High-risk security reports

Z

Związek Pracodawców Innowacyjnych Firm Farmaceutycznych INFARMA

wewontrest.pl

40

The website 'wewontrest.pl' represents the #ZdrowszyŚwiat initiative by INFARMA, an association of innovative pharmaceutical companies in Poland. It focuses on promoting medical breakthroughs, patient stories, and the pharmaceutical industry's dedication to improving health outcomes. The site targets patients, healthcare professionals, and industry stakeholders with educational and advocacy content. The business model is that of an industry association with a medium-sized presence in the Polish healthcare sector. Technically, the website uses a custom PHP-based CMS with modern web technologies including HTML5, CSS3, JavaScript, Video.js for media, and integrates Google Analytics, Google Tag Manager, Facebook SDK, and Google reCAPTCHA for analytics and security. Hosting is provided by OVH SAS. The site performs moderately well with good mobile optimization and basic accessibility features. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to mitigate bots. However, it lacks visible security headers and does not publish a dedicated security policy or incident response contacts. DNSSEC is not enabled, which is a recommended improvement. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is professional, trustworthy, and compliant with GDPR as evidenced by a comprehensive privacy policy and cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include enabling DNSSEC, adding security headers, and publishing security policies to further strengthen security posture.

silnativa.ch is a French-language educational website focused on explaining the concept and importance of reactive energy within electrical systems, targeting industrial and business audiences interested in energy efficiency and electrical network stability. The site is built on WordPress with Yoast SEO plugin, demonstrating good technical implementation and SEO optimization. However, it lacks visible privacy, cookie, and terms of service policies, as well as contact information, which impacts its privacy compliance and business credibility scores. Security posture is moderate with HTTPS enabled but missing security headers and incident response information. Overall, the website is professional and informative but would benefit from enhanced privacy and security disclosures to improve trust and compliance.

C

Cuk.ch

cuk.ch

40

Cuk.ch is a French-language media website focused on technology, culture, and leisure topics, operating since 2001. It serves a niche audience of French-speaking technology enthusiasts and general readers interested in cultural content. The site uses WordPress CMS and features a blog-style content publishing model with product reviews and cultural commentary. The technical infrastructure is moderate with basic mobile optimization and SEO. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies. Contact is limited to a web form with no direct emails or phone numbers. Overall, the site is trustworthy but would benefit from improved security and privacy compliance measures.

H

Hondashop

hondakisgepek.hu

47

Hondashop.hu is an e-commerce website serving as the exclusive domestic importer and retailer of Honda, EGO, and MP Motor products in Hungary. The site offers motorized garden equipment such as lawnmowers and generators, targeting both individual consumers and businesses within Hungary. The business model is primarily retail and import distribution, positioning itself as a key player in the Hungarian motor product market. The website is built on WordPress with WooCommerce and Elementor, indicating a modern and flexible digital infrastructure. The technical setup includes common marketing and analytics tools such as Google Analytics, Facebook Pixel, and CookieYes for cookie consent management. Security posture is solid with HTTPS enforced and anti-spam measures in place, though it lacks some advanced security headers and explicit security policies. Privacy compliance is partial due to the absence of a visible privacy policy and terms of service. Overall, the site is professional, well-branded, and provides a good user experience with mobile optimization and SEO considerations. No WAF or blocking mechanisms were detected, and the content is safe for general audiences.

H

Hondashop

hondamarine.hu

45

Hondashop is a specialized importer and retailer of Honda Marine engines in Hungary, offering a range of products from small single-cylinder motors to powerful V6 engines. The website is built on a modern WordPress and WooCommerce platform with Elementor, providing a good user experience and mobile optimization. The business presents itself as a trusted exclusive importer with consistent branding and a clear market focus on marine transportation products. Security posture is solid with HTTPS, security headers, and anti-spam measures, although explicit privacy and terms policies are missing. Tracking technologies like Google Analytics and Facebook Pixel are used, with cookie consent implemented. Overall, the site is professional and trustworthy but could improve privacy compliance and contact transparency.

