High-risk security reports

A

ASP Construction

asp-construction.org

48

ASP Construction is a well-established non-profit organization based in Quebec, Canada, specializing in health and safety training and resources for the construction industry. The website serves as a comprehensive portal offering mandatory safety courses, publications, and documentation to workers, employers, and associations. The organization maintains a strong market position as a trusted provider of construction safety education, supported by a mature domain and consistent branding. Technically, the website is built on Joomla CMS and integrates modern tools such as Google Analytics, Google reCAPTCHA, and CookieFirst for consent management. The site is mobile-optimized with good navigation and SEO practices, although some improvements in accessibility and security headers could enhance its posture. The domain is secured with HTTPS and registrar locks, but DNSSEC is not enabled. Security-wise, the site follows best practices including HTTPS enforcement and CAPTCHA protection on forms. However, the absence of DNSSEC and Content-Security-Policy headers are areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms in place. Overall, ASP Construction's website demonstrates a solid security posture and professional digital presence, supporting its credibility and trustworthiness. Strategic enhancements in security headers and DNS security would further strengthen its defenses.

A

Accesstech AG

accesstech.ch

49

Accesstech AG is a Swiss-based company specializing in assistive IT solutions for blind and visually impaired individuals. Their website showcases a range of products including mobile and stationary screen readers, scanner reading devices, magnification software, speech output systems, Braille displays, and printers. The company positions itself as a niche provider with a strong focus on accessibility and social inclusion through technology. The website is professionally designed, accessible, and provides clear contact information, reflecting a trustworthy and customer-focused business. Technically, the website is built on WordPress with a modern tech stack including jQuery and accessibility-focused plugins. It demonstrates good mobile optimization and accessibility features such as font size adjustments and contrast toggles. Performance is moderate, and SEO practices are adequately implemented. However, there is room for improvement in security headers and cookie consent mechanisms to enhance compliance and security posture. From a security perspective, the site uses HTTPS with a good SSL configuration and no visible vulnerabilities or exposed sensitive data. The absence of security headers and incident response information suggests potential areas for strengthening security practices. No WAF or blocking mechanisms were detected, allowing full content access. Overall, Accesstech AG's website reflects a solid business presence with a focus on assistive technology, good technical implementation, and a generally strong security posture. Strategic improvements in privacy compliance and security policies would further enhance trust and regulatory adherence.

T

Trägerverein Energiestadt

energiestadt.ch

48

Trägerverein Energiestadt is a Swiss non-profit association established in 1991 that unites municipalities across Switzerland committed to sustainable energy use and climate protection. It offers certification programs such as Energiestadt and Energiestadt Gold, along with consulting, training, and networking services to support local energy and climate policies. The organization is well-established with a strong market position and recognized certifications like the European Energy Award. Technically, the website is built on the fuman CMS platform, uses modern JavaScript libraries, and integrates Google Analytics for user insights. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though additional security headers and a security.txt file could enhance protection. Contact information is clear and professional, supporting trust and credibility. Overall, the website reflects a mature digital presence aligned with its mission and audience.

«Das Beste der Region» is a Swiss non-profit association that acts as an umbrella organization for regional brands and farmers' associations across several Swiss cantons. The organization supports regional producers by promoting certified regional products under the national quality label regio.garantie. Their website serves as an information and marketing platform targeting both producers and consumers interested in regional and sustainable products. Technically, the website is built on the fuman CMS platform, uses modern JavaScript libraries such as Flickity for UI components, and integrates Google Analytics and Facebook Pixel for tracking. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms but lacks explicit security policies or incident response information. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements, though it could improve by adding security headers and vulnerability disclosure information.

S

Stiftung Landschaftsschutz Schweiz

sl-fp.ch

47

Stiftung Landschaftsschutz Schweiz (SL-FP) is a well-established Swiss non-profit foundation dedicated to the protection, preservation, and enhancement of natural and cultural landscapes in Switzerland. Founded in 1970, it operates across all governmental levels and engages with partners and the public to promote sustainable landscape management. The website reflects a professional and consistent brand presence, offering comprehensive information about its mission, projects, and landscape awards. Technically, the site uses a custom CMS (fuman), modern JavaScript libraries, and Google Analytics with IP anonymization, indicating moderate digital maturity. Security posture is good with HTTPS and some security best practices, though improvements in security headers and privacy compliance (cookie consent) are recommended. Overall, the site is trustworthy, accessible, and serves its target audience effectively.

P

Pro Infirmis

kulturinklusiv.ch

49

Pro Infirmis operates the Fachstelle Kultur inklusiv, a Swiss non-profit organization dedicated to promoting cultural inclusion nationwide. The website serves as a competence center offering services such as consultation, networking, and communication to foster visibility and recognition of inclusive culture. The organization holds a strong market position within the cultural inclusion sector in Switzerland, supported by its network and charter for cultural inclusion. Technically, the website is built on TYPO3 CMS with modern frameworks like Bootstrap and integrates multiple third-party marketing and tracking tools, including Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag. Accessibility is a key focus, evidenced by WCAG 2 AA certification and ReadSpeaker integration. Security posture is solid with HTTPS enforcement and reCAPTCHA usage, though improvements are recommended in security headers and incident response transparency. Overall, the website is professional, trustworthy, and compliant with GDPR, with clear contact information and privacy mechanisms.

