High-risk security reports

The website originalshrine.org serves as an informational platform dedicated to the Original Shrine of the international Schoenstatt Movement, focusing on religious and cultural content. It provides visitors with historical information, event details, a live webcam feed, and media resources such as sermons. The site targets a broad audience interested in religious and cultural heritage, operating primarily as a non-commercial informational resource. The domain is well-established since 2012, registered with a reputable registrar, and shows consistency between WHOIS data and website content. Technically, the website employs basic web technologies including HTML, CSS, JavaScript with jQuery and Superfish for navigation menus, and Google Web Fonts. The hosting provider is Vautron Rechenzentrum AG. While the site uses HTTPS, it lacks advanced security headers and uses an outdated JavaScript library version, which could pose security risks. Mobile optimization and accessibility are basic, and SEO practices are minimal but functional. From a security perspective, the site benefits from HTTPS but misses DNSSEC and security headers, and no cookie consent mechanism is present. No forms or user data collection points were detected, reducing exposure to input-based vulnerabilities. The WHOIS data indicates a legitimate and stable domain registration with no privacy protection, aligning with the website's purpose. No signs of malware, phishing, or adult content were found, indicating a safe browsing experience. Overall, the website is moderately secure and credible but would benefit from updates to its technical stack, enhanced security practices, and improved privacy compliance. Strategic improvements in these areas would strengthen trust and user experience.

W

Webite, s.r.o.

webite.cz

47

Webite, s.r.o. is a small web design studio based in Brno, Czech Republic, specializing in comprehensive web services including UX design, SEO optimization, and web and mobile application development. The company positions itself as a professional and client-focused service provider with a portfolio of notable clients and positive testimonials. The website is well-structured, professionally designed, and targets businesses seeking quality web solutions. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and Google services, with good mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and Google reCAPTCHA protecting contact forms, though the absence of certain security headers suggests room for improvement. Privacy compliance is strong, featuring a detailed privacy policy and cookie consent mechanism aligned with GDPR requirements. Overall, the website reflects a trustworthy and credible business with a good balance of technical and business maturity.

A

ARCHEKTA, s.r.o.

archekta.com

47

Archekta is a small Slovak architecture studio founded in 1991, specializing in architectural design and construction consulting with a focus on balancing art and architecture. The company has a strong regional presence with award-winning projects and a professional team. The website showcases their portfolio and team but lacks privacy and cookie policies, which are important for compliance. Technically, the site uses modern frameworks like Nuxt.js and Tailwind CSS, hosted on Websupport.cz, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled but lacks DNSSEC and security headers. Contact information is clearly provided, enhancing business credibility. Overall, the site is professional and trustworthy but could improve compliance and security practices.

T

Tregler Paliva

tregler-paliva.cz

49

Tregler Paliva is a small, established business specializing in the purchase, processing, and sale of quality firewood primarily serving the Czech Republic and Austria. Founded in 1991, the company has a strong regional presence and targets both consumer and business customers seeking firewood products. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site uses modern JavaScript frameworks, Laravel Nova for administration, and integrates multiple analytics and tracking tools including Matomo, Google Tag Manager, Facebook Pixel, and Smartlook. The hosting and domain registration are consistent with the business location and claims, enhancing trustworthiness. Security posture is adequate with HTTPS enabled and secure admin routes, but lacks some security headers and explicit security policies. Privacy compliance is weak due to absence of privacy and cookie policies despite cookie consent mechanisms. Overall, the site is functional and trustworthy but would benefit from improved privacy transparency and security best practices.

M

Moje NEO

mojeneo.cz

48

Moje NEO is a Czech financial group offering a unique license product called the NEO licence, which provides users with a variety of financial benefits including cashback, insurance claim assistance, real estate services, business mentoring, commissions, financial products, and education. The company positions itself as a modern financial partner with 30 years of experience, targeting individuals and entrepreneurs seeking financial freedom and personalized financial solutions. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, hosted on DigitalOcean, and uses standard tracking tools like Google Tag Manager and Facebook Pixel. The site is well-designed, mobile-optimized, and SEO-friendly, but lacks explicit privacy and terms of service pages, which are important for compliance. Security posture is good with HTTPS and security headers implemented, but incident response and security policies are not publicly disclosed. Overall, the website is professional and trustworthy but could improve transparency and compliance documentation.

F

Fidurock

nearliving.cz

44

NEAR living is a modern residential real estate development project located in the rapidly evolving Prague district of Palmovka. The project offers a range of apartments from 1+kk to 3+kk, combining urban lifestyle with tranquility and high-quality architectural design. The website is professionally designed using modern technologies such as Nuxt.js and Vue.js, with strong mobile optimization and good SEO practices. The security posture is solid with HTTPS and secure forms, though explicit security headers and a published security policy are missing. Privacy compliance is well addressed with a GDPR-compliant privacy policy and cookie consent mechanism. The WHOIS data shows inconsistencies with a future domain creation date, which slightly impacts trust but does not undermine the overall legitimacy of the business. Strategic recommendations include improving security headers, publishing a security policy, and verifying WHOIS data accuracy.

