High-risk security reports

T

TS21 Hospitality GmbH

shisoburger.at

43

Shiso Burger, operated by TS21 Hospitality GmbH, is a gourmet burger restaurant in Vienna specializing in Asian fusion cuisine. The business offers a variety of burgers including vegetarian and vegan options, fresh fish, and seafood, with a focus on quality and freshness. They operate two locations in Vienna and provide online ordering and delivery services through partners like Wolt and Smorder. The website is professionally designed, mobile-optimized, and includes comprehensive contact information and GDPR-compliant privacy and cookie policies. Technically, the site is built on WordPress with modern plugins and security features such as Google reCAPTCHA. Security posture is strong with HTTPS and consent management, though some security headers could be improved. Overall, the site reflects a trustworthy and credible business with a solid digital presence.

A

ApoScout

aposcout.at

45

ApoScout is a healthcare-focused digital service providing Austrian consumers with real-time information on medication availability across local pharmacies. The platform offers a mobile app that enables users to search for pharmacies, check medication stock, view night and emergency service schedules, and reserve medications at participating pharmacies. The website is professionally designed, mobile-optimized, and compliant with GDPR regulations, targeting primarily Austrian users seeking efficient pharmacy services. Technically, the website is built on WordPress using the Enfold theme and integrates several plugins including Contact Form 7 for user communication and Complianz for cookie and privacy management. The site employs modern web technologies such as jQuery and Google Tag Manager for analytics and marketing. Performance is moderate with good mobile responsiveness and basic accessibility features. From a security perspective, the site enforces HTTPS and uses security plugins to mitigate spam and attacks. However, explicit security headers are not detected, and there is no dedicated security policy or incident response information publicly available. The privacy and cookie policies are comprehensive and clearly presented, reflecting good compliance with EU data protection laws. Overall, ApoScout presents a trustworthy and professional digital presence with a clear business focus in healthcare. The site is secure and compliant, though improvements in security headers and incident response transparency could enhance its security posture further.

A

Advanced Technologies Austria GmbH

atechnologies.eu

45

Advanced Technologies Austria GmbH (ATA) is a specialized Austrian company focused on developing integrated agricultural projects that enhance efficiency and productivity. Their offerings include mechanization, irrigation, food processing, and animal husbandry solutions tailored to client needs. The company positions itself as a forward-thinking partner for agricultural businesses seeking innovative and sustainable technologies. The website is professionally designed, mobile-optimized, and SEO-friendly, reflecting a mature digital presence. Security posture is solid with HTTPS and security plugins, though explicit security policies and incident response details are absent. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, ATA presents a trustworthy and credible business profile with room for enhanced security transparency.

A

ATTYS 05 Rechtsanwälte GmbH

attys.law

48

ATTYS 05 Rechtsanwälte GmbH is a young, dynamic Austrian law firm specializing in employment, corporate, real estate, and intellectual property law. The firm targets entrepreneurial clients and businesses, offering tailored, transparent, and forward-looking legal solutions. Their market position is that of a modern boutique law firm with a strong emphasis on business and IP legal services. Technically, the website is built on WordPress with modern plugins and SEO optimizations, delivering a good user experience and mobile responsiveness. Security posture is solid with HTTPS and domain transfer protections, though improvements like DNSSEC and security headers are recommended. Privacy compliance is mostly met with a comprehensive privacy policy, but lacks a cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with the firm's business objectives.

The website atreemo.uk currently serves only a default IIS Windows Server start page, indicating that no active website content or business presence is established. The domain is registered with a reputable registrar, Tucows Inc, since November 2021, with a valid expiry in 2025. However, the lack of any business information, contact details, or policies on the website suggests it is either under development or abandoned. Technically, the site runs on Microsoft IIS on Windows Server, but no modern web technologies, CMS, or frameworks are detected. Security posture is weak due to absence of HTTPS, security headers, and privacy compliance mechanisms. Overall, the site is not suitable for business operations in its current state and lacks trust signals.

P

PRO ASYL

proasyl-shop.de

39

PRO ASYL is a German non-profit organization dedicated to advocating for the rights of refugees and migrants in Germany and Europe. The website serves as a platform to provide information about their mission and to offer publications and materials through an integrated webshop. The organization maintains a strong presence on multiple social media platforms and provides clear contact information, enhancing its accessibility and outreach. Technically, the website is built using the One.com Web Editor CMS and hosted by checkdomain.de. It employs modern web technologies such as Swiper.js for image sliders and integrates Termly for cookie consent management, indicating a moderate level of digital maturity. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features could be improved. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, but lacks published security policies, incident response contacts, and vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. Overall, the security posture is adequate but could benefit from enhanced transparency and formal policies. The overall risk assessment is low, with the website appearing trustworthy and professionally maintained. Strategic recommendations include publishing a security policy, adding incident response and vulnerability disclosure information, improving accessibility, and creating a terms of service page to enhance compliance and user trust.

D

German TV in Thailand - streaming, download, Apps

deutsches-fernsehen-weltweit.de

49

The website deutsches-fernsehen-weltweit.de offers a subscription-based streaming and cloud DVR service providing access to 44 German TV channels worldwide, targeting German expatriates and German-speaking audiences, especially in Thailand. The business model centers on providing easy access to German TV content without hardware requirements, leveraging cloud recording technology. The site is well-branded and consistent, with clear service descriptions and pricing, positioning itself as a niche media provider in the German expatriate market. Technically, the site uses modern web technologies including Google Analytics, Google Tag Manager, and Google Fonts, hosted on AWS infrastructure. The site is mobile-optimized and SEO-friendly, with moderate performance and basic accessibility features. However, no CMS or advanced frameworks are detected. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks important security headers and does not publish privacy, cookie, or security policies, which reduces its privacy compliance posture. No incident response or vulnerability disclosure information is provided, limiting transparency. The WHOIS data aligns with the website content and hosting, indicating a legitimate domain. Overall, the website is functional and professional but would benefit from enhanced privacy and security disclosures to improve trust and compliance. There are no indications of malicious or adult content, making it safe for general audiences.