S

SAFETY HUNGARY

safety-hungary.hu

37

SAFETY HUNGARY is a specialized motorcycle driving technique training center operating in Hungary since 2008, affiliated with Honda's international driving safety network. The company offers a range of motorcycle safety courses targeting both novice and experienced riders, aiming to reduce road accidents through improved riding skills and safety awareness. Their market position is supported by international ties, a strong local presence, and endorsements from reputable partners such as Continental and the National Police. Technically, the website is built on WordPress with modern plugins and integrations, providing a good user experience and mobile optimization. Security posture is solid with HTTPS, GDPR compliance, and anti-bot measures, though some security headers could be improved. Overall, the site reflects a professional and trustworthy business with a clear focus on motorcycle safety education.

Z

Związek Pracodawców Innowacyjnych Firm Farmaceutycznych INFARMA

infarma.pl

42

Infarma is a Polish employers' association representing innovative pharmaceutical companies, dedicated to improving public health through advocacy, certification, and information dissemination. The organization holds a trusted position within the Polish healthcare system and maintains active partnerships with European and national industry bodies. Their website reflects a professional and consistent brand image, targeting healthcare stakeholders and patient organizations. Technically, the site uses a custom PHP-based CMS with Bootstrap framework, integrates Google Analytics and reCAPTCHA for security and analytics, and is optimized for mobile devices with good SEO practices. Security posture is strong with HTTPS enforced and secure form handling, though there is room for improvement in security headers and incident response transparency. Privacy and cookie policies are clearly presented with consent mechanisms, supporting GDPR compliance. Overall, the website is well-maintained, trustworthy, and aligned with the organization's business goals.

GW Crossmedia is a specialized Dutch company providing crossmedia solutions and innovative web archiving services primarily targeting government institutions and private enterprises. With over 20 years of experience, they have established a strong market position in Europe, notably through their Archiefweb.eu platform. The website reflects a professional business with a clear focus on government and technology sectors, offering advisory and product development services. Technically, the site is built on WordPress with common plugins and frameworks but uses an outdated WordPress version, which poses security risks. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. Security posture is basic with HTTPS enabled but missing DNSSEC and security headers, and no visible incident response or security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy but would benefit from technical and security improvements.

Freifunk Münsterland is a community-driven non-profit organization providing free WLAN access to citizens in the Münsterland region of Germany. The website serves as a hub for community engagement, technical documentation, event announcements, and firmware resources. It positions itself as a regional leader in free wireless networking with a strong emphasis on open source and community collaboration. Technically, the site is built on WordPress with a modern plugin ecosystem supporting podcasting, video embedding, and cookie consent management. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and incident response transparency. Overall, the domain registration is consistent with a community organization, with privacy protection typical for such entities. The site is trustworthy, professional, and compliant with GDPR requirements.

The website werner-schimmel.de is a minimal personal or professional site representing Dipl.-Inf. Werner Schimmel. It primarily provides basic contact information including a physical address in Germany, a phone number, and an email address. There is no detailed business description, services, or interactive content. The site appears to serve as a simple contact point rather than a commercial or service-oriented platform. Technically, the site is very basic with no detected CMS, frameworks, or advanced technologies. There is no evidence of HTTPS or security headers, which limits the security posture. No privacy or cookie policies are present, indicating low compliance with data protection standards. Overall, the site is safe and suitable for general audiences but lacks modern web features and security best practices.

C

CSRV | Centre Sportif Régional Vaudois

csrv.ch

48

CSRV | Centre Sportif Régional Vaudois is a small regional sports cooperative based in Switzerland, providing sports facility rental and event hosting services primarily focused on football and community events. The website presents a professional and consistent brand image, targeting local sports clubs, families, and event organizers. The business has a long history dating back to 1966, which aligns with the domain age and registration data, supporting its legitimacy. Technically, the website is built on WordPress using the Divi theme and several plugins for booking and mapping functionalities. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. Security posture is adequate with HTTPS enabled and some security plugins in use, but lacks visible security headers and formal privacy or cookie policies, indicating room for compliance improvement. The security evaluation shows no critical vulnerabilities or exposed sensitive data, but the absence of privacy and cookie policies and security headers reduces the overall security and privacy compliance score. No incident response or vulnerability disclosure information is provided. The website content is safe for general audiences and contains no adult or questionable material. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy compliance and security best practices to improve user trust and regulatory adherence.