K

Koordinierungsstelle für Hospiz- u. Palliativversorgung in Deutschland

koordinierung-hospiz-palliativ.de

48

The website www.koordinierung-hospiz-palliativ.de serves as the official coordination center for hospice and palliative care services in Germany. It provides informational resources, including multilingual explanatory videos, targeting patients, relatives, healthcare institutions, and care providers. The site positions itself as a national non-profit entity focused on improving access and awareness of hospice and palliative care. Technically, the site is built on the Contao CMS platform, utilizing jQuery and jQuery UI for interactive elements. The infrastructure supports HTTPS with good SSL configuration, but lacks advanced security headers and cookie consent mechanisms. The content is well-structured, professionally presented, and accessible, though mobile optimization and accessibility could be improved. Security posture is solid with no visible vulnerabilities or exposed sensitive data, but the absence of a security policy and incident response contacts is noted. Overall, the site is trustworthy and credible, with clear contact information and consistent branding.

J

Jugendhaus St. Kilian

jugendhaus-st-kilian.de

49

Jugendhaus St. Kilian is a non-profit youth and educational center located in Miltenberg, Germany, affiliated with the Diocese of Würzburg. The organization provides accommodation, conference facilities, catering, and educational programs primarily targeting school classes, families, and youth groups. The website is professionally designed using Joomla CMS with modern frameworks such as Bootstrap and UIkit, and integrates privacy-compliant tools like Usercentrics for consent management and Matomo for analytics. Contact information and legal disclosures are clearly presented, enhancing trust and transparency. The domain registration and DNS setup are consistent with the organization's regional and operational profile, indicating legitimacy and stability. Technically, the website employs a modern tech stack and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent mechanism in place. No incident response or security policy pages were found, suggesting an area for improvement. Overall, the website presents a trustworthy and professional digital presence for a regional non-profit organization focused on youth services and education. The risk profile is low, with no indications of malicious activity or content safety concerns.

B

B2C, s.r.o.

dezeta.cz

45

Papírnictví DEZETA is an e-commerce and physical retail business operated by B2C, s.r.o., specializing in office, school, and paper products. The company has a local market presence in the Czech Republic, with a physical store located at Thákurova 7, Prague 6, and an online shop offering a wide range of stationery and related products. The website is built using modern JavaScript frameworks, specifically Vue.js, providing a responsive and user-friendly shopping experience. However, the site lacks some advanced security and privacy features such as cookie consent mechanisms and security headers. The WHOIS data confirms the legitimacy and consistency of the domain registration with the business information provided on the site.

O

Office Pro s.r.o.

mujnavrh.cz

43

Office Pro s.r.o. operates a professional e-commerce platform specializing in office furniture and accessories, primarily serving the Czech market. The website offers a unique 3D office design tool enabling customers to create and customize office layouts online, enhancing user engagement and service differentiation. The company maintains a consistent brand presence with active social media channels and a comprehensive privacy and cookie policy aligned with GDPR requirements. Technically, the site leverages modern JavaScript libraries including Babylon.js for 3D rendering, and integrates multiple analytics and advertising pixels for marketing optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and explicit security policies could enhance trust. The absence of WHOIS data limits domain transparency, but the website's professional content and business indicators suggest legitimate operations. Overall, the site is well-positioned in its niche with moderate technical maturity and good compliance practices.

O

Office Pro s.r.o.

officepro.cz

42

Office Pro s.r.o. is a Czech company specializing in office furniture and accessories, offering recognized brands such as OFFICE PRO and HOBIS. The company targets business customers seeking quality office chairs, desks, and custom furniture solutions. Their website provides detailed product information, a 3D office design tool, and a blog with relevant content. Technically, the website employs modern analytics and marketing technologies including Google Tag Manager, Facebook Pixel, TikTok Pixel, and Microsoft Clarity, with HTTPS enabled ensuring secure connections. However, the absence of WHOIS data and lack of visible privacy and terms of service pages indicate areas for improvement in transparency and compliance. Security posture is generally good but could benefit from enhanced HTTP security headers and clearer incident response contacts. Overall, the site is professional, content-rich, and safe for general audiences, supporting a medium-sized business with a solid market position in the Czech Republic.

O

Office Pro s.r.o.

hobis.cz

44

Office Pro s.r.o. operates a professional website focused on the sale and custom manufacturing of ergonomic office furniture under the HOBIS brand. The company leverages a long tradition associated with the HON manufacturer, emphasizing quality, ergonomics, and functionality to enhance workplace productivity. The website targets businesses and office environments seeking modern, ergonomic furniture solutions. Technically, the website employs modern analytics and marketing technologies including Google Analytics, Facebook Pixel, TikTok Pixel, and Microsoft Clarity, alongside a cookie consent mechanism to comply with privacy regulations. The site is served over HTTPS with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced but lacks explicit security headers and visible security policies. The absence of WHOIS data limits domain registration trust analysis, but the website content and certifications provide strong trust signals. Overall, the site is professional, content-rich, and trustworthy from a business perspective.

