Medium-risk security reports

calendrierdestrails.com is a specialized website launched in late 2023 that provides a comprehensive calendar and publication platform for trail running events primarily in France and abroad. It targets both trail runners looking for upcoming events and organizers wishing to publish their events quickly and for free. The site offers advanced search, regional and departmental categorization, and an interactive map to enhance user experience. Technically, the website is built on WordPress with modern technologies including Bootstrap 5, jQuery, Google Maps API, and uses Matomo for analytics and Google AdSense for monetization. The site is mobile-optimized and SEO-friendly with structured data implemented via JSON-LD. Security-wise, the site uses HTTPS with a clientTransferProhibited domain status but lacks DNSSEC and explicit security headers, which are recommended for improvement. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism detected. Overall, the website is functional, professional, and trustworthy but could enhance security and privacy features to improve compliance and user trust.

Materiel-velo.com is a French e-commerce retailer specializing in bicycles, mountain bikes, electric bikes, and related accessories and clothing. The company targets cycling enthusiasts and outdoor sports consumers primarily in France and neighboring countries. The website offers a broad catalog of products with a focus on competitive pricing and fast delivery within 24 to 48 hours. Technically, the site is built on the PrestaShop CMS platform, enhanced with modern search capabilities via Algolia and marketing automation through Connectif. The infrastructure supports a responsive and performant user experience across devices. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. However, the absence of WHOIS domain registration data reduces transparency and trust from a domain legitimacy perspective. Overall, the site presents a professional and trustworthy e-commerce platform with room for improvement in domain registration transparency and published security policies.

Duesenberg is a specialized manufacturer and retailer of premium musical instruments, primarily guitars, basses, lapsteels, amplifiers, and effect pedals. The company emphasizes German craftsmanship and collaborates with renowned artists to create signature instrument series. The website is professionally designed with excellent content quality, clear navigation, and mobile optimization, targeting musicians and guitar enthusiasts globally. Technically, the site uses modern frameworks such as Bootstrap and integrates Google Tag Manager for analytics, with a cookie consent mechanism ensuring privacy compliance. Security posture is good with HTTPS enforced, though some security headers are missing and no explicit security policies are published. The WHOIS data for the domain is missing or unavailable, which raises concerns about domain legitimacy despite the professional appearance of the site. Overall, the website presents a trustworthy and high-quality brand experience but would benefit from improved transparency in domain registration and contact information.

hostNET Medien GmbH is a well-established German hosting provider founded in 1994, offering a broad range of hosting solutions including managed-root cloud servers, baremetal cloud servers, reseller servers, dedicated servers, domain registration, SSL certificates, and backup services. The company targets businesses and individuals requiring reliable and professional hosting services, positioning itself as a trusted original hosting provider in Germany with memberships in key internet registries and councils. The website reflects a mature digital presence with a professional design, clear navigation, and GDPR-compliant privacy and cookie policies. Technically, the site uses a combination of Contao CMS, Bootstrap, and various JavaScript libraries, though some components like jQuery are outdated, suggesting room for modernization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but lacks explicit security policies and incident response contacts. Overall, the domain registration details align well with the business claims, supporting legitimacy and trustworthiness.

ThemeSphere is a small technology business specializing in premium WordPress themes and plugins, targeting both beginners and professional website developers. The company has an established market presence with over 31,000 buyers and a high positive rating on the Envato marketplace. Their business model revolves around digital product sales via a third-party marketplace and direct customer support. Technically, the website is built on WordPress with a custom theme, uses modern web standards, and is hosted with reputable DNS providers. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR indicators. Overall, the website is trustworthy and professional but could improve in privacy and security transparency.

Stiftung Habitat is a Swiss non-profit organization focused on revitalizing historic industrial properties in Basel, such as the Aktienmühle, into vibrant creative workspaces and social hubs. Their website presents detailed information about their properties, including the Werkstatthaus and Pförtnerhaus, emphasizing community engagement and support for small businesses and social initiatives. The organization targets creative professionals, social enterprises, and the local community, positioning itself as a niche player in real estate with a social mission. Technically, the website employs modern analytics and tracking tools including Google Analytics, Microsoft Clarity, Facebook Pixel, and LinkedIn Insight Tag, integrated via Google Tag Manager. The site is well-structured, mobile-optimized, and uses HTTPS with good SSL configuration. However, it lacks visible cookie consent mechanisms and security headers, which are areas for improvement. From a security perspective, the site shows good practices such as HTTPS enforcement and no exposed sensitive data. There is no evidence of vulnerability disclosure or incident response contacts, which could be enhanced to improve trust and compliance. Overall, the domain registration aligns well with the organization's claims, supporting legitimacy. The website is safe for general audiences, with no adult or questionable content detected. The overall risk is low, but strategic improvements in privacy compliance and security headers are recommended to strengthen the security posture and regulatory adherence.

