Medium-risk security reports

The website www.lu.ch serves as the official digital portal for the Canton of Luzern, Switzerland. It provides comprehensive information about the cantonal government, parliament, administration, municipalities, courts, and citizens' rights. The site also offers news updates, digital services through the my.lu.ch portal, and access to statistical and geographic data. It targets residents, government officials, businesses, and tourists within the region, positioning itself as the authoritative source for cantonal governance and public services. Technically, the website employs a modern technology stack including jQuery, VideoJS, Moment.js, Slick Slider, and CookieConsent for user experience and compliance. The site is well-optimized for mobile devices, accessible, and SEO-friendly. It uses HTTPS with strong SSL configuration and includes a cookie consent mechanism aligned with GDPR requirements. Analytics are conducted via Piwik (Matomo), ensuring moderate user tracking with privacy considerations. From a security perspective, the site enforces HTTPS and implements cookie consent but lacks explicit visible security headers such as CSP or X-Frame-Options in the provided data. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain is registered to the official government entity, enhancing trust and legitimacy. Overall, the website demonstrates a high level of professionalism, security, and compliance suitable for a government entity. Recommendations include enhancing security headers, publishing a security policy and incident response contact, and considering a security.txt file for vulnerability disclosures to further strengthen security posture.

Apotheke Meyer Roggwil AG is a local Swiss pharmacy and health center based in Roggwil, Switzerland. The company offers a broad range of pharmacy retail products, medical services including vaccinations, health analyses, and holistic complementary medicine. It positions itself as a community-focused, independent pharmacy with a strong emphasis on customer service and health education through events and a health blog. The website is professionally designed with clear navigation and good mobile optimization, supporting a positive user experience for its target audience. Technically, the site uses the SIQUANDO Pro CMS platform with jQuery and includes cookie consent mechanisms and privacy policies aligned with GDPR requirements. Security posture is adequate with HTTPS usage and no visible vulnerabilities, though security headers and incident response contacts could be improved. WHOIS data confirms the legitimacy and consistency of the business registration. Overall, the website reflects a trustworthy, professional small healthcare business with a solid digital presence.

The website landi.swiss/de-CH/cooperative/landi-melchnau-buetzberg represents the LANDI Melchnau-Bützberg, an agricultural cooperative in Switzerland under the parent organization fenaco Genossenschaft. The cooperative supports local farmers and private persons with agricultural supplies, retail goods, and energy services including fuel stations and electric vehicle charging. The website is built on a modern Angular framework with integration of Google Tag Manager and a cookie consent mechanism, indicating a moderate level of digital maturity. However, it lacks explicit privacy policy and terms of service pages, which are important for compliance and user trust. Security posture is generally good with HTTPS and domain transfer protection, but DNSSEC is not enabled, and security headers are not explicitly detected. Overall, the site is professional and trustworthy but could improve privacy compliance and security hardening.

tchncs.de is a small, individual-operated platform based in Germany that provides a curated collection of open-source software services. The website hosts and links to various federated social media instances, collaboration tools, chat platforms, blogging, development, and gaming services. It operates on a donation-funded, ad-free model, targeting users interested in privacy-respecting and decentralized technology solutions. The platform emphasizes community and open-source values, positioning itself as a niche provider in the federated software ecosystem. Technically, the website uses standard web technologies including jQuery and SVG graphics, with hosting inferred to be through INWX based on nameservers. The site is moderately optimized for performance and mobile devices, with a clear and consistent branding approach. SEO and accessibility are basic but functional. Analytics are implemented via a privacy-friendly service (Plausible Analytics), indicating a focus on minimal user tracking. From a security perspective, the site uses HTTPS (assumed from URL scheme and modern practices), but lacks explicit security headers and published security policies. No incident response or vulnerability disclosure information is available, which could be improved to enhance trust and compliance. The WHOIS data is consistent with the website's claims, showing legitimate registration without privacy protection, appropriate for an individual operator. Overall, tchncs.de presents a trustworthy and well-maintained platform for open-source and federated services, with room for improvement in security policies and privacy compliance mechanisms. Strategic recommendations include implementing security headers, publishing incident response contacts, and adding cookie consent to align with GDPR best practices.

Norsk Redaktørforening is a Norwegian professional association representing approximately 820 members from various editorially controlled media outlets across Norway. The organization advocates for editorial independence, freedom of information and expression, and favorable conditions for editor-led media. They provide advisory services, ethical and legal guidance, and organize events and training for their members. The website reflects a mature digital presence with modern technologies such as Next.js and Sanity CMS, and uses privacy-focused analytics (Fathom). Security posture is adequate with HTTPS enforced, but lacks some security headers and explicit privacy/cookie policies. Contact information is clearly presented, supporting member engagement and trust. Overall, the site is professional, well-structured, and trustworthy, serving a specialized media professional audience.

