High-risk security reports

N

Niki Danai

nikidanai.com

44

Niki Danai's website serves as a professional portfolio showcasing a multidisciplinary artist's work in sculpture, ceramics, product design, and multimedia installations. The site targets art enthusiasts and cultural institutions, emphasizing recent and upcoming exhibitions primarily in Europe. The business model is centered on personal branding and exhibition promotion, with a small-scale operation reflected in the site's content and domain age. Technically, the website employs standard web technologies including HTML5, CSS3, and JavaScript, with Google Fonts integration. Hosting is provided by Contabo, a reputable provider. The site is mobile-optimized with moderate performance and basic SEO and accessibility features. However, there is no CMS detected, and the technical stack is relatively simple. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but lacks DNSSEC and security headers, which are recommended for enhanced security. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. Contact information is limited to a contact form, with no direct emails or phone numbers provided. Overall, the website is functional and professional but would benefit from improved security practices, privacy compliance, and enhanced contact transparency to increase trustworthiness and reduce risk.

L

Lucas Muñoz Muñoz

lucasmunoz.com

47

Lucas Muñoz Muñoz is a designer and artist specializing in sustainable, experimental, and upcycled furniture and installations. The website serves as a comprehensive portfolio showcasing a wide range of projects from 2006 through 2025, including collaborations with galleries and participation in international design festivals. The target audience includes design enthusiasts, galleries, and cultural institutions interested in innovative and sustainable design. Technically, the website uses modern JavaScript libraries such as jQuery, Masonry, and Vimeo API for dynamic content presentation, with a responsive design suitable for mobile devices. However, there is no evidence of HTTPS or security headers, and no privacy or cookie policies are present, indicating compliance and security gaps. The WHOIS data is missing, raising concerns about domain legitimacy, though the website content is professional and active. Overall, the site demonstrates good content quality and technical implementation but requires improvements in security, privacy compliance, and domain legitimacy verification.

Halbzeit is a small Swiss non-profit organization dedicated to combating racism, particularly within football culture. The website serves as a platform for news, event promotion, community engagement, and merchandise sales. It targets football fans and activists interested in social justice. Technically, the site is built on WordPress with common plugins and libraries, hosted likely by MyHostpoint, and demonstrates moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced but lacks advanced security headers and formal policies. No privacy or cookie policies are present, and contact information is not explicitly provided, which limits compliance and user trust. Overall, the site is professional and content-rich but would benefit from enhanced privacy, security, and contact transparency.

voll.werbung GmbH operates a website focused on advertising and marketing services, targeting business clients primarily in Austria. The website is built on WordPress using the Enfold theme and includes minimal content with links to terms and data protection documents. The technical infrastructure is modern with jQuery and WordPress core up to date, but lacks advanced security headers and explicit privacy or cookie policies. No contact information or social media presence is visible on the homepage, which limits direct engagement and trust signals. The site is accessible without any WAF or blocking mechanisms, and HTTPS is properly configured, ensuring secure communication.

M

mfsystem

mfsystem.ch

46

mfsystem is a Swiss-based manufacturer specializing in modular furniture systems including shelves, sideboards, wardrobes, and office furniture. The company emphasizes sustainability and customization, offering an online configurator for customers to design their own furniture. Their market position is that of a niche player focusing on quality and flexibility for both residential and commercial clients. Technically, the website is well-structured with modern web standards, mobile optimization, and HTTPS security. However, it lacks some advanced security headers and explicit privacy consent mechanisms. The security posture is solid but could be improved with better transparency on incident response and vulnerability disclosures. Overall, the website presents a professional and trustworthy image with good user experience and clear business focus.

C

Cinematographe.it

cinematographe.it

49

Cinematographe.it is an established Italian media website specializing in cinema and entertainment news, including film reviews, trailers, and TV series coverage. The site targets a general audience interested in Italian and international cinema. It operates primarily as a content publishing platform monetized through advertising networks. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and jQuery, and integrates multiple third-party advertising and tracking services. The site is mobile-optimized and SEO-friendly but could improve accessibility and security headers. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though explicit security policies and incident response information are absent. Privacy compliance is minimal, lacking clear privacy and cookie policies or consent mechanisms. Business credibility is supported by consistent branding and social media presence but lacks direct contact information. Overall, the website is functional and professional but should enhance privacy and security transparency to improve trust and compliance.

