High-risk security reports

P

Patinoire des Eaux Minérales

patinoiremorges.ch

48

Patinoire des Eaux-Minérales is a local public ice rink facility in Morges, Switzerland, offering recreational ice skating, events, and group activities. The website serves as an information portal for schedules, pricing, regulations, and contact details, targeting local residents and visitors interested in ice sports. The business operates as a small-scale public service with a focus on community engagement and sports promotion. Technically, the site is built on WordPress using the Divi theme, with common plugins for GDPR compliance and analytics. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is moderate with HTTPS enabled and some security plugins in use, but lacks explicit security headers and published security policies. Privacy compliance is basic with a cookie consent mechanism but no visible privacy or terms of service pages. Overall, the website is trustworthy and safe for general audiences, with room for improvement in security and compliance documentation.

C

Carac Media SA

carac.tv

48

Carac Media SA operates carac.tv, a Swiss French-language media platform offering live TV streaming, replay content, and program guides. Positioned as a niche broadcaster under Media One Group, it targets Swiss viewers interested in character-based TV content. The website employs modern web technologies including Nuxt.js and Vue.js, integrates advertising via Smart AdServer, and uses Google Tag Manager for analytics. Cookie consent is managed through Axept.io, reflecting some privacy compliance efforts. Security posture is solid with HTTPS and no visible vulnerabilities, though the absence of explicit privacy policies and security incident contacts indicates room for improvement. Overall, the site is professional, trustworthy, and well-branded, serving its audience effectively.

The website mediaone-digital.ch currently presents only a minimal HTML structure with a title 'Media One Group' and no substantive content, metadata, or interactive elements. This lack of content severely limits the ability to assess the business operations, market position, or services offered. The absence of contact information, privacy policies, or security details suggests the site is either under development or inactive. Technically, the site lacks modern web features, security headers, and HTTPS, indicating a low level of digital maturity and security posture. No WAF or blocking mechanisms were detected, but the site is not providing meaningful content or user engagement capabilities. From a security perspective, the lack of HTTPS and security best practices poses risks, and no compliance indicators are present. Overall, the site scores very low on content quality, technical implementation, security, privacy compliance, and business credibility, resulting in a high-risk profile and limited trustworthiness.

B

BAM - La Voie des Sens

lavoiedessens.ch

48

BAM - La Voie des Sens is a niche tourism operator in Switzerland offering unique gourmet experiences aboard the historic Bière Apples Morges (BAM) train. The company focuses on culinary outings such as gastronomic meals, fondue, beer and burgers, brunch, and wine pairings, targeting tourists and locals interested in regional terroir and heritage. The website is professionally designed using WordPress and the Divi theme, with good SEO and mobile optimization. However, it lacks explicit privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS enabled but missing security headers. Contact options are limited to a newsletter subscription form, with no direct emails or phone numbers visible. Social media presence on Facebook and Instagram supports brand trust. Overall, the site is credible and well-positioned in its market niche but should improve privacy compliance and security headers to enhance trust and regulatory adherence.

K

KIS Communication

kiscommunication.ch

48

KIS Communication is a small Swiss-based graphic design and web development service provider founded in 2017 by Kim Sartori. The company offers branding, graphic design, and WordPress-based web services primarily targeting clients in the Broye vaudoise region. The website is professionally designed with a clear portfolio showcasing their work and provides multiple contact channels including email, phone, and social media links. Technically, the site is built on WordPress using modern frameworks like UIkit and includes SEO optimization via Yoast. Security measures include HTTPS and CAPTCHA on forms, but lack some standard security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and well-maintained but could improve in security and privacy compliance.

A

Alpirsbacher Klosterbräu Glauner GmbH

alpirsbacher.de

41

Alpirsbacher Klosterbräu Glauner GmbH operates a well-established brewery and retail business based in Germany, specializing in the production and sale of various beer products, branded merchandise, and related services including events and club memberships. The company maintains a strong regional presence with a professional online shop and active social media engagement. The website demonstrates a mature digital infrastructure leveraging Shopware CMS, modern JavaScript libraries, and consent management tools to ensure compliance and user experience. Security posture is solid with HTTPS enforcement, age verification for alcohol content, and privacy compliance, though there is room for improvement in publishing explicit security policies and headers. Overall, the business presents a trustworthy and professional front with clear contact information and comprehensive legal policies.

The website swym.it is currently inaccessible due to a security verification page that blocks direct content access. This prevents a full assessment of the business, its services, and compliance posture. The domain is well-established, created in 2012, with DNSSEC enabled, indicating a legitimate registration. However, the lack of accessible content, privacy policies, contact information, and security headers limits the ability to evaluate the website's security and compliance maturity. The technical infrastructure relies heavily on JavaScript for bot detection and browser verification, which may impact user experience and accessibility. Overall, the site appears to be protected by a generic web application firewall or security mechanism, which restricts automated analysis.