Spoon is a Norwegian creative and strategic communications agency established in 1998, offering a broad range of services including strategy, concept development, design, content marketing, video production, and employer branding. The company positions itself as an expert in authentic, creative, and insight-driven communication, targeting businesses and organizations seeking to enhance their brand presence and engagement. The website reflects a mature digital presence with professional design, structured data, and integration of marketing and analytics tools such as HubSpot and Google Tag Manager. Technically, the site is built on WordPress with modern JavaScript libraries and demonstrates good mobile optimization and SEO practices. Security posture is strong with HTTPS enabled and use of nonce attributes in scripts, though some security headers are not explicitly detected. Privacy compliance is partial, with a cookie policy and consent mechanism present but lacking a dedicated privacy policy or terms of service pages. Contact information is primarily via a contact form, with no explicit emails or phone numbers found. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

NILs Årbok is a Norwegian niche media publication focused on celebrating and showcasing the best work by interior architects and furniture designers in Norway. The website serves as a content platform featuring articles, projects, and industry advertisements, targeting professionals and enthusiasts in the interior design sector. Technically, the site is built on Craft CMS with SEOmatic for SEO optimization, uses Google Tag Manager and Analytics for tracking, and implements a comprehensive cookie consent mechanism compliant with GDPR. Security posture is solid with HTTPS and CSRF protections, though some security headers and explicit policies could be improved. Overall, the site is professional, trustworthy, and well-optimized for its audience and purpose.

Petr&Co is a small creative or digital agency website primarily showcasing video content embedded from Vimeo. The site has a minimalistic design with limited textual content and navigation linking to 'work' and 'more' pages. The business description and detailed services are not explicitly provided, making it difficult to ascertain the full scope of their offerings or market position. The target audience appears to be clients or professionals interested in creative digital work. Technically, the site uses modern JavaScript frameworks such as Turbolinks and integrates Google Analytics for tracking. The embedded Vimeo player indicates a focus on multimedia content delivery. Security posture is weak due to the absence of security headers, privacy policies, and contact information. No explicit compliance or incident response policies are present. Overall, the site is functional and visually appealing but lacks critical security and compliance features, which could impact trust and regulatory adherence.

Arup is a global consultancy specializing in planning, designing, and engineering sustainable infrastructure and buildings. The company offers expertise across more than 150 disciplines, focusing on shaping the built environment with sustainability and innovation. Their market position is that of a leading enterprise-level consultancy with a broad international presence and a strong reputation for quality and impact. The website reflects a mature digital infrastructure with modern analytics, consent management, and multimedia content, indicating a high level of digital maturity. Security posture is solid with HTTPS and monitoring tools in place, though explicit security headers and a public security policy are absent. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site presents a professional, trustworthy, and well-maintained digital presence aligned with the company's global stature.

TC Cuadernos operates a professional e-commerce website specializing in architecture books and magazines, targeting architects, students, and enthusiasts primarily in Spain. The website is built on PrestaShop CMS with modern web technologies and includes features such as product carousels, search, user accounts, and secure checkout. Security posture is strong with HTTPS, security headers, and CAPTCHA protections, though explicit privacy and cookie policies are not clearly linked. WHOIS data is unavailable, which raises some concerns about domain legitimacy, but the website content and functionality suggest a legitimate business. Overall, the site demonstrates good digital maturity with room for improvement in privacy transparency and incident response readiness.

신세계건설의 VILLIV 브랜드 웹사이트 serves as a lifestyle magazine and real estate information portal focused on premium residential living in South Korea. The site offers rich multimedia content including articles, videos, and newsletters targeting prospective homebuyers and lifestyle enthusiasts. The business is well-established with a domain age of over 6 years, consistent WHOIS data, and clear branding aligned with the parent company. Technically, the site uses modern web technologies such as Bootstrap, Swiper.js, and integrates marketing and analytics tools like Facebook Pixel and Google Tag Manager. Security posture is moderate with domain protection flags and HTTPS usage, but lacks explicit security headers and cookie consent mechanisms. Privacy policies and terms of service are comprehensive and publicly accessible, though GDPR compliance indicators are minimal. Overall, the site is professional, trustworthy, and well-positioned in the real estate and lifestyle content market.

Steve Edge Design is an established London-based global branding agency founded in 1985, specializing in brand identity, strategy, and digital design and build services. The company targets businesses across multiple sectors including real estate, luxury, hospitality, and professional services, positioning itself as a premium independent agency with a strong portfolio and global reach. The website reflects a mature digital presence with a modern tech stack leveraging Next.js and React, ensuring fast performance, mobile optimization, and good accessibility. Security posture is strong with HTTPS and security headers implemented, though the absence of a cookie consent mechanism and terms of service page are notable gaps. The lack of WHOIS data for the domain introduces some uncertainty regarding domain legitimacy, but the professional content and clear contact information mitigate this risk. Overall, the site demonstrates a high level of professionalism and trustworthiness in its business and technical presentation.