The website at trinity.ch presents an extremely minimal digital presence, consisting solely of a black background with a single image and a relative link to a local HTML page. There is no substantive content describing the business, its services, or its market positioning. The lack of metadata, structured data, or contact information indicates a placeholder or underdeveloped site. Technically, the site does not utilize modern web technologies, frameworks, or analytics tools, and there is no evidence of HTTPS or security headers, which raises concerns about security posture. The absence of privacy, cookie, or terms of service policies further indicates non-compliance with common data protection regulations. Overall, the site is accessible but provides no meaningful information or trust signals to visitors.

H

Horace

horace.it

49

Horace is a small Italian advertising agency specializing in strategic, creative, and media consultancy to help businesses uniquely position their brands. The website showcases a professional portfolio with detailed case studies and uses WordPress CMS with standard plugins for social sharing and cookie compliance. The technical infrastructure is modern with HTTPS and DNSSEC enabled, and the site demonstrates good privacy compliance with clear policies and consent mechanisms. Security posture is solid with no critical vulnerabilities detected, though additional HTTP security headers could enhance protection. Overall, the website is professional, trustworthy, and well-maintained, suitable for its target audience of businesses seeking advertising and communication services.

K

Kidscreen

kidscreen.com

49

Kidscreen is a well-established media publication specializing in news, business insights, and trend analysis for the kids entertainment industry. Founded in 1997, it holds a strong market position as a leading resource for professionals in this niche. The website leverages a WordPress CMS platform with modern technologies including jQuery, Google Tag Manager, Facebook Pixel, and Marketo for marketing and analytics, indicating a mature digital infrastructure. The site is hosted on AWS infrastructure, ensuring scalability and reliability. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is weak due to absence of visible privacy and cookie policies, which should be addressed to meet regulatory standards. Overall, the site is professional and trustworthy, with good content quality and user experience, but could improve in privacy and security transparency.

B

Bildungszentrum Limmattal

bzlt.ch

47

Bildungszentrum Limmattal is a vocational education center based in Zürich, Switzerland, specializing in logistics, recycling, and technology training. The institution offers foundational and continuing education programs targeting learners, students, and professionals in related sectors. The website reflects a well-structured educational service provider with clear contact information and a consistent brand presence. Technically, the site uses modern web technologies including Craft CMS, jQuery, and integrates Google Analytics and Tag Manager for user insights. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and incident response information suggests room for improvement. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the domain registration aligns with the business identity, supporting legitimacy and trustworthiness.

R

Regionalwerke AG Baden

regionalwerke.ch

41

Regionalwerke AG Baden is a regional energy utility company serving private households and businesses in the Baden region of Switzerland. They provide a comprehensive range of energy and water services including electricity, gas, water, heating, cooling, and e-mobility solutions. The company emphasizes renewable energy and sustainability, supported by certifications such as ISO/IEC 27001:2022 and ISO 9001. Their website reflects a professional and customer-focused approach with clear navigation, comprehensive service descriptions, and multiple customer engagement channels. Technically, the website is built on TYPO3 CMS and integrates modern analytics and marketing tools such as Google Analytics, Google Tag Manager, and Siteimprove Analytics. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security posture is strong with HTTPS enforced, IP anonymization in analytics, and ISO 27001 certification, although some security headers could be improved. Overall, the website and business demonstrate a mature digital presence with strong compliance to privacy regulations including GDPR. Contact information is transparent and easily accessible. No critical vulnerabilities or security issues were detected in the content. The domain registration data aligns well with the business identity, supporting legitimacy and trust. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and providing explicit data protection officer contact details to further strengthen trust and compliance.

I

Indo-German Center For Higher Education

igche.de

48

The Indo-German Center For Higher Education (IGCHE) operates as a consortium of German universities offering bilingual engineering degree programmes that facilitate student exchange and cultural integration between India and Germany. The website clearly communicates its educational mission, target audience of prospective engineering students, and key services including German language training and internships. Technically, the site is built on RapidWeaver CMS with Stacks, uses Matomo for privacy-conscious analytics, and demonstrates good mobile responsiveness and navigation clarity. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers and incident response policies are absent. Overall, the site is professional, trustworthy, and well-aligned with its educational objectives.

R

Ramasuri

ramasuri.at

39

Ramasuri is a small hospitality business operating a restaurant located in Vienna's 2nd district. The restaurant offers Austrian and internationally inspired cuisine with a focus on local ingredients, serving breakfast, lunch, and dinner alongside house-made drinks and coffee. The business emphasizes friendly and attentive service and provides a summer garden with Italian flair. The website is well-structured and professionally designed, providing clear contact details, location, and menu access. Technical infrastructure includes modern JavaScript libraries such as jQuery, Bootstrap, and GSAP, supporting a responsive and visually appealing user experience. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website presents a trustworthy and professional image consistent with a legitimate small hospitality business.

