High-risk security reports

Saviva AG is a leading Swiss service provider specializing in hospitality, healthcare, food wholesale, logistics, and digital solutions. The company integrates physical and digital services, including a proprietary digital marketplace called Integrale, to streamline procurement and logistics for its customers. Since August 2024, Saviva operates under the parent company Transgourmet, enhancing its market reach and service offerings. The website reflects a professional and modern digital presence with comprehensive service descriptions and multimedia content targeting hospitality and retail sectors in Switzerland. Technically, the site is built on Joomla CMS with modern JavaScript libraries and UI frameworks, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers and explicit security policies could improve the stance. Overall, the domain registration data aligns well with the business claims, supporting high legitimacy and trustworthiness.

Niedax Group is a well-established German company specializing in cable management systems with over 100 years of experience. It operates globally with numerous subsidiaries and partners, serving industries such as energy, infrastructure, and manufacturing. The website reflects a professional and comprehensive digital presence, built on TYPO3 CMS with modern frontend technologies. Security posture is solid with HTTPS and reCAPTCHA usage, though some security headers could be enhanced. Privacy and cookie policies are present and GDPR compliant. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the company's extensive footprint and professional presentation.

The website supkadavid.cz represents ADD ADVERTISING DESIGN, a small Czech graphic design agency founded in 2007. The company offers a range of services including graphic design, web design, corporate identity, printing materials, and advertising graphics. The website content is primarily in Czech and targets local clients seeking professional design services. The business appears to be a small, service-oriented agency with a focus on personalized client solutions and portfolio presentation. Technically, the website relies on outdated Flash technology, which significantly impacts usability, accessibility, and security. The site lacks modern web standards such as responsive design and accessibility features. There is no evidence of HTTPS enforcement or security headers, which weakens the security posture. Google Analytics is used for tracking, but no cookie consent or privacy policies are present, indicating poor privacy compliance. From a security perspective, the absence of HTTPS, security headers, and privacy policies are notable weaknesses. The use of Flash technology introduces potential vulnerabilities and compatibility issues. The WHOIS data shows a consistent and long-standing domain registration, supporting the legitimacy of the business. However, the website would benefit from modernization and improved security and privacy practices. Overall, the website scores moderately due to its business credibility and content relevance but is held back by technical and security shortcomings. Strategic improvements in technology stack, security implementation, and privacy compliance are recommended to enhance trust and user experience.

PIKA SERVIS d.o.o. is a small Slovenian technology company specializing in computer hardware sales, repair services, web hosting, domain registration, and website development. Established in 2002, it serves local businesses, individual consumers, and educational institutions primarily in Murska Sobota. The company emphasizes customer satisfaction and offers integrated web solutions including AI-assisted site building. Technically, the website uses modern web technologies and is mobile optimized, though it lacks some advanced security headers. The site is served over HTTPS with a valid SSL certificate and includes a cookie consent mechanism, indicating basic privacy compliance. However, the domain is a subdomain without public WHOIS registration, which introduces some legitimacy concerns. Overall, the business appears credible with moderate trustworthiness but would benefit from improved security practices and clearer domain registration transparency.

Ekonomska šola Murska Sobota is an educational institution based in Slovenia, focused on providing secondary and higher vocational education in economics and informatics. The website serves as an informational platform for students, teachers, and staff, reflecting a regional educational provider with a medium-sized operation founded in 2009. The technical infrastructure is based on WordPress with the Divi theme and several accessibility and cookie consent plugins, indicating a moderate level of digital maturity. The site integrates social media via Facebook SDK but lacks advanced analytics or marketing tools. Security posture is moderate, with HTTPS implied but missing explicit security headers and no visible privacy or security policies. The absence of contact information and formal policies suggests areas for improvement in transparency and compliance. Overall, the website is professional and safe for general audiences but would benefit from enhanced privacy compliance and security practices.

The website tkpomurje.si represents a regional educational project named 'Projekt Temeljne kompetence 2023-2029' focused on foundational competencies in the Pomurje region of Slovenia. It offers various educational programs including computer courses, language courses, and professional exam preparation, supported by EU co-funding. The site is built on WordPress using the Astra theme and Elementor page builder, indicating a modern and maintainable technical infrastructure. Hosting is provided by a reputable Slovenian provider NEOSERV.si. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong with clear GDPR-aligned policies and cookie management. The site lacks explicit incident response and vulnerability disclosure information. Overall, the website is professional, trustworthy, and well-suited for its educational mission.

Digitalna agencija Ideaz, d.o.o. is a Slovenian-based digital agency specializing in web development, design, content production, and digital marketing services. Established in 2011, the company serves brands and businesses aiming to enhance their online presence and marketing effectiveness. The website reflects a professional and consistent brand image with a clear focus on client services and portfolio references. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Complianz GDPR for compliance and tracking, hosted by NEOSERV.si. The site demonstrates good mobile optimization, SEO practices, and user experience. Security posture is adequate with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and explicit security policies. Overall, the website is trustworthy, compliant with GDPR, and well-positioned in its market niche.