S

SI-Solutions GmbH

si-solutions.ch

43

SI-Solutions GmbH is a Swiss-based company specializing in SmartHome and ICT solutions, offering a range of services including module sales, downloads, and support. The company targets businesses and individuals interested in technology solutions for smart homes and ICT infrastructure. The website is built on a WordPress platform using Elementor, indicating a moderate level of digital maturity with basic mobile optimization and SEO features. However, the content is minimal and lacks comprehensive policy documentation. Security posture is adequate with HTTPS enabled but lacks important security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website presents a small technology service provider with room for improvement in security and compliance.

A

Alexander Schreibeisen GmbH & Co. KG

sensapolis-kehl.de

40

Sensapolis Kehl operates as a family-oriented indoor play and climbing park located in Kehl, Germany. The business offers a variety of play and climbing activities for children and adults, including themed birthday party rooms and creative ateliers. It positions itself as a local entertainment destination with a focus on family fun and events. The website is professionally designed, mobile-optimized, and uses modern web technologies such as WordPress, UIkit, and Yoast SEO. Privacy and cookie compliance are well implemented with clear policies and consent mechanisms. However, the site lacks explicit security policies and incident response information. The domain WHOIS data is minimal but consistent with the business claims. Overall, the site demonstrates a good security posture with HTTPS and cookie management, though improvements in security headers and disclosure policies are recommended.

C

CalaCarWash

cala-carwash.com

42

CalaCarWash is a premium car wash service provider located in Kehl, Germany, operating since 2016. The business offers advanced car wash technologies including high-pressure washing, active foam, power drying, and nanowax paint sealing, targeting local car owners seeking high-quality vehicle cleaning. The company emphasizes environmental sustainability through a water recycling system and uses biodegradable detergents. The website is built on WordPress with a modern theme and UIkit framework, providing a good user experience with clear navigation and mobile optimization. Contact information and social media presence are clearly provided, enhancing business credibility. Security posture is adequate with HTTPS and cookie consent mechanisms, though security headers and explicit security policies could be improved. No signs of blocking or WAF interference were detected, and the domain registration data supports legitimacy. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

K

Kartbahn CalaRace | Kehl

cala-race.com

37

Kartbahn CalaRace is a small regional indoor kart racing venue located in Kehl, Germany, offering a 450-meter two-level electric kart track with speeds over 50 km/h. The business targets families, event planners, and corporate clients, providing kart racing entertainment, event hosting, and gastronomy services including a sports bar. The website is professionally designed with excellent content quality, clear navigation, and good mobile optimization. Technically, it is built on WordPress with modern plugins and UIkit framework, ensuring a good user experience and SEO optimization. Security posture is good with HTTPS and cookie consent implemented, though some security headers could be improved. The WHOIS data is missing or the domain is unregistered, which is a concern for domain legitimacy and requires further investigation. Overall, the site is trustworthy, family-friendly, and well-maintained, but domain registration issues reduce business credibility scores.

C

Calamus Areal

orangerie-kehl.de

49

Die Orangerie Kehl is a specialized event location situated within the Calamus Areal in Kehl, Germany, catering to private and business events such as weddings, corporate parties, and seminars. The venue offers versatile spaces, culinary services, and proximity to a 4-star superior hotel, positioning itself as a local leader in hospitality event services. The website is built on WordPress using Elementor, indicating a modern and maintainable technical infrastructure. The presence of cookie consent mechanisms and GDPR-compliant privacy policies reflects a good level of digital maturity and privacy awareness. Security posture is solid with HTTPS and spam protection on forms, though improvements in security headers and vulnerability disclosure could enhance trust further. Overall, the site presents a professional and trustworthy image suitable for its target audience.

R

Restaurant Cala

restaurant-cala.de

46

Restaurant Cala is a small hospitality business located in Kehl, Germany, offering grilled meat, fish, vegetarian dishes, and a Sunday brunch. It operates on the CALAMUS-AREAL next to a 4-star hotel, targeting local and regional customers seeking quality dining experiences. The website is professionally designed using WordPress with popular plugins like WPBakery and Revolution Slider, supporting online reservations and gift voucher sales. Social media presence on Facebook and Instagram enhances customer engagement. Security posture is basic with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms. Privacy policy is present and GDPR compliant, but terms of service and incident response information are missing. Overall, the site is trustworthy and functional but could improve security and privacy compliance.