Ö

öbu

oebu.ch

47

öbu is a Swiss association dedicated to promoting sustainable business practices across companies in Switzerland. The organization offers a range of services including working groups, workshops, projects, events, and informational resources to support businesses in implementing the UN Sustainable Development Goals and the Agenda 2030. The website reflects a well-established entity with a clear focus on sustainability and community engagement within the Swiss market. Technically, the website employs modern tracking and user experience technologies such as Google Analytics, Google Tag Manager, and Flickity for carousels, alongside a GDPR-compliant cookie consent mechanism. Security posture is solid with HTTPS enforced and basic privacy compliance, though additional security headers and explicit security policies could enhance the security maturity. Overall, the site is professional, trustworthy, and provides comprehensive content relevant to its audience.

A

AMS Agro-Marketing Suisse

suissegarantie.ch

46

Suisse Garantie is a Swiss agricultural certification organization that promotes and guarantees quality, freshness, sustainability, and Swiss origin of agricultural products. The website serves as an informational and marketing platform targeting Swiss consumers and agricultural partners. It provides certification details, campaigns, and seasonal product information. The technical infrastructure uses modern JavaScript libraries, asynchronous analytics, and video embeds, indicating a mature digital presence. Security posture is good with HTTPS and no visible vulnerabilities, but lacks explicit security policies and privacy compliance documentation. Overall, the site is professional and trustworthy but should improve privacy and cookie policy transparency.

EnableMe Foundation is a well-established non-profit organization dedicated to empowering people with disabilities worldwide through information dissemination, peer communities, and digital services. The organization operates multiple country-specific platforms and offers services such as job portals and apprenticeship programs, positioning itself as a global leader in disability inclusion. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the site uses modern JavaScript frameworks, Matomo analytics, and a consent management platform, indicating a mature digital infrastructure. Security posture is good with HTTPS and privacy mechanisms in place, though some security headers and explicit policies could be improved. Overall, the site is trustworthy and compliant with privacy regulations, though WHOIS data is unavailable, likely due to privacy protection. The absence of direct contact emails and phone numbers suggests a preference for contact via forms, typical for non-profits. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure information to further strengthen trust and compliance.

E

Entrepreneurship Center

entrepreneurship-bern.ch

43

The Entrepreneurship Center at the University of Bern is a specialized educational and outreach institution focused on fostering entrepreneurship and innovation. It offers continuing education programs such as CAS Corporate Strategy and CAS Entrepreneurship, practical start-up training modules in collaboration with Innosuisse, and organizes the STAGE UP business creation competition. The center targets students, researchers, entrepreneurs, and professionals seeking to develop entrepreneurial skills and business acumen. Its strong affiliation with the University of Bern and partnerships with regional academic and private entities position it as a credible and trusted resource in the Swiss entrepreneurship ecosystem. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, WPBakery Page Builder, and GDPR-compliant cookie management. The site is well-optimized for SEO, mobile responsive, and uses structured data for enhanced search visibility. Performance is moderate with good accessibility features, though some improvements in accessibility and security headers could be made. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms, and avoids exposing sensitive data. However, explicit security policies and incident response information are absent, and security headers are not detected. No vulnerabilities or suspicious activities are evident. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance, making it a reliable platform for its target audience. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility to further strengthen its posture.

N

NTN Innovation Booster - User-Centred HealthTech

ucht.ch

46

The NTN Innovation Booster - User-Centred HealthTech is a Swiss-based innovation support program focused on the healthcare technology sector. It aims to assist partners by connecting them with experts to address business challenges in health technology. The website indicates that the program has concluded its activities, providing informational content and contact details primarily for legacy or reference purposes. The business model centers on innovation facilitation within a niche market, targeting healthcare and technology partners. The organization maintains a modest online presence with social media links and affiliation to the Innosuisse innovation booster programs. Technically, the website is built on WordPress using common plugins such as Modern Events Calendar Lite and Sassy Social Share. The site is moderately optimized for mobile devices and SEO, with a basic but consistent design. HTTPS is enforced, ensuring secure communications. However, the site lacks advanced security headers and does not provide privacy or cookie policies, which are important for compliance and user trust. From a security perspective, the site shows a basic security posture with HTTPS enabled but missing security headers and no visible incident response or vulnerability disclosure mechanisms. No forms are present on the homepage, reducing attack surface, but the absence of privacy and cookie policies indicates compliance gaps. The domain registration is privacy protected but consistent with the business age and type, indicating legitimacy. Overall, the website is safe and professional but minimalistic, reflecting a concluded program rather than an active service. Strategic recommendations include adding privacy and cookie policies, implementing security headers, and providing incident response contacts to enhance compliance and security posture.