EBONITETE.SI is a Slovenian business credit rating agency established in 2012, offering creditworthiness evaluations and financial reliability information for companies. Positioned as the first credit rating agency in Slovenia, it targets businesses seeking reliable partner evaluations. The website is built on WordPress with Elementor, integrating modern technologies such as Google Tag Manager and Microsoft Clarity for analytics and marketing. The site demonstrates good design quality, mobile optimization, and SEO practices, although accessibility features are basic. Security posture is solid with HTTPS and security headers implemented, but lacks publicly disclosed security policies or incident response information. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy policy or terms of service pages. Overall, the site is legitimate and professionally maintained but would benefit from enhanced transparency and compliance documentation.

MDSdisplays.com is a professional website representing MDS Display, a Swiss-based company specializing in LED display solutions for various applications. The company offers a wide range of products including LED wall displays, hologram displays, LED posters, shelf displays, and innovative transparent LED films. With over 16 years of experience, MDS Display positions itself as a reliable supplier focused on quality, energy efficiency, and environmental protection. The website targets businesses and organizations seeking customized LED display solutions, providing multimedia content and downloadable catalogs to support customer engagement. Technically, the website is built on WordPress 6.8.3, utilizing common web technologies such as jQuery, Font Awesome, and Google Fonts. Hosting is provided by Hostpoint AG, as inferred from the DNS nameservers. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO optimizations are basic. Google Analytics is integrated for visitor tracking, but no cookie consent mechanism is present. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers like Content-Security-Policy and X-Frame-Options. DNSSEC is not enabled, and no explicit security or incident response policies are published. The site does not expose sensitive data and uses a honeypot plugin to protect forms. Overall, the security posture is moderate but could be improved with additional headers and compliance measures. The domain registration is transparent and consistent with the business location and claims, though the domain age (registered in 2020) is younger than the company's stated experience, suggesting a possible rebranding or domain migration. No WAF or blocking mechanisms are detected, and the content is fully accessible. Privacy compliance is partial, with a privacy policy present but lacking cookie consent and terms of service. Overall, the website is professional and trustworthy with good business credibility but would benefit from enhanced security practices and privacy compliance to improve user trust and regulatory adherence.

Omroep ZWART is a Dutch public broadcasting platform under the NPO umbrella, established in 2020. It focuses on cultural diversity and representation through radio, podcast, television, and online media content. The website offers a modern user experience with video streaming capabilities and active social media engagement. Technically, it employs a robust tech stack including Bitmovin Player, Google Tag Manager, and multiple analytics services, indicating a mature digital infrastructure. Security posture is strong with HTTPS, DNSSEC, and cookie consent mechanisms, though explicit privacy and terms policies are missing. Overall, the site is trustworthy and professionally maintained, serving a general audience with safe content.

Piwigo.com is a mature and reputable online image library and digital asset management platform operated by Pigolabs, founded in 2008. The company targets a broad range of professional users including travel and tourism organizations, public sector entities, businesses, non-profits, and photographers. Their SaaS business model offers a free trial and subscription pricing, emphasizing ease of use, collaboration, and GDPR compliance. The website is professionally designed with clear navigation and rich content, supporting multiple languages and showcasing strong trust indicators such as client logos and testimonials. Technically, the site uses a modern tech stack including Bootstrap, jQuery, and Matomo analytics, hosted under a domain registered with Gandi SAS. The site is mobile optimized and performs moderately well. Security posture is good with HTTPS enforced and domain transfer protection, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is strong with a comprehensive privacy policy and GDPR adherence, but lacks a cookie consent mechanism. Security evaluation shows no critical vulnerabilities or exposed sensitive data. However, the absence of a published security policy, incident response contacts, and vulnerability disclosure policy are areas for improvement. Overall, the site is trustworthy, safe, and professionally maintained with a high AI score reflecting content quality, technical implementation, security, privacy, and business credibility.

Pomursko društvo za kakovost is a well-established Slovenian non-profit organization founded in 1993, dedicated to promoting quality management principles through education, consulting, and annual conferences. The organization targets professionals and educational institutions interested in quality assurance and management systems. Their website reflects a consistent brand and provides clear contact information and event details, supporting their role as a regional quality association. Technically, the website uses common JavaScript libraries such as jQuery and Modernizr, with a custom or unknown CMS. The site is moderately performant and mobile-optimized, though accessibility and SEO could be improved. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and explicit security policies. Overall, the website is trustworthy and professional with no signs of malicious content or blocking mechanisms. The domain age and WHOIS data align well with the organization's history, supporting legitimacy. However, improvements in security policies, vulnerability disclosure, and analytics transparency would enhance compliance and trust. The risk level is low, but strategic security enhancements and clearer privacy documentation are recommended to maintain and improve stakeholder confidence.

SloExport is a Slovenian export database platform developed by the Chamber of Commerce and Industry of Slovenia in cooperation with SPIRIT Slovenia. It serves as a business directory and export promotion tool, targeting Slovenian exporters and international business partners. The platform provides searchable company and product information to facilitate new business contacts and export opportunities. The website is well-positioned as an official government-supported resource, enhancing Slovenia's export market presence. Technically, the website is built on ASP.NET WebForms using the DotNetNuke CMS platform, integrating Google Analytics and Twitter widgets for analytics and social media engagement. The site is moderately optimized for performance and mobile use, with basic accessibility features. Security is adequate with HTTPS enforced and a Content-Security-Policy header, though additional security headers and incident response information are lacking. The security posture is solid but could be improved by publishing a security policy, incident response contacts, and vulnerability disclosure mechanisms. Privacy compliance is basic with a cookie consent banner and privacy policy present, but more detailed GDPR compliance indicators could enhance trust. Business credibility is high due to official backing and consistent branding. Overall, the website is a professional, trustworthy platform with good content quality and technical implementation. Strategic improvements in security transparency and mobile optimization would further strengthen its position.