Renault Trucks Suomi operates as a regional subsidiary of the global Renault Trucks brand, providing a comprehensive range of trucks and transport solutions tailored for the Finnish market. The website showcases various truck models and services, targeting transport and logistics companies. The business is positioned as a reputable player in the transportation sector with a focus on quality and service. Technically, the website is built on Drupal CMS and integrates multiple analytics and marketing tools such as Google Analytics, Matomo, and HubSpot, indicating a mature digital infrastructure. The presence of a OneTrust cookie consent mechanism reflects attention to privacy compliance, although explicit privacy and terms of service pages are not detected in the provided content. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but could be improved by adding security headers and publishing security policies. Overall, the website is professional, trustworthy, and safe for general audiences.

Renault Trucks Danmark is a key player in the commercial vehicle sector in Denmark, offering a wide range of trucks and innovative transport services. As a subsidiary of Renault Trucks, it benefits from a strong brand presence and a comprehensive product portfolio targeting business customers in transportation and logistics. The website reflects a professional and consistent brand image with good content quality and clear navigation tailored to its target audience. Technically, the site is built on Drupal CMS and integrates modern analytics and marketing tools such as Google Analytics, Matomo, HubSpot, and OneTrust for cookie consent, indicating a mature digital infrastructure. Security measures include HTTPS enforcement and standard security headers, although explicit security and incident response policies are not published. The absence of WHOIS data limits domain trust verification, but the overall website professionalism and branding suggest legitimacy. Privacy compliance is partially addressed with cookie consent mechanisms, but the lack of a dedicated privacy policy page and explicit contact details are areas for improvement. Overall, the site scores well in content, technical implementation, and security posture, with recommendations to enhance privacy transparency and domain trust verification.

Renault Trucks Czech Republic operates a professional website offering a broad portfolio of transport solutions including heavy trucks, electric vehicles, and used trucks. The company is positioned as a key player in the transportation sector within the Czech market, supported by a strong global parent brand. The website demonstrates a mature digital presence with modern technologies such as Drupal CMS, integrated analytics, and marketing tools, alongside GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforcement and security headers, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the site is trustworthy and well-structured, serving its target audience effectively.

Renault Trucks Bulgaria operates as a regional subsidiary of the global Renault Trucks brand, providing a comprehensive range of transport solutions and commercial vehicles tailored to various sectors including long-distance transport, construction, and municipal services. The website reflects a professional and consistent brand presence, targeting business customers in Bulgaria with localized content and services. Technically, the site is built on Drupal CMS and integrates multiple analytics and marketing tools such as Google Analytics, Matomo, and HubSpot, complemented by a OneTrust cookie consent mechanism to address privacy compliance. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though security headers could be enhanced for better protection. The absence of explicit privacy and terms of service policies is a notable gap in compliance documentation. Overall, the website is trustworthy, well-structured, and serves its business purpose effectively.

PRÜM-Türenwerk GmbH operates a professional website focused on door manufacturing and providing detailed door handbooks and specification texts. The site targets professionals in construction and architecture sectors, offering specialized product information. The company maintains a medium-sized manufacturing business based in Germany with consistent branding and a good quality web presence. Technically, the website is built on TYPO3 CMS with modern frontend technologies such as Bootstrap and jQuery UI. The site is moderately performant, mobile-optimized, and includes SEO best practices. Cookie consent and privacy policies are well implemented, reflecting GDPR compliance. However, explicit security headers and incident response policies are not published. Security posture is adequate with HTTPS and cookie management but could be improved by adding security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected. Tracking includes Google Analytics and Facebook Pixel with user consent mechanisms. Overall, the website is professional, trustworthy, and compliant with privacy regulations. The domain WHOIS data is partially consistent with the website content, supporting legitimacy. No blocking or WAF challenges were detected, allowing full content analysis.

web4business is a professional web design and website creation service provider based in Berlin, Germany, operating under the parent company IONOS GROUP SE. The company offers full-service web solutions including modern web design and personalized customer service, targeting businesses and professionals seeking to establish or improve their online presence. With over 10 years of experience and more than 25,000 websites created, web4business holds a solid market position in the technology sector. Technically, the website is built on TYPO3 CMS with Bootstrap framework, integrating Google Analytics and Tag Manager for analytics and klaro for cookie consent management. The site is mobile optimized and demonstrates good SEO and accessibility practices. Security posture is adequate with HTTPS enforced and privacy compliance well addressed through clear privacy and cookie policies. However, there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

Arbonia AG is a Swiss-based company specializing in smart door solutions for residential buildings, offering keyless access systems branded as SmartDOOR. The company collaborates with KIWI.KI GmbH for sensor technology integration and distributes products through established system partners in Germany and Switzerland. Their business model combines manufacturing, distribution, and digital access management services via the KIWI Portal, targeting residents, landlords, and service providers. The website is professionally designed, multilingual, and provides comprehensive product information and contact options. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries and cookie consent management tools. It demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and published security policies are absent. The WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but is common for corporate domains. Overall, the website reflects a mature digital presence with strong business credibility and moderate security maturity. There are opportunities to enhance security transparency and incident response readiness. The site is safe for general audiences and free from adult or questionable content.