P

Pizza Randale

pizzarandale.com

45

Pizza Randale is a small hospitality business specializing in pizza restaurant services, providing customers with menu options, location details, gallery images, and job opportunities. The website presents a professional and visually appealing design with clear navigation and mobile optimization, targeting a general audience interested in dining or ordering pizza. The technical infrastructure leverages modern JavaScript libraries such as jQuery, ScrollMagic, GSAP, and Swiper.js, along with Google Maps API for location services. The site is custom-built and hosted via RegistryGate GmbH, with moderate performance and basic SEO and accessibility features. Security posture is adequate with HTTPS enabled and a cookie consent mechanism in place; however, it lacks advanced security headers and explicit security policies. WHOIS data is consistent and transparent, supporting the legitimacy of the business. Overall, the website is functional and trustworthy but could benefit from enhanced security and privacy compliance measures.

W

Wir sind Mehrerau

wirsindmehrerau.at

44

Wir sind Mehrerau is a historic religious and educational institution based in Austria, with origins dating back to 1097. The website serves as a digital presence for the Kloster Mehrerau, offering information about its history, religious activities, and community engagement. The organization positions itself as an open, Christian, and contemporary institution with a strong cultural heritage. Technically, the website is built on WordPress using the Divi theme, incorporating modern web technologies such as Google Fonts and a cookie consent mechanism by Hu-manity. The site is well-structured, mobile-optimized, and employs HTTPS with robust security headers, reflecting a good security posture. However, it lacks explicit privacy and terms of service policies, as well as contact emails and phone numbers, which are important for compliance and user trust. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and clearer contact information.

The website tickethead.io is currently inaccessible due to a Cloudflare security challenge page that blocks direct content access. The page presented is a robot challenge screen implementing a JavaScript-based proof-of-work captcha, indicating the presence of a Web Application Firewall (WAF) protecting the site. Due to this, no business-related content, contact information, or policies are publicly available for analysis. The domain is recently registered in 2023 and uses privacy protection services, which limits transparency and trust signals. Technically, the site uses Cloudflare DNS and Cloudfront CDN for hosting and content delivery, but no CMS or frameworks are identifiable from the blocked content. Security headers and SSL configuration details are not available from the provided data. Overall, the site’s security posture cannot be fully assessed due to access restrictions, and the lack of visible privacy and cookie policies indicates poor compliance readiness.

B

Bureau of Middle East Recycling

bmr.ae

31

The Bureau of Middle East Recycling (BMR) is a small, non-profit organization serving as the regional forum and voice for the recycling industry in the Middle East, particularly focusing on metal recycling. The organization promotes recycling awareness, supports free trade of secondary raw materials, and provides networking and policy updates to its members. The website reflects this mission with professional design, multimedia content, and clear contact information, targeting industry stakeholders in the region. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and various JavaScript libraries, with integration of Google Analytics and Tag Manager for tracking. The site is moderately optimized for performance and mobile devices, though some accessibility and SEO features could be improved. The hosting and domain registration align with the UAE location, supporting the business's regional focus. From a security perspective, the site uses HTTPS (implied by canonical URL), but lacks visible security headers and formal security policies. No privacy or cookie policies are present, indicating compliance gaps especially regarding GDPR. The contact form collects user data but lacks visible consent mechanisms. No WAF or blocking mechanisms are detected, and no suspicious or vulnerable elements are found in the HTML content. Overall, the website is professional and trustworthy but would benefit from enhanced security practices, privacy compliance, and clearer policy disclosures to improve user trust and regulatory adherence.

Z

Zest Event Serviices

zestgroupindia.in

49

Zest Event Serviices is a small Indian event management company specializing in customized solutions for trade exhibitions and conferences, including online and onsite registration services. The website presents basic but relevant content targeting event organizers and exhibitors in India. The technical infrastructure is built on older but functional technologies such as jQuery 1.11.1 and Bootstrap, with some modern additions like Alpine.js. The site is moderately optimized for mobile and SEO but lacks advanced features and comprehensive policies. Security posture is basic, with no visible security headers and use of outdated libraries, which poses potential risks. No privacy or cookie policies are present, indicating compliance gaps. Overall, the website is functional and moderately trustworthy but requires improvements in security, privacy compliance, and technical modernization to enhance its digital maturity and risk profile.