CCI Business is a French B2B platform established in 2014 that facilitates connections between businesses and major market order givers, serving over 12,500 member companies. It operates through multiple regional territories and sector-specific communities, focusing on energy, manufacturing, and government sectors. The website is built on Drupal 10 and employs Matomo for analytics and tarteaucitron for cookie consent, reflecting a moderate level of digital maturity. While the site is well-structured and mobile-optimized, it lacks explicit privacy and terms of service pages, which are important for compliance and user trust. Security posture is solid with HTTPS and no visible vulnerabilities, but could be improved with additional security headers and clearer contact information for incident response. Overall, the site presents a professional and trustworthy business presence with room for enhancement in privacy and security transparency.

AD/D ADVERTISING DESIGN is a small Czech graphic design agency specializing in corporate identity, print, and web design services. The company has been operating since 2010, as supported by domain registration data. The website primarily serves as a portfolio and contact point for potential clients, featuring services such as logo creation, advertising graphics, and POP materials. The target audience includes businesses and individuals seeking professional graphic design solutions. Technically, the website relies on outdated Flash technology, which negatively impacts accessibility, performance, and user experience. The site lacks modern responsive design and accessibility features, limiting its reach on mobile devices and to users with disabilities. Security posture is weak, with no visible HTTPS enforcement or security headers, and no privacy or cookie policies are present, indicating compliance gaps with GDPR and other regulations. Google Analytics is used for user tracking without visible consent mechanisms, further highlighting privacy concerns. Overall, the website is functional but outdated and requires modernization to improve security, compliance, and user experience.

CabaDesign is a small Czech Republic-based web development service provider specializing in creating websites and web applications. The company appears to be operated by Ing. Jan Cabalka and has been active since at least 2010, as supported by domain registration data. The website content is minimal but clearly communicates the core business offering and provides direct contact information including email, phone, and physical location. The market position is that of a small local technology service provider targeting businesses or individuals needing web development solutions. Technically, the website uses basic modern web technologies including Google Fonts, Google Analytics, and Google Tag Manager for tracking. Hosting is provided by WEDOS, a Czech hosting provider, consistent with the domain registrar. The site lacks advanced frameworks or CMS indications and has basic mobile and accessibility features. SEO and performance optimizations appear minimal but functional. From a security perspective, the site uses HTTPS (assumed from domain and hosting) but lacks visible security headers and published security or privacy policies. No forms or input fields are present to assess input security. Google Analytics tracking is implemented without visible cookie consent mechanisms, indicating potential GDPR compliance gaps. The WHOIS data is consistent and supports the legitimacy of the business with no privacy protection or suspicious patterns. Overall, the website is functional and credible for a small business but lacks comprehensive privacy, security, and compliance features. Strategic improvements in privacy policy publication, security headers, and consent mechanisms would enhance trust and compliance posture.

DuelOnline.cz is a Czech Republic-based online accounting portal focused on providing cloud-based access to the DUEL economic system. The website targets accounting professionals, businesses, and accounting firms seeking secure, remote, and integrated accounting solutions. The business model revolves around SaaS delivery of accounting, payroll, inventory, and retail sales management services. The company Ace IT s.r.o. appears as the parent entity, with partnerships with major technology providers such as HP, Dell, Cisco, Microsoft, and Debian, enhancing its market credibility. Technically, the website employs a traditional web stack with jQuery 1.6.1, jQuery UI, and Google Analytics for tracking. It integrates virtualization technologies and cloud infrastructure based on Microsoft and Linux platforms. However, the site shows signs of aging technology and lacks modern security headers and HTTPS confirmation, which impacts its security posture. Mobile optimization and accessibility are basic, and no CMS or hosting provider details are evident. From a security perspective, the site demonstrates some best practices like data backup and physical server security but lacks visible HTTPS enforcement, security headers, and formal privacy or cookie policies. The absence of WHOIS data reduces domain trustworthiness and raises concerns about domain registration legitimacy. No vulnerability disclosures or incident response contacts are provided, limiting transparency. Overall, DuelOnline.cz is a functional and professional business site with moderate technical maturity and security posture. Strategic improvements in security, privacy compliance, and technology modernization are recommended to enhance trust and resilience.

GDPR Experts, operated by Ace IT s.r.o., is a specialized small business based in the Czech Republic providing GDPR compliance and IT security consulting services. Their offerings include GDPR training, audits, legal documentation, and IT security assessments tailored for companies and entrepreneurs within the EU. The website is professionally designed with clear navigation and relevant content targeting businesses needing GDPR solutions. Technically, the site employs modern frontend technologies such as Bootstrap, jQuery, and Google Analytics, indicating a moderate level of digital maturity. However, there are gaps in privacy compliance, notably the absence of explicit privacy and cookie policies. Security posture is adequate with HTTPS implied but lacks visible security headers and incident response information. Overall, the domain registration data aligns well with the business, supporting legitimacy and trustworthiness.