Badhuesli Kultur is a small cultural venue and community space based in Basel, Switzerland, focusing on local and international music acts, dance, theater, and workshops. The website serves as a hub for the local music scene, offering rehearsal rooms and event hosting. The business model centers on cultural event facilitation and community engagement. Technically, the website is built on the Wix platform, utilizing standard Wix scripts and polyfills, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and some script-based security hardening, but lacks explicit security headers and formal privacy or cookie policies. Overall, the site is professional and trustworthy but could improve privacy compliance and contact transparency.

L'Unique Foundation operates a unique hospitality and cultural business in Basel, combining an Italian restaurant, bar, and rock museum with a non-profit foundation focused on water-related aid projects. The business holds a niche market position as Basel's first rock museum and gallery, offering a distinctive rock'n'roll atmosphere alongside quality Italian cuisine and drinks. The website reflects a professional and consistent brand image, targeting general audiences interested in culture, dining, and charity. Technically, the site is built on WordPress with modern plugins such as Elementor and Yoast SEO, supporting multilingual content and integrated analytics. Security posture is good with HTTPS and reCAPTCHA, though additional security headers and a vulnerability disclosure page would enhance trust. Overall, the site is accessible, well-structured, and compliant with GDPR through a privacy policy page, though cookie consent mechanisms are not evident. Contact information is clear and comprehensive, supporting business credibility.

The bird’s eye jazz club Basel is a small, culturally significant jazz venue in Switzerland, offering a rich program of live jazz concerts, workshops, and related merchandise sales. The website effectively targets jazz enthusiasts and cultural event attendees with detailed event information, artist profiles, and audio samples, positioning itself as a trusted local institution with international reach. Technically, the site uses a custom PHP-based CMS with standard web technologies and a lightbox library for enhanced user experience. Mobile optimization and navigation are good, though some accessibility and SEO improvements are possible. Security posture is moderate with HTTPS assumed but lacking explicit security headers and cookie consent mechanisms. No critical vulnerabilities or suspicious elements were detected. Overall, the site is professional, trustworthy, and content-rich, though it would benefit from enhanced privacy and security disclosures.

Kinker Club is a small local nightclub based in Basel, Switzerland, specializing in hard techno and rave events. The website serves as a digital presence to promote events, guestbook interactions, and venue rental services. The business targets a mature audience interested in nightlife and electronic music culture. Technically, the site is built on the EditMySite platform, utilizing common web technologies such as jQuery, Google Analytics, and Facebook Pixel for tracking and marketing. While the site is mobile-optimized and presents content professionally, it lacks critical privacy and cookie policies, which impacts compliance with GDPR and related regulations. Security posture is moderate with HTTPS enabled but missing key security headers and using outdated JavaScript libraries. Overall, the website is legitimate and consistent with the business it represents but would benefit from enhanced security and privacy measures.

Kulturbeiz 113 is a small hospitality business based in Basel, Switzerland, specializing in fresh, seasonal European fusion cuisine with vegan, vegetarian, fish, and meat options. The venue is located in a historic brewery building with terraces offering scenic views and hosts cultural events alongside private event rentals. The website is built on WordPress using the Twenty Seventeen theme, indicating a standard but functional digital presence. Technical infrastructure includes modern web technologies such as jQuery and responsive CSS, but lacks advanced performance or security optimizations. Security posture is basic with no detected security headers or incident response policies, and privacy compliance is minimal due to absence of privacy or cookie policies. Contact information is clearly presented, but no online forms or email contacts are provided, with reservations handled exclusively by phone. Overall, the site is legitimate and trustworthy but would benefit from enhanced security and compliance features.

GANNET is a cultural and hospitality venue located in Basel, Switzerland, operating primarily as a restaurant and live event space focused on music and theater. The website presents a well-structured platform showcasing upcoming events, ticketing options, and restaurant information, targeting a general audience interested in cultural experiences and dining. The business positions itself as a local cultural hub with a consistent brand presence and active social media engagement. Technically, the website leverages modern web technologies including Webflow CMS, Jetboost for filtering, Weglot for multilingual support, and Google Tag Manager for analytics. Hosting and CDN services are provided by Webflow and DigitalOcean, ensuring moderate performance and good mobile optimization. However, accessibility features are basic and could be improved. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers and does not provide a privacy or cookie policy, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is available. The site collects user data via a newsletter form and uses third-party ticketing services. Overall, the security posture is moderate but could be enhanced with better policy disclosures and security headers. The domain WHOIS data aligns well with the website's business claims, showing consistent registrant information and no privacy protection, supporting legitimacy. No suspicious patterns or critical vulnerabilities were detected in the content or technical setup. Strategic recommendations include implementing comprehensive privacy and cookie policies with consent mechanisms, adding security headers, publishing incident response contacts, and conducting regular security audits to improve compliance and trustworthiness.

Kaschemme Basel operates as a local cultural venue in Switzerland offering concert, nightclub, and bar services along with event space rentals. The business is supported by a cultural association founded in 2020, emphasizing music, art, and society. The website is built on the Squarespace platform, integrating standard web technologies and marketing tools such as Mailchimp for newsletter signups. Social media presence is active on Facebook, Instagram, and YouTube, enhancing community engagement. Technically, the site is moderately optimized for performance and mobile use, though accessibility features are basic. Security posture is adequate with HTTPS enforced but lacks advanced headers like HSTS and CSP. Privacy compliance is minimal with no visible privacy policy or terms of service pages, though a cookie consent banner is present. Overall, the site is trustworthy and legitimate, with domain registration consistent with business claims.