C

CIAC Sàrl

batiguide.ch

43

Batiguide is a Swiss platform dedicated to connecting property owners with trusted local construction and renovation professionals. Established since 1982 and operated by CIAC Sàrl, it serves the French-speaking Swiss market by providing a curated directory of artisans and companies, facilitating informed decision-making for property-related projects. The platform offers services such as emergency repairs, professional listings, and educational guides related to construction trades. Technically, the website is built on a modern WordPress CMS with standard libraries like jQuery and Bootstrap, ensuring a responsive and user-friendly experience. The presence of cookie consent mechanisms and HTTPS indicates a baseline commitment to privacy and security. However, the absence of explicit security policies and incident response contacts suggests room for improvement in security transparency. Overall, the site is professionally maintained, trustworthy, and well-positioned within its niche market.

The website represents the Mednarodni forum znanstvenoraziskovalnih farmacevtskih družb, an international forum of pharmaceutical research companies focused on healthcare innovation and patient access in Slovenia. The site provides news, event information, and advocacy content targeting healthcare professionals, policymakers, and patients. Technically, the site uses modern web standards, including HTML5, CSS3, JavaScript, and Google Analytics for tracking. It appears to be built on a CMS platform, likely Drupal, and is mobile-optimized with a moderate performance profile. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks visible security headers and explicit privacy or terms of service pages. No contact information or incident response details are found, which limits user trust and compliance transparency. The domain registration is consistent with the business and shows no suspicious patterns, indicating legitimacy. Overall, the site is professional and trustworthy but could improve privacy compliance and security transparency.

L

LogiPac

ajdistribution.se

45

LogiPac is a Swedish third-party logistics (3PL) service provider specializing in retail and pharmaceutical sectors. Established in 2011, the company offers a range of logistics services including campaign logistics, event logistics, warehousing (lagerhub), post-processing, and sustainable climate-smart logistics solutions. Their website reflects a professional and consistent brand presence targeting retail and pharma brands and chain companies in Sweden. The business model focuses on providing advanced logistics solutions with precision and economic efficiency. The company maintains a medium-sized market presence with multiple notable clients showcased on the site.

MSD Vaccinservice is a Swedish website operated by Merck & Co., Inc., providing vaccine ordering services primarily targeted at healthcare professionals. The site offers a streamlined process for ordering vaccines and related materials, emphasizing ease of use and customer service. The business is positioned as part of a global pharmaceutical leader with a strong reputation in vaccine development and distribution. The website content is professional, well-branded, and compliant with relevant privacy regulations, including GDPR. Technically, the site uses modern JavaScript libraries, cookie consent management tools, and Google Tag Manager for analytics, indicating a mature digital infrastructure. Security measures include HTTPS enforcement and a Content Security Policy, though DNSSEC is not enabled and no explicit security or incident response policies are published on the site. Overall, the site demonstrates a strong security posture with room for improvement in transparency around security policies and incident response. The domain registration details are consistent with a legitimate enterprise business, registered through a reputable registrar with no privacy protection, supporting trustworthiness. No adult or questionable content is present, making the site safe for general audiences.

M

Merck Sharp & Dohme AB

pneumo.se

49

The website pneumo.se is an educational platform operated by Merck Sharp & Dohme AB, a large pharmaceutical company. It provides comprehensive information about pneumococcal diseases and vaccination, targeting primarily adults over 65 and risk groups in Sweden. The content is medically reviewed and references authoritative health sources such as Folkhälsomyndigheten and 1177 Vårdguiden, establishing strong trust and credibility. The site promotes vaccination awareness and guides users to find local healthcare centers for vaccination services. Technically, the site is built on WordPress and employs modern web technologies including jQuery, Google Tag Manager, Facebook Pixel, and OneTrust for cookie consent management. The site is mobile-optimized, accessible, and SEO-friendly, with good performance characteristics. Hosting details are not explicit but DNS and registrar data indicate a professional setup. Privacy and cookie policies are clearly presented with GDPR compliance mechanisms in place. From a security perspective, the site uses HTTPS with excellent SSL configuration but lacks DNSSEC and visible security headers. No vulnerabilities or exposed sensitive data were detected. However, the absence of a public security policy or incident response information is noted. The domain registration is consistent and transparent, registered with a reputable registrar and appropriate for the business age. Overall, the website demonstrates a strong business credibility and technical maturity with good privacy compliance. Strategic improvements could include enabling DNSSEC, publishing security policies, and enhancing security headers to further strengthen the security posture.