SvizzeraEnergia is an official program of the Swiss Federal Office of Energy aimed at supporting voluntary measures to implement Swiss energy policy. The website serves as an informational platform targeting stakeholders in the Swiss energy sector and the general public interested in energy policy. It is positioned as a government-backed initiative with a focus on sustainability and energy efficiency. Technically, the website is built using modern static site generation technology (Gatsby) and includes multimedia support via Video.js and Uppy for file uploads, indicating a moderate level of digital maturity. However, the site lacks explicit privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security posture is moderate with no detected security headers or incident response information, suggesting room for improvement in security best practices. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security measures.

SuisseEnergie is an official program of the Swiss Federal Office of Energy aimed at promoting voluntary implementation of Swiss energy policy. The website serves as an informational platform targeting Swiss residents, energy professionals, and policymakers, providing resources and encouragement for energy efficiency and renewable energy adoption. The site is well-branded and consistent with government standards, reflecting a strong market position as a trusted public sector initiative. Technically, the website is built using modern web technologies including React and Gatsby, ensuring a performant and mobile-optimized experience. The use of static site generation contributes to moderate loading speeds and good SEO practices. However, there is room for improvement in accessibility and the addition of security headers. From a security perspective, the site benefits from HTTPS encryption and does not expose sensitive data. Nonetheless, the absence of security headers, privacy and cookie policies, and incident response contact information indicates gaps in compliance and security best practices. No vulnerability disclosure or security.txt files were found, limiting transparency for security researchers. Overall, SuisseEnergie presents a low-risk profile with high business credibility due to its government affiliation. Strategic improvements in privacy compliance and security policy transparency would enhance trust and regulatory adherence.

Das Gebäudeprogramm is an official Swiss government-backed initiative aimed at promoting energy efficiency and renewable energy investments in buildings. The website provides comprehensive information about funding opportunities, supported measures, and procedural guidance for applicants. It targets homeowners, builders, and renovators across Switzerland, offering multilingual support in German, French, and Italian. The program is a key pillar of Swiss energy and climate policy, supported by federal and cantonal authorities. Technically, the website employs modern web standards, uses Matomo for privacy-conscious analytics, and is well-optimized for mobile and accessibility. Security posture is strong with HTTPS and security headers, though it lacks explicit incident response or vulnerability disclosure pages. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is professional, trustworthy, and serves as a reliable resource for energy efficiency funding in Switzerland.

Das Gebäudeprogramm is an official Swiss government initiative supporting energy-efficient building and renovation projects. The website provides comprehensive information on funding opportunities, energy-saving measures, and application procedures targeted at homeowners and builders in Switzerland. It is well-positioned as a key pillar in Swiss energy and climate policy, backed by federal and cantonal authorities. The digital infrastructure is modern and secure, employing HTTPS and security headers, with Matomo analytics for user tracking. The site offers a professional user experience with clear navigation and multilingual support. Security posture is strong, though improvements could be made in cookie consent and incident response transparency. Overall, the website is trustworthy, compliant with GDPR, and serves its public service mission effectively.

Le transport recrute is a specialized French recruitment platform focusing on the transport and logistics sector, particularly road transport jobs. Founded in 2018 and operated by S2PWeb, it offers job listings, CV submissions, training and internship opportunities, and facilitates connections between candidates and recruiters. The platform is well-positioned in the French transport recruitment market with a professional and consistent brand presence. Technically, the website employs modern web technologies including Google Maps API, jQuery, Bootstrap, and Matomo analytics, ensuring a responsive and user-friendly experience. Security measures include HTTPS enforcement, CSRF tokens, Google reCAPTCHA, and cookie consent management, though some security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the site demonstrates a solid security posture and good digital maturity.

B2P Connect operates a professional blog focused on the transport and logistics industry, primarily targeting French-speaking professionals. The website provides industry news, updates on digital solutions, recruitment information, and partnership announcements. The blog is well-structured, uses modern SEO techniques including Yoast SEO and JSON-LD structured data, and maintains a consistent brand presence with active social media links. Technically, the site is built on WordPress with common plugins for analytics and GDPR compliance, showing moderate digital maturity. Security posture is adequate with HTTPS enabled and GDPR cookie consent implemented, though explicit privacy and terms of service pages are missing, and security headers are not detected. The WHOIS data for the subdomain is unavailable, which is typical, but reduces transparency slightly. Overall, the site is a credible and professional resource within its niche.