C

Cleanco Waste Treatment

cwtme.ae

43

Cleanco Waste Treatment (CWT) is a UAE-based company specializing in medical and hazardous waste management services, primarily serving hospitals and healthcare providers in Abu Dhabi and the wider UAE region. The company is part of the H.E. Yousef Khouri Group of Companies and positions itself as one of the largest waste treatment providers in the region, offering services aligned with European Union directives and international standards. Their key services include medical waste management, hazardous waste treatment, site facilities, and Covid-19 related waste services. The website reflects a medium-sized enterprise with a professional digital presence built on WordPress and Elementor, featuring good content quality and clear navigation.

W

wedooper

karriere-hennigsdorf.de

37

The Karriereportal Hennigsdorf is a regional career portal focused on connecting companies in Hennigsdorf with young talents seeking internships, apprenticeships, study opportunities, and jobs. The platform is operated by wedooper in collaboration with the city's economic development office, positioning itself as a niche regional service provider in the education sector. The website is well-structured, with clear navigation and relevant content tailored to its target audience of local companies and job seekers. Technically, the site uses modern web technologies including jQuery, Swiper.js, and Modernizr, and is served over HTTPS with a cookie consent mechanism in place, though it lacks advanced security headers and analytics integration. Security posture is moderate with no critical vulnerabilities detected, but improvements are recommended in security headers and incident response transparency. Overall, the site is safe, professional, and trustworthy with a good balance of privacy compliance and user experience.

M

MV LINE S.p.A.

mvline.it

46

MV Line S.p.A. is an established Italian manufacturing company specializing in mosquito nets, roller blinds, special shutters, awnings, and bioclimatic pergolas primarily for residential buildings. Founded in 2007 and headquartered in Bari, Italy, the company maintains a strong regional presence with multiple subsidiary brands and a comprehensive product portfolio. The website reflects a professional and consistent brand image with multilingual support and active social media engagement. Technically, the site is built on WordPress with modern plugins and tracking tools, ensuring good SEO and mobile responsiveness. Security posture is strong with HTTPS, DNSSEC, and reCAPTCHA implemented, although explicit security and incident response policies are not published. Privacy compliance is evident through GDPR consent mechanisms and a privacy-related policy page. Overall, the site is trustworthy, well-maintained, and aligned with the company's business operations.

G

GBC Italia

gbcitalia.org

43

GBC Italia is a well-established non-profit organization dedicated to promoting sustainable building practices in Italy. As part of the global World Green Building Council network, it offers certification programs, training, events, and research to support green building initiatives. The website reflects a professional presence with a clear focus on sustainability and education, targeting professionals and organizations in the real estate and environmental sectors. The organization has a medium size and a history dating back to 2007, supported by consistent branding and trust indicators such as social media presence and structured data.

Federparquet is an Italian non-profit association representing parquet retailers, installers, and related professionals. Founded officially in 2022, it aims to promote sector development through services such as insurance, expert consultancy, legal assistance, and member conventions. The website serves as an informational and contact portal for members and interested parties, with clear contact details and social media presence. Technically, the site is built on WordPress using the OnePress theme, incorporating modern web technologies like Bootstrap and jQuery. It includes a comprehensive cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS and DNSSEC enabled, though no explicit security policy or incident response information is published. Overall, the site is professional, user-friendly, and trustworthy, serving its niche audience effectively.

A

ASSORESTAURO – Associazione Italiana per il Restauro Architettonico, Artistico, Urbano

assorestauro.org

49

ASSORESTAURO is an Italian association founded in 2005 representing the architectural, artistic, and urban restoration sector in Italy. The organization acts as a network for companies and professionals in the restoration industry, facilitating collaboration on national projects and competing in international markets. The website reflects a professional and well-structured digital presence, built on WordPress with modern plugins and privacy-respecting analytics (Matomo). The site offers information about the association, its members, services, events, and publications, targeting restoration professionals and companies in Italy. Technically, the website uses a modern CMS platform with a responsive design and good SEO practices. However, some security best practices such as security headers are not evident, and no explicit privacy or terms of service pages were found, though a cookie consent mechanism is implemented. The WHOIS data for the domain is unavailable due to a malformed query response, limiting the ability to verify domain registration details and ownership, which slightly reduces trustworthiness. Security posture is moderate with HTTPS enabled and no visible vulnerabilities or exposed sensitive data. The site does not appear to have any WAF or blocking mechanisms, allowing full content access. Overall, the site is safe, professional, and credible but would benefit from improved transparency in privacy policies and domain registration information.