C

Calamus Areal Kehl

apartments-kehl.de

47

Apartments Kehl operates a modern boardinghouse in Kehl-Sundheim, Germany, offering a range of stylish apartments with amenities such as sauna, wellness, fitness, and pet-friendly accommodations. The business targets tourists, families, and business travelers seeking comfort and leisure in a strategic location near Strasbourg and the Black Forest. The website reflects a professional hospitality provider with integrated leisure and dining services, supported by a network of partner domains. Technically, the site is built on WordPress with UIkit and includes modern consent management tools, though it lacks some security headers. The SSL configuration is excellent, and the site is mobile-optimized with good accessibility and SEO basics. Security posture is solid but could be improved by adding security headers and explicit incident response information. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the business. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. No adult or questionable content is present, making the site safe for general audiences.

H

Haus der Natur Obere Donau

hausdernatur-oberedonau.de

38

Haus der Natur Obere Donau is a regional non-profit nature and cultural education center located in Beuron, Germany. It serves as the seat for three organizations focused on nature conservation, sustainable tourism, and regional product marketing. The website provides information about their permanent exhibition, events, boat rentals, and educational offerings, targeting nature enthusiasts, local visitors, and schools. The site is well-structured, professionally designed, and consistent with its mission and audience. Technically, it is built on the Contao CMS platform, uses jQuery and Colorbox for UI, and is hosted on servers associated with kasserver.com. The website is mobile-optimized and SEO-friendly but lacks some advanced accessibility features.

cadwork is a software company specializing in CAD/CAM and BIM solutions for wood construction, joinery, civil engineering, and contractor project management. The company targets professionals in construction and engineering sectors, offering tools that cover design, production, and machine control. The website indicates a regional presence primarily in Switzerland with multiple related domains serving other countries. Technically, the website uses modern frontend technologies such as Bootstrap and jQuery, providing a good user experience and mobile optimization. However, SEO and accessibility features are basic, and no CMS or hosting details are evident. Security posture is limited due to missing HTTPS verification and lack of security headers, and no privacy or cookie policies are present, indicating compliance gaps. WHOIS data is missing, reducing trustworthiness, but the website content and related domains suggest a legitimate business. Overall, the site is functional and professional but requires improvements in security, privacy compliance, and transparency.

The website cadwork.swiss is registered to Cadwork Holz AG, a Swiss company founded in 2016. However, the website content is currently inaccessible, returning a 403 Forbidden error page that blocks access to any business or informational content. This severely limits the ability to assess the company's online presence, services, or compliance posture. The domain registration data is consistent and legitimate, matching the company name and country. The technical infrastructure appears minimal with no DNSSEC enabled and no visible security headers or analytics scripts. The lack of accessible content and policies indicates a low digital maturity level at this time. Security posture is weak due to missing standard protections and the access restriction itself.

C

CAD

cadwork.de

40

cadwork.de is a professional website representing CAD, a company specializing in 3D CAD/CAM software solutions primarily for the timber construction industry. The site offers a range of industry-specific software products, training events, and support resources, targeting professionals and companies in timber construction, engineering, architecture, and related fields. The business model focuses on software sales, trials, and customer support, with a strong presence in German-speaking countries and international partner sites. Technically, the website is built on WordPress using the Avada theme and WooCommerce for e-commerce capabilities, enhanced with multilingual support via WPML and SEO optimization through Rank Math. The site demonstrates good mobile optimization and user experience, with clear navigation and professional design. Security posture is adequate with HTTPS enabled and cookie consent implemented, though it lacks some advanced security headers and a public vulnerability disclosure policy. Overall, the domain registration and website content are consistent and trustworthy, indicating a legitimate business with a solid market position in its niche.

G

GRUPPENTOURISTIK.COM

gruppentouristik.com

49

GRUPPENTOURISTIK.COM is a specialized online portal focused on group travel, offering curated destinations, events, accommodations, and bus travel options primarily targeting German-speaking customers. The website presents a professional and content-rich platform that supports group travel planning with a clear focus on leisure and tourism. The business appears established since 2012, with a medium-sized market presence and consistent branding. Technically, the site is built on Drupal 11, leveraging modern libraries and responsive design, ensuring good user experience and mobile optimization. Security posture is solid with HTTPS, cookie consent, and privacy compliance, though some improvements like DNSSEC and enhanced security headers are recommended. No critical vulnerabilities or suspicious content were detected. Overall, the site is trustworthy and well-positioned in its niche.

D

DonationPay

donationpay.org

46

DonationPay is a nonprofit-focused service providing powerful fundraising tools to facilitate donations and campaign management. The website is built on WordPress using the Brizy page builder and integrates third-party services such as Google Tag Manager for analytics and Tawk.to for live chat support. The content is professionally presented and targeted at nonprofit organizations seeking fundraising solutions. Technically, the site is moderately optimized with HTTPS enabled and basic mobile responsiveness, though accessibility and SEO features are basic. Security posture is adequate with SSL but lacks advanced security headers and vulnerability disclosure mechanisms. Privacy and cookie policies are not found, indicating compliance gaps. The domain WHOIS data is unavailable, which reduces transparency and trustworthiness. Overall, the site is functional and safe but would benefit from improved privacy compliance and clearer contact information.

I

Interview Her

interview-her.com

43

Interview Her is a specialized non-profit platform dedicated to connecting media professionals with women experts in the fields of conflict, peace, and security. The website serves as a curated expert directory and resource to enhance accurate and diverse media reporting. It operates under the auspices of the Nobel Women's Initiative, lending credibility and a clear mission focus. The platform targets journalists, researchers, and media outlets seeking authoritative female voices on critical global issues. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and WPBakery Page Builder, ensuring a professional and responsive user experience. Hosting is managed via Hover, with domain registration consistent and transparent since 2018. Security posture is adequate with HTTPS enabled and domain transfer protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is limited by the absence of explicit privacy and cookie policies, which should be addressed to meet GDPR and other regulations. Overall, the site is trustworthy, well-branded, and serves a clear niche with good content quality and user experience.

O

outbrai.com

outbrai.com

48

The website outbrai.com is currently a parked domain primarily serving advertisements and related search results. It lacks substantive business content, contact information, or user engagement features. The technical infrastructure relies on common advertising and analytics technologies such as Google Analytics, Google Tag Manager, and Bodis domain parking services. The site is accessible without any WAF or security challenges but shows minimal security hardening and no GDPR compliance mechanisms. The WHOIS data indicates the domain is registered to a registrar parking service with a suspicious future creation date, reducing trust and legitimacy. Overall, the site appears to be a placeholder rather than an active business presence.

S

SBH

dreiklangsbh.de

35

The website www.dreiklangsbh.de is currently in maintenance mode, displaying a placeholder page with minimal content and no active business information. The company name 'SBH' is visible, but no detailed description, services, or contact information is provided. The site is hosted on WordPress with a maintenance plugin active, indicating ongoing development or updates. The technical infrastructure includes jQuery libraries and Open Sans font, hosted on servers associated with agenturserver, a German hosting provider. Security posture is basic with HTTPS implied but no visible security headers or advanced protections. No privacy or cookie policies are present, and no contact or compliance information is available, limiting trust and compliance assessment. Overall, the site is functional but lacks content and security maturity.

B

Breitbandinitiative Landkreis Tuttlingen (BIT)

breitband-tuttlingen.de

43

The Breitbandinitiative Landkreis Tuttlingen (BIT) is a regional public initiative focused on expanding and improving fiber optic broadband infrastructure within the Landkreis Tuttlingen region in Germany. The initiative supports municipalities in planning, tendering, and constructing a county-wide fiber backbone network, targeting businesses, schools, administration, and underserved areas. The website reflects a professional and consistent presentation of this mission, with clear contact information and regularly updated news about project milestones and funding. Technically, the site uses a custom PHP-based CMS with standard web technologies and is mobile-optimized, though some modern security headers and cookie consent mechanisms are missing. Security posture is moderate with HTTPS implied but lacking explicit security policies or incident response information. Overall, the domain and website appear legitimate and trustworthy for a public sector broadband initiative, with no signs of malicious or adult content.

Landschaftserhaltungsverband Landkreis Tuttlingen e.V. is a regional non-profit organization dedicated to the conservation and sustainable management of cultural landscapes and natural heritage in the Landkreis Tuttlingen area of Germany. The organization acts as a mediator and service provider for local farmers, foresters, municipalities, and conservation groups, facilitating landscape maintenance and preservation efforts. The website reflects a professional and consistent presentation of their mission, services, and contact information, targeting local stakeholders and interested citizens. Technically, the website is built on the Weebly platform, utilizing jQuery 1.8.3 and Google Analytics for tracking. While the site is accessible and well-structured, it shows signs of aging technology and lacks some modern security best practices such as security headers and cookie consent mechanisms. The site is moderately optimized for mobile and SEO but could benefit from updates to improve performance and compliance. From a security perspective, HTTPS is enabled, but the absence of security headers and use of an outdated JavaScript library present potential risks. No explicit security policies or incident response contacts are provided, indicating room for improvement in security transparency and readiness. Privacy compliance is partially met with a privacy policy page but lacks cookie consent and detailed GDPR indicators. Overall, the website is trustworthy and professional for its non-profit mission but should prioritize technical and security enhancements to strengthen its digital maturity and compliance posture.

N

Naturpark Obere Donau e.V.

naturpark-obere-donau.de

47

Naturpark Obere Donau e.V. operates as a regional non-profit nature park organization in southern Baden-Württemberg, Germany. The website serves as an information hub for visitors and locals interested in nature experiences, regional products, events, and educational resources. The organization maintains a visitor center called 'Haus der Natur' and promotes regional culture and environmental awareness. The site is well-positioned as a trusted regional authority with sponsorship from local government and lottery funds. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and integrates Matomo analytics and Usercentrics for privacy compliance. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS and consent management, though it lacks explicit HTTP security headers and a public security policy. Overall, the domain registration and website content align well, indicating legitimacy and trustworthiness.

C

CNRS Innovation

cnrsinnovation.com

42

CNRS Innovation is a French organization affiliated with CNRS, focused on bridging research and innovation by supporting technology transfer, start-up creation, and project prematuration. The website reflects a professional presence with clear information about their services, target audience, and programs such as RISE. The technical infrastructure is based on WordPress with modern plugins and integrations including Google Analytics and Google Maps API, indicating a mature digital setup. Security posture is solid with HTTPS enforced and no exposed sensitive data, though improvements can be made by adding explicit security headers and cookie consent mechanisms. Overall, the website is trustworthy and well-positioned within the French research innovation ecosystem.

U

UNESCO Global Geopark Schwäbische Alb

geopark-alb.de

42

The website www.geopark-alb.de represents the UNESCO Global Geopark Schwäbische Alb, a recognized educational and tourism entity focused on geological heritage and sustainability in southwestern Germany. The site offers rich multimedia content, educational resources, and detailed information about the geopark's natural and cultural assets. Technically, the site is built on Silverstripe CMS with UIkit framework, ensuring a modern and responsive user experience. Privacy compliance is well addressed through a comprehensive privacy policy and an active cookie consent mechanism using Klaro. Security posture is solid with HTTPS enforced and privacy-friendly video embeds, though some security headers could be improved. No critical vulnerabilities or suspicious elements were detected. Overall, the website is professional, trustworthy, and well-positioned to serve its target audience of tourists, educators, and geology enthusiasts.

F

Urlaub mit Kindern Baden-Württemberg | familien-ferien

familien-ferien.de

39

The website familien-ferien.de is a family vacation information platform focused on Baden-Württemberg, Germany, offering child-friendly accommodation and excursion tips. It targets families with children seeking vacation options in the region. The site uses modern technologies including the Neos CMS and the Flow PHP framework, with integrations for accessibility (eyeAble) and cookie consent management (Cookiebot). Google Tag Manager is used for analytics and tracking. The site is well-structured, mobile-optimized, and SEO-friendly with structured data markup. However, it lacks visible privacy policy and terms of service pages, and no direct contact information is found in the HTML content. Security posture is moderate with HTTPS enabled but missing security headers and no explicit security or incident response policies.

K

KAROLINGISCHE KLOSTERSTADT e.V.

campus-galli.de

49

Campus Galli is a German non-profit organization dedicated to the historical reconstruction of a Carolingian monastery using authentic 9th-century methods. The website serves as an educational and visitor information platform, offering event calendars, ticket sales, and detailed insights into the project. The organization positions itself as a niche cultural heritage and educational tourism entity with a medium-sized operational scale. Technically, the website is built on WordPress with modern plugins and frameworks, hosted by a reputable German provider, and optimized for SEO and mobile use. Security posture is solid with HTTPS, cookie consent, and no visible vulnerabilities, though some security headers and incident response details could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-aligned with its mission.

B

Bahnbetriebe Blumberg GmbH & Co. KG

sauschwaenzlebahn.de

48

Bahnbetriebe Blumberg GmbH & Co. KG operates the Sauschwänzlebahn, a historic steam and diesel train service in the Black Forest region of Germany. The company offers nostalgic train rides, special events, and group packages, positioning itself as a notable regional tourism attraction with multiple awards and partnerships. The website is professionally designed, providing clear information and multiple contact channels, targeting tourists, families, and railway enthusiasts. Technically, the site is built on WordPress with WooCommerce and Fusion Builder, offering moderate performance and good mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the domain registration and website content align well, indicating a trustworthy and legitimate business presence.

K

KlickImpuls GmbH

klickimpuls.at

44

KlickImpuls GmbH is a small, professional online marketing agency based in Linz, Austria, specializing in SEO, SEA, social media marketing, conversion rate optimization, and tracking solutions. The company targets B2B and B2C clients seeking to improve their digital marketing performance with sustainable and transparent strategies. Their website demonstrates a mature digital presence with multimedia content, client showcases, and clear service offerings. Technically, the site is built on WordPress with Elementor, leveraging modern marketing and analytics tools such as Google Analytics 4, Bing Ads, Facebook Pixel, and VWO for optimization and tracking. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data is a notable gap, slightly reducing trust but not undermining the overall legitimacy given the professional web presence and compliance indicators. Overall, the site is well-designed, user-friendly, and compliant with GDPR requirements.

S

SEMSEA Suchmaschinenmarketing

semsea.at

44

SEMSEA Suchmaschinenmarketing is a specialized digital marketing agency based in Austria, focusing on Google Ads services with over 10 years of experience. The company offers tailored Google Ads consulting, setup, management, and package solutions aimed at helping businesses optimize their advertising budgets and achieve measurable growth. The website demonstrates a professional and consistent brand presence, supported by client logos and embedded Google Reviews, indicating a trustworthy market position. Technically, the website is built on WordPress using the Elementor framework, incorporating modern web technologies such as jQuery and Font Awesome. It integrates third-party services including Zoho Forms for contact and lead generation, Elfsight widgets for social proof, and tracking tools like eTracker and Fraud Blocker. The site is mobile-optimized, accessible, and SEO-friendly, with proper meta tags and structured data enhancing search visibility. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. However, explicit security headers are not detected, and no dedicated security or incident response policies are published. The WHOIS data is unavailable or privacy-protected, which limits domain ownership transparency but is common for small agencies. No critical vulnerabilities or exposed sensitive data were found. Overall, SEMSEA presents a low-risk, professional digital marketing service with good privacy compliance and a solid technical foundation. Strategic improvements in security headers and incident response transparency could further enhance trust and security posture.

The website at cnstrc.com is currently inaccessible due to an Access Denied error, likely caused by a web application firewall or security mechanism blocking content access. As a result, no direct content, metadata, or business information could be extracted or analyzed. The domain is registered with Amazon Registrar, Inc. since 2015, indicating a stable registration history but no further business details are available. The lack of accessible content prevents assessment of the company's services, technical infrastructure, or security posture beyond domain registration data. Security posture cannot be evaluated due to missing content and headers, and no privacy or compliance policies are detectable. Overall, the site appears to be protected by security controls but lacks publicly available information for comprehensive analysis.

The website at webeyez.com is currently inaccessible, returning a 403 Forbidden error page. This indicates that access to the site is blocked or restricted, likely by server configuration or security controls such as Cloudflare. Due to this, no meaningful business content, contact information, or policies are available for analysis. The domain is registered since 2013 with GoDaddy.com, LLC and uses Cloudflare DNS servers, but DNSSEC is not enabled. The lack of accessible content and absence of security headers or privacy policies limits the ability to assess the company's digital maturity or security posture. Overall, the site appears to be either under maintenance, restricted, or misconfigured, resulting in a poor user experience and low trustworthiness.

R

Rede de Pesquisa em Governança da Internet

redegovernanca.net.br

44

Rede de Pesquisa em Governança da Internet is an autonomous, multi- and transdisciplinary academic network focused on research related to Internet governance. The website serves as a platform for researchers to collaborate, share publications, and organize annual meetings. It targets academic researchers and professionals interested in the technical, social, economic, and public policy dimensions of Internet governance, primarily in Brazil. The site is built on WordPress with Elementor and uses modern web technologies, providing a good user experience and clear navigation. The presence of structured data and SEO optimizations indicates digital maturity. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks explicit security headers and incident response policies. The Google Analytics plugin is installed but not configured, and no privacy policy or terms of service pages were found, indicating room for compliance improvement. Overall, the website is trustworthy and professional but could enhance privacy and security transparency.

Julia Velkova's website is a personal academic profile showcasing her research and professional background in media and cultural studies, with a focus on digital infrastructures and sustainability. The site serves primarily as an informational platform targeting academics, researchers, and students interested in these fields. It is hosted on WordPress and uses a moderate technology stack with standard libraries such as jQuery and Masonry. The website is mobile responsive and well-structured, providing a good user experience with clear navigation and relevant content. However, it lacks privacy and cookie policies, which impacts its compliance posture. From a security perspective, the website does not exhibit advanced security headers or incident response information, and it runs an outdated WordPress version, which could pose risks if not properly maintained. No analytics or tracking tools are detected, indicating minimal user tracking and a privacy-friendly approach. The domain registration is consistent and legitimate, with a long registration period and no privacy protection, aligning well with the academic nature of the site. Overall, the website is professional and trustworthy for its intended academic audience but would benefit from improved security practices and privacy compliance measures to enhance its posture and user trust.

A

Association of Internet Researchers

aoir.org

48

The Association of Internet Researchers (AoIR) is a well-established academic non-profit organization dedicated to promoting interdisciplinary Internet research. Founded in 1999, AoIR provides a platform for researchers and students through conferences, publications, ethics guidance, and community support. The website reflects a focused academic community with clear navigation and relevant content tailored to its audience. Technically, the site is built on WordPress using the Divi theme and common plugins, hosted by DreamHost, and employs Google Analytics for user tracking. The site is mobile optimized and performs moderately well. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks DNSSEC and explicit security headers. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information is limited to a contact form, with no direct emails or phone numbers visible. Overall, the domain registration is consistent with the organization's profile, indicating legitimacy and trustworthiness.