Rouillé & Coulon is a well-established family-owned SME specializing in transport, logistics, and vehicle rental services primarily in the Occitanie region of France, with additional sites in Aquitaine and the Paris region. The company boasts over 60 years of experience, a fleet of 230 vehicles, and a workforce of approximately 220 employees, positioning itself as a reliable regional player with national reach. Their services include road transport, combined transport, container transport, logistics, and vehicle rental with qualified drivers. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the website is built on CMS Made Simple and leverages modern web technologies such as Bootstrap, jQuery, Google Fonts, and integrates multimedia content from YouTube and Vimeo. It uses Matomo for analytics and Google reCAPTCHA for form security. The site is mobile-optimized and SEO-friendly, though performance is moderate. Security posture is decent with HTTPS and CAPTCHA usage, but lacks visible security headers and DNSSEC, which are recommended for improvement. From a security and compliance perspective, the site includes a comprehensive privacy and terms of service page indicating GDPR compliance, but lacks a visible cookie consent mechanism. The WHOIS data for the domain is missing or unavailable, which raises concerns about domain legitimacy and registration transparency. No critical vulnerabilities or malware indicators were found in the content. Contact information is complete and professional, supporting business credibility. Overall, the website is a good representation of a medium-sized transport and logistics company with solid business and technical foundations. However, the missing WHOIS data and minor security header omissions suggest areas for improvement to enhance trust and security posture.

Gamba & Rota is a French transport and logistics company specializing in comprehensive supply chain services including national and international transport, warehousing, and specialized logistics for the wine and spirits sector. The company emphasizes customized solutions, operational excellence, and secure storage facilities. Their website reflects a mature digital presence with detailed service descriptions, recent news updates, and active social media engagement. Technically, the site is built on WordPress with modern plugins and frameworks, offering good mobile responsiveness and SEO optimization. Security posture is solid with HTTPS and captcha protections, though lacks some advanced security headers and explicit security policies. The absence of WHOIS data for the domain introduces some uncertainty about domain registration legitimacy, but the professional content and business details support a credible operation. Overall, the website is well-structured and trustworthy for its business domain.

DHL is a globally recognized leader in logistics and international shipping services, offering a wide range of courier, transport, and supply chain solutions. The Finnish localized website reflects this global positioning with professional content tailored to business and individual customers in Finland. The site leverages Adobe Experience Manager as its CMS and integrates Adobe Analytics for user tracking, complemented by a OneTrust cookie consent mechanism to address privacy compliance. While the website is well-structured, mobile-optimized, and professionally branded, explicit privacy and terms of service documents were not found in the provided content, which is a compliance gap. The WHOIS data for the domain www.dhl.com is unavailable or restricted, limiting the ability to verify domain registration details, but the website's content and branding strongly indicate legitimacy. Security posture is moderate with HTTPS implied but no explicit security headers detected. Overall, the site is professional and trustworthy but could improve transparency and security practices.

Ageneau Group is a French transport and logistics company specializing in road freight and logistics services primarily in the Pays de la Loire region, Paris, and internationally. The company offers a broad range of transport solutions including temperature-controlled transport, international shipping, and vehicle rental with drivers. Their business model includes an online platform for shipment ordering, providing clients with personalized quotes and real-time shipment tracking. The website reflects a medium-sized enterprise with consistent branding and a professional digital presence.

Transports Jolival is a well-established family-owned transport and logistics company based in the Maine-et-Loire region of France, founded in 1948. The company offers a diversified fleet and a broad range of services including transport, distribution, vehicle rental, logistics, and flow management. It positions itself as a trusted regional leader with a strong emphasis on client satisfaction and sustainable practices. The website reflects a mature digital presence with clear service descriptions, client portals, and active social media engagement. Technically, the site is built on WordPress with Elementor, uses modern tracking and consent tools, and is secured with HTTPS. However, it lacks explicit published security policies and incident response information, which are areas for improvement. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

Bert Transport is a well-established French logistics and transport company with over 50 years of experience, offering tailored and innovative solutions primarily to business clients. The company emphasizes creativity, adaptability, and expertise to meet client needs in transport on demand, customized solutions, and logistics. The website reflects a mature digital presence built on WordPress, leveraging modern plugins such as Gravity Forms and Google reCAPTCHA to secure user interactions. SEO and accessibility are adequately addressed, with multilingual support and structured data enhancing search visibility. Security posture is solid with HTTPS enforced and CAPTCHA on forms, though some HTTP security headers are missing and no explicit security policy or incident response details are published. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. The domain registration data aligns well with the business claims, supporting legitimacy and trust. Overall, the website presents a professional, trustworthy, and business-focused digital front.