The website login.webspaceconfig.de serves as a customer login portal for managing hosting projects, targeting customers who use hosting services. The platform appears to be a small-scale technology service focused on project management within the hosting sector, primarily serving a German-speaking audience. The site uses modern web technologies including JavaScript ES modules, React framework, and Font Awesome icons, indicating a contemporary technical infrastructure. Hosting is provided by agenturserver as inferred from the nameservers. The website performance is moderate with basic mobile optimization and accessibility features. Security posture is adequate with HTTPS enforced and password fields properly masked; however, the absence of explicit security headers and privacy policies indicates room for improvement. Analytics are implemented via etracker, reflecting moderate user tracking but lacking clear privacy compliance mechanisms. Overall, the site is functional but lacks comprehensive privacy, security, and contact disclosures, which impacts trust and compliance. Strategic improvements in security headers, privacy policies, and contact transparency are recommended to enhance the security posture and user trust.

I

Internetagentur dd-media.de

werratal-news.de

47

werratal-news.de is a regional news portal operated by Internetagentur dd-media.de, serving the Mittleres Werratal and Waldhessen regions in Germany. The site provides local news, event calendars, weather updates, and cultural information, positioning itself as a trusted source for residents and regional stakeholders. The business model focuses on digital regional news dissemination and community engagement through a well-structured website with categorized content and social media integration. Technically, the website employs a moderate technology stack including jQuery, Bootstrap, FontAwesome, and Matomo analytics, combined with a cookie consent manager compliant with GDPR. The site is mobile-optimized with good navigation and SEO practices, although some outdated libraries like jQuery 1.11.2 present potential security risks. Hosting details are not explicitly identified, but HTTPS is enforced with a good SSL configuration. From a security perspective, the site demonstrates good practices such as HTTPS, privacy-respecting analytics, and cookie consent mechanisms. However, it lacks advanced security headers like Content-Security-Policy and does not provide a security policy or vulnerability disclosure page. No critical vulnerabilities or exposed sensitive data were detected, but updating outdated libraries and enhancing security headers is recommended. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its regional audience effectively. Strategic improvements in security posture and transparency would further enhance its credibility and resilience.

SendCockpit is a German-based email marketing software provider operated by Clever Elements GmbH, established in 2008. The company offers a SaaS platform enabling tens of thousands of customers to send email campaigns daily, with a strong emphasis on abuse prevention and compliance. The website analyzed is an abuse desk page dedicated to reporting and managing email abuse incidents, reflecting a mature approach to user identity verification and spam monitoring integrated with major ISPs. The business targets email marketers and companies requiring compliant email marketing solutions.

U

unimess GmbH

anwaltskanzlei-marketing.de

42

The website represents unimess GmbH, a specialized marketing agency focused on legal professionals such as lawyers and tax advisors in Germany. Their services include internet presence creation, marketing consulting, print media, and office equipment for law firms. The company positions itself as an experienced niche player with a nationwide clientele. Technically, the website uses a modern frontend stack including Bootstrap, jQuery, and Matomo analytics configured for privacy by disabling cookies. The site is responsive and well-structured, providing a professional user experience. Security posture is moderate; while HTTPS is assumed, no explicit security headers or policies are visible, and no cookie consent mechanism is implemented despite analytics usage. WHOIS data aligns with the company branding, indicating legitimacy. Overall, the site is professional and trustworthy but could improve in security and privacy compliance aspects.

The website www.werbeagentur-juwelier.de represents unimess GmbH, a small specialized advertising agency focused on jewelers and jewelry manufacturers. The company offers services including internet agency solutions, marketing, and advertising tailored to this niche market. The website content is professional and consistent with the business focus, targeting German-speaking jewelers and related manufacturers. The technical infrastructure employs modern front-end libraries such as jQuery, Bootstrap, and Font Awesome, with Matomo analytics integrated for user tracking without cookies. The site is mobile optimized and provides a good user experience with clear navigation and design consistency. However, contact information is not explicitly visible on the main page, and no forms or social media links are present in the analyzed content.

U

unimess GmbH

jobs-ueberall.de

41

Jobs-ueberall.de is a German job listing portal operated by unimess GmbH, providing job offers from various clients across Germany. The site targets a broad audience seeking employment opportunities in multiple sectors. The platform offers a job finder search form and links to employer websites for detailed job information. The business model centers on aggregating and displaying client job offers to job seekers. Technically, the site uses a modern frontend stack including Bootstrap, jQuery, and Slick Carousel, with Matomo analytics configured to disable cookies, reflecting some privacy awareness. However, no cookie consent mechanism is present. Security posture is moderate with no detected security headers and unknown SSL configuration from provided data. WHOIS data aligns with the company branding and domain ownership, supporting legitimacy. Overall, the site is functional, professionally designed, and mobile optimized but could improve in privacy compliance and security best practices.

C

Cookies lišta, s.r.o.

cookieslista.cz

49

Cookies lišta, s.r.o. is a Czech-based small technology company specializing in providing comprehensive cookie consent and GDPR compliance solutions tailored for websites. Their offerings include a cookie consent bar, privacy policy generator, and ongoing legislative and technological updates, positioning them as a niche player in the compliance software market. The company collaborates with legal experts and web design studios to ensure both legal accuracy and technical quality. Their market focus is primarily on Czech businesses needing to comply with evolving cookie legislation effective from 2022 and beyond. Technically, the website is built on WordPress and leverages modern JavaScript libraries and third-party services such as Google Analytics, Google Tag Manager, Facebook Pixel, Hotjar, and Smartsupp live chat. The site demonstrates good SEO practices, mobile optimization, and a user-friendly interface with clear navigation and professional design. Consent management is robust, with scripts loaded conditionally based on user consent, reflecting a mature digital compliance posture. From a security perspective, the site enforces HTTPS and implements consent-based script loading to protect user privacy. However, no explicit security headers were detected, suggesting room for improvement in hardening the site against common web threats. The absence of WHOIS data due to privacy protection is typical for small businesses and does not raise immediate concerns given the professional presentation and clear contact information. Overall, the website presents a low-risk profile with strong compliance focus, good technical implementation, and transparent business operations. Strategic recommendations include enhancing security headers, maintaining up-to-date third-party script audits, and possibly publishing a formal security policy to further build trust.