The Ernst Göhner Stiftung is a Swiss foundation holding participations in various companies and significant real estate assets. It focuses on philanthropic activities supporting culture, social causes, environmental projects, education, and science. The foundation operates with a clear market position as a medium-sized non-profit entity with subsidiaries such as Seewarte Holding AG and EGS Beteiligungen AG. The website is professionally designed, multilingual, and provides clear navigation and relevant content for its target audience of non-profit organizations and project applicants. Technically, the site uses Concrete CMS with modern libraries like jQuery and Bootstrap, delivering moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and secure form handling, though it lacks some advanced security headers and explicit incident response policies. Privacy compliance is basic with a privacy policy present but no visible cookie consent mechanism. Overall, the site is trustworthy and well-maintained, reflecting the foundation's reputable status.

A

Allianz Gesundheitskompetenz

allianz-gesundheitskompetenz.ch

48

Allianz Gesundheitskompetenz is a Swiss non-profit platform dedicated to promoting health literacy by connecting stakeholders from healthcare, science, education, politics, economy, and media. The organization develops strategic concepts, supports projects, organizes symposiums, and awards the Gesundheitskompetenz-Preis to foster health literacy in Switzerland. The website reflects a well-established entity with a clear focus on public health education and collaboration. Technically, the site uses modern web technologies including Cmsbox CMS, Google Analytics, Google Tag Manager, and reCAPTCHA v3, ensuring a functional and moderately performant user experience with good mobile optimization. Security posture is solid with HTTPS and basic security best practices, though some security headers and policies could be improved. Privacy compliance is evident with cookie consent and a privacy policy, aligned with GDPR requirements. Overall, the website is professional, trustworthy, and serves its target audience effectively.

N

Niwotron AG

niwotron.ch

48

Niwotron AG is a Swiss-based distributor specializing in consumer electronics, targeting resellers with a broad portfolio of exclusive brands and products. The company emphasizes fast and reliable delivery, catering primarily to the B2B market within Switzerland. The website reflects a professional and consistent brand image, providing detailed product information, catalogs, and support resources. Technically, the site uses a ColdFusion backend with modern frontend libraries such as jQuery, FlexSlider, and FontAwesome, delivering a moderate performance and basic mobile optimization. Security-wise, the site employs HTTPS and avoids exposing sensitive data but lacks advanced security headers and formal privacy or cookie policies, indicating room for compliance improvements. Overall, the website is trustworthy and well-positioned in its market segment but should enhance privacy compliance and security practices to align with best standards.

T

Three Way AG

anforderungsprofile.ch

47

Anforderungsprofile.ch is an educational platform operated by Three Way AG, based in Switzerland, providing tools to explore and compare occupational profiles. The website targets students, teachers, career counselors, training companies, and associations, offering a niche service in vocational guidance. The platform is professionally designed with a clear focus on usability and accessibility, leveraging modern web technologies such as Bootstrap, jQuery, and FontAwesome. Google Analytics is used for traffic analysis, indicating moderate user tracking. Security posture is adequate with HTTPS usage and secure form handling, but lacks explicit security headers and privacy compliance documentation. The WHOIS data confirms the legitimacy of the domain and its alignment with the business entity. Overall, the site is trustworthy and functional but would benefit from enhanced privacy and security policies to improve compliance and user trust.

O

OWEXX - Web Development Company

domains33.com

41

The website domains33.com is a Lithuanian-based domain registration service provider offering a wide range of domain extensions for registration, including country-specific, new, and generic domains. The site is professionally designed with clear navigation and multilingual support, targeting businesses and individuals seeking domain registration services. The business appears to be operated or developed by OWEXX, a web development company with presence in London, Berlin, and Vilnius. Technically, the site uses modern JavaScript libraries such as jQuery, Bootstrap, and integrates Google Analytics and reCAPTCHA for user interaction and security. Security posture is moderate with HTTPS enabled and basic security practices like CAPTCHA and cookie consent implemented. However, the absence of explicit privacy policy, terms of service, and direct contact information reduces trust and compliance levels. The WHOIS data for the domain is missing or indicates the domain may not be registered, which raises concerns about domain legitimacy and business credibility. Overall, the site is functional and professional but would benefit from enhanced transparency and security disclosures.

names.lt is a Lithuanian-based domain registration and web hosting service provider with a strong regional presence in the Baltic and European markets. The company offers a range of services including domain registration, virtual and dedicated servers, SSL certificates, and Plesk licenses. The website is professionally designed, multilingual, and integrates modern web technologies such as jQuery, Google Analytics, and Google reCAPTCHA to enhance user experience and security. The branding is consistent and closely associated with OWEXX, a known hosting company, indicating a solid business foundation. However, the absence of WHOIS data limits the ability to fully verify domain registration legitimacy. The website includes GDPR-compliant cookie consent and privacy policy, reflecting awareness of privacy regulations. Overall, names.lt presents as a credible and established player in the domain and hosting market in Lithuania and surrounding regions.