Hirscheneck is a small hospitality business based in Switzerland, offering restaurant services and a vibrant cultural program including concerts and club events. The website reflects a local venue focused on community engagement through live music and dining experiences. Technically, the site is built on the Webflow platform, utilizing Adobe Typekit fonts and jQuery, providing a modern and responsive user experience with moderate performance. However, the site lacks critical privacy and security documentation such as privacy policies, cookie consent mechanisms, and security headers, which impacts its overall security posture. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. The domain registration data is consistent with the business profile, indicating legitimacy. Overall, the website is safe for general audiences but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

Fondation Beyeler is a well-established Swiss museum specializing in modern and contemporary art, located in Riehen/Basel. The institution offers a rich program of exhibitions, educational workshops, events, and a museum shop, targeting art enthusiasts, families, and educators. The website reflects a mature digital presence with multilingual support and comprehensive visitor information. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and integrates various third-party services for analytics and marketing. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

Kaserne Basel is a prominent cultural venue in Switzerland specializing in contemporary theater, dance, performance, and popular music. The website serves as a platform to showcase upcoming events, artist residencies, workshops, and discourse series, targeting a broad audience interested in the arts. The business model revolves around event hosting, cultural programming, and community engagement, positioning Kaserne Basel as a key player in the Swiss cultural landscape. Technically, the website is built using modern web technologies including SvelteKit and leverages cloud storage and third-party services like MailerLite for newsletters and Google Analytics for minimal user tracking. The site demonstrates good mobile optimization and SEO practices, although accessibility features could be enhanced. Hosting appears to be provided by Infomaniak, a reputable Swiss provider. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes several security headers. Google Analytics is configured with privacy-conscious settings such as IP anonymization and disabled ad personalization. However, the absence of explicit privacy and cookie policies, as well as lack of incident response contact information, represent compliance and transparency gaps. Overall, the website is professional and trustworthy with a solid security posture but would benefit from improved privacy compliance and clearer user consent mechanisms. Strategic recommendations include publishing comprehensive privacy and cookie policies, implementing a security.txt file, and enhancing accessibility and incident response transparency.

The website youronlinechoices.eu serves as an informational platform funded by the internet advertising industry to educate users and companies about online behavioural advertising and privacy. It supports a pan-European self-regulatory initiative aimed at enhancing transparency and user control over data used for interest-based advertising. The site targets both internet users concerned about privacy and companies seeking to adopt industry best practices. Technically, the website uses legacy technologies such as jQuery 1.7.1 and custom JavaScript, with basic mobile optimization and moderate performance. There is no evidence of modern CMS or advanced frameworks. Security posture is limited, with no visible security headers or HTTPS verification in the provided data, and outdated libraries present potential vulnerabilities. Privacy compliance is weak, lacking explicit privacy or cookie policies and consent mechanisms. Business credibility is moderate, supported by consistent branding and industry backing but lacking direct contact information or certifications. Overall, the site is functional and informative but requires improvements in security, privacy compliance, and technical modernization.

TouristDataShop AG operates as a specialized provider of digital tourism data and booking solutions in Switzerland, primarily focusing on the Holidu Smart Destination platform. The company targets destinations, cities, and accommodation providers, offering services including sales, support, shared services, and helpdesk functions. Their market position is that of a niche player within the Swiss tourism technology sector, leveraging partnerships and integrations to enhance their offerings. Technically, the website is built on the Contao CMS platform, utilizing modern web technologies such as jQuery and Google Tag Manager for analytics and tracking. The site is mobile-optimized with good navigation and content quality, though some accessibility features could be improved. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website reflects a professional and trustworthy business presence with room for enhancements in security and privacy transparency.

SpeedAdmin ApS is a Denmark-based company specializing in SaaS solutions for music schools and services, offering comprehensive software to manage planning, teaching, attendance, and finances. The company has established a strong market presence in Europe, trusted by over 600 schools across 10 countries. Their website reflects a professional and consistent brand image, supported by certifications such as ISAE3000 and AAA Silver 2024, enhancing their credibility. Technically, the website is built on Webflow and leverages modern web technologies including Google Analytics, Microsoft Clarity, and various tracking pixels for marketing and analytics purposes. The site is fast, mobile-optimized, and SEO-friendly, though accessibility features could be improved. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and published incident response policies. The WHOIS data is unavailable, which slightly reduces trustworthiness; however, the website's content quality, certifications, and clear contact information mitigate concerns. Overall, the site demonstrates a mature digital infrastructure suitable for its business domain, with room for security and compliance enhancements. Strategic recommendations include adding security headers, publishing incident response and vulnerability disclosure policies, improving accessibility, and adding a Terms of Service page to strengthen legal clarity and user trust.

