provision and training sessions. The website content is primarily in Greek with English language support, reflecting a localized target audience. Technically, the site is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Google Analytics, and Google Tag Manager, indicating a moderate level of digital maturity. Security-wise, the site uses HTTPS and includes a cookie consent mechanism, but lacks visible security headers and formal privacy or terms of service documents, which are areas for improvement. Overall, the site is accessible without WAF or blocking, and the domain WHOIS data is privacy protected as per EURid policies, which is typical for European domains. The absence of direct contact information and formal policies slightly reduces trust but does not critically impair the site's credibility.

L

Leading Swiss Agencies

leadingswissagencies.ch

49

Leading Swiss Agencies is a website focused on showcasing or listing Swiss agencies, targeting businesses or individuals seeking agency services within Switzerland. The site is built on WordPress using the Elementor page builder, indicating a modern but standard CMS infrastructure. The technical setup includes common JavaScript libraries and Google Tag Manager for analytics. However, the site lacks visible privacy and cookie policies, contact information, and security headers, which are important for compliance and trust. The security posture is basic with room for improvement in headers and data protection disclosures. Overall, the website is accessible and functional but would benefit from enhanced privacy compliance and security best practices to improve trust and user confidence.

F

Fondation des hôtels Sandoz

sandoz-hotels.ch

49

Fondation des hôtels Sandoz operates a portfolio of luxury hotels in Switzerland, targeting affluent travelers and hospitality professionals. The website serves as a digital presence showcasing their hotel brands and career opportunities. The business is positioned as a reputable luxury hospitality group with a consistent brand image and professional presentation. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and frameworks, delivering a good user experience with mobile optimization and cookie consent mechanisms. Security posture is adequate with HTTPS and cookie consent, but lacks visible security headers and published privacy or terms policies. Contact information is present but only in commented-out HTML, reducing accessibility. Overall, the domain registration aligns well with the business claims, indicating legitimacy. The site is safe with no adult or questionable content.

The website www.yverdon-les-bains.ch is the official digital portal for the municipal government of Yverdon-les-Bains, Switzerland. It provides comprehensive information and services related to administrative procedures, urban development, social cohesion, cultural events, sports, sustainability, and economic promotion. The site targets residents, visitors, entrepreneurs, and community members, positioning itself as a central hub for local governance and community engagement. The business model is public sector focused, delivering essential municipal services and information. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries such as jQuery, Bootstrap, Slick Slider, and AOS for animations. It integrates Matomo for analytics and uses tarteaucitron.js for cookie consent management, indicating a mature digital infrastructure. The site is mobile-optimized and exhibits good SEO and accessibility practices, although some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA on forms to mitigate spam. However, it lacks visible security headers like CSP or HSTS, and no explicit security or incident response policies are published. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data confirms the domain's legitimacy, registered to a Swiss municipal entity consistent with the website's claims. Overall, the website demonstrates a high level of professionalism, trustworthiness, and content quality suitable for a government portal. Strategic improvements include publishing comprehensive privacy and security policies, implementing security headers, and enhancing accessibility compliance to further strengthen the site's security posture and user trust.

C

Centre Patronal

centrepatronal.ch

49

Centre Patronal is a Swiss-based organization serving businesses and entrepreneurs primarily in the social insurance and legal advisory sectors. It offers a comprehensive range of services including social insurance management (AVS/AI), pension fund administration (FIP - 2nd pillar), family allowances, legal services, business creation and transmission support, professional training, and networking events. The organization positions itself as a reliable and recognized partner for companies and independent professionals in Switzerland, with a strong regional presence and a focus on supporting economic development. Technically, the website is built on WordPress using modern frameworks such as Bootstrap and integrates SEO and analytics tools like Yoast SEO and Google Tag Manager. The site is mobile-optimized, accessible, and employs security best practices including HTTPS and security headers. Cookie consent mechanisms are implemented, though explicit privacy and terms of service pages are not prominently found. From a security perspective, the site demonstrates a solid posture with no detected vulnerabilities or exposed sensitive data. However, it lacks visible incident response or vulnerability disclosure information, which could be improved to enhance trust and compliance. The WHOIS data aligns well with the website's claims, indicating a legitimate and consistent domain registration. Overall, Centre Patronal's website reflects a professional, trustworthy, and well-maintained digital presence suitable for its target audience. Strategic improvements in privacy policy visibility and security incident transparency would further strengthen its compliance and user trust.