SzeneSchweiz is the largest and most important Swiss professional association for performing artists in theater, film, and TV. It provides a range of services including legal advice, protection against abuse, pension schemes for freelancers, continuing education, and a casting platform. The organization targets professional artists in Switzerland and operates as a non-profit entity with a strong market position in the Swiss performing arts sector. The website is multilingual and professionally designed, reflecting a medium-sized organization founded around 2017. Technically, the website is built on WordPress 6.8.3 with modern plugins for social sharing and forms. It uses Google Analytics for tracking and is mobile-optimized with good SEO practices. Performance is moderate, and accessibility is basic. The site uses HTTPS with excellent SSL configuration but lacks some security headers and a cookie consent mechanism. From a security perspective, the site enforces HTTPS and does not expose sensitive data. However, it lacks explicit security policies, incident response information, and cookie consent banners, which are important for GDPR compliance. No vulnerabilities or suspicious content were detected. WHOIS data confirms the legitimacy and consistency of the domain registration with the organization's Swiss identity. Overall, the website is professional, trustworthy, and well-positioned in its niche but could improve privacy compliance and security posture by adding cookie consent, security headers, and incident response details.

syndicom is a prominent Swiss trade union representing employees in logistics, information and communication technology, and media sectors. The organization advocates for fair working conditions, social justice, and responsible technological progress. It offers services such as collective bargaining, legal advice, education, and campaigns to its members. The website reflects a mature digital presence with a professional design, clear navigation, and multilingual support, targeting employees and stakeholders in Switzerland. Technically, the site is built on WordPress with modern SEO and analytics tools integrated, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though formal security policies and incident response contacts are not publicly disclosed. Overall, the domain registration aligns with the organization's identity, supporting legitimacy and trustworthiness.

RVK is an independent and leading service provider in the Swiss healthcare market, offering specialized services including risk and performance management, insurance medicine consulting, and education through its RVK Academy. The company targets insurers, pension funds, and enterprises, providing tailored insurance and educational solutions. The website is professionally designed, consistent in branding, and provides clear contact information and trust signals such as client testimonials and SQS-Audit certification. Technically, the site uses modern web technologies like Swiper.js and Google Maps API, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced, but lacks explicit security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanism. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

Garanto is a Swiss trade union established in 2001 representing customs and border personnel. The organization provides legal protection, member services, and advocacy for its members within the customs administration sector. The website is professionally designed, multilingual (German, French, Italian), and provides clear navigation and relevant content for its target audience. Technically, the site uses modern JavaScript libraries such as jQuery, Swiper, and Fancybox, with a custom or unknown CMS. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers are missing. No critical vulnerabilities or blocking mechanisms were detected. Contact information is clearly presented, including phone and email, and a member login area is available. Overall, the site demonstrates a solid digital presence for a government-related non-profit entity.

MENTOR - Die Leselernhelfer Nordhessen e.V. is a regional non-profit organization dedicated to improving children's literacy and language skills through individual mentoring programs. Affiliated with the national MENTOR federation, it connects volunteer mentors with schools to provide weekly reading support for children aged 6 to 16. The website reflects a clear mission and target audience focused on education and community support. Technically, the website is built on Joomla CMS with modern frontend technologies including Bootstrap 5 and jQuery. It is hosted on servers indicated by the nameservers from agenturserver, suggesting a professional hosting environment. The site is mobile optimized and provides a good user experience with clear navigation and consistent branding. From a security perspective, the site uses HTTPS and includes CSRF tokens and a GDPR-compliant cookie consent mechanism. However, it lacks visible security headers and does not provide explicit security policies or incident response contacts. No vulnerability disclosure or security.txt files are present, which could be improved to enhance trust and security posture. Overall, the website is safe, professional, and trustworthy with a strong focus on privacy compliance and user protection. The main risks relate to missing security headers and lack of formal security documentation. Strategic improvements in these areas would strengthen the organization's digital security and compliance standing.

Forum Schlossplatz is a cultural institution based in Aarau, Switzerland, established in 1994. It serves as a vibrant venue for cultural and societal reflection through exhibitions, events, educational projects, and a podcast. The website reflects a well-structured and professionally presented digital presence targeting a general audience interested in arts and culture. The business model focuses on community engagement and cultural education rather than commercial sales. Technically, the website uses modern web technologies including lazy loading, JavaScript libraries for UI effects, and structured data for SEO. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though some security headers are missing and no explicit security or incident response policies are published. Privacy compliance is partial; a privacy policy is present but no cookie consent mechanism is detected. Contact information is clearly provided, enhancing business credibility. Overall, the website is trustworthy and professionally maintained.