Duesenberg is a German manufacturer and retailer of premium guitars and related musical instruments, known for combining traditional craftsmanship with modern design and artist collaborations. The website positions the brand as a niche player targeting musicians and guitar enthusiasts globally, with a strong emphasis on quality and innovation. The digital infrastructure is built on modern web technologies including Bootstrap, jQuery, and Google Tag Manager, with good mobile optimization and user experience. Privacy compliance is well addressed through a comprehensive privacy policy and cookie consent mechanism. Security posture is solid with HTTPS and privacy-enhanced video embeds, though some security headers and incident response details are missing. Overall, the website is professional, trustworthy, and well-suited for its business purpose.

Sauter Informatik AG is a Swiss IT company founded in 1991, specializing in IT solutions including software, hardware, and custom website development. Their proprietary CMS platform, SI-CUBE, offers fixed-price, professional, and responsive websites targeted primarily at small and medium-sized enterprises in the region. The company emphasizes ease of use, professional design, and ongoing support. Technically, the website uses a modern but basic tech stack including jQuery, Bootstrap, and custom scripts, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and CAPTCHA protections, but lacks advanced security headers and formal policies. Privacy compliance is limited due to absence of privacy and terms of service pages. Overall, the website is professional and trustworthy, reflecting a legitimate business with consistent WHOIS data and clear contact information.

Spiri AG is a Swiss-based manufacturer specializing in custom and modular trumpets, leveraging a unique System Vario to cater to diverse musical needs. The company targets musicians and trumpet enthusiasts seeking personalized instruments, positioning itself as a niche player in the manufacturing sector. The website reflects a professional and consistent brand image with clear contact channels and product information. Technically, the site is built on the cm4all CMS platform, hosted by Hostpoint, and uses legacy JavaScript libraries alongside modern tools like Google Tag Manager. While the site is mobile-optimized and accessible, it lacks some modern security headers and explicit privacy compliance mechanisms. Security posture is solid with HTTPS and secure forms, but could be improved with additional headers and incident response information. Overall, the domain registration aligns well with the business claims, indicating legitimacy and trustworthiness.

FundCom AG is a small, owner-managed marketing and fundraising agency based in Zurich, Switzerland, founded in 2018. The company specializes in marketing communication and fundraising consultancy, targeting non-profit organizations and institutions seeking effective communication and fundraising strategies. The website is professionally designed using WordPress with Elementor and optimized for performance with NitroPack, reflecting a modern digital infrastructure. The presence of structured data and social media links enhances their online credibility. Security posture is strong with HTTPS, security headers, and cookie consent via Cookiebot, although explicit privacy and terms of service policies are missing. Overall, the website and WHOIS data align well, indicating a legitimate and trustworthy business.

The website so.ch serves as the official digital portal for the Canton of Solothurn, Switzerland, providing comprehensive government information, public services, and administrative resources. It targets residents, businesses, and stakeholders within the canton, offering structured navigation to departments such as government, parliament, judiciary, and administration. The site leverages TYPO3 CMS, ensuring a stable and scalable content management environment. Technical infrastructure includes modern web technologies, Google Fonts, Matomo analytics for user insights, and reCAPTCHA for form security. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though improvements can be made by adding security headers and cookie consent mechanisms. Overall, the site reflects a professional government presence with high trustworthiness and good user experience.

The website www.hagnau-schaenzli.ch serves as an official municipal government portal for the community of Muttenz, Switzerland, focusing on urban development projects in the Hagnau and Schänzli areas. It provides detailed information about cooperative neighborhood planning procedures and private construction concepts, targeting local residents and stakeholders interested in community development. The site is positioned as a trusted source for project updates and community engagement within the local government sector. Technically, the website is built on the TYPO3 CMS platform, utilizing modern web technologies such as Google Analytics and Google Tag Manager for visitor tracking and performance monitoring. The site demonstrates moderate performance and good mobile optimization, with a clear navigation structure and professional design. However, it lacks some advanced accessibility features and explicit SEO enhancements beyond basic meta tags. From a security perspective, the site enforces HTTPS with anonymized IP tracking in Google Analytics, which is a positive privacy measure. Nonetheless, it lacks critical HTTP security headers and does not implement a cookie consent mechanism, which are important for GDPR compliance and overall security posture. No incident response or vulnerability disclosure policies are published, and no contact information is readily available on the homepage, which could hinder user trust and support. Overall, the website is a reliable and professional municipal information portal with room for improvement in privacy compliance and security best practices. Strategic enhancements in cookie consent, security headers, and transparent contact channels would strengthen its trustworthiness and regulatory adherence.