The website at bracketweb.com is currently minimalistic with an empty HTML body and no visible content, metadata, or interactive elements. The domain is relatively new, registered in September 2022, and hosted on exonhost.com name servers. There is no evidence of privacy policies, cookie consent mechanisms, terms of service, or contact information, which limits the ability to assess business credibility or compliance. Technically, the site lacks security headers and DNSSEC is not enabled, indicating basic security posture. The SSL configuration is assumed basic due to lack of data. Overall, the site appears to be either under development or inactive, with very limited digital maturity and no visible security or privacy compliance measures.

E

eStation.cz

estation.cz

36

eStation.cz is a Czech Republic based small technology service provider specializing in web design, e-commerce solutions, programming, graphic design, PPC advertising, and SEO services. With over 11 years of experience and more than 250 projects completed, they have established a solid market position serving businesses seeking professional online presence and marketing. The website is built on WordPress with a modern tech stack including Yoast SEO, Google reCAPTCHA, and GDPR-compliant cookie consent mechanisms. The site is well-structured, mobile-optimized, and provides clear contact information and client testimonials, indicating a trustworthy and professional business. However, the absence of WHOIS registration data reduces transparency and slightly impacts trustworthiness.

Media Smart is a Swedish educational platform providing free media literacy resources targeted at children in compulsory school and their educators. The website is professionally designed and maintained, offering lesson plans, account registration, and newsletters to support teaching about advertising and media. It is supported by Sveriges Annonsörer, a recognized organization in Sweden. The technical infrastructure is based on WordPress with modern plugins such as Gravity Forms and CookieHub for consent management, and integrates Google Analytics via Google Tag Manager for analytics. Security posture is strong with HTTPS enforced and privacy policies clearly linked, though some security headers and explicit security policies are absent. WHOIS data for the exact subdomain is unavailable, but the website's content and partner links support legitimacy. Overall, the site is safe, compliant with GDPR, and well-positioned as a trusted educational resource.

A

403 - Forbidden

acea.auto

30

The website at acea.auto is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. As a result, no business information, contact details, or policies are available for review. The lack of accessible content and metadata severely limits the ability to assess the company's market position, services, or compliance posture. Technically, the site shows no evidence of modern frameworks, analytics, or security headers, indicating a minimal or misconfigured web presence. The WHOIS data is privacy protected, which is common but restricts verification of registrant legitimacy. Overall, the site appears to be either restricted intentionally or misconfigured, resulting in a poor security and compliance posture.

L

Libéritas Editorial

liberitasediciones.es

47

Libéritas Ediciones is a Spanish educational publishing company specializing in textbooks and educational resources aimed at facilitating an itinerary for encountering truth. It operates as a subsidiary of CEU Ediciones, linked to the Fundación Universitaria San Pablo CEU. The website is professionally designed using WordPress with a child theme, featuring good mobile optimization and clear navigation. The technical infrastructure includes modern libraries such as jQuery, Google Tag Manager, and Contact Form 7, supporting analytics and user interaction. Security posture is solid with HTTPS enabled, reCAPTCHA on forms, and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is good with a visible privacy policy and GDPR acceptance on forms. Overall, the site presents a trustworthy and professional image with a focus on educational content.

The website www.ufv.es is currently inaccessible, returning a 403 Forbidden error page with no visible content or metadata. This prevents any meaningful analysis of the business, services, or technical infrastructure. The WHOIS data for the domain is also unavailable due to registrar-imposed query restrictions, limiting the ability to verify domain registration details or ownership information. Consequently, the website's security posture, privacy compliance, and business credibility cannot be properly assessed. The lack of accessible content and WHOIS data results in a low trust score and indicates potential issues with site availability or access control. From a technical perspective, the absence of any HTML content beyond a basic error message suggests the site is either down, restricted by firewall or server configuration, or protected by a security mechanism that blocks unauthorized access. No scripts, external links, or metadata were detected, indicating no active web presence at this URL at the time of analysis. Security evaluation is limited by the lack of data; no HTTPS status, security headers, or vulnerability indicators could be assessed. The WHOIS query failure further complicates trust evaluation, as domain age, registrar, and registrant details remain unknown. Overall, the site appears to be either under maintenance, restricted, or misconfigured, requiring administrative attention to restore accessibility and enable proper security and compliance evaluation.

Werra Verlag Kluthe GmbH & Co. KG operates the WR ePaper platform, providing a digital version of their regional newspaper, the Werra-Rundschau. The service targets local readers who prefer accessing news digitally via tablets, smartphones, and PCs. The platform offers early access to the next day's newspaper, archive search, article sharing, and accessibility features such as text-to-speech. The business model centers on digital subscriptions and add-ons for print subscribers, positioning itself as a regional media provider with a growing digital presence. Technically, the website is built on WordPress with Bootstrap and common web technologies, delivering a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit incident response contacts. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional, trustworthy, and functional with room for security and privacy improvements.