Groupe Sarrion is a well-established French transport and logistics company with a history dating back to 1947. It operates a large network of 27 agencies and subsidiaries across France, employing approximately 1300 people. The company offers a broad range of specialized transport services including general cargo, container transport, exceptional transport, bulk transport, hydrocarbon transport, waste management, and logistics solutions. Their market position is that of a significant player in the French transportation sector, emphasizing quality service and environmental responsibility. Technically, the website is built on WordPress with modern front-end libraries and plugins, providing a good user experience and mobile optimization. Security posture is solid with HTTPS enforced and GDPR compliance evident through comprehensive privacy and cookie policies, as well as a whistleblower alert system. However, the absence of WHOIS registration data and lack of explicit security headers represent areas for improvement. Overall, the website is professional, trustworthy, and compliant, supporting the company's credibility and operational transparency.

Groupe Vigneron is a medium-sized French transport and logistics company with a history dating back to 2004 as a domain and 70 years of corporate experience. The group specializes in road transport, multimodal logistics including rail and river transport, and industrial transport solutions. Their market position is strong regionally in Lorraine and nationally in France, supported by multiple subsidiaries and a professional online presence. Technically, the website is built on WordPress with modern SEO and caching plugins, delivering moderate performance and good mobile optimization. Security posture is solid with HTTPS and reCAPTCHA integration, though lacking explicit security headers and published security policies. Privacy compliance is good with cookie consent and privacy policy in place. Overall, the website reflects a credible and professional business with room for security enhancements.

Gemeinde Raperswilen operates as the official municipal government website for the community of Raperswilen, Switzerland. It provides residents and visitors with comprehensive information about local government, community services, news, events, and digital administrative services (eServices). The website is positioned as a trusted local government portal, serving a small community with essential public services and transparent communication. Technically, the website is built on the GOViS Swiss eGovernment CMS platform, utilizing modern JavaScript libraries such as jQuery and Font Awesome for UI enhancements. It implements a cookie consent mechanism compliant with GDPR, and uses Matomo analytics configured for privacy. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance characteristics. From a security perspective, the site enforces HTTPS and employs cookie consent best practices. However, it lacks explicit HTTP security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's governmental nature, confirming legitimacy and trustworthiness. Overall, the website presents a low-risk profile with good privacy compliance and business credibility. Strategic improvements include enhancing HTTP security headers and publishing security policies to further strengthen trust and security posture.

The website www.gottlieben.ch serves as the official digital presence of the municipality of Gottlieben in Switzerland. It provides comprehensive information about local government, politics, administration, cultural events, and public services aimed at residents, local businesses, and visitors. The site is well-structured with clear navigation and a consistent branding approach, reflecting its role as a trusted government resource. Technically, the website employs a modern technology stack including jQuery, Font Awesome, Magnific Popup, and Matomo analytics, built on the GOViS CMS platform. It demonstrates good mobile optimization and accessibility features, ensuring usability across devices. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses Matomo with secure cookie settings, but lacks several recommended security headers and a visible cookie consent mechanism. There is no published security policy or incident response contact, which could be improved to enhance trust and compliance. The WHOIS data confirms the domain's legitimacy and consistency with the municipal identity. Overall, the website is a reliable and professional government portal with good content quality and technical implementation. Strategic improvements in privacy compliance and security policies would further strengthen its posture and user trust.

MainAd is a performance marketing company specializing in dynamic advertising solutions powered by machine learning and customer journey data. Their flagship product, LOGICO, optimizes ad placements in real-time bidding environments to boost campaign performance globally. The company targets businesses seeking to enhance conversion rates and optimize media spend through tailored digital marketing strategies. Technically, the website is built on WordPress with standard SEO and analytics integrations, demonstrating moderate digital maturity. Security posture is adequate with HTTPS enabled and use of reCAPTCHA, but lacks advanced security headers and explicit privacy or cookie policies. The absence of WHOIS data raises concerns about domain legitimacy, though the professional website and global campaign presence suggest an established business. Overall, the site is functional and professional but would benefit from improved transparency and security practices.

Holidu GmbH operates a leading online platform specializing in vacation rentals across Europe, offering a wide selection of verified holiday homes, apartments, and villas. The company targets vacationers seeking family-friendly, pet-friendly, and amenity-rich accommodations, positioning itself as a trusted marketplace with a strong brand presence and high customer satisfaction as evidenced by integrated Trustpilot reviews. Technically, the website employs modern web technologies including React, Tailwind CSS, and integrates multiple analytics and marketing tools, hosted on AWS infrastructure ensuring scalability and performance. Security posture is robust with HTTPS enforcement, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site demonstrates a mature digital presence with good privacy compliance and business credibility, suitable for its market segment.

E-monsite is a French-based online platform specializing in website creation for individuals and businesses, offering free and professional website, blog, and e-commerce store creation without requiring coding skills. The platform targets a broad audience from beginners to experts, emphasizing ease of use, SEO optimization, and customizable design themes. The website is well-structured, content-rich, and professionally designed, reflecting a mature digital presence. Technically, the site uses modern web technologies including Bootstrap 4, jQuery, and integrates Google Analytics and Tag Manager for traffic analysis. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is partially addressed with a privacy policy and GDPR indicators, but lacks a visible cookie consent mechanism. WHOIS data is unavailable, which slightly reduces domain trustworthiness but the business presence and certifications like E-confiance support legitimacy. Overall, the site demonstrates a solid business and technical foundation with room for minor security and privacy enhancements.