U

UNICMI

unicmi.it

43

UNICMI is a well-established Italian industry association founded in 2013, representing companies in the metal construction and building envelope sectors. The website serves as a comprehensive portal offering technical training, consultancy, market data, and industry news to its members and stakeholders. It maintains a consistent brand presence and provides useful resources tailored to industry professionals. Technically, the site is built on Joomla CMS with standard JavaScript libraries and tracking tools such as Google Analytics and Facebook Pixel. While the site is functional and professionally designed, there is room for improvement in mobile optimization and accessibility. Security posture is moderate with HTTPS enabled and basic privacy compliance, but lacks advanced security headers and DNSSEC. The WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the site is trustworthy and serves its target audience effectively.

M

media touch

mediatouch.de

45

media touch is a German technology company operating a website powered by TYPO3 CMS, targeting German-speaking users. The company appears to provide digital technology services, though specific services are not detailed in the provided content. The website uses modern frontend technologies including Bootstrap and jQuery, and integrates Usercentrics for GDPR-compliant cookie consent management. Hosting is provided by Schlundtech, a German hosting provider, consistent with the website's regional focus. Security posture is moderate with HTTPS enabled and consent management in place, but lacks explicit privacy policies, terms of service, and security headers. Contact information and incident response details are not present, limiting transparency and trust. Overall, the website is professionally designed and mobile-optimized but could improve in privacy and security disclosures.

H

Hochschulallianz für Angewandte Wissenschaften (HAWtech)

hawtech.de

46

HAWtech is a German university alliance focused on applied sciences and engineering education, uniting six leading universities of applied sciences. The website serves as an information portal for students, researchers, and industry partners, emphasizing collaboration in teaching, research, and innovation. Technically, the site is built on TYPO3 CMS with modern JavaScript frameworks and includes privacy-compliant cookie consent and analytics via Matomo. Security posture is solid with HTTPS and no visible vulnerabilities, though formal security policies and incident response contacts are absent. Overall, the site is professional, trustworthy, and well-maintained, supporting the alliance's mission effectively.

The domain landratsamt-ostalbkreis.de currently serves a minimal redirect page managed by Parklogic, a domain parking and monetization service. No official website content, business information, or contact details are present, indicating the domain is not actively used for its purported purpose. The technical infrastructure is limited to basic JavaScript redirection and ad overlays, with no visible security or privacy policies. This results in a low digital maturity and poor user experience. Security posture is weak due to lack of HTTPS confirmation and absence of security headers. Overall, the site poses a low trust level and is not suitable for business or public use in its current state.

explorhino is a German educational science center focused on interactive learning experiences for children, families, and schools. It offers hands-on exhibits, workshops, courses, and events designed to engage young learners in science and technology. The website reflects a well-structured and professionally designed platform that supports its educational mission with clear navigation and relevant content. Technically, the site is built on WordPress with modern plugins for SEO, event management, and GDPR compliance, ensuring a good digital maturity level. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and incident response transparency. Overall, the site is trustworthy, compliant with privacy regulations, and provides clear contact information and social media presence.

G

Graduate Campus Hochschule Aalen

learniac.org

43

Graduate Campus Hochschule Aalen operates as a professional continuing education provider offering a range of courses primarily in technology, business, and digital transformation. The platform leverages modern online delivery methods including live-online sessions and e-learning modules, targeting professionals seeking flexible and compact learning formats. The website is built on TYPO3 CMS and integrates cookie consent management and analytics tools, reflecting a moderate to advanced digital maturity. Security posture is solid with HTTPS and consent mechanisms, though lacks published privacy and security policies. Overall, the site presents a trustworthy and professional educational service with room for improvement in compliance documentation and security transparency.

G

Graduate Campus Hochschule Aalen

graduatecampus.de

43

Graduate Campus Hochschule Aalen is a reputable educational institution specializing in professional continuing education and part-time study programs including Bachelor and Master degrees, certificates, and courses primarily in technology, business, and IT sectors. The website reflects a strong market position in Germany with a focus on flexible learning formats such as blended learning, online, and on-campus options. The institution leverages modern digital tools including TYPO3 CMS, Google Tag Manager, and Usercentrics for consent management, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and consent mechanisms in place, though explicit security policies and incident response contacts are absent. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO.

Tuna Technologies is an independent game development company with a history dating back to 1998. The company focuses on creating games and has worked on notable brands such as Family Guy, Boulder Dash, and Alien Hominid. Their website is minimalistic, primarily serving as a portal linking to partner sites related to their game projects. The business operates in the technology sector, specifically within game development, targeting independent game players and enthusiasts. The company appears to be small in size with a niche market position.