Publicjobs.ch is a specialized Swiss job portal focusing on socially meaningful jobs within the public administration sector and related organizations such as non-profits, healthcare, education, and energy. The platform offers job listings, employer profiles, and candidate account management primarily targeting job seekers interested in public sector employment in Switzerland. The website is well-branded and consistent, with a clear focus on its niche market. Technically, it uses a combination of Bootstrap, jQuery, and various third-party analytics and tracking services, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS and secure login forms, but lacks some security headers and published security policies. Privacy compliance is basic, with a privacy policy present but no visible cookie consent mechanism despite extensive tracking. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

BKK24 operates as a statutory health insurance provider in Germany, offering a wide range of healthcare services with a focus on comprehensive coverage and customer support. The website positions itself as a reliable and accessible insurer with nationwide presence and 24/7 service availability. The business model centers on statutory health insurance, targeting insured individuals and employers within Germany. The website content is professionally presented, consistent with the healthcare industry standards, and compliant with GDPR regulations. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries such as jQuery and Bootstrap for responsive design and user interaction. Cookiebot is integrated for cookie consent management, reflecting a mature approach to privacy compliance. Hosting is managed via kasserver.com, with secure HTTPS connections and moderate performance. SEO and accessibility are adequately addressed, though some improvements in accessibility could be beneficial. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers like Content-Security-Policy and X-Frame-Options. No critical vulnerabilities or exposed sensitive data were detected. The absence of a public security policy or incident response contact suggests room for improvement in transparency and readiness. Analytics usage is moderate, primarily via self-hosted Matomo and etracker, with clear data retention policies. Overall, BKK24's website demonstrates a solid digital presence with good privacy and security practices aligned with its business sector. Strategic enhancements in security headers, incident response disclosure, and accessibility would further strengthen its posture. The site is trustworthy, professional, and suitable for its target audience.

The website www.stiftungsbericht.de represents the Niedersächsische Lotto-Sport-Stiftung, a non-profit foundation established in 2009 by the Lower Saxony government through the merger of two prior foundations. The site primarily publishes annual foundation reports for public access, targeting a general audience interested in the foundation's activities and impact. The foundation holds a stable market position as a regional non-profit entity in Germany. Technically, the website employs modern web technologies including JavaScript ES modules, CSS, and the htmx framework, hosted on servers associated with kasserver.com. It uses Matomo analytics configured to disable cookies, reflecting a privacy-conscious approach. The site is mobile optimized with good SEO and accessibility basics, though some accessibility features could be improved. Security-wise, HTTPS is enforced with no visible sensitive data exposure, but lacks explicit security headers and formal security policies published on the site. No forms or contact details are present, limiting direct user engagement and incident response readiness. Overall, the site is professional and trustworthy but could enhance privacy and security transparency.

The website 'Bewegen.Integrieren.Fördern' serves as a crowdfunding platform operated by the Niedersächsische Lotto-Sport-Stiftung, focusing on supporting sports projects within Lower Saxony, Germany. It provides a digital venue for local sports clubs and initiatives to raise funds, featuring project listings with progress tracking and community engagement features. The platform leverages modern web technologies including React and integrates accessibility tools to enhance user experience. The site is well-structured, mobile-optimized, and includes privacy and cookie consent mechanisms aligned with GDPR requirements. Technically, the platform is built on a proprietary or custom CMS with integration of third-party services such as Google Analytics (with IP anonymization) and Eye-Able accessibility scripts. Hosting and DNS are managed via DomainControl (GoDaddy), and the site uses HTTPS with a good SSL configuration. However, there is a lack of visible HTTP security headers which could be improved to enhance security posture. From a security perspective, the site demonstrates good baseline practices including encrypted connections and user consent for cookies. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of a published security policy or incident response contact limits transparency in security management. WHOIS data is limited but does not raise concerns about legitimacy. Overall, the site is trustworthy and professionally maintained. Strategically, the platform is positioned as a regional niche crowdfunding service for non-profit sports projects, supported by a lottery sports foundation. It targets sports clubs and community members in Lower Saxony, providing a valuable service to facilitate funding and engagement. The business model is straightforward, relying on project hosting and donation facilitation. The site’s digital maturity is moderate with room for technical and security enhancements to further strengthen trust and compliance.

The website media-kit.io currently presents no accessible content, with an empty HTML body and no metadata, scripts, or forms. The domain is registered through IONOS SE under 1&1 Internet Limited in Great Britain, but the domain creation date is set in the future (June 2025), which is inconsistent and likely erroneous. The site uses Cloudflare nameservers but lacks DNSSEC and security headers, indicating a basic security posture. There are no privacy, cookie, or terms of service policies, nor any contact information or social media links, which limits user trust and compliance with data protection regulations. Overall, the website appears to be either under development or abandoned, with minimal technical or business maturity.

The website www.24h-camions.com is positioned as the official portal for the 24 Heures Camions truck racing event scheduled for September 2026. It aims to provide event news, multimedia content, schedules, results, and ticketing information primarily targeting French-speaking motorsport enthusiasts. However, the current site is non-functional due to a client-side JavaScript error, severely impacting user experience and content accessibility. The technical infrastructure leverages modern web technologies such as Next.js and React, hosted likely on Google Cloud Storage with CDN support, and integrates a consent management platform (Didomi) for cookie compliance. Despite these modern tools, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Security posture is moderate with HTTPS and consent mechanisms in place but lacks visible security headers and comprehensive privacy documentation. Overall, the site requires urgent remediation of technical errors and improved transparency to enhance trust and usability.