The website www.freischaltportal.de currently serves only a 404 Not Found error page, indicating that the requested content is unavailable or the site is misconfigured. There is no accessible business information, metadata, or structured data to analyze. The lack of content prevents any meaningful assessment of the company's market position, services, or target audience. Technically, the site does not provide any detectable technologies, scripts, or security headers, and no HTTPS or SSL details are available from the provided data. Security posture is minimal due to the absence of content and security best practices. Overall, the site appears inactive or improperly maintained, resulting in a very low trust and credibility score.

H

Hoffnungsvoll leben

hoffnungsvoll-leben.de

45

Hoffnungsvoll leben is a small non-profit Christian website dedicated to personal development, psychological well-being, and spiritual growth. It provides a broad range of articles, meditations, and materials authored by professionals and active members of the Schönstatt Movement. The website targets individuals seeking faith-based guidance and psychological support. Technically, the site is built on the SilverStripe CMS platform, uses common JavaScript libraries such as jQuery and Revolution Slider, and is hosted behind Cloudflare for DNS and security. The site is mobile-optimized with a moderate performance profile. Security posture is adequate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms. No direct contact emails or phone numbers are provided, only a contact form. The WHOIS data is consistent with the website's origin and business type, showing no suspicious patterns. Overall, the site is trustworthy and professionally maintained but could improve privacy compliance and security best practices.

P

www.pilgerwege-schoenstatt.de | Pilgerwege Schoenstatt - Von Heiligtum zur Heiligtum - Schönstatt Zentren in Deutschland.

pilgerwege-schoenstatt.de

42

The website pilgerwege-schoenstatt.de serves as an informational platform focused on pilgrimage routes associated with the Schönstatt movement and its centers in Germany. It targets pilgrims and religious visitors interested in these routes. The site uses WordPress CMS with the Divi theme and integrates OpenStreetMap for mapping functionalities. The technical infrastructure is moderate, with basic mobile optimization and SEO practices. Security posture is weak due to lack of HTTPS verification in the provided data, absence of security headers, and missing privacy and cookie policies. No contact or incident response information is available, which limits user trust and compliance with data protection regulations. Overall, the site is functional but lacks advanced security and privacy features, which should be addressed to improve trust and compliance.

schoenstattTV is a small non-profit media platform dedicated to streaming and archiving religious events related to the Schoenstatt spirituality and community. It offers multilingual content and live streams, targeting followers and families interested in Schoenstatt. The website is hosted on servers associated with kasserver.com and uses HTTPS with embedded YouTube videos for media delivery. The technical infrastructure is basic but functional, with moderate performance and limited mobile optimization. Security posture is adequate with HTTPS but lacks advanced security headers and visible privacy or cookie policies. No contact information or social media presence is evident, which limits direct user engagement and trust signals. Overall, the site serves a niche religious community with a focus on media content delivery rather than commercial business operations.

P

Pater Kentenich Sekretariat

pater-kentenich.org

41

The Pater Kentenich Sekretariat website serves as an informational and spiritual resource dedicated to Father Joseph Kentenich, founder of the International Schoenstatt Movement. It supports the beatification process by providing prayer inspirations, written materials, and testimonies in multiple languages, targeting a global religious audience. The website is positioned as a niche non-profit entity focused on religious education and spiritual guidance. Technically, the site is built on the concrete5 CMS platform (version 5.6.4.0) and employs common web technologies such as jQuery and Bootstrap. The site is mobile-optimized and offers a multilingual experience, although some technical aspects like security headers are missing. Security posture is moderate with HTTPS enforced but lacking advanced headers and incident response information. The absence of WHOIS data limits domain registration trust verification, but the website content and structure indicate legitimacy. Overall, the site is professionally presented with good content quality and user experience but could improve in privacy compliance and security best practices.

C

CURIA (formerly Femtec.Alumnae)

curia-netzwerk.de

47

CURIA is a well-established non-profit network dedicated to supporting women in STEM fields in Germany. With over 1,000 members and partnerships with reputable companies, it offers career development, networking, and annual conferences. The website is professionally designed, mobile-optimized, and content-rich, reflecting a mature digital presence. Technically, it runs on WordPress with modern front-end technologies and uses plugins for analytics and contact forms. Security posture is good with HTTPS enforced, but lacks some security headers and explicit incident response contacts. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and serves its target audience effectively.