Forstbetrieb Region Aarau is a regional forestry management organization serving multiple municipalities in Switzerland, primarily Aarau, Biberstein, and Unterentfelden. The organization manages approximately 916 hectares of forest land, focusing on sustainable wood harvesting and diverse forestry services including garden and park forestry, tree care, root stock milling, consulting, and sales of firewood and forest products. The website is professionally designed using Joomla CMS and Bootstrap framework, providing clear navigation and relevant content in German for its target audience. Contact information is prominently displayed, enhancing business credibility. Technically, the site uses modern web technologies and enforces HTTPS, but lacks some security headers and privacy compliance mechanisms such as cookie consent. No blocking or WAF challenges were detected, allowing full content access.

smARTec Veranstaltungstechnik AG is a Swiss-based company specializing in mobile event technology and digital events, offering services such as lighting, sound, and video technology rental and operation. Positioned as a Swiss industry leader with approximately 2000 projects annually, the company targets corporate, public, and exhibition event organizers. The website is professionally designed, content-rich, and well-structured, reflecting a mature digital presence. Technically, the site uses TYPO3 CMS with modern JavaScript libraries and integrates analytics tools like Google Analytics and Matomo, indicating a good level of digital maturity. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies are absent. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional website and certifications. Overall, the site is trustworthy and business credible but would benefit from improved transparency in domain registration and security policies.

Busbetrieb Aarau AG (BBA) is a regional public transportation company operating bus services in Aarau, Switzerland. The company provides comprehensive transit services including bus lines, schedules, ticketing options, and customer support. Their website is designed to serve local commuters and visitors with real-time information and service updates. The business operates in the transportation sector with a medium-sized organizational footprint and a clear focus on regional mobility solutions. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and analytics tools such as Matomo and Google Tag Manager, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and uses a secure CMS platform but lacks some advanced security headers and does not publish a formal security or incident response policy. Privacy compliance is partially addressed with a privacy policy and cookie information, though no explicit cookie consent mechanism is present. Overall, the website is professional, trustworthy, and well-aligned with the company's business objectives.

WEBSI is the largest competition for digital projects in Slovenia, organized by Webtasy, d.o.o. The platform serves as an event organizer and information hub for digital project competitions, providing details about categories, awards, jury members, and news updates. The website is professionally designed using WordPress CMS, with modern web technologies such as lazy loading and structured data for SEO. It targets digital project participants and stakeholders within Slovenia, positioning itself as a key player in the local digital event space. The domain is well-established since 2012, reinforcing its credibility. From a technical perspective, the website employs Google Tag Manager and iprom.net for analytics and tracking, indicating a moderate level of digital maturity. The site is mobile-optimized and offers good user experience and navigation clarity. However, there is room for improvement in accessibility and security headers implementation. Security posture is solid with HTTPS enabled and no visible vulnerabilities or exposed sensitive data. The absence of explicit privacy and cookie policies and security headers slightly reduces compliance and security scores. No WAF or blocking mechanisms were detected, allowing full content access. Overall, WEBSI presents a trustworthy and professional digital competition platform with good business credibility and technical implementation. Strategic enhancements in privacy compliance and security best practices would further strengthen its posture.

SPOT svetovanje Pomurje is a regional business support initiative operated by Razvojni center Murska Sobota, providing free consulting, mentoring, and business registration services to entrepreneurs and SMEs in the Pomurje region of Slovenia. The website reflects a well-established public service supported by European and national government funds, with clear partnerships and a focus on fostering regional economic development. Technically, the site uses modern JavaScript libraries, Google Maps API, and Google Tag Manager for analytics, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, although formal security policies and incident response information are absent. Overall, the domain registration and WHOIS data align well with the business profile, indicating legitimacy and trustworthiness.

MENTOR - Die Leselernhelfer Bundesverband e.V. is a German non-profit organization dedicated to improving literacy and language skills among children and youth through volunteer reading mentors. With a large volunteer base and partnerships, it supports thousands of students nationally, offering both in-person and online reading sessions. The website reflects a well-established educational non-profit with clear contact information and community engagement. Technically, the site is built on Joomla CMS with Bootstrap and common JavaScript libraries, providing a responsive and user-friendly experience. Security posture is adequate with HTTPS and CSRF protections, but lacks advanced security headers and explicit incident response policies. Privacy compliance is strong with visible cookie consent and a comprehensive privacy policy. Overall, the site is trustworthy and professionally maintained, though improvements in security policies and vulnerability disclosure could enhance its posture.

The website 'DB Bus Challenge' is an interactive online game designed to engage users by simulating bus transportation challenges, likely related to Deutsche Bahn's bus services in Germany. The site targets a general audience interested in public transportation and casual gaming. The business model appears promotional, aiming to increase engagement and brand awareness rather than direct sales. The website is relatively small in scale with basic content and moderate branding consistency. Technically, the site uses a JavaScript-based frontend with RequireJS and jQuery, implementing device detection and responsive design for mobile optimization. Performance is moderate with basic SEO and accessibility features. No CMS or backend technologies are evident from the HTML content. Hosting details are limited but DNS servers indicate a standard hosting environment. From a security perspective, the site uses HTTPS but lacks visible security headers and formal privacy or cookie policies, which are critical for GDPR compliance given the European audience. No contact or incident response information is provided, limiting transparency and trust. No vulnerabilities or exposed sensitive data were detected in the static content. Overall security posture is average but could be improved with standard best practices. The overall risk is moderate with no critical issues detected. Strategic recommendations include adding privacy and cookie policies, improving security headers, providing clear contact and incident response information, and enhancing SEO and accessibility. These improvements would increase user trust, compliance, and security maturity.