T

Мониторинг обменников top-ex.org

top-ex.org

49

The website top-ex.org operates as a cryptocurrency and electronic money exchange monitoring platform primarily targeting Russian-speaking users. It provides users with real-time exchange rate comparisons, listings of exchangers, and user reviews to facilitate informed currency exchange decisions. The business model focuses on aggregating and presenting exchange offers and rates rather than direct financial transactions. Technically, the site employs modern frontend technologies such as Bootstrap and Font Awesome, and integrates analytics tools including Yandex Metrika and Google Tag Manager. Hosting and DNS services are provided via Cloudflare, ensuring reliable performance and security. Security posture is adequate with HTTPS enforced and domain transfer protections in place, though DNSSEC is not enabled and security headers could be improved. Privacy compliance is weak due to the absence of privacy and cookie policies, and no explicit contact emails or phone numbers are provided, limiting direct user support channels. Overall, the site is functional and professionally designed but would benefit from enhanced privacy disclosures and security best practices.

TRON Energy operates a specialized TRX energy rental service aimed at reducing transaction fees on the TRON blockchain network. The company targets TRC20 wallet users seeking cost-efficient transaction processing without requiring technical expertise. The website is multilingual, supporting English, Chinese, and Russian, and offers clear instructions and pricing for energy rental packages. The business model focuses on automated energy rental to optimize blockchain transaction costs, positioning itself as a niche service provider within the blockchain energy sector. Technically, the website employs modern JavaScript libraries, including Font Awesome for icons, Google Tag Manager, Google Analytics, and a Chinese analytics SDK (51.la). The site is responsive and well-designed with good user experience and navigation clarity. However, it lacks explicit security headers and privacy or cookie policies, which are critical for compliance and user trust. The domain uses HTTPS and has a clientTransferProhibited status, but the WHOIS data shows a suspicious future creation date, which undermines trust. From a security perspective, the site has a moderate posture with HTTPS enabled and no visible vulnerabilities in the content. However, the absence of privacy policies, cookie consent mechanisms, and incident response contacts are notable gaps. The use of third-party tracking scripts without clear privacy disclosures further impacts compliance. No WAF or blocking mechanisms were detected, and the content is safe for general audiences. Overall, the website is functional and professionally presented but requires improvements in privacy compliance, security best practices, and domain legitimacy verification. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, clarifying incident response procedures, and resolving WHOIS inconsistencies to enhance trust and compliance.

S

Spilva

spilva.lv

43

Spilva is a well-established Latvian food manufacturing and retail company specializing in sauces, preserves, and ready meals since 1992. The website reflects a mature digital presence with a comprehensive product catalog, multimedia content, and clear branding. Technically, the site is built on WordPress with WooCommerce and Elementor, leveraging modern web technologies and SEO best practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. The domain registration aligns well with the business history and claims, enhancing trustworthiness. Overall, the site presents a professional and credible business front with good user experience and compliance with privacy regulations.

R

Reklamos plotai, reklamos lauko stendai, LED ekranai, nuoma

reklaminiaiplotai.lt

43

The website www.reklaminiaiplotai.lt is a Lithuanian advertising platform offering a wide range of advertising spaces including outdoor advertising stands, LED screens, advertising trailers, and media advertising such as TV and radio. It positions itself as the largest advertising space provider in Lithuania, targeting businesses and advertisers seeking visibility in various public and commercial locations. The site is professionally designed, mobile-optimized, and uses modern technologies such as Google Maps API and Google Analytics, managed via the Rinup CMS platform. Security measures include HTTPS enforcement and use of Google reCAPTCHA for form protection, alongside a cookie consent mechanism indicating GDPR compliance awareness. However, the absence of WHOIS data and domain registration details limits full verification of domain legitimacy. The site lacks explicit privacy and terms of service pages, and no security headers were detected, suggesting room for improvement in security posture. Overall, the website is functional, business-focused, and moderately secure, suitable for its target audience but would benefit from enhanced transparency and security practices.

C

Cryptobrokers.ru

cryptobrokers.es

42

Cryptobrokers.es is a multilingual online platform specializing in monitoring and comparing cryptocurrency exchangers and electronic payment systems. The site provides users with updated exchange rates, reviews, and reserve information to facilitate optimal currency conversions. It targets users engaged in electronic asset transactions, offering a user-friendly interface and frequent data updates. Technically, the site is built on WordPress with common plugins such as Yoast SEO, Google Analytics, and reCAPTCHA, indicating a moderate level of digital maturity. Security measures include HTTPS and CAPTCHA integration, though some security headers are missing. The absence of explicit privacy and cookie policies and lack of WHOIS data limit full trust assessment. Overall, the platform is functional and serves a niche financial market with moderate professionalism and security.

The website digieasy.ch currently serves as a minimal placeholder that uses a frameset to load content from an external Jimdo-hosted subdomain. There is no substantive content, metadata, or business information directly available on the main domain. The lack of privacy policies, contact information, and security headers indicates a very low digital maturity and security posture. The domain's WHOIS data is privacy protected, which is common for small or personal websites but limits trust and legitimacy assessment. Overall, the site appears to be in an early or incomplete stage of deployment with minimal technical and business presence.