S

Schönstattbewegung Frauen und Mütter

s-fm.de

42

The Schönstattbewegung Frauen und Mütter website represents a small non-profit religious community focused on women and mothers within the Catholic Church in Germany. The organization provides spiritual support, events, publications, and community engagement. The website is well-structured, content-rich, and clearly targeted to its niche audience. The technical infrastructure is based on the concrete5 CMS platform, with standard web technologies such as jQuery and Bootstrap grid. The site is mobile-optimized and performs moderately well, though some modernization could improve performance and security. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but the absence of security headers and an outdated CMS version present potential risks. Privacy compliance is partially met with a privacy policy present but lacking cookie consent mechanisms. Contact is primarily via a web form, with no direct emails or phone numbers publicly listed. Overall, the site is trustworthy and professional but could benefit from enhanced security and privacy features.

M

Magistrat der Stadt Hanau

demokratie-leben-hanau.de

48

The website www.demokratie-leben-hanau.de represents a government-affiliated non-profit partnership focused on promoting democracy, diversity, and tolerance in Hanau, Germany. It serves as a platform to coordinate local civil society actors, government bodies, and political stakeholders to foster community engagement and support projects aligned with these values. The site provides comprehensive information on funding opportunities, ongoing projects, events, and contact details, reflecting a well-structured and community-oriented business model. Technically, the website is built on Joomla CMS with modern frontend technologies such as Bootstrap 5 and jQuery, ensuring responsive design and moderate performance. Hosting is provided by SchlundTech, a reputable German hosting provider. The site employs HTTPS with a valid SSL configuration and includes CSRF tokens in forms, indicating attention to security best practices. However, some HTTP security headers appear to be missing, which could be improved. From a security and compliance perspective, the site demonstrates good GDPR compliance with clear privacy and cookie policies and consent mechanisms. Contact information is transparent and professional, but there is no explicit security policy or incident response information available. No vulnerabilities or suspicious content were detected, and the site maintains a safe content rating suitable for general audiences. Overall, the website is trustworthy, professionally maintained, and fulfills its role as a local government and civil society communication platform. Strategic recommendations include enhancing security headers, adding explicit security policies, and maintaining up-to-date software to further strengthen its security posture.

P

Penta-Tec

penta-tec.com

48

Penta-Tec is a specialized provider of CNC control software and hardware solutions, offering an all-in-one CAD, CAM, and CNC machine operation package tailored for machine and plant builders in the CNC sector. The company targets both beginners and professionals, emphasizing flexibility and ease of use. Their market position is that of a niche player with over 25 years of expertise, providing customized solutions that balance standardization and individualization. The website reflects a professional and consistent brand image with clear contact information and GDPR-compliant privacy practices. Technically, the website is built on WordPress with a modern theme and plugins, including Yoast SEO and Google Analytics integration with IP anonymization. The site is mobile-optimized and performs moderately well, though some accessibility features could be improved. Security-wise, HTTPS is enforced, and basic best practices are followed, but explicit security headers and incident response information are lacking. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is missing or indicates the domain may not be registered, which raises concerns about domain legitimacy despite the professional website presence. No WAF or blocking mechanisms are detected, and the site content is safe for general audiences. Overall, the website scores well in content quality and privacy compliance but is penalized for missing WHOIS data and incomplete security disclosures. Strategic recommendations include verifying domain registration, enhancing security headers, publishing incident response and vulnerability disclosure policies, and improving accessibility compliance to strengthen trust and security posture.

I

INTERVISTA AG

intervista-ag.de

49

INTERVISTA AG operates as a specialized provider of sales automation and digitalization software solutions primarily targeting the insurance and finance sectors in Germany. Their offerings include consulting, software development, and operational services designed to enhance sales efficiency and digital transformation for their clients. The company positions itself as a partner for businesses seeking to outperform competitors through innovative technology solutions. Technically, the website is built on WordPress with modern plugins and frameworks such as Beaver Builder and Yoast SEO, indicating a mature digital infrastructure. The presence of tracking and analytics tools like Matomo and Leadinfo suggests an active approach to user engagement and lead generation, although privacy compliance mechanisms are lacking. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and explicit policies. Overall, the website is professional and content-rich but would benefit from enhanced privacy and security disclosures to improve trust and compliance.

B

B-TA Soft

btasoft.hu

42

B-TA Soft is a Hungarian small technology company specializing in cloud-based services aimed at improving business workflows, communication, and efficiency. Their key offerings include business process support software (aMetszet), a sports career tracking application (MobilisSport), and comprehensive hosting services. The company targets local businesses and sports professionals, positioning itself as a niche provider of integrated cloud solutions. The website reflects a professional and consistent brand image with good design and mobile optimization, though it lacks comprehensive privacy and security disclosures. Technically, the site uses modern frontend technologies such as Bootstrap, jQuery, and SumoMe for marketing and analytics, but does not employ advanced security headers or provide incident response contacts. The domain is well-established since 2015, consistent with the business profile, and no suspicious elements were detected. Overall, the site is functional and professional but would benefit from enhanced security and privacy compliance measures.