W

Waldeckische Landeszeitung

ewf-fotowettbewerb.de

43

The website www.ewf-fotowettbewerb.de serves as a localized platform for a photo competition organized by the energy company EWF in partnership with the Waldeckische Landeszeitung newspaper. It targets residents within the EWF supply area to submit photos of unique or old electrical appliances, fostering community engagement and brand awareness. The site is built on the Khuris CMS and hosted on iossol.de nameservers, reflecting a small-scale but functional technical infrastructure. The content is primarily in German and well-aligned with the campaign's goals, featuring clear navigation and a cookie consent mechanism to comply with GDPR requirements. From a security perspective, the site lacks advanced security headers and explicit incident response policies, which limits its security posture. No contact emails or phone numbers are provided, which may affect user trust and support accessibility. The cookie consent banner is implemented effectively, offering users control over essential and statistical cookies. No signs of WAF or blocking mechanisms were detected, and the site content is fully accessible and safe for general audiences. Overall, the website demonstrates moderate digital maturity with room for improvement in security practices, accessibility, and contact transparency. The domain WHOIS data is minimal but consistent with a legitimate local campaign site. Strategic enhancements in security headers, incident response disclosures, and contact information would improve trust and compliance. The site effectively supports its business objective of community engagement through a photo contest, leveraging partnerships with local media and energy providers.

W. Bing Druckerei und Verlag GmbH operates the WLZ ePaper website, providing a digital version of the Waldeckische Landeszeitung newspaper. The service targets local and regional news readers in Germany, offering a digital subscription model with a free 4-week trial and mobile app access. The website is professionally designed, mobile-optimized, and provides clear navigation and calls to action for subscription and testing. Technically, the site runs on WordPress with standard plugins and libraries, delivering moderate performance and good SEO. Security posture is adequate with HTTPS enabled but lacks visible security headers and explicit cookie consent mechanisms. No direct contact emails or phone numbers are present, relying on contact forms instead. The WHOIS data aligns with the business, showing no privacy protection and consistent domain registration. Overall, the site is trustworthy and safe for general audiences.

V

Väikelaenud

jti.ee

49

The website jti.ee operates as a loan comparison platform primarily targeting Estonian consumers seeking small loans. It aggregates loan offers from well-known banks and financial institutions, providing users with transparent information on interest rates, fees, and loan terms. The platform emphasizes quick approval, clear conditions, and competitive rates, positioning itself as a convenient online resource for loan seekers in Estonia. The business appears to be small-sized and newly established, with a focus on finance sector services. Technically, the site is built on WordPress using Elementor and Contact Form 7, with Cloudflare DNS for domain management. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is moderate, with HTTPS enabled but lacking advanced security headers. Privacy compliance is weak due to absence of privacy and cookie policies. WHOIS data raises concerns due to a domain creation date set in the future, which may indicate data inconsistency or placeholder information. Overall, the site is functional and professional but requires improvements in privacy compliance and security hardening.

L

Latvijas Pilsoniskā alianse

nvo.lv

43

Latvijas Pilsoniskā alianse is the largest non-profit organization in Latvia dedicated to the growth of civil society and democracy. The organization provides a broad range of services including an informative platform with news, podcasts, and multimedia content, member services, civic dialogue facilitation, and educational programs. Their market position as a leading civic society entity in Latvia is supported by active event management and strong social media presence. Technically, the website is built on WordPress with modern plugins and technologies, offering good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS, cookie consent, and bot protection, though improvements in HTTP security headers and formal security policies are recommended. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

E

Euni Partners

eunipartners.com

49

Euni Partners is a Bulgarian non-governmental organization focused on education, training, sustainable development, and social integration of people with fewer opportunities. The organization collaborates with academia, business, and educational institutions, providing training and support across all age groups with a special emphasis on special education. The website reflects a well-established NGO with a clear mission and active partnerships, supported by over 80 members from diverse professional backgrounds. Technically, the website is built on WordPress with modern plugins and tools, including Elementor and Google Analytics, hosted on SuperHosting.bg. The site is mobile-optimized and SEO-friendly but lacks explicit privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS enabled and domain transfer protection, but DNSSEC is not enabled and security headers are missing. Overall, the domain registration data aligns well with the business claims, indicating legitimacy. The site is accessible without WAF blocking or security challenges.