R

Rebel Communications

rebelcom.ch

47

Rebel Communications is a small creative agency based in Zurich, Switzerland, specializing in communication services aimed at societal change. The website is built on WordPress using the Divi theme and incorporates Yoast SEO Premium for search engine optimization. The site presents a professional design with good mobile optimization and clear navigation, targeting organizations interested in social impact and creative communication solutions. Security posture is adequate with HTTPS enabled and a cookie consent mechanism in place, but lacks advanced security headers and explicit privacy policies. No contact emails or phone numbers are explicitly provided in the HTML content, which may affect user trust and compliance. WHOIS data confirms legitimate domain registration consistent with the business claims, enhancing credibility. Overall, the website is functional and professional but would benefit from improved privacy compliance and enhanced security practices.

G

Gotomo GmbH

gotomo.ch

48

Gotomo GmbH is a specialized UX agency based in Switzerland focusing on mobile app design, UX architecture, and usability testing. The company positions itself as experts in creating intuitive mobile apps that foster loyal user bases. Their website showcases a professional portfolio with client case studies and multimedia content, targeting businesses seeking mobile UX solutions. Technically, the site is built on WordPress with a modern theme and plugins, including Yoast SEO and WPBakery Page Builder, and integrates analytics tools such as Google Analytics and Hotjar. The site is mobile-optimized and demonstrates good accessibility and SEO practices. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks explicit security headers and public security policies. Privacy compliance is limited due to the absence of visible privacy and cookie policies or consent mechanisms. Overall, the domain registration aligns well with the business identity, indicating legitimacy and trustworthiness.

EnableMe Schweiz is a well-established non-profit foundation and community platform focused on supporting people with disabilities, chronic illnesses, and neurodivergent conditions in Switzerland. Since 2004, it has provided a trusted space for open exchange, peer support, and access to helpful information, fostering self-determination and inclusion. The website offers multiple services including a community forum, job and apprenticeship portal, peer exchange programs, and insights surveys, targeting affected individuals, professionals, and companies. The organization maintains a strong market position as a recognized foundation with consistent branding and professional content.

A

Allerlay Wonesky Media

allerlay.com

47

Allerlay Wonesky Media appears to be a small media or creative agency based in Switzerland, founded around 2019. The website is built on WordPress and uses modern tracking and marketing tools such as Google Tag Manager, Matomo Analytics, and Mautic. The site is accessible with no WAF or security challenges blocking content. However, it lacks explicit privacy, cookie, and terms of service policies, which impacts its privacy compliance score. The domain registration data is consistent and legitimate, with no suspicious patterns detected. Security posture is moderate but could be improved by enabling DNSSEC and adding security headers. Overall, the website presents a professional appearance but requires enhancements in privacy and security transparency.

C

Cryptobrokers.ru

cryptbrokers.de

39

Cryptobrokers.ru operates an online currency exchange monitoring platform primarily targeting users interested in electronic and cryptocurrency asset exchanges. The platform provides real-time exchange rate comparisons, customer reviews, and reserve information to facilitate optimal currency conversions. The website is multilingual, with a German version analyzed here, and serves a niche market focused on finance and technology sectors. The business model revolves around providing a trusted intermediary service for users to find reliable exchangers quickly and securely. Technically, the site is built on WordPress with common plugins and uses modern tracking and analytics tools such as Google Analytics and Yandex Metrika. Security measures include HTTPS and Google reCAPTCHA, though visible security headers and formal security policies are lacking. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Overall, the site is professionally designed with good content quality and user experience but would benefit from enhanced transparency and security documentation.

C

Cryptobrokers.ru

cryptobrokers.fr

39

Cryptobrokers.fr is a French-language platform specializing in monitoring and comparing electronic currency and cryptocurrency exchange rates. It provides users with tools to find optimal exchange rates, evaluate exchangers based on client reviews, and perform quick financial transfers. The website is part of a multilingual network with sister sites in Russian, English, Spanish, German, and Chinese, indicating a broad international reach within the electronic currency exchange niche. The business model is based on providing a monitoring service without direct cooperation with exchangers, relying on transparency and user-generated feedback to build trust. Technically, the site is built on WordPress, leveraging common plugins such as Yoast SEO, Google Analytics, Yandex Metrika, and Google reCAPTCHA for security and analytics. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate, with a modern tech stack but some room for improvement in security headers and privacy compliance. Security posture is solid with HTTPS enforced and reCAPTCHA integration, but lacks published security policies, incident response contacts, and vulnerability disclosure mechanisms. Privacy compliance is weak due to absence of privacy and cookie policies and consent mechanisms. Contact information is not explicitly provided, which may affect user trust. Overall, the site is functional and professional but would benefit from enhanced transparency in privacy and security policies, improved contact availability, and implementation of security best practices to strengthen user trust and compliance.