C

comparion.de — Domain default page for

comparion.de

41

The website comparion.de currently hosts a default Virtualmin control panel placeholder page, indicating that no active website content has been deployed. The page primarily serves as a notification to the site owner that the virtual server is operational and ready for content upload. The business overview is minimal, with no explicit company branding or service descriptions beyond the Virtualmin hosting control panel references. The technical infrastructure is based on Virtualmin with Bootstrap 5.3.1 for styling, and the site is accessible without any web application firewall or blocking mechanisms detected. Security posture is basic, with HTTPS implied but no advanced security headers or policies implemented. Privacy and compliance features such as privacy policies, cookie consent, and terms of service are absent, limiting the site's compliance maturity. Overall, the site represents a nascent or inactive web presence with significant room for development and security enhancements.

C.T.A. Consorzio Tecnologie Avanzate Soc. Coop. is an Italian cooperative consortium founded in 2005, comprising approximately 30 artisan companies and about 200 affiliated partners. The cooperative specializes in technological systems, telecommunications, renewable energy, electrical and electronic sectors, offering turnkey services with a focus on professionalism and quality. Their target audience includes SMEs and individual artisans aiming to compete for national contracts. The website demonstrates a moderate level of digital maturity, built on WordPress with modern plugins such as Elementor and Yoast SEO, and integrates Google Analytics for visitor tracking. The presence of a cookie consent banner and privacy policy indicates GDPR compliance awareness.

W

WInTO GmbH

gruenderservice-oberhavel.de

47

WInTO GmbH operates the Gründerservice Oberhavel website, providing comprehensive support and consulting services for business founders in the Oberhavel region of Germany. The company focuses on guiding entrepreneurs through orientation, planning, implementation, and consolidation phases of business establishment. The website serves as a regional government-related platform to foster a startup-friendly environment with clear contact points and event information. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, Font Awesome icons, and Swiper.js for UI components. Cookie consent is managed via Cookiebot, ensuring GDPR compliance, and user analytics are handled through Matomo with cookies disabled to enhance privacy. The site is mobile-optimized and presents a professional design with good navigation clarity. From a security perspective, the site uses HTTPS and integrates cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response information. No vulnerabilities or suspicious elements were detected in the content or WHOIS data. The domain registration information is minimal but consistent with the business claims. Overall, the website is a trustworthy, professional resource for its target audience, with moderate technical sophistication and good privacy compliance. Strategic improvements in security headers, incident response transparency, and SEO could further enhance its posture and user trust.

F

fib Oberhavel

fib-oberhavel.de

49

fib Oberhavel is a regional workforce information office operating under the WInTO GmbH umbrella, focused on supporting companies, schools, and higher education institutions in the Oberhavel district of Germany. It provides coordination, networking, and advisory services to address the growing demand for skilled workers in the region. The website presents a professional and content-rich platform with clear navigation and responsive design, targeting local businesses, students, and educational institutions. Technically, the site uses modern front-end technologies including Font Awesome, Bootstrap, and Cookiebot for consent management, alongside Matomo for privacy-conscious analytics. Security posture is solid with HTTPS and cookie consent mechanisms, though security headers and explicit policies could be improved. Overall, the site demonstrates a good balance of usability, privacy compliance, and business credibility, suitable for a government-affiliated entity.

B

Boch & Fernsh

bochfernsh.com

46

Boch & Fernsh is a well-established creative advertising agency based in Mumbai, India, with over two decades of experience. The company offers a comprehensive suite of services including branding, advertising campaigns, video production, digital marketing, social media management, and web design. Their market position is strong, supported by multiple industry awards and a reputable client portfolio. Technically, the website employs modern web technologies and integrates various analytics and marketing tools, hosted on DreamHost. The site is mobile-optimized and professionally designed, providing an excellent user experience. Security posture is good with HTTPS enforced, but lacks some advanced security headers and explicit privacy compliance mechanisms. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and trustworthiness.

F

Flüchtlingsrat RLP e.V.

civi-kune-rlp.de

46

civi kune RLP is a non-profit project operated by Flüchtlingsrat RLP e.V., focusing on refugee support, community engagement, and volunteer coordination in the German state of Rheinland-Pfalz. The website serves as an informational hub providing news, event updates, and resources for volunteers and refugees. It maintains a consistent brand identity aligned with its parent organization and regional government partners. Technically, the site is built on WordPress, leveraging standard web technologies and hosted by Manitu GmbH. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks some advanced security headers and formal security policies. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, serving its community-focused mission effectively.