O

Opportunus s.r.o.

ecpaper.cz

42

EcPaper, operated by Opportunus s.r.o., provides a digital solution for converting traditional printed catalogs and flyers into interactive online formats. Their service targets businesses seeking to enhance customer engagement through responsive, SEO-optimized digital catalogs accessible on multiple devices. The company positions itself as a niche technology provider within the Czech Republic, offering tools for catalog management, analytics integration, and online sales channel enhancement. The website reflects a professional and consistent brand image with clear contact information and client references, supporting its credibility in the market. Technically, the website employs modern web standards including HTML5, CSS3, JavaScript, and jQuery, with responsive design facilitated by Bootstrap. Integration with Google Fonts and Google Maps API enhances user experience. The site is powered by dmpCMS, indicating a managed content platform. Performance is moderate with good mobile optimization and basic accessibility features. SEO practices are evident through meta tags and structured content. Security posture is adequate with HTTPS usage and secure form handling, but lacks advanced security headers and cookie consent mechanisms, which are important for GDPR compliance. No WHOIS data was retrievable, which raises concerns about domain registration transparency. No signs of malicious content or vulnerabilities were detected in the visible content. Overall, the website presents a trustworthy business front with room for improvement in security best practices and privacy compliance. Strategic recommendations include implementing security headers, cookie consent, and publishing terms of service to enhance user trust and regulatory adherence.

A

A*dS – Autorinnen und Autoren der Schweiz

a-d-s.ch

40

A*dS – Autorinnen und Autoren der Schweiz is a Swiss non-profit association dedicated to supporting authors and translators across Switzerland's linguistic regions. The organization promotes cultural, trade union, and political goals related to literature dissemination and exchange. The website serves as an information hub offering resources, funding opportunities, events, and member services, positioning itself as a key player in the Swiss literary community. Supported by the Swiss Federal Office of Culture, it maintains a credible and professional presence with clear contact information and multilingual content.

The Studer/Ganz Stiftung website represents a small Swiss non-profit foundation focused on promoting literature and cultural initiatives, as evidenced by the mention of the CHRYSALIDE Binding Förderpreis für Literatur. The site is multilingual, targeting German, French, and Italian speakers, reflecting Switzerland's linguistic diversity. The business model centers on cultural sponsorship and foundation activities, positioning it as a niche player within the Swiss cultural sector. Technically, the website employs basic web technologies including HTML5, CSS, JavaScript, and jQuery. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. There is no evidence of a CMS or modern frameworks, indicating a simple, possibly static site architecture. From a security perspective, the site lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance and user trust. No forms or direct contact information are present on the homepage, limiting user engagement and transparency. The WHOIS data aligns well with the website's claims, showing consistent registration details without privacy protection, appropriate for a non-profit entity. Overall, the website is functional but basic, with room for improvement in privacy compliance, security posture, and user engagement. Strategic enhancements in these areas would strengthen trust and regulatory adherence.

A

Arbeit und Leben Niedersachsen e.V.

aul.app

44

Arbeit und Leben Niedersachsen e.V. operates the platform aul.app, which serves as a hub for their websites and apps. The organization is a regional non-profit based in Germany, focusing on providing digital platform services. The website content is minimal but clearly communicates the platform's purpose. The business model centers on supporting digital presence for their initiatives. The site is built on WordPress with custom theming, indicating moderate digital maturity. Technical infrastructure is basic with room for improvement in performance and mobile optimization. Security posture is average; HTTPS is assumed but no explicit security headers or policies are detected. Privacy compliance is partially met with a privacy policy present but lacking cookie consent mechanisms. Overall, the site is trustworthy but could benefit from enhanced security and compliance measures.

E

Eduversum Verlag und Bildungsagentur GmbH

eduversum.de

47

Eduversum Verlag und Bildungsagentur GmbH is a well-established German educational agency and publisher with over 40 years of experience in school communication. They provide full-service educational content development, including digital media such as web, film, games, apps, and print, targeting schools, teachers, NGOs, and government bodies. The company holds multiple certifications and awards, reflecting a strong market position and trustworthiness. Their partnerships with reputable organizations further enhance their credibility. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses Matomo for privacy-conscious analytics. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security is robust with HTTPS and cookie-less analytics, but could benefit from enhanced security headers and explicit incident response information. Overall, the security posture is good with no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong with a comprehensive privacy policy and GDPR adherence, though a cookie consent mechanism is absent. Contact is primarily via web forms, and social media presence is active on major platforms. The website is professional, trustworthy, and content-rich, making it a reliable platform for educational services. Strategic recommendations include implementing security headers, adding incident response contacts, and introducing cookie consent to further strengthen compliance and security.

F

Outlook

fmp-berlin.de

45

The website fmp-berlin.de hosts a Microsoft Outlook Web Access (OWA) login portal, providing email access services to authorized users, likely employees or members of an organization based in Germany. The site is focused on secure email access and does not provide public-facing business information or marketing content. The technical infrastructure is based on Microsoft OWA technology with standard web technologies such as JavaScript, HTML, and CSS. The site shows moderate digital maturity with basic mobile optimization and accessibility features but lacks advanced SEO and modern web frameworks. Security posture is moderate; HTTPS is used, and the login form uses POST with autocomplete disabled, but there is an absence of