Union TLF is a well-established professional organization representing the transport and logistics sectors in France. Founded in 2000, it serves a large membership base of companies involved in various transport modes and logistics services. The website reflects a mature digital presence with comprehensive information about the organization's services, regional delegations, and industry engagements. The site is professionally designed, well-structured, and optimized for SEO and accessibility, targeting transport and logistics professionals and companies in France. Technically, the site is built on WordPress with modern tools such as Matomo for analytics and Tarteaucitron for cookie consent, demonstrating a commitment to privacy and GDPR compliance. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Overall, the domain registration data aligns well with the business claims, indicating a legitimate and trustworthy entity.

ONLYLYON is the official territorial marketing program for the Lyon metropolitan area, focusing on promoting tourism, business investment, education, and cultural activities. The website serves as a comprehensive portal for visitors, investors, students, and event organizers, supported by a network of ambassadors and partners. The site demonstrates a strong market position as a key promoter of Lyon's international ambitions, backed by public and private stakeholders. Technically, the website is built on the Roadiz CMS platform, uses modern web technologies, and integrates Google Analytics and a cookie consent mechanism, reflecting a mature digital infrastructure. Security posture is robust with HTTPS enforcement and standard security headers, although explicit security policies and incident response contacts are not published. The absence of WHOIS registration data for the domain is a notable anomaly that slightly reduces trustworthiness but does not detract from the professional presentation and content quality. Overall, the website is well-designed, user-friendly, and compliant with privacy regulations, making it a credible and authoritative source for information about Lyon's metropolitan offerings.

Transpolis is a specialized transportation safety and innovation center based in France, offering services such as crash testing, vehicle testing, sensor development, and simulation. The company operates two proving grounds and holds ISO 9001 certification as well as official Euro NCAP laboratory status, positioning it as a reputable player in the automotive safety testing market. The website is built on WordPress with Elementor, leveraging modern web technologies and providing a good user experience with mobile optimization and clear navigation. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although privacy policy and terms of service documents are missing, representing compliance gaps. Overall, the website reflects a professional and trustworthy business with room for improvement in privacy transparency and incident response disclosures.

UPTR is a well-established Belgian professional federation representing transporters and logisticians. Founded in 1937, it provides advocacy, information, and a broad range of specialized services to its members. The website reflects a mature digital presence with multilingual support, clear navigation, and comprehensive content tailored to its target audience. Technically, the site is built on WordPress with WooCommerce and enhanced by SEO and analytics tools like Yoast SEO Premium and Matomo, indicating a modern and privacy-conscious infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though some headers could be improved. Overall, the site demonstrates high professionalism and trustworthiness, with no signs of malicious activity or content safety concerns.

The Syndicat du Pneu website represents a well-established French trade association dedicated to the tire industry, active since 1929. It serves as a representative body for manufacturers, distributors, wholesalers, and equipment suppliers within France. The website provides industry-related information and resources, targeting professionals in the tire sector. The business model is centered on advocacy, networking, and industry representation, positioning the Syndicat du Pneu as a key stakeholder in the French tire market. Technically, the website is built on WordPress using the Divi theme, enhanced with Yoast SEO for search optimization and Burst Statistics for analytics. The site demonstrates good mobile optimization and moderate performance. The technical infrastructure is modern and standard for professional association websites, with no major technical debt or outdated components detected. From a security perspective, the site enforces HTTPS and uses standard security practices, though it lacks explicit security headers and dedicated security or incident response policies. No vulnerabilities or exposed sensitive data were found. Privacy compliance is strong, with GDPR-aligned privacy and cookie policies and consent mechanisms in place. However, WHOIS data is privacy protected, limiting domain registration transparency. Overall, the website is professional, secure, and compliant, with a low risk profile. Strategic recommendations include enhancing security headers, publishing incident response policies, and improving WHOIS transparency to bolster trust further.

The Organisation des Transporteurs Routiers Européens (OTRE) is a professional organization representing the French road transport sector, primarily focusing on SMEs with patrimonial capital. The website serves as a communication and advocacy platform, providing news, events, partnerships, and regional contact information. The organization positions itself as a key representative body for transport professionals in France. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Complianz GDPR, ensuring good SEO and privacy compliance mechanisms like cookie consent. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and documented incident response. WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and structure indicate a legitimate and professional entity. Overall, the site is well-designed, mobile-optimized, and provides clear contact information, supporting its credibility and user trust.

The International Organization of Motor Vehicle Manufacturers (OICA) is a well-established global industry association founded in 1998, headquartered in Paris, France. The organization focuses on promoting safer, cleaner, and smarter automotive manufacturing practices worldwide. Its website serves as a hub for industry news, statistics, event information, and member coordination, targeting automotive professionals and stakeholders globally. The business model is non-profit and essential within the transportation sector, with a medium-sized organizational footprint. Technically, the website is built on WordPress using Elementor and several Jet plugins, supported by OVH hosting. It employs modern web technologies including hCaptcha for form security and CookieHub for cookie consent management. The site demonstrates good SEO practices with structured data and meta tags, and it is optimized for mobile devices with a moderate performance profile. From a security perspective, the site uses HTTPS and implements CAPTCHA and cookie consent mechanisms, but lacks advanced security headers and published security policies. No vulnerabilities or suspicious content were detected, but the absence of a privacy policy and terms of service pages represents a compliance gap. The WHOIS data confirms domain legitimacy and consistency with the organization's claims. Overall, the website is professional, trustworthy, and content-rich, but could improve privacy compliance and security posture by publishing relevant policies and enhancing HTTP security headers. Strategic recommendations include enabling DNSSEC, adding security and incident response policies, and conducting regular security audits to maintain trust and compliance.