EXPO'STAT is a French organization specializing in the certification and control of statistical data related to fairs, exhibitions, congresses, and commercial events. Accredited by COFRAC, it offers services including CLEO activity reporting and verification of the quality of 'société à mission' companies. The website targets event organizers and professionals in the event industry, positioning itself as a trusted partner with a long-standing presence since 2008. Technically, the site uses a traditional tech stack with jQuery and several JavaScript libraries, but some components like jQuery are outdated, posing potential security risks. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. Security posture is average, with no DNSSEC and missing security headers, and no visible cookie consent mechanism, indicating partial GDPR compliance. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

EXPOCERT is a French-based accredited organization specializing in the control and certification of event attendance figures, security services for events, and event management software solutions. Established in 2008, it holds a recognized accreditation from COFRAC, positioning itself as a trusted entity in the French event industry. The company targets event organizers such as salons, congresses, and exhibitions, offering services that ensure compliance and safety in event management. Technically, the website is built on a custom ASP.NET Web Forms platform, utilizing legacy jQuery and standard web technologies. While the site is functional and professionally designed, it shows room for modernization, particularly in mobile optimization and security enhancements. The hosting is managed via host7x24.com, and the site employs HTTPS with Google Analytics for visitor tracking. From a security perspective, the site enforces HTTPS but lacks advanced security headers and uses an outdated JavaScript library version, which could pose vulnerabilities. Privacy compliance is partial; a privacy policy exists but no cookie consent mechanism is implemented, indicating GDPR compliance gaps. Contact information is clearly presented, enhancing business credibility. Overall, EXPOCERT's website reflects a stable and credible business with a solid market position in event certification and security in France. Strategic improvements in security posture and privacy compliance would enhance trust and regulatory adherence.

Hostingwerft is a German-based hosting provider specializing in secure, high-performance web and shop hosting solutions, including Shopware and WordPress hosting. The company emphasizes ecological sustainability by powering its German data centers with 100% hydropower and leverages over 20 years of experience in e-commerce and CMS hosting. Their offerings include NVMe SSD webspace, dedicated and virtual servers, SSL certificates from reputable providers, and maintenance contracts. The website is professionally designed using WordPress with Yoast SEO and Elementor, optimized for performance and mobile devices. Security is a key focus, with ISO/IEC 27001 certification and strong SSL configurations. However, the site lacks explicit privacy and terms of service pages and does not provide direct contact emails or phone numbers, which could impact user trust and GDPR compliance. Overall, Hostingwerft presents a credible and technically mature hosting service with room for improvement in privacy transparency and contact accessibility.

Niedax | Kleinhuis | Fintech is a well-established German industrial group specializing in cable management systems and electrical installation materials. With over 100 years of experience and a global presence in more than 30 countries, the company offers a broad product portfolio including steel, stainless steel, fiberglass-reinforced plastic, and PVC solutions. Their services include custom project management, BIM data provision, and technical consulting, targeting electrical installation professionals and industrial clients worldwide. The website reflects a mature digital presence with comprehensive content, multiple language options, and a professional design consistent with their market position. Technically, the website is built on TYPO3 CMS with modern frontend technologies such as Bootstrap and Swiper JS, ensuring good mobile optimization, accessibility, and SEO. Security posture is strong with HTTPS enforced and use of Google reCAPTCHA on forms, though explicit security headers and published security policies are not evident. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR adherence. The main concern is the absence of WHOIS data for the domain www.niedax.com, which is inconsistent with the company's long history and global footprint. This discrepancy may be due to privacy protection or domain registration under a different domain, which slightly reduces trustworthiness. Overall, the website is professional, secure, and business credible, with recommendations to enhance transparency and security disclosures.

PRACHT is a German-based manufacturer specializing in industrial and commercial lighting solutions, serving a diverse range of sectors including heavy industry, transportation, and municipal infrastructure. The company operates a B2B e-commerce platform built on PrestaShop, offering a comprehensive catalog of luminaires tailored to specific industry needs. The website demonstrates a professional design with consistent branding and clear navigation, targeting industrial clients seeking specialized lighting products. Technically, the website leverages modern web technologies such as PrestaShop CMS, Elementor, and Google Tag Manager for analytics and marketing. The site is secured with HTTPS and implements a cookie consent mechanism that respects user privacy preferences. However, there is room for improvement in security headers and privacy documentation to enhance compliance and trust. From a security perspective, the site shows good baseline practices with no exposed sensitive data or visible vulnerabilities. The absence of security headers and formal security policies indicates potential areas for strengthening the security posture. The domain registration data is consistent and supports the legitimacy of the business, with a long-standing domain age since 2002. Overall, PRACHT's website is a solid representation of an established industrial manufacturer with a moderate digital maturity level. Strategic enhancements in privacy compliance, security policies, and technical security controls would further improve the site's trustworthiness and regulatory adherence.