S

ISA Sign Expo 2026

signexpo.org

49

The ISA Sign Expo 2026 website serves as an informational platform for a signage industry event, targeting professionals and businesses in the signage and visual communications sector. The site is built on WordPress using Elementor and Yoast SEO, indicating a modern CMS with SEO optimization. Google Tag Manager is used for analytics and tracking, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and DNSSEC. Privacy and cookie policies are absent, which is a compliance gap. Overall, the site is professionally designed with good user experience but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

T

Tourismuszentrale Fränkische Schweiz

fraenkische-schweiz.com

47

The website www.fraenkische-schweiz.com serves as the official tourism portal for the Fränkische Schweiz region in Bavaria, Germany. It provides comprehensive information on activities, accommodations, gastronomy, and events, targeting tourists and vacationers interested in this historic and scenic area. The site is well-structured, professionally designed, and optimized for mobile devices, reflecting a mature digital presence. Technically, it is built on the TYPO3 CMS platform and integrates modern JavaScript libraries and Google Analytics for tracking. Security measures include HTTPS and a cookie consent mechanism, though explicit security headers and detailed security policies are not evident. The absence of WHOIS registration data raises concerns about domain legitimacy, which should be verified to ensure full trust. Overall, the site is a reliable resource for regional tourism but would benefit from enhanced transparency in domain registration and security disclosures.

F

Das Fichtelgebirge: Fichtelgebirge

fichtelgebirge.bayern

47

The website www.fichtelgebirge.bayern serves as a regional tourism portal dedicated to the Fichtelgebirge region in Germany. It provides comprehensive information about accommodations, cultural events, outdoor activities, and regional specialties, targeting tourists and visitors interested in exploring the area. The site is multilingual, offering translations via Google Translate, enhancing accessibility for international visitors. Technically, the site is built on TYPO3 CMS, utilizing modern frontend libraries such as jQuery UI and Slick Carousel, and integrates Google Analytics for visitor tracking alongside a CookieFirst consent management system. Security-wise, the site enforces HTTPS and implements cookie consent, but lacks explicit security headers and vulnerability disclosure mechanisms. The WHOIS data is privacy protected, which is common for such regional tourism sites, and no suspicious patterns were detected. Overall, the site presents a professional and trustworthy digital presence for regional tourism promotion.

The website yeu-data.de is currently inaccessible, returning a 403 Forbidden error page indicating restricted access or misconfiguration. Due to the lack of accessible content, no business description, services, or contact information can be extracted. The domain is registered with multiple name servers but lacks detailed WHOIS registrant information, limiting trust assessment. Technically, the site does not expose metadata, scripts, or security headers, and no privacy or cookie policies are present. This severely limits the ability to evaluate the website's digital maturity or security posture. The absence of content and security best practices suggests the site is either under maintenance or improperly configured, posing a risk to user trust and engagement.

U

unimess GmbH

unimess.de

46

unimess GmbH is a small, established internet and advertising agency based in Ulm, Germany, with over 25 years of experience. The company specializes in internet presence creation, web design, CMS implementation, SEO, SEA, programming, online shops, app development, cloud solutions, and business consulting. Their market position is regional with a focus on delivering tailored digital marketing and technology solutions. Technically, the website employs modern front-end frameworks such as Bootstrap and jQuery, with additional libraries for animations and user experience enhancements. The use of Matomo analytics reflects a privacy-conscious approach. Security posture is moderate with no visible critical vulnerabilities, but lacks explicit security headers and published security policies. Privacy compliance is good with a comprehensive privacy policy but missing cookie consent mechanisms. Overall, the website is professional, well-branded, and trustworthy, though improvements in security transparency and compliance could enhance their posture.

The website at arctic-council.org is currently inaccessible, returning a 403 Forbidden error page that blocks access to any substantive content. This prevents extraction of business, security, or compliance information from the site itself. The domain is long-established, created in 1999, and registered with Tucows Domains Inc. without privacy protection, indicating a legitimate registration history. Hosting is provided by SiteGround as indicated by the nameservers. No privacy, cookie, or terms of service policies are present in the accessible content, nor are there any contact details or forms. The site lacks security headers and DNSSEC is not enabled, which are areas for improvement. Overall, the site’s digital presence is minimal or restricted, limiting the ability to assess its business operations or security posture fully.

A

Arctic Data Committee

arcticdc.org

48

The Arctic Data Committee (ADC) operates as a non-profit organization focused on coordinating Arctic data interoperability and standards. The website serves as an information hub for researchers and stakeholders interested in polar data, offering resources such as meeting archives, data products, and working groups. The organization appears well-established with a domain age of approximately 8 years, consistent with its operational history. Technically, the site is built on Joomla CMS using Bootstrap and jQuery, providing a moderately performant and mobile-optimized experience. However, the site lacks critical privacy and cookie policies, and no contact information is explicitly provided, which may hinder user trust and compliance with data protection regulations. Security posture is basic with HTTPS enabled but no DNSSEC or security headers detected. Google Analytics is used for minimal user tracking without visible consent mechanisms. Overall, the site is professional and trustworthy but would benefit from enhanced privacy, security, and contact transparency.

L

LandReise.de

landreise.de

49

LandReise.de is a specialized online platform offering rural vacation accommodations primarily in German-speaking Europe. The company focuses on providing families, couples, and groups with access to unique farm stays, holiday homes, huts, and hideaways. Their market position is strong within the niche of rural hospitality, supported by a comprehensive and professionally designed website that facilitates booking and discovery of over 4,000 properties. Technically, the website employs modern web technologies including Statamic CMS, Tailwind CSS, and JavaScript modules, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent management, though it lacks explicit security policies and vulnerability disclosure mechanisms. Overall, the platform demonstrates a mature digital presence with clear contact channels and social media integration, but could improve privacy transparency and security documentation.