The Liturgy Office website serves as the official online presence for the Department for Christian Life and Worship under the Catholic Bishops' Conference of England and Wales. It provides liturgical resources, calendars, prayers, and news relevant to the Catholic community in England and Wales. The site targets clergy, church members, and those interested in Catholic liturgy, positioning itself as a trusted non-profit religious resource provider with a long-standing domain since 2001. Technically, the website employs basic web technologies including HTML5, CSS, Google Fonts, and Google Analytics for tracking. The site lacks a modern CMS and advanced frameworks, indicating a simple but functional technical infrastructure. Performance and mobile optimization are basic, with room for improvement in accessibility and SEO. From a security perspective, the site uses HTTPS (implied but not explicitly confirmed), but lacks visible security headers and published privacy or cookie policies, which are compliance gaps especially under GDPR. No forms collecting sensitive data are present, reducing attack surface. The WHOIS data confirms domain legitimacy and consistency with the organization's history, supporting trustworthiness. Overall, the website is a credible, safe, and content-relevant resource for its audience but would benefit from enhanced privacy compliance, security hardening, and technical modernization to improve user trust and regulatory adherence.

S

Störungsauskunft.de

xn--strungsauskunft-9sb.de

42

Störungsauskunft.de is a specialized German website providing real-time information on utility outages including electricity, gas, water, district heating, and street lighting. It serves end consumers in Germany by offering outage maps and reporting tools, positioning itself as a niche information portal in the energy sector. The website leverages modern web technologies such as Angular and Google Maps API to deliver an interactive and responsive user experience. Security posture is solid with HTTPS and standard security headers implemented, though it lacks explicit incident response and vulnerability disclosure mechanisms. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the site is professional, trustworthy, and focused on delivering relevant utility outage information to its audience.

R

rockit GmbH

rockit.at

44

rockit GmbH is a specialized TYPO3 CMS agency based in Vienna, Austria, offering comprehensive web development services including responsive design, accessibility, SEO, and GDPR-compliant solutions. The company holds certifications as TYPO3 integrators and serves a diverse client base including government and large organizations, positioning itself as a trusted technology service provider in the Austrian market. Their business model focuses on delivering tailored TYPO3 websites with ongoing maintenance and quality assurance. Technically, the website is built on a modern TYPO3 CMS platform with a rich technology stack including PHP, TailwindCSS, JavaScript frameworks like Vue.js and Alpine.js, and uses Matomo for privacy-conscious analytics. The site is well-optimized for mobile devices, accessibility, and SEO, reflecting a mature digital infrastructure. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, there is room for improvement in publishing explicit security policies, incident response contacts, and implementing additional HTTP security headers. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional and trustworthy digital presence with strong compliance and technical maturity. The lack of WHOIS data limits domain trust verification but does not detract from the evident business legitimacy. Strategic recommendations include enhancing security header implementation and publishing formal security policies to further strengthen trust and compliance.

B

Bider & Tanner

biderundtanner.ch

45

Bider & Tanner is a prominent bookstore and music house based in Basel, Switzerland, operating both a physical store and an online shop. The website showcases a wide range of books, music CDs, vinyl records, and cultural event tickets, positioning itself as a key cultural hub in the region. The business targets general consumers interested in literature, music, and cultural products, leveraging a retail e-commerce model complemented by physical store presence. The company enjoys a strong market position as the largest bookstore in Basel's Bankenplatz area.

T

The Hyperaudio Project

hyper.audio

48

Hyperaudio is a technology-focused company specializing in innovative tools for transcribing, translating, repurposing, and sharing audio and video content. Their platform targets podcasters, educators, conference organizers, and media professionals, offering interactive transcripts and captions to enhance media accessibility and usability. The company has a niche market position supported by reputable clients such as Mozilla, BBC, and Al Jazeera. Technically, the website is built on modern frameworks like Next.js and Material-UI, hosted on AWS infrastructure, and employs privacy-conscious analytics via Plausible. Security posture is adequate with HTTPS and domain transfer protections, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional, trustworthy, and well-structured, though lacking direct contact emails or phone numbers.

M

MissioNET

missionet.org

45

MissioNET is a small non-profit multimedia platform owned by the Xaverian Missionaries, focused on missionary animation and vocational promotion through a video library. The website is built on Joomla CMS with Yootheme and UIkit frameworks, providing a good user experience with mobile optimization and clear navigation. The technical infrastructure is modern and includes Google Analytics for tracking, though lacks some advanced security headers and DNSSEC. Security posture is moderate with HTTPS enabled and domain transfer protections in place. However, the absence of privacy and cookie policies, as well as no visible incident response or security policies, indicates gaps in compliance and transparency. Overall, the website is legitimate, professionally presented, and serves a niche religious community audience effectively.