K

Kaufmännischer Verband Zürich

wirkaufleute.ch

43

Wir Kaufleute is a professional blog operated by the Kaufmännischer Verband Zürich, a Swiss commercial association focused on education and career development in the commercial sector. The website offers well-structured, relevant content targeting apprentices, students, and commercial professionals, supported by a consistent brand identity and active social media presence. Technically, the site is built on WordPress with modern libraries and plugins, including Google Analytics for user insights. Security posture is strong with HTTPS and security headers, though privacy compliance could be improved with explicit cookie consent and GDPR details. Overall, the site is trustworthy and professionally maintained, serving as a valuable resource for its audience.

The website webtower.ch currently serves as a minimal placeholder announcing a forthcoming new website. It provides basic contact information including an email address and a Swiss phone number but lacks any detailed business description, services, or branding elements. The site uses Google Tag Manager for analytics but does not present privacy or cookie policies, security policies, or terms of service. Technically, the site is simple with basic styling and no detected CMS or advanced frameworks. Security posture is weak due to absence of security headers and unknown SSL status. Overall, the site is low in content quality and business credibility, limiting trust and user engagement.

W

ВебПроверка — отзывы о сайтах, сообщество интернет пользователей

webproverka.com

47

WebProverka.com is a Russian-language social network and website review platform operating since 2009. It provides a large catalog of websites with user-generated reviews, ratings, and a community focused on combating online fraud. The platform incentivizes user engagement through monetary bonuses for site visits and offers paid services for website owners to increase visibility. Technically, the site uses legacy technologies such as jQuery 1.5.1 and integrates Yandex analytics and advertising services. While the domain registration is stable and consistent with the business claims, the site lacks modern security headers and privacy compliance mechanisms, which are areas for improvement. Overall, the platform serves a niche audience in the Russian internet space with moderate technical maturity and a solid business presence.

E

Exwm - Home

exwm.cc

43

Exwm.cc appears to be a small business or startup website launched in 2020, hosted behind Cloudflare and built using modern web technologies such as Next.js and Material-UI. The website content is minimal, primarily serving as a home page with limited descriptive text. The integration of the Binotel chat widget indicates a focus on customer interaction via live chat. However, the site lacks critical compliance and trust elements such as privacy policies, cookie consent mechanisms, and clear contact information. The domain registration is privacy protected, which is common for small businesses but reduces transparency. Security posture is basic with HTTPS enabled but missing important security headers and DNSSEC. Overall, the site demonstrates moderate technical maturity but requires improvements in compliance, transparency, and security best practices.

P

Privacy service provided by Withheld for Privacy ehf

i-obmen.bz

48

The website i-obmen.bz operates as an automated cryptocurrency and electronic currency exchange platform primarily targeting Russian-speaking users. It offers a wide range of currency exchange options including popular cryptocurrencies such as Bitcoin, Ethereum, and Tether, as well as various Russian and Kazakhstani banking options. The business appears to be medium-sized, founded in 2017, and maintains partnerships with several exchange monitoring and financial service websites. The domain is registered with privacy protection, which is common in the financial sector to protect registrant data. The website content is comprehensive and professionally presented with good navigation and user experience.

S

Studio Eikon

studioeikon.com

47

Studio Eikon is a visual communication agency based in Naples, Italy, specializing in graphic advertising, editorial design, media planning, and web/social network design. The website presents a professional portfolio showcasing diverse projects for various clients, including public institutions and private companies. The business targets organizations seeking specialized visual communication services in the Italian market. Technically, the website is built on WordPress using the Divi theme and includes modern web technologies such as jQuery and MediaElement.js. The site is mobile-optimized and SEO-friendly but lacks some advanced accessibility features. Security-wise, the site uses HTTPS but lacks visible security headers and has a broken video element that may affect user experience. The absence of privacy and cookie policies is a compliance gap. WHOIS data for the domain is missing, raising concerns about domain legitimacy and transparency. Overall, the website is functional and professional but would benefit from improved security practices and compliance documentation.

The website benstruckrepair.com currently displays a minimal page indicating that access is blocked from the visitor's location, suggesting geoblocking or a security access restriction. Due to this, no substantive content about the business, services, or policies is available for analysis. The domain is registered with GoDaddy.com, LLC since 2017 with a long registration period and standard client protection statuses, indicating a stable registration but no privacy protection or DNSSEC enabled. The lack of accessible content prevents assessment of the company's market position, business model, or technical infrastructure. Security posture cannot be fully evaluated due to absence of data, but no HTTPS or security headers were detected in the provided data. Overall, the site appears to be either restricted or inactive for the current user location, limiting the ability to perform a comprehensive security and compliance analysis.

The website crxzone.com is currently inaccessible, returning a 403 Forbidden error which blocks any content retrieval or analysis. The domain is registered with GoDaddy.com, LLC since 2014 and is active without privacy protection, indicating a legitimate registration. However, the lack of accessible content prevents any meaningful assessment of the business, its services, or its market position. The technical infrastructure cannot be fully evaluated due to the blocked content, but the absence of DNSSEC and unknown SSL status suggest potential security improvements. The security posture is weak given the lack of accessible content and no visible security policies or headers. Overall, the site appears either non-operational or intentionally restricted, resulting in a low trust and quality score.