PFA (Plateforme automobile) is a prominent French automotive industry platform established in 2009, representing manufacturers, suppliers, subcontractors, and mobility actors. It serves as a strategic body for innovation, competitiveness, employment, and skills development within the French automotive sector and organizes major events such as Mondial de l’Auto. The website is professionally designed using WordPress with modern plugins and demonstrates a strong digital presence including social media integration and SEO optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit privacy and security policies are missing, representing compliance gaps. Overall, the site reflects a credible and authoritative industry platform with room for improvement in privacy and security transparency.

La Sphère des Possibles is a French communication agency established since 1992, specializing in communication consulting, event management, and business tourism services primarily in the Lyon region. The company presents itself as an innovative and comprehensive agency with a diverse team capable of addressing various client needs. The website is professionally designed using WordPress and includes rich content such as client testimonials, social media integration, and a video presentation to engage visitors. Technically, the site uses modern web technologies and plugins but lacks some security headers and has an unconfigured Google Analytics plugin. Security posture is moderate with HTTPS enforced and cookie consent implemented, but there is no visible incident response or vulnerability disclosure information. The WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy and reduces trustworthiness. Overall, the website is functional, professional, and safe for general audiences but would benefit from improved transparency and security practices.

The website www.gl-lyonevents.com/fr/eurexpo-lyon serves as an informational platform focused on events at Eurexpo Lyon, a major event venue in Lyon, France. The site appears to target event organizers and attendees interested in Lyon-based events, providing venue details and event-related content. The business model centers on event promotion and support services, although explicit business details and company information are not disclosed on the site. Technically, the site is built on Drupal 10 CMS and integrates modern web technologies including YouTube APIs, lazy loading for images, Matomo analytics, and Google Tag Manager for tracking and marketing purposes. The site is mobile-optimized and includes accessibility features, contributing to a moderate user experience and performance level. Security-wise, the site uses HTTPS and implements a cookie consent mechanism, but lacks visible security headers and published privacy or terms policies, which are important for compliance and trust. The WHOIS data for the domain is unavailable, raising concerns about domain legitimacy and transparency. Overall, the site is functional but would benefit from enhanced security practices, clearer business disclosures, and compliance documentation to improve trust and credibility.

AFTRAL is a leading French organization specializing in professional training and education in the transport and logistics sectors. The website offers a comprehensive catalog of courses ranging from CAP to BAC+6 levels, supported by a network of over 120 training centers and multiple campuses. The business targets professionals and students seeking qualifications and certifications in transport, logistics, and supply chain management. The site is well-structured, with clear navigation and a professional design consistent with its market position. Technically, the website is built on Drupal 7 with a variety of contributed modules and libraries such as jQuery UI and Apache Solr for search functionality. It integrates modern tracking and consent management tools including Google Tag Manager, TikTok Pixel, and Cookiebot, indicating a moderate level of digital maturity. Performance and mobile optimization are adequate, though some technical debt is implied by the use of older jQuery versions. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible advanced security headers and explicit security or incident response policies. The absence of WHOIS domain registration data raises concerns about domain legitimacy, though the website content and branding strongly suggest a legitimate and established entity. No critical vulnerabilities or exposed sensitive data were detected. Overall, AFTRAL's website presents a professional and trustworthy front for its educational services, but would benefit from enhanced transparency in privacy policies, contact information, and domain registration details to strengthen trust and compliance.

Mutualease is a French financial services brand specializing in leasing and financing professional equipment, operating under the Crédit Mutuel Leasing umbrella. The company targets a broad audience including constructors, distributors, private enterprises, and public sector actors, offering tailored leasing solutions such as credit-bail and operational leasing. The website is professionally designed, mobile-optimized, and provides comprehensive information about their services and commitments, including partnerships with reputable entities like the European Investment Fund. Technically, the site uses modern web technologies and integrates Piano Analytics for audience measurement, with a clear cookie consent mechanism ensuring GDPR compliance. Security posture is generally good with HTTPS enforced and a published vulnerability disclosure policy, though explicit security headers and incident response contacts are not visible. The absence of WHOIS data for the domain is a notable concern, suggesting possible registration anomalies, but the overall digital presence and branding indicate a legitimate business. Strategic recommendations include enhancing security headers, publishing explicit security policies, and resolving WHOIS inconsistencies to improve trust and compliance.