The website ingavattkoppor.nu is a professionally developed healthcare information portal operated by MSD Sverige AB, a subsidiary of Merck & Co., Inc. It focuses on educating Swedish parents about chickenpox, its symptoms, transmission, and vaccination options. The site includes a vaccination center locator and provides clear, relevant content targeted at parents and guardians. The business model is informational and promotional, supporting public health awareness with backing from a major pharmaceutical company. Technically, the site uses modern web technologies including Google Tag Manager and OneTrust for cookie consent, and is likely built on WordPress. The site is mobile optimized, accessible, and SEO friendly. Security posture is good with HTTPS enforced and cookie consent implemented, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. The domain registration is consistent and legitimate, registered since 2019 with no privacy protection, aligning with the business claims. Overall, the site is trustworthy, compliant with GDPR, and provides a safe user experience.

K

KNRB

knrb-formulieren.nl

43

The KNRB formulieren website serves as an official portal for the Koninklijke Nederlandse Roeibond, providing essential forms and resources to the Dutch rowing community. It is positioned as a non-profit sports federation resource hub, targeting members, volunteers, and affiliated clubs. The site maintains consistent branding aligned with KNRB and offers clear contact information, enhancing its credibility. Technically, the website is built on WordPress using the Elementor page builder, incorporating modern web technologies such as jQuery and Google reCAPTCHA for form security. The site is mobile-optimized with moderate performance and basic SEO and accessibility features. However, it lacks advanced security headers and visible privacy or cookie policies. From a security perspective, the site benefits from HTTPS and reCAPTCHA integration but misses several best practices such as security headers and formal privacy compliance documentation. No critical vulnerabilities or suspicious elements were detected, indicating a generally secure posture suitable for its purpose. Overall, the website is functional and trustworthy for its intended audience but would benefit from enhanced privacy compliance and security hardening to improve user trust and regulatory adherence.

Swisscommunes.ch is a specialized digital solutions provider targeting Swiss communes and local governments. Their offerings include document publication and archiving, parking permits, and room rental management, emphasizing simplicity, autonomy, and cost-effectiveness. The business operates in a niche market with a clear focus on municipal digital services, supported by a small-sized company, Gilston Digital SA. The website is professionally designed with consistent branding and includes trust signals such as customer testimonials and Swiss Made Software certification. Technically, the site is built on WordPress with modern libraries and frameworks, including Bootstrap and Matomo analytics, ensuring a good user experience and privacy-conscious tracking. Security posture is solid with HTTPS, cookie consent, and reCAPTCHA integration, though it lacks some advanced security headers and explicit security policies. Overall, the site is trustworthy and well-positioned for its target audience, with room for improvement in privacy documentation and security transparency.

M

Mediaworks Hungary Zrt.

boon.hu

32

BOON.hu is a regional news portal serving Borsod-Abaúj-Zemplén county in Hungary, operated by Mediaworks Hungary Zrt. The site focuses on delivering fresh news, economic updates, and local information to residents and interested audiences within the region. It operates primarily on an advertising-supported business model, leveraging multiple ad networks and tracking technologies to monetize content. The website demonstrates a moderate to good level of digital maturity, employing modern analytics, consent management, and SEO best practices, including structured data markup. Security posture is adequate with HTTPS enforced and consent mechanisms in place, but lacks published security policies, incident response contacts, and vulnerability disclosure information, which are areas for improvement. Overall, the site is legitimate, professionally presented, and safe for general audiences.