B

Bestemoneys.com

bestemoneys.com

44

Bestemoneys.com is a niche web portal established in 2009 that provides a comprehensive database and information about e-currencies, crypto coins, trading platforms, and related investment programs. The site targets users interested in e-currency services and crypto trading, offering affiliate programs and advertising opportunities as primary revenue streams. The website's market position is that of a specialized directory and informational resource within the finance and crypto sectors. Technically, the site uses legacy technologies such as jQuery 1.6.1 and lacks modern security features like HTTPS enforcement and DNSSEC. The design is basic with limited mobile optimization and accessibility features. Security posture is weak due to missing security headers, outdated libraries, and no visible SSL usage. Privacy compliance is poor with no privacy or cookie policies present. Overall, the site demonstrates moderate trustworthiness based on domain age and business focus but requires significant improvements in security and compliance to enhance credibility and user safety.

F

FOCUS E-Bike & FOCUS-Mobility - Experten für nachhaltige Mobilität

focus-ebike.de

48

The website focus-mobility.de serves as an expert platform dedicated to sustainable mobility, primarily focusing on E-Bikes and related electric mobility solutions. It offers comprehensive news, expert reports, and product testing to inform and guide consumers interested in the evolving transportation landscape. The site targets environmentally conscious individuals and mobility enthusiasts in Germany, positioning itself as a trusted source for mobility-related content and product evaluations. Technically, the website employs modern JavaScript frameworks, likely Vue.js, and integrates multiple third-party services including Google Tag Manager and INFOnline Measurement Manager for analytics and consent management. Hosting is provided via Amazon AWS infrastructure, ensuring reliable performance and scalability. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and includes a Content Security Policy header, reflecting a good baseline security posture. GDPR compliance is actively managed through consent mechanisms, although explicit privacy policies and security incident response information are not evident in the provided content. No critical vulnerabilities or WAF protections were detected, indicating open and accessible content. Overall, the website presents a professional and trustworthy front for its business domain, with solid technical implementation and moderate privacy compliance. Strategic improvements in explicit privacy documentation, security headers, and incident response transparency would further enhance its security and compliance stature.

C

Construction Safety Association of Manitoba

constructionsafety.ca

46

The Construction Safety Association of Manitoba (CSAM) operates as a trusted regional non-profit organization providing comprehensive safety and health training, certification programs such as COR® and SECOR®, consulting services, and a wide range of safety resources targeted at the construction industry in Manitoba, Canada. Their market position is strong within the regional construction safety sector, supported by professional content and active social media engagement. The website reflects a well-structured digital presence with clear navigation and relevant content for their audience. Technically, the website is built on WordPress using modern frameworks like Bootstrap and Genesis, integrating various plugins for enhanced functionality including Google Analytics, Hotjar, and Presto Player. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but lacks important security headers and cookie consent mechanisms, which are critical for compliance and protection. Security-wise, the site does not expose sensitive data and uses standard tracking tools, but the absence of a cookie consent banner and security policies indicates gaps in privacy compliance. The missing WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and business information appear professional and trustworthy. Overall, the risk is moderate with recommendations to enhance security headers, privacy compliance, and verify domain registration details. Strategically, CSAM should focus on improving privacy compliance by implementing cookie consent and publishing security and incident response policies. Enhancing security headers will strengthen defense against common web attacks. Verifying and updating WHOIS information will improve trustworthiness and domain legitimacy. These steps will solidify their digital trust and compliance posture while maintaining their leadership in construction safety training in Manitoba.

The website at microfinity.com is currently inaccessible, returning a 404 Not Found error with minimal JSON error message. No usable content, metadata, or business information is available for analysis. The domain is registered since 2008 with Network Solutions, LLC and uses Volusion nameservers, indicating hosting on the Volusion e-commerce platform. Due to the lack of accessible content, no meaningful assessment of the company's business model, services, or market position can be made. The technical infrastructure appears minimal or misconfigured, and no security or privacy policies are present on the site. Overall, the website appears inactive or improperly configured, limiting any further analysis.

F

Flug Taxi

flug-taxi.ch

49

Flug Taxi is a small Swiss company specializing in paragliding tandem flights, flight school courses, and special experience flights in the Aletsch Arena region of Valais, Switzerland. The website presents a professional and well-structured digital presence targeting tourists and adventure seekers interested in paragliding experiences. The business model focuses on service delivery in the adventure tourism sector with clear offerings and gift voucher options. Technically, the site uses the phpComasy CMS with modern JavaScript libraries such as jQuery and Video.js, providing a good user experience with mobile optimization and multimedia content. Security posture is adequate with HTTPS enforced and a cookie consent banner, but lacks advanced security headers and formal privacy or terms of service documentation. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

R

Restaurant Haberbüni

haberbueni.ch

43

Restaurant Haberbüni is a small hospitality business located near Bern, Switzerland, offering quality dining experiences including lunch menus, evening meals, and event hosting. The website presents a professional and consistent brand image with clear contact information and reservation capabilities. Technically, the site uses a modern CMS (indual CMS) and includes popular JavaScript libraries and analytics tools such as Google Tag Manager and Hotjar, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS usage and asynchronous loading of tracking scripts, but lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. Overall, the site is trustworthy and functional but would benefit from enhanced privacy compliance and security best practices.