Michelin is a globally recognized enterprise specializing in the manufacturing and retail of tires for automobiles, motorcycles, bicycles, and related mobility products. The website serves as a comprehensive platform offering product information, dealer locators, promotions, and expert advice targeted at a broad audience including individual consumers and professionals. The brand maintains a strong market position as a leader in the transportation sector with consistent branding and high-quality content. Technically, the website leverages modern frameworks such as Astro and Svelte, integrates advanced consent management tools like Didomi, and employs performance optimization via CDNs and asynchronous loading of scripts. Security posture is robust with HTTPS enforcement, comprehensive security headers, and GDPR compliance, although explicit security policies and incident response contacts are not publicly available. Overall, the site demonstrates a mature digital presence with excellent user experience and trustworthiness, suitable for an enterprise of Michelin's stature.

proHolzBW GmbH is a regional organization dedicated to promoting the use of wood in Baden-Württemberg, Germany. It serves a broad audience including forestry operators, construction clients, architects, and planners by providing information, consulting, and support services. The organization is well-positioned in its niche with strong backing from EU and regional funding bodies, as evidenced by displayed logos and certifications. The website reflects a professional and consistent brand image with clear navigation and relevant content focused on sustainability and wood industry promotion. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates Google Analytics and Tag Manager for tracking. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong with comprehensive policies and GDPR adherence. No direct contact emails or phone numbers are publicly listed, relying instead on contact forms and social media channels. Overall, the site is trustworthy, well-maintained, and serves its business purpose effectively.

IZES gGmbH is a well-established, Saarland-supported, non-university research institute specializing in energy and material flow systems. With over 25 years of experience, it conducts transdisciplinary national and international projects focused on sustainable and climate-neutral energy and resource systems. The organization operates primarily through project funding and employs around 80 experts. The website is professionally designed using WordPress with modern plugins and provides comprehensive information about its research fields, projects, and events. Privacy and cookie compliance are well implemented, reflecting a strong commitment to GDPR standards. Security posture is good with HTTPS and security best practices in place, though explicit security policies and incident response contacts are not published. Overall, the website is trustworthy, technically sound, and serves its target audience effectively.

Swissmilk is the official online platform of the Schweizer Milchproduzenten SMP Genossenschaft, a Swiss dairy cooperative focused on promoting Swiss milk and milk products. The website serves as an online cookbook featuring seasonal recipes, kitchen tips, healthy nutrition information, and competitions, targeting a general audience interested in Swiss dairy products. The cooperative holds a strong market position within Switzerland as a trusted promoter of local dairy. Technically, the website is built using modern frameworks such as Nuxt.js and Vue.js, with integration of Cloudinary for media and Google Tag Manager for analytics. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response information are not published. Privacy compliance is limited due to the absence of visible privacy and cookie policies. Overall, the website is trustworthy, well-maintained, and serves its business purpose effectively.

Meier AG is a specialized communication and web development agency based in Schaffhausen, Switzerland, with a history rooted in the predecessor agency SOBAG since 1999 and formally established as Meier AG in 2019. The company offers a comprehensive suite of services including consulting, web development, web design, communication and PR, social media management, and ongoing support. Positioned as a reliable and innovative partner, Meier AG targets a broad range of clients from startups to large enterprises within Switzerland. The website reflects a professional and consistent brand image with clear navigation and rich content, supporting its market position effectively. Technically, the website is built on TYPO3 CMS with Bootstrap 4 and integrates modern technologies such as Google Analytics, Google Tag Manager, and Google Maps API. The site is mobile-optimized and performs moderately well, with good SEO and basic accessibility features. Privacy compliance is well addressed with a comprehensive privacy policy and an explicit cookie consent mechanism. From a security perspective, the site uses HTTPS and implements cookie consent but lacks explicit security headers and a published security policy or vulnerability disclosure. No critical vulnerabilities or exposed sensitive data were detected. The domain registration details are consistent with the business claims, showing transparency and legitimacy. Overall, Meier AG presents a trustworthy and professional digital presence with solid technical infrastructure and privacy compliance. Strategic improvements in security policy publication and enhanced accessibility could further strengthen its posture.

firma.de is a German-based digital platform specializing in company formation and business services, targeting entrepreneurs and startups. The website offers a comprehensive suite of services including various legal forms of company formation, bookkeeping, payroll, tax consulting, and legal advice. With over 25,000 firm foundations supported, firma.de holds a strong market position as a trusted partner for business founders in Germany. The platform emphasizes ease of use, transparency, and expert support throughout the business lifecycle. Technically, the website leverages modern web technologies such as Google Tag Manager, Stripe for payments, and AWS Cloudfront for content delivery, ensuring fast and responsive user experience across devices. Security posture is good with HTTPS enforced and secure third-party integrations, though there is room for improvement in security headers and incident response transparency. Privacy compliance is partially addressed with a comprehensive GDPR privacy policy but lacks a cookie consent mechanism. Overall, firma.de presents a professional, trustworthy, and user-friendly platform with a solid business model and digital maturity.

dorsa + 820 Architektur AG is a small Swiss architecture firm with a minimalist online presence hosted on the Cargo Collective platform. The website primarily serves as a portfolio and contact point, providing essential contact details and links to partner sites. The technical infrastructure is modern and secure with HTTPS enabled, but lacks advanced security headers and privacy policies. The domain is newly registered, which aligns with a potentially new or rebranded business. Overall, the site is functional but basic in content and compliance.