B

Bundesforum Lernort Bauernhof

forum-lernort-bauernhof.de

49

The Bundesforum Lernort Bauernhof is a German nationwide non-profit network established in 2006 that coordinates organizations, associations, ministries, and individuals dedicated to farm-based educational initiatives. The website serves as an information hub promoting the farm as an experiential learning environment, emphasizing sustainable development education for children and youth. The organization focuses on networking, material development, certification, and advocacy to integrate farm education into school curricula across Germany. Technically, the website is built on WordPress with the Divi theme and uses modern web technologies including jQuery and Font Awesome. It features a cookie consent mechanism but lacks a dedicated privacy policy page and explicit contact information. Security posture is generally good with HTTPS enabled, but security headers are not evident and no vulnerability disclosure or incident response information is provided. WHOIS data for the domain is missing, which raises concerns about domain registration transparency and trustworthiness. Overall, the site is professional and content-rich but would benefit from improved privacy and security disclosures.

I

i.m.a - information.medien.agrar e.V.

landwirtschaftmachtschule.de

47

The website 'Landwirtschaft macht Schule' is an initiative by i.m.a - information.medien.agrar e.V. aimed at integrating agriculture into school education in Germany. It connects farmers with schools to provide practical and sustainable learning experiences, promoting awareness of regional food production and agricultural practices. The platform offers resources, training, and a network for teachers, farmers, and associations, positioning itself as a niche educational non-profit with a strong focus on sustainability and hands-on learning. Technically, the website is built on the MYOB CMS platform using modern frameworks such as UIkit and jQuery. It features responsive design, good navigation, and moderate performance. The site employs HTTPS with a cookie consent mechanism, ensuring GDPR compliance. However, it lacks some advanced security headers and explicit incident response or vulnerability disclosure information. From a security perspective, the site demonstrates good practices with no detected vulnerabilities or exposed sensitive data. The absence of tracking scripts and minimal user data collection aligns with privacy best practices. The WHOIS data is limited but consistent with the site's professional and educational nature, showing no suspicious patterns. Overall, the website is trustworthy, well-structured, and serves its educational mission effectively. Strategic improvements in security headers, accessibility, and transparency regarding security policies could further enhance its posture and user trust.

Nordisk KulturlandskabsForbund is a Nordic non-profit organization dedicated to promoting interest and sustainable use of the Nordic countries' cultural landscapes. The organization operates primarily through membership activities including seminars, excursions, publications, and an active website with forums and resources. The website is built on WordPress with a moderate technical infrastructure and uses common plugins for community engagement and email subscriptions. The site is well designed with good navigation and relevant content for its target audience of Nordic cultural and environmental professionals and enthusiasts. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy and professionally maintained, serving a niche non-profit community effectively.

The website 'Ehrenamt Evangelisch Engagiert' serves as an informational and community platform supporting voluntary engagement within the Evangelical Lutheran Church in Bavaria. It provides news, resources, and coordination services for volunteers and church members, positioning itself as a niche non-profit entity focused on church-related volunteerism. The site is professionally designed with consistent branding and clear navigation, targeting German-speaking church volunteers and coordinators. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries such as Leaflet for maps and Matomo for privacy-conscious analytics. The site is mobile-optimized and performs moderately well, with basic accessibility features. Security posture is solid with HTTPS enforced and minimal cookies used, although security headers are not explicitly detected. Privacy compliance is good, with a clear cookie banner and privacy policy in German. No critical vulnerabilities or blocking mechanisms were detected. The WHOIS data aligns with the website's organizational claims, showing consistent domain registration and DNS management. Contact information is transparent and professional, including official church email and phone numbers. Social media presence is limited to Facebook. Overall, the website demonstrates a mature digital presence for a small non-profit church entity, with good security and privacy practices but room for improvement in security headers and incident response disclosures.

Vogel Software GmbH is a small, established German software company specializing in custom software development, particularly in Warenwirtschaft (inventory management) and Produktionsplanung (production planning) systems using Visual FoxPro and .NET technologies. Founded in 1989, the company offers tailored software solutions, coaching, and porting services, targeting SMEs in various sectors including trade, industry, and engineering firms. Their flagship products include vmAuftrag and the StarLib C# framework. The website reflects a professional and consistent brand image with detailed business and contact information, supporting their market credibility. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Google reCAPTCHA for form security. Hosting is managed via nshost2.de name servers, and the site includes analytics via Piwik. While the site is mobile-optimized and SEO-friendly, some security best practices like security headers (CSP, HSTS) are missing, and no cookie consent mechanism is implemented despite cookie usage. From a security perspective, the site uses HTTPS and protects its contact form with reCAPTCHA, but lacks explicit security policies and incident response information. The WHOIS data confirms the domain's legitimacy and long-standing registration consistent with the company's history. Overall, the site is trustworthy, safe, and professionally maintained, though improvements in security headers and privacy compliance could enhance its posture. The risk level is low, with no signs of malicious content or blocking mechanisms. Strategic recommendations include implementing security headers, adding cookie consent, and publishing security policies to strengthen compliance and trust.