MPskin is a specialized technology company offering an overlay solution to enhance Matterport virtual tours with advanced features such as augmented reality, multilingual support, and virtual staging. The company targets real estate professionals and digital marketers seeking to create engaging digital twins and immersive virtual experiences. Their market position is niche but well-defined, supported by a professional website and ISO 27001 certified hosting infrastructure. Technically, the website leverages modern JavaScript frameworks like Vue.js and Nuxt.js, integrates multiple analytics and marketing tools, and demonstrates strong performance and mobile optimization. Security posture is robust with HTTPS enforcement, security headers, and certified hosting, though the absence of public WHOIS data and incident response contacts suggests areas for improvement. Overall, MPskin presents a trustworthy and professional digital presence with minor gaps in transparency and vulnerability disclosure.

Hannover 96 operates an official website serving as the primary digital platform for the football club, providing fans with news, matchday information, video content, ticketing, and merchandise details. The site targets supporters and stakeholders interested in club activities and fan engagement. Technically, the website is built on TYPO3 CMS and integrates various modern web technologies including jQuery, Google Tag Manager, Google Analytics, and Facebook Pixel, indicating a mature digital infrastructure. The site demonstrates moderate performance and good mobile optimization, although accessibility features are basic. From a security perspective, the website enforces HTTPS and employs common tracking and advertising scripts. However, it lacks visible security headers and published security policies, which are areas for improvement. Privacy compliance is weak due to the absence of explicit privacy and cookie policies or consent mechanisms, which could expose the organization to regulatory risks. No contact information or incident response details are published, limiting transparency. Overall, the website is professional and functional but would benefit from enhanced privacy compliance, security hardening, and clearer contact and policy disclosures. These improvements would strengthen user trust and regulatory adherence while maintaining the club's strong brand presence online.

DFL Deutsche Fußball Liga GmbH operates as the central organization managing the German professional football leagues, including Bundesliga and 2. Bundesliga. The website serves as an authoritative source for current news, background information, and media related to German professional football. It targets football fans, media professionals, and stakeholders within the sports industry. The company maintains a strong market position as the leading football league operator in Germany, offering services such as league management, media production, player support, and educational programs. The presence of multiple subsidiaries and partnerships underscores its extensive operational ecosystem. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO Premium and Google Tag Manager. Hosting is provided via Amazon AWS, ensuring reliable infrastructure. The site demonstrates good mobile optimization and moderate performance, with a clean and professional design. Accessibility features are basic but present, and SEO optimization is good, supporting discoverability and user engagement. From a security perspective, the site uses HTTPS with strong SSL configuration and employs best practices such as controlled script loading and no visible sensitive data exposure. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident and could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms, aligning with GDPR requirements. No incident response or vulnerability disclosure information is published, representing an area for enhancement. Overall, the website is trustworthy, professional, and well-aligned with the business objectives of the DFL. It provides a safe and informative experience for its users, with room for improvement in security policy transparency and accessibility. The domain registration data supports the legitimacy of the entity, and no suspicious patterns were detected.

Expoya Travel operates as a digital platform specializing in travel and leisure experiences, offering users access to vouchers, destinations, and activities primarily targeting the German-speaking market. The platform functions as a digital expo, facilitating discovery and planning of travel adventures. Technically, the website is built on modern frameworks such as Next.js and Material-UI, hosted on Vercel, and integrates analytics and consent management tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforcement and cookie consent, though explicit security policies and incident response information are absent, representing areas for improvement. Overall, the website is professional and trustworthy, but the lack of WHOIS transparency and direct contact details slightly reduce business credibility.

Surat Kabar Pos Surosowan is a small Indonesian news website focusing on government social services and agricultural news. The site provides regularly updated content relevant to regional government agencies and the public interested in social welfare and livestock sectors. The website is built on WordPress with a moderate technical infrastructure including Cloudflare DNS and Yoast SEO plugin, offering good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled but lacks advanced DNS security and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional but could improve in transparency and security practices.

PT Prakasita Sekar Mataram is a small Indonesian company specializing in the production of traditional herbal medicines (jamu), botanical drinks, and natural cosmetics rooted in Javanese cultural philosophy. The company emphasizes natural ingredients and modern production standards to deliver safe and environmentally friendly health and beauty solutions. The website is built on WordPress with a modern tech stack including jQuery, Bootstrap, and Yoast SEO, hosted behind Cloudflare DNS but without DNSSEC enabled. The site is well-structured, mobile-optimized, and SEO-friendly but lacks critical privacy and security policy disclosures. No contact emails or phone numbers are provided, limiting direct communication channels. Security posture is moderate with HTTPS enabled but missing security headers and DNSSEC. Overall, the site is accessible, content-rich, and safe for general audiences but would benefit from enhanced privacy compliance and security practices.