Alphatec Schaltschranksysteme GmbH is a German-based manufacturer and supplier specializing in energy distribution systems, including meter cabinets, automatic distributors, transformer cabinets, and switch cabinets for renewable energy. The company operates with a strong focus on in-house manufacturing capabilities such as metal processing, powder coating, electrical assembly, wiring, and electromobility solutions. Their market position is solidified by a comprehensive product portfolio, an online shop, and a configurator tool, targeting primarily business customers in the energy sector. The website is professionally designed, content-rich, and well-structured, supporting effective customer engagement and product information dissemination. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies with good mobile optimization and SEO practices. The site employs HTTPS with excellent SSL configuration and integrates Matomo analytics for user tracking with GDPR-compliant cookie consent mechanisms. However, some security best practices like security headers and a published security policy are absent. From a security perspective, the site shows a mature posture with no evident vulnerabilities or exposed sensitive data. The cookie consent and privacy policies are comprehensive and GDPR compliant. The WHOIS data, while limited, aligns with the website's operational details, indicating legitimacy. Social media presence across multiple platforms enhances brand visibility and trust. Overall, Alphatec's digital presence reflects a trustworthy, professional business with a good balance of technical maturity and compliance. Strategic improvements in security headers and incident response disclosures could further enhance their security posture and customer trust.

The Bundesverband des Elektro-Großhandels (VEG) e.V. is a professional association representing the electrical wholesale industry in Germany. It serves as a central body for industry representation, education, and information exchange, with a membership base of 58 companies and a significant workforce. The website reflects a well-established organization with clear business focus and industry partnerships. Technically, the site is built on WordPress with Elementor, using modern web technologies and hosted by a reputable German provider. The site is mobile-optimized and presents content professionally, though some privacy compliance aspects like cookie consent are missing. Security posture is solid with HTTPS and no visible vulnerabilities, but could be improved with security headers and incident response information. Overall, the website is trustworthy and serves its target audience effectively.

The website www.vandeco.fr serves as the official digital platform for the economic development and employment services of the Ville de Vandœuvre-lès-Nancy, France. It targets local businesses, job seekers, institutions, students, and the general public by providing comprehensive information on business creation, development, employment opportunities, training, and local events. The platform is positioned as a key local government service to foster economic growth and employment within the community. Technically, the site is built on WordPress using Elementor and several popular plugins such as Yoast SEO and Contact Form 7. The infrastructure supports responsive design and basic accessibility features, with moderate performance. The site employs HTTPS with a valid SSL certificate, but lacks advanced security headers and explicit incident response policies. From a security perspective, the site demonstrates good baseline practices including encrypted connections and cookie consent mechanisms compliant with GDPR. However, the absence of security headers and vulnerability disclosure policies suggests room for improvement in security maturity. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site is trustworthy and professional, reflecting its role as a municipal service. The lack of WHOIS data reduces domain registration transparency but does not detract significantly from the site's legitimacy given the official branding and contact information. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility compliance to strengthen trust and resilience.

Eesti Inimõiguste Keskus is an established independent non-profit organization focused on promoting and protecting human rights in Estonia. The organization provides comprehensive services including human rights reporting, advocacy, refugee counseling, events, and educational materials. Their website reflects a professional and consistent brand image, targeting Estonian residents, NGOs, policymakers, and human rights advocates. The domain has been active since 2010, supporting their credibility and long-term presence in the sector. Technically, the website is built on WordPress with WooCommerce and integrates modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and CookieYes for consent management. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience.

MIKK is a youth information and cultural club based in Murska Sobota, Slovenia, operating since 2007. The organization focuses on providing cultural events and informational services to the local youth and community. The website serves as a digital platform to promote these activities and engage with its audience. Technically, the site is built on WordPress using the Metrolo Premium theme and several common plugins such as Jetpack and EventON Lite, indicating a moderate level of digital maturity. The site is mobile optimized and uses HTTPS, but lacks some advanced security headers and explicit privacy and security policies. Security posture is adequate but could be improved with better header implementation and formalized incident response information. Overall, the site is functional and trustworthy for its community role but would benefit from enhanced privacy compliance and security transparency.

Expano.si is a well-established regional cultural and tourism promotion website focused on the Pomurje region in Slovenia. It offers immersive exhibitions, event information, ticket sales, and a retail shop, targeting tourists, families, and business visitors. The website is professionally designed with consistent branding and clear navigation, supporting multiple languages. Technically, it uses modern web technologies including Google Maps API, jQuery, and Google Tag Manager, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and consent mechanisms, though it lacks explicit security policies and vulnerability disclosures. Overall, the site is trustworthy and compliant with GDPR, supported by official EU and Slovenian government partnerships and certifications.

Zavod za kulturo, turizem in šport Murska Sobota is a Slovenian public institution dedicated to promoting culture, tourism, and sports within the Murska Sobota municipality. Established in 2011, it operates as a local government entity providing cultural events, tourism information, and sports facility management. The website serves as an information portal targeting the general public interested in these sectors. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and hosting services consistent with its regional presence. The site is mobile-optimized, accessible, and includes a cookie consent mechanism aligned with GDPR requirements, although explicit privacy and terms of service pages were not found in the provided content. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities detected, but could benefit from enhanced security headers and incident response disclosures. Overall, the website reflects a professional and trustworthy digital presence for a local government institution.