T

tripadvisor.de

tripadvisor.de

49

The website tripadvisor.de is currently inaccessible due to a CAPTCHA challenge implemented by a WAF or anti-bot service, preventing content retrieval and analysis. The domain is hosted on Amazon AWS DNS infrastructure, indicating a legitimate enterprise-level hosting environment. Due to the blocking mechanism, no metadata, contact information, or business details could be extracted from the provided HTML content. Consequently, the website's privacy, cookie, and security policies cannot be assessed. The content safety rating is safe based on the absence of explicit content, but this is limited by the lack of accessible content. Overall, the site appears to be a legitimate enterprise hospitality-related domain but requires removal of access restrictions for a full security and compliance evaluation.

C

Cryptobrokers.ru

cryptobrokers.pro

46

Cryptobrokers.pro operates as an online monitoring platform for electronic money and cryptocurrency exchangers, providing users with updated exchange rates, customer reviews, and quick access to optimal currency conversion options. The platform targets internet users engaged in digital asset transactions, offering a user-friendly interface and a broad range of supported currencies and payment systems. Technically, the site is built on WordPress with common plugins such as Yoast SEO and Contact Form 7, integrating analytics tools like Google Analytics and Yandex Metrika, and employing Google reCAPTCHA for form security. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and explicit privacy or cookie policies indicates room for improvement. The WHOIS data is privacy protected, which is typical for this sector but limits transparency. Overall, the site presents a moderate risk profile with a professional appearance but lacks some compliance and contact transparency.

X

Exchange rates of electronic money and cryptocurrencies – XRates.pro online service

xrates.pro

43

XRates.pro is an online service specializing in monitoring and comparing exchange rates for electronic money and cryptocurrencies. It provides users with a convenient interface to find the best exchange rates across various exchangers and platforms, targeting individuals and businesses involved in digital currency transactions. The site includes features such as exchanger reviews, news, and informational articles to support users in making informed decisions. Technically, the website employs modern JavaScript libraries including jQuery, Select2, and Bootstrap, alongside Google Analytics and Tag Manager for tracking. The design is responsive and user-friendly, with good navigation and content relevance. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. The WHOIS data is not publicly available, indicating privacy protection, which is common but slightly reduces transparency. Overall, the site is functional, moderately secure, and serves a niche financial monitoring market effectively.

2

24kurs

24kurs.com

47

24kurs.com is a Russian-language online service specializing in monitoring currency exchange rates, particularly for cryptocurrencies and electronic money. The platform provides users with tools such as exchange rate tables, calculators, notifications, and the ability to add exchange points. It targets individuals seeking the best exchange rates and reliable exchangers, primarily within the Russian market. The business model revolves around aggregating exchange data and partnering with exchange services to offer competitive rates and bonuses. Technically, the website is built on WordPress, utilizing jQuery and several JavaScript plugins to deliver interactive features. Hosting is provided by REG.RU LLC, a reputable Russian registrar and hosting provider. Security posture is moderate, with HTTPS enabled but lacking advanced security headers and DNSSEC. Privacy compliance is limited, with a basic privacy policy present but no cookie consent mechanism or GDPR indicators. Contact information is minimal, relying on a contact form without direct emails or phone numbers. Overall, the site is functional and moderately professional but could improve in security and privacy transparency.

F

Fondazione Giancarlo Siani

fondazionegiancarlosiani.it

40

Fondazione Giancarlo Siani is a small Italian non-profit organization dedicated to preserving the memory of Giancarlo Siani, a journalist killed by organized crime. The foundation focuses on educational projects, press freedom advocacy, and cultural initiatives such as the Premio Siani award and the 'Favolette' reading project. The website is built on WordPress with a modern theme and includes social media integration and a newsletter subscription form. Technically, the site is well-structured and mobile optimized but lacks some security headers and formal privacy/cookie policies, which are important for compliance and trust. The domain registration is consistent with the foundation's history, and no blocking or WAF mechanisms interfere with content access. Overall, the site presents a professional and trustworthy image but could improve privacy compliance and security hardening.

The website at agkjs.com is currently inaccessible or contains no visible content, consisting solely of an empty HTML skeleton. There is no metadata, no forms, no scripts, no external links, and no business or contact information present. The domain WHOIS data is privacy protected, providing no registrant details, which combined with the lack of website content, suggests the domain is either parked, inactive, or blocked by security mechanisms. The absence of HTTPS and security headers further indicates a minimal or non-existent technical infrastructure. Due to these factors, the website does not present any identifiable business operations or services, and no trust or compliance indicators are available.