Kampus Tutor Indonesia operates as an educational platform connecting students and tutors with flexible, personalized learning services both online and offline. The website presents a professional and content-rich environment targeting Indonesian students and learners. Technically, the site is built on WordPress with modern libraries and plugins, hosted behind Cloudflare DNS, and optimized for mobile devices. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers. The WHOIS data shows inconsistencies, including a future domain creation date and a registrant organization unrelated to the brand, which raises some trust concerns. No privacy or cookie policies are present, indicating compliance gaps. Overall, the site is functional and trustworthy for educational purposes but requires improvements in security and privacy transparency.

Radio Komunitas Lintas Subayang is a community radio station dedicated to serving the local residents of Subayang, Indonesia, by broadcasting local news, cultural content, and community information. The website positions itself as a voice and communication bridge for the local community, emphasizing cultural preservation and social solidarity. The business model revolves around community engagement and local media services, targeting a small local audience. The website is relatively new, matching the domain registration date in 2025, and reflects a small-sized media entity with a focus on local impact. Technically, the website is built on WordPress 6.8.3, utilizing common plugins such as Yoast SEO for search engine optimization and jQuery for scripting. The site is hosted behind Cloudflare DNS servers, indicating some level of infrastructure robustness. The site shows moderate performance and good mobile optimization, with basic accessibility features. SEO is well addressed through meta tags and structured data (JSON-LD). From a security perspective, the site uses HTTPS and has domain transfer protection enabled, but lacks DNSSEC and security headers, which are recommended for enhanced security. No privacy, cookie, or terms of service policies are present, indicating gaps in compliance and user transparency. No contact information or incident response channels are provided, limiting user trust and security reporting capabilities. No advertising or tracking technologies are detected, suggesting minimal user tracking. Overall, the website is functional and professionally presented for its purpose but requires improvements in privacy compliance, security hardening, and contact transparency to enhance trust and regulatory adherence. The domain registration is consistent with the business age and location, supporting legitimacy. Strategic recommendations include enabling DNSSEC, adding privacy and cookie policies, implementing security headers, and providing clear contact and incident response information.

Pop Ibu Roti Istimewa dengan Cita Rasa Rumah is a small Indonesian bakery business emphasizing traditional and home-style bakery products. The website serves primarily as an informational platform with blog posts related to government social services and bakery offerings. The site is built on WordPress using the Twenty Seventeen theme and Yoast SEO plugin, hosted behind Cloudflare DNS. The technical infrastructure is standard for small business websites, with moderate performance and good mobile optimization. Security posture is basic, with HTTPS enabled but lacking DNSSEC and security headers. Privacy compliance is minimal, with no visible privacy or cookie policies. Overall, the website is legitimate and safe but would benefit from enhanced security and privacy practices.

RSPAL dr. Ramelan Surabaya is presented as a professional and modern Type A Indonesian Navy hospital offering medical services to both military personnel and the general public. The website is built on WordPress with a modern tech stack including Bootstrap and jQuery, and is hosted behind Cloudflare DNS. The site features good design quality, mobile optimization, and SEO practices, but lacks critical privacy and cookie policies as well as explicit contact information. Security posture is moderate with HTTPS enabled but missing advanced security headers and DNSSEC. The domain WHOIS data raises concerns due to its recent creation date and registrant being a registrar company rather than the hospital entity, which impacts trustworthiness. Overall, the site is accessible, safe, and professionally presented but requires improvements in compliance and security transparency.

RKU FM Radio Lokal Terpercaya di Kayong Utara is a small local media business operating a radio station at 101.5 FM and providing news and entertainment content primarily for the Kayong Utara community in Indonesia. The website is built on WordPress and uses common plugins such as Yoast SEO and jQuery, indicating a standard modern CMS infrastructure. The site is accessible, mobile-optimized, and provides regularly updated news articles, but lacks key compliance documents such as privacy and cookie policies. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. WHOIS data shows inconsistencies with a future domain creation date and registrant information pointing to a registrar rather than the business, which raises some trust concerns. Overall, the website is functional and professional but would benefit from improved compliance and security practices.

The Kebumen Geopark website serves as an official informational platform promoting the geological wonders and cultural heritage of Kebumen, Indonesia. It targets tourists, educators, researchers, and local communities interested in geoscience and cultural preservation. The site is built on WordPress with SEO optimization and Cloudflare DNS, indicating a modern but small-scale digital infrastructure. While the site is well-structured and content-rich, it lacks explicit privacy, cookie, and security policies, which are critical for compliance and trust. The domain is newly registered but consistent with the website's launch timeline, and no suspicious WHOIS patterns are detected. Overall, the site is a credible government-related informational resource with room for improvement in security and privacy compliance.