Confedere.ch is a French-language Swiss media website providing news and journal content, including print editions. The site is built on WordPress using a professional Newspaper theme and includes GDPR-compliant cookie consent mechanisms. The technical infrastructure is modern with standard plugins and Google Analytics integration. Security posture is adequate with HTTPS enforced but could be improved by adding explicit security headers and hardening login forms. The website is trustworthy with consistent domain registration data and no suspicious content detected. Privacy compliance is good with clear cookie policies and consent mechanisms, though terms of service and security policies are not explicitly found.

The website frequenzwechsel.org is currently inaccessible, returning a 403 Forbidden error page served by nginx on Ubuntu. Due to the lack of accessible content, no business description, services, or user engagement features can be analyzed. The domain is registered since 2007 with a German registrar and hosting provider, indicating a potentially established entity, but no further business details are available from the site itself. Technically, the site uses a standard nginx web server but lacks visible security headers or HTTPS confirmation in the provided data. The security posture cannot be fully assessed due to blocked access, but the absence of DNSSEC and security policies suggests room for improvement. Overall, the site presents a low trust and content quality profile due to inaccessibility and lack of transparency.

B

Bys Hosting

byshosting.nl

44

Bys Hosting is a Dutch hosting provider established in 2004, specializing in business hosting solutions with a focus on personal support and reliability. Their services include various hosting packages, VPS, and security offerings, with servers hosted in an ISO 27001 certified data center in the EU. The website is built on WordPress and uses modern frontend technologies, providing a professional and user-friendly experience targeted at business customers in the Netherlands. Security posture is solid with HTTPS and SSL certificates, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is basic with a privacy policy and terms of service present but lacking cookie consent mechanisms. Overall, the website and business appear legitimate and trustworthy.

Salland Zorgkantoor is a regional healthcare organization in the Netherlands responsible for executing the Long-term Care Act (Wet langdurige zorg - Wlz) for residents in the Salland region, including municipalities such as Deventer, Olst-Wijhe, Raalte, and Voorst. The organization facilitates access to appropriate long-term care services, including care in kind and personal budgets, and provides support through client advisors and informational resources. Their market position is that of a trusted regional care office, supported by clear contact information and a professional web presence. The website is designed to serve individuals needing long-term care and professionals in the healthcare sector.

Putter & de Boer B.V. is a Dutch company providing tailored administrative, fiscal, and payroll services primarily targeting small and medium-sized enterprises (MKB) and private individuals. With over 45 years of experience, the company positions itself as a reliable and comprehensive service provider offering a 'one stop shopping' approach. Their website is built on the concrete5 CMS and integrates common web technologies such as jQuery, Google Analytics, and Facebook SDK for tracking and social media integration. The hosting provider is Easyhosting BV, a reputable Dutch hosting company, consistent with the company's geographic focus. From a security perspective, the website uses HTTPS but lacks important security headers, privacy and cookie policies, and explicit contact information, which are areas for improvement to enhance compliance and trust. No vulnerabilities or suspicious content were detected in the HTML content. The website is accessible without WAF or security challenges, indicating no blocking or filtering mechanisms are interfering with access. Overall, the website demonstrates a moderate level of technical maturity and business credibility but falls short in privacy compliance and security best practices. Strategic improvements in these areas would strengthen the company's digital trustworthiness and regulatory adherence.

The website www.sitearchief.nl serves as the official platform for web archiving of Dutch government websites, operated under the Rijksoverheid brand. It provides access to archived versions of various government-related web projects and initiatives, enabling users to browse historical web content. The platform is developed and managed by GW Crossmedia using the Archiefweb.eu product tailored for the Dutch government. The target audience includes government agencies, researchers, and the general public interested in government web archives. The site demonstrates consistent branding aligned with government standards and offers a comprehensive archive listing.

The analyzed content corresponds to a browser internal error page (chrome-error://chromewebdata/) displaying the Chromium offline dinosaur game. No actual website content is accessible or served. Consequently, there is no business information, contact details, or privacy and security policies available for analysis. The technical content is limited to embedded JavaScript and CSS related to the offline game. The absence of accessible content and metadata prevents meaningful assessment of business operations or compliance. Security posture is minimal due to lack of HTTPS and security headers. Overall, the site appears to be a placeholder or error page rather than an active business website.