Verein Rüeblimärt Aarau organizes one of Switzerland's largest annual markets focused on regional products, sustainability, and community engagement. The website effectively communicates the event's nature, schedule, and cultural significance, targeting a general audience interested in local produce and natural experiences. Technically, the site employs modern web standards including responsive images and privacy-conscious analytics via Matomo. However, it lacks explicit privacy and cookie policies, and security headers are not evident, which are areas for improvement. The domain registration data aligns well with the website's claims, enhancing trustworthiness. Overall, the site is professional and trustworthy but could benefit from enhanced privacy and security disclosures.

FC Aarau is a Swiss football club with a long history dating back to 1902, competing in the Swiss Challenge League. The website serves as the official digital presence for the club, providing information about matches, teams, ticketing, membership, and merchandising. It targets football fans and supporters primarily in Switzerland. The business model revolves around sports entertainment, fan engagement, sponsorships, and merchandise sales. The club maintains a solid market position within Swiss football and leverages digital channels effectively to engage its audience. Technically, the website is built on WordPress with modern web technologies including SVG graphics, responsive design, and Matomo analytics for privacy-conscious tracking. The site is hosted by a Swiss provider (h2g.ch) and demonstrates good performance and accessibility standards. SEO and content structure are well implemented, supporting discoverability and user experience. From a security perspective, the site uses HTTPS and disables cookies for analytics, showing a privacy-aware approach. However, it lacks some security headers like Content-Security-Policy and X-Frame-Options, and does not provide explicit security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. Overall, the security posture is good but could be improved with additional headers and transparency. The overall risk assessment is low, with the site being trustworthy and professionally maintained. Strategic recommendations include implementing a cookie consent mechanism, enhancing security headers, and publishing security and incident response policies to improve compliance and user trust.

The Wirtschaftssymposium Aargau website represents a well-established Swiss event organizer, Visus Service GmbH, hosting the 21st annual economic symposium in Aarau. The event targets professionals from business, politics, and society, focusing on Switzerland's stability amidst global challenges. The site is professionally designed with clear navigation, high-quality content, and structured data enhancing search engine visibility. Technical infrastructure includes privacy-conscious Matomo analytics and modern web technologies, hosted on reliable Swiss infrastructure. Security posture is good with HTTPS and privacy-respecting analytics, though improvements are recommended in cookie consent and security headers. Overall, the site reflects a credible and trustworthy business presence with strong regional partnerships.

TESVOLT OCEAN GmbH is a specialized provider of high-performance battery storage solutions tailored for maritime applications, including sea and inland waterways. Their product portfolio includes the Kaptein Series and EOH battery systems, which emphasize innovation, reliability, and compliance with maritime standards such as DNV certification. The company targets maritime operators seeking efficient and flexible energy storage solutions. Technically, the website is built on the CIDEMOS CMS platform with modern JavaScript and CSS technologies, featuring responsive design and good SEO practices. Security posture is moderate with HTTPS usage but lacks explicit security headers and detailed security policies. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and structured data strongly indicate a legitimate German-based business. Privacy and cookie policies are present and GDPR compliant, but no direct contact emails or phone numbers are visible on the site. Overall, the website is professional and trustworthy in appearance but requires verification of domain registration and enhancement of security best practices.

TESVOLT Projects is a specialized full-service provider focused on battery parks and energy storage solutions tailored for municipal utilities. The company offers comprehensive services from planning through operation, leveraging deep expertise in storage technology and municipal project experience. Their market position is supported by multiple references and partnerships with notable industry players. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content for its target audience in the energy sector. Technically, the site uses the CIDEMOS CMS platform with modern web technologies and integrates Google Tag Manager for analytics and marketing. Security posture is generally good with HTTPS enforced and cookie consent implemented, though the absence of security headers and published security policies suggests room for improvement. The WHOIS data for the domain is missing, which slightly reduces trustworthiness, but the website content and business information align well with the TESVOLT AG brand. Overall, the site demonstrates a solid digital presence with good privacy compliance and business credibility.

TESVOLT ENERGY is a medium-sized energy sector company specializing in aggregating small and medium battery storage systems into virtual power plants for participation in energy trading. Their innovative business model leverages multiple leading energy traders competing to maximize revenue for customers. The company offers integrated solutions including battery storage systems, installation, maintenance, and a transparent trading dashboard. The website is professionally designed, mobile-optimized, and provides comprehensive information about their services and partnerships. Technically, the site uses the CIDEMOS CMS platform with modern web technologies and enforces HTTPS with a good security posture. Privacy and cookie policies are present and GDPR compliant, though incident response and vulnerability disclosure information are not publicly available. Overall, TESVOLT ENERGY presents a trustworthy and professional digital presence aligned with their business objectives.

WHdI e.V. is a German non-profit association representing craft guilds primarily in Berlin and Hamburg. The organization focuses on fostering a strong community among craftsmen, providing valuable information, supporting vocational training, and offering consumer advice. The website is professionally designed using TYPO3 CMS and modern frontend technologies, with good mobile optimization and clear navigation. Security posture is adequate with HTTPS enabled and secure login forms, though security headers are not evident and could be improved. Privacy compliance is basic but present, with a privacy policy and cookie consent mechanism accessible via the imprint page. WHOIS data is unavailable, which slightly reduces domain trustworthiness, but the overall business credibility and website professionalism mitigate this concern. The site is free from adult or questionable content and is fully accessible without WAF or blocking mechanisms.