The domain tk3dapi.com is registered since 2016 with a reputable registrar and uses AWS DNS servers, indicating a legitimate registration. However, the website itself is non-functional, returning only a minimal 404 error page with no content, metadata, or interactive elements. There are no visible privacy policies, contact information, or business details, which severely limits the ability to assess the company's operations or credibility. Technically, the site lacks any detectable technologies, frameworks, or security headers, and there is no evidence of HTTPS or SSL configuration from the provided data. The security posture is weak due to the absence of basic protections and policies. Overall, the website appears inactive or under construction, resulting in a low trust and quality score.

V

Viteos SA

viteos.ch

42

Viteos SA is a Swiss-based company specializing in sustainable and renewable energy solutions for both private individuals and professionals. Positioned as a partner in the energy transition, the company offers services that support sustainable energy adoption and renewable energy technologies. The website reflects a medium-sized enterprise with a clear focus on energy sector clients in Switzerland. Technically, the site is built on WordPress with modern SEO and cookie consent management tools, indicating a mature digital presence. The use of Google Tag Manager, Microsoft Clarity, and other analytics tools shows a commitment to data-driven insights while maintaining GDPR compliance through detailed cookie consent mechanisms. Security posture is solid with HTTPS enforced and bot protection via Google reCAPTCHA, though explicit security headers and policies could be improved. Overall, the website is professional, trustworthy, and well-optimized for user experience and privacy compliance.

T

TracTrac ApS

tractrac.com

47

TracTrac ApS is a specialized provider of live GPS tracking services for sports events such as sailing, orienteering, cycling, skiing, and triathlon. Established in 2004, the company has positioned itself as a leader in the niche market of sports live tracking, serving athletes, fans, sponsors, and event organizers globally. Their offerings include real-time tracking platforms, event management tools, and mobile applications available on iOS and Android. The company emphasizes user engagement through live event visualization and playback features, supported by testimonials from notable event organizers. Technically, the website leverages modern web technologies including Vue.js, Google Maps API, and analytics platforms like Matomo and Google Analytics. Hosting is provided by Hetzner Online GmbH, a reputable provider. The site is mobile-optimized and demonstrates good SEO practices, though accessibility features are basic. Performance is moderate with asynchronous loading of scripts enhancing user experience. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and security headers such as Content-Security-Policy. There is no visible privacy or cookie policy, nor incident response or vulnerability disclosure information, which are areas for improvement. Analytics usage is moderate, but no explicit consent mechanism for cookies is present, indicating potential GDPR compliance gaps. Overall, TracTrac presents a professional and trustworthy online presence with a solid business model and technical foundation. Strategic enhancements in privacy compliance, security headers, and transparency around data protection would strengthen their security posture and regulatory adherence.

R

Reichenbach SA

sols.ch

48

Reichenbach SA is a small Swiss company specializing in floor and wall coverings, offering a wide range of products such as parquet, moquette, linoleum, PVC, cork, wallpapers, curtains, and blinds. The company operates a physical showroom in Tolochenaz-Morges, targeting residential and commercial customers seeking quality floor and wall covering solutions. The website is professionally designed using WordPress CMS and includes clear navigation and product categorization, supported by social media presence on Facebook, Twitter, and Instagram. Technically, the website employs standard WordPress technologies with jQuery and common plugins for slideshow and social media integration. The site is mobile optimized and performs moderately well, though accessibility and SEO optimizations are basic. Security-wise, HTTPS is properly configured, and anti-spam CAPTCHA is used on forms; however, no advanced security headers or published security policies are present, indicating room for improvement in security posture. Overall, the website is trustworthy and professional but lacks formal privacy, cookie, and security policies, which are critical for compliance and user trust. There are no signs of malicious content or blocking mechanisms, allowing full content accessibility. Strategic improvements in privacy compliance and security best practices would enhance the site's credibility and protection.

F

Friderici automobiles

friderici-automobiles.ch

49

Friderici Automobiles is a reputable Hyundai car dealership based in the Morges region of Switzerland, offering a comprehensive range of automotive services including new and used vehicle sales, maintenance, repair, leasing, and bodywork. The company positions itself as an official Hyundai partner with a strong regional presence and a focus on customer satisfaction. The website is built on WordPress with modern plugins and technologies, providing a good user experience with clear navigation and mobile optimization. Security measures such as HTTPS, cookie consent, and reCAPTCHA are implemented, though there is room for improvement in security headers and policies. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

Mountain Lake Productions is a small Swiss event production company specializing in humor and comedy festivals, targeting a general audience interested in local cultural events. The website serves primarily as a landing page linking to partner humor festivals, with minimal content and no direct contact or transactional features. Technically, the site is built using a basic hosting page builder platform with standard HTML, CSS, and minimal JavaScript, hosted by Infomaniak. The site lacks advanced technical features, security headers, and privacy compliance mechanisms. Security posture is minimal with no HTTPS verification visible in the data, no security policies, and no incident response contacts. Overall, the site is low risk but would benefit from improved security and privacy practices to enhance trust and compliance.

ZSP Design Studio is a small interior and architectural design firm based in Bangalore, India, specializing in residential, commercial, and architectural projects with an emphasis on health and well-being in interiors. Their website reflects a professional design with clear navigation and branding, targeting clients seeking quality design services. The technical infrastructure uses standard web technologies including Bootstrap, jQuery, and FontAwesome, with moderate performance and good mobile optimization. Security posture is moderate but lacks important security headers and privacy compliance elements such as privacy and cookie policies. Contact information is clearly provided, but social media links are placeholders. Overall, the website is functional and professional but could improve in security and compliance areas.

F

Firefly Lifesciences

fireflylifesciences.com

44

Firefly Lifesciences is a company focused on providing sustainable environmental solutions including regenerative agriculture, water treatment, clean energy, and green habitats. Their services include consulting, design, installation, and ongoing support, targeting businesses aiming for responsible growth and environmental impact. The website is built on WordPress with Elementor and features rich content, certifications, and R&D collaborations, indicating a mature digital presence. Security posture is generally good with HTTPS enabled, but lacks some security headers and privacy compliance documentation. WHOIS data is missing, which reduces trustworthiness but the website content and certifications support legitimacy. Overall, the site is professional and well-designed, serving a niche market in sustainability and environmental technologies.

L

Leucine Rich Bio Pvt Ltd

leucinerichbio.com

43

Leucine Rich Bio Pvt Ltd operates a professional website focused on microbiome-based diagnostics, therapeutics, supplements, and research services primarily targeting healthcare professionals, researchers, and consumers interested in microbiome science. The company positions itself as a pioneer in the Indian microbiome sector with offerings including microbiome profiling (BugSpeaks), deep science supplements (RychBiome), intellectual property, scientific publications, and conference organization. The website content is well-structured, visually consistent, and provides clear navigation to partner services and research resources. Technically, the website uses modern front-end technologies such as Bootstrap 5.3 and Font Awesome 6.0, with responsive design and some interactive JavaScript for visual effects. Hosting appears to be via GoDaddy, with domain registration consistent and stable. Performance is moderate with good mobile optimization but basic accessibility and SEO features. No CMS or analytics tools are detected, indicating a lightweight and privacy-conscious setup. Security posture is moderate; HTTPS is assumed but no explicit security headers or advanced protections are detected. There are no visible vulnerabilities or exposed sensitive data, but the absence of privacy and cookie policies is a compliance gap. No incident response or vulnerability disclosure information is provided. Contact information is clearly presented, enhancing business credibility. Overall, the website is professional and trustworthy with a solid business foundation but would benefit from enhanced privacy compliance, security headers, and transparency regarding data protection. Strategic improvements in these areas would strengthen trust and regulatory adherence.

K

KOLLEGTIV Chemnitz GmbH

kollegtiv-chemnitz.de

41

KOLLEGTIV Chemnitz GmbH is a small, regionally focused company specializing in workforce recruitment and employer branding services in Chemnitz and the Südwestsachsen region of Germany. The company operates the Fachkräfteinitiative CHEMNITZ ZIEHT AN, a well-established initiative since 2008, providing an online job portal, networking for HR professionals, and regional marketing campaigns. The website reflects a professional and consistent brand image with clear business information and active social media presence. Technically, the site is built on WordPress with modern plugins and frameworks, offering good performance and mobile optimization. Security posture is adequate with HTTPS enabled but lacks some advanced security headers and incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy and well-positioned in its niche, though improvements in security and privacy practices are recommended.

I

Interessenverband Supraleitung e.V.

ivsupra.de

46

Interessenverband Supraleitung e.V. (ivSupra) is a German industry association comprising mostly medium-sized companies focused on the development and marketing of superconducting technologies. The website serves as an information hub for members and interested parties, showcasing products, markets, news, and events related to superconductors. The association positions itself as a key player in promoting sustainable and efficient energy technologies, targeting businesses and professionals in energy, transport, and manufacturing sectors. Technically, the website is built on WordPress with modern plugins for SEO, user management, and search functionality, offering a responsive and well-structured user experience. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers and incident response information are lacking. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is professional, trustworthy, and well-maintained, supporting the association's mission and business credibility.

F

Federal Service Desk

fsd.gov

47

The Federal Service Desk website serves as an official support portal for federal government employees and contractors, providing assistance and knowledge base resources. It is built on the ServiceNow Service Portal platform, leveraging AngularJS and the U.S. Web Design System for a consistent and accessible user experience. The site demonstrates a good level of technical maturity with modern frameworks and responsive design, although some areas such as privacy and cookie policies are lacking. Security posture is moderate with HTTPS implied but no explicit security headers detected. The domain is a .gov TLD, indicating a high level of trust and legitimacy despite the absence of detailed WHOIS data. Overall, the site is professional, trustworthy, and safe for general audiences.