A

Agora CE

agorace.cz

39

Agora CE is a Czech non-profit organization dedicated to strengthening democratic principles in society. The website presents a professional and well-structured platform showcasing their key services such as Student Agora, participation projects, international projects, study tours, conferences, seminars, and public debates. Their target audience includes students, civic participants, and the general public interested in democratic engagement. The organization maintains a consistent brand presence with active social media channels and a clear call to action for upcoming events. Technically, the website is built on WordPress using modern plugins including Yoast SEO, Contact Form 7 with Google reCAPTCHA, and WPBakery Page Builder. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Security measures include HTTPS enforcement and cookie consent management, though some security headers could be improved. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with accessible privacy and cookie policies, and a consent mechanism in place. However, the absence of WHOIS data limits domain trust verification, slightly impacting the overall credibility score. Overall, Agora CE's website reflects a legitimate, professionally managed non-profit entity with a good digital presence and security awareness. Strategic improvements in security headers and WHOIS transparency would enhance trust and compliance further.

The website at yogasportwithrefugees.org is currently inaccessible, presenting a 403 Forbidden error page that blocks access to any substantive content. This prevents meaningful analysis of the business, services, or user engagement features. The domain is registered with NameCheap, Inc. since 2021, indicating a relatively recent establishment, but no further business details or contact information are available on the site. The technical infrastructure appears minimal with only Google Fonts loaded externally and no visible scripts or analytics. Security posture is weak due to lack of DNSSEC, security headers, and no visible HTTPS enforcement details. Privacy and compliance policies are absent, and no forms or interactive elements exist on the page. Overall, the site lacks content and transparency, resulting in a low trust and credibility score.

I

Inter Alia

interaliaproject.com

49

Inter Alia is a small, established non-profit organization based in Greece, focused on fostering civic engagement, education, youth empowerment, arts, and culture across Europe. The website reflects a professional and consistent brand presence with clear navigation and multilingual support. Their key services include educational programs, political engagement initiatives, and cultural projects, supported by an active membership and partnership network. Technically, the site is built on WordPress with a modern tech stack including popular plugins for SEO, accessibility, and cookie compliance. The hosting provider is OVH sas, and the domain has been active since 2013, aligning well with the organization's history. Security posture is good with HTTPS enforced and a comprehensive cookie consent mechanism, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the website demonstrates a mature digital presence suitable for its non-profit mission.

L

Le 4bis

le4bis-ij.com

47

Le 4bis is a French non-profit organization serving as a resource and information center for youth in Rennes and the surrounding metropolitan area. The website provides information about their missions, actions, events, and resources targeted at young people and youth professionals. The organization positions itself as a local community hub offering project support, educational tools, and cultural events. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO and Google Analytics integration, ensuring good SEO and user tracking capabilities. The site is mobile-optimized and accessible, with a professional design and clear navigation. Security-wise, the site uses HTTPS and cookie consent mechanisms, but could improve by implementing additional security headers and publishing explicit security policies. Overall, the domain registration and website content are consistent and legitimate, reflecting a trustworthy and community-focused organization.

R

Réseau Bretagne Solidaire

bretagne-solidaire.bzh

49

Réseau Bretagne Solidaire is a French non-profit regional multi-actor network established in 2018, dedicated to supporting organizations engaged in international cooperation and solidarity projects within the Brittany region. The website serves as a comprehensive platform offering project support, training, networking, and communication services to its members and partners. It holds a strong market position as the 12th RRMA in France, with a medium-sized membership base and active engagement in events, publications, and calls for projects. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates essential plugins for SEO, GDPR compliance, and user engagement. The site demonstrates good performance, mobile optimization, and accessibility, supported by a well-structured navigation system and rich content. Analytics and marketing tools such as Google Analytics, Google Tag Manager, and Mailjet are used responsibly with user consent mechanisms in place. From a security perspective, the site enforces HTTPS, employs security headers, and uses GDPR-compliant cookie consent banners. Forms include validation and explicit consent checkboxes, enhancing data protection. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks a dedicated security policy or incident response contact information, which could be improved. Overall, the website presents a professional, trustworthy, and user-friendly digital presence aligned with its non-profit mission. Strategic recommendations include publishing a formal security policy, adding incident response contacts, and considering a vulnerability disclosure policy to further strengthen trust and security posture.

S

SOLIDARITÉS INTERNATIONAL

solidarites.org

49

SOLIDARITÉS INTERNATIONAL is a well-established French humanitarian NGO focused on providing emergency aid, particularly access to potable water, in conflict and disaster zones worldwide. With over 40 years of experience, it holds a strong market position in the non-profit humanitarian sector. The website reflects a mature digital presence with multilingual support, donation capabilities, and active social media engagement. Technically, the site is built on WordPress with modern frameworks and integrates multiple analytics and marketing tools, indicating a good level of digital maturity. Security posture is solid with HTTPS enforced and secure form handling, though some security headers could be improved. Privacy compliance is well addressed with cookie consent and GDPR-aligned policies. Overall, the site is professional, trustworthy, and aligns well with the organization's mission and audience.