M

Missionari Saveriani

missioneoggi.it

44

Missionari Saveriani operates a comprehensive Italian-language web portal and magazine focused on missionary activities and religious community engagement. The organization provides subscription-based digital and print publications, event information, and community news. The website is well-structured, professionally designed, and targets Italian-speaking audiences interested in missionary work and religious topics. Technically, the site leverages Joomla CMS with modern frontend technologies including Bootstrap and Leaflet.js, ensuring good mobile optimization and accessibility. Security posture is solid with HTTPS, CSRF protections, and secure login forms, though explicit security headers and incident response policies are not publicly documented. Privacy compliance is evident with GDPR-aligned privacy and cookie policies, though a consent mechanism is not implemented. Overall, the site is trustworthy, with clear contact information and active social media presence, supporting its legitimacy as a non-profit religious entity.

N

Naturpark Barnim

barnim-naturpark.de

44

Naturpark Barnim operates as a regional nature park jointly managed by Brandenburg and Berlin, focusing on nature conservation, environmental education, and tourism. The website serves as an informational portal for visitors and stakeholders, providing rich content about the park's landscapes, flora, fauna, and cultural heritage. Technically, the site is built on TYPO3 CMS, hosted by a professional hosting provider, and uses HTTPS for secure communication. However, it lacks explicit privacy and cookie policies, as well as visible contact information, which are important for compliance and user trust. Security posture is moderate with HTTPS enabled but missing security headers and vulnerability disclosure mechanisms. Overall, the site is professional, trustworthy, and well-branded but could improve in privacy compliance and security best practices.

L

Lange Nacht der Wissenschaften (LNDW)

langenachtderwissenschaften.de

49

Lange Nacht der Wissenschaften (LNDW) is a well-established science event organizer based in Berlin, Germany, with a 25-year history. The website serves as an information hub for the event, targeting science enthusiasts, visitors, media, and partners. It provides event details, news, partner information, and newsletter subscription services. The organization appears to be a medium-sized entity operating in the education and non-profit sectors, with a strong local presence and community engagement. Technically, the website is built on TYPO3 CMS with modern front-end technologies such as Bootstrap and Swiper.js, ensuring good mobile responsiveness and accessibility. The site uses Matomo analytics configured for privacy by disabling cookies, and it implements a cookie consent banner compliant with GDPR requirements. Performance is moderate, with no major technical issues detected. From a security perspective, the site enforces HTTPS and employs privacy-conscious analytics. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were found. The WHOIS data aligns well with the website content, confirming legitimacy and consistent domain age. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with room for improvement in security policy transparency and security header implementation.

H

Handeln JETZT!

handeln-jetzt.org

30

Handeln JETZT! is a German non-profit environmental project focused on empowering youth to implement projects related to biodiversity, climate, and climate justice. It provides financial support and mentorship through a network of project buddies. The website is well-structured, content-rich, and targets young people interested in environmental activism. Technically, the site uses modern JavaScript libraries and analytics tools with privacy compliance mechanisms such as Usercentrics CMP and CAPTCHA on forms. Security posture is good with HTTPS enforced, but lacks explicit security headers and WHOIS transparency. Overall, the site is trustworthy and professionally maintained, supported by recognized environmental youth organizations and federal funding.

N

NAJU (Naturschutzjugend im NABU)

trashbusters.de

47

Trashbusters.de is a German non-profit youth environmental campaign website operated under the umbrella of NAJU, the youth organization of NABU. The site focuses on mobilizing youth and environmental activists to combat plastic pollution through cleanup actions, political engagement, and educational initiatives. The website is well-branded, consistent, and provides relevant content for its target audience. Technically, it is built on the Jimdo Creator CMS platform, leveraging jQuery UI and third-party widgets such as POWr.io and Google Maps. The site is mobile-optimized and uses HTTPS with cookie consent mechanisms, reflecting good privacy compliance. However, explicit contact information and formal security or incident response policies are not present, which limits direct communication and security transparency. Overall, the site is trustworthy and professionally maintained, suitable for its non-profit mission.

The website costa-rica.com is currently inaccessible beyond a robot challenge screen that implements a proof-of-work captcha mechanism, indicating the presence of a Web Application Firewall (WAF) or similar security protection. This prevents access to any substantive business content or user-facing information. The domain is registered since 2003 with a reputable registrar, but no registrant or business details are publicly available. The technical infrastructure includes advanced JavaScript and uses AWS Cloudfront CDN for hosting. However, no privacy, cookie, or terms of service policies are present, and no contact information or social media links are found. Security headers and SSL configuration details are not visible, and DNSSEC is not enabled. Overall, the site appears to be protected against automated access but lacks visible transparency or business information.