MESSER MEDICAL HOME CARE is a small Slovenian healthcare provider specializing in home oxygen therapy and sleep apnea treatment devices. Their website offers basic informational content about their services, including medical oxygen supply and CPAP/BIPAP devices for sleep therapy. The business targets patients requiring home medical support and operates locally in Slovenia. Technically, the website is simple, built with basic HTML and CSS, hosted by OVH, and lacks modern CMS or frameworks. There is no evidence of advanced analytics or tracking, and no social media presence is linked. Security posture is minimal with no detected security headers or privacy policies, and the presence of HTTPS could not be confirmed from the data provided. The domain registration is consistent with the business profile and location, supporting legitimacy. Overall, the website serves as a basic online presence but lacks important compliance and security features.

The website energieagentur-untermain.de is currently non-functional, displaying a database connection error page. This prevents access to any meaningful content or business information. The domain is registered with structured WHOIS data but lacks detailed registrant information, which limits trust and transparency. The site appears to represent an entity in the energy sector, but no further business details are available. Technically, the site lacks HTTPS information and security headers, indicating a weak security posture. No privacy or cookie policies are present, and no contact information is accessible, which further reduces credibility and compliance. Overall, the site is currently unusable and presents significant operational and security risks.

Gemeindewerke Kahl Versorgungsgesellschaft mbH is a regional utility provider based in Kahl am Main, Germany, offering electricity, gas, and water supply services. The company emphasizes sustainable energy solutions, including 100% certified hydropower electricity and climate-neutral gas options. Their market position is that of a trusted local supplier with a focus on environmental responsibility and customer service. The website targets residential and commercial customers in the region, providing online contract management, energy-saving tips, and services related to electromobility and photovoltaics. Technically, the website is built using modern web technologies including Bootstrap 5 and jQuery, hosted on rzone.de servers. It is mobile-optimized with good accessibility and SEO practices. The site includes interactive elements such as a tariff calculator form and a well-structured navigation menu. However, no CMS or advanced platform is explicitly detected. From a security perspective, the site uses HTTPS and secure form inputs but lacks visible security headers and explicit incident response or vulnerability disclosure policies. No cookie consent mechanism was detected, which may pose GDPR compliance risks. The WHOIS data is consistent with the website content and business legitimacy, with no suspicious patterns. Overall, the website is professional, trustworthy, and well-suited for its business purpose. Strategic improvements in security headers, privacy compliance, and incident response transparency would enhance its security posture and regulatory adherence.

E

EZV Energie- und Service GmbH & Co. KG Untermain

ezv-energie.de

45

EZV Energie- und Service GmbH & Co. KG Untermain is a regional energy and telecommunications provider based in Germany, specializing in supplying 100% green electricity, broadband internet, telephony, and e-mobility solutions. The company emphasizes local renewable energy generation including photovoltaic, wind, and hydropower, targeting private and business customers in the Untermain region. Their business model focuses on direct customer engagement supported by online services and regional partnerships. The website reflects a medium-sized enterprise with consistent branding and good content quality.

Elektrizitätswerk Goldbach-Hösbach GmbH & Co. KG is a regional utility and telecommunications provider serving the Goldbach and Hösbach areas in Germany. The company offers a range of services including electricity, natural gas, water supply, and telecommunications such as VDSL and Glasfaser internet. Their website reflects a medium-sized enterprise with a professional online presence, targeting both residential and business customers. The content is well-organized, informative, and tailored to the local market, emphasizing energy solutions, e-mobility, and building management services. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and Blueimp Gallery, ensuring good mobile optimization and accessibility. The site uses HTTPS and implements cookie consent mechanisms in line with GDPR requirements. Google Analytics is used for visitor tracking with an opt-out option, indicating moderate user tracking. However, no CMS or hosting provider information is explicitly identified. From a security perspective, the site shows basic best practices such as HTTPS and cookie consent but lacks visible security headers, a published security policy, or incident response contacts. No vulnerability disclosure or security.txt file is present. The WHOIS data is limited but does not raise immediate concerns. Overall, the security posture is moderate with room for improvement in transparency and technical security controls. The website is safe for general audiences, with no adult or questionable content detected. The business credibility is high given the clear contact information, professional design, and consistent branding. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and maintaining up-to-date third-party libraries to strengthen the security posture and compliance.

D

Densys pv5

densys-pv5.de

45

Densys pv5 operates as a specialized B2B photovoltaic wholesale supplier based in Germany, focusing on solar modules, inverters, energy storage, mounting systems, and e-mobility charging solutions. The company targets solar installers and businesses, offering a broad product portfolio with manufacturer partnerships and insurance backing from Munich RE, positioning itself as a reliable player in the German solar energy market. The website is professionally designed with good navigation and mobile optimization, leveraging ASP.NET WebForms technology and integrating modern tracking and consent tools such as Google Tag Manager and CookieFirst. Security posture is solid with HTTPS enforced and cookie consent implemented, though the absence of explicit privacy and terms of service pages and missing security headers suggest areas for improvement. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and consistency. The site is free from adult or questionable content, making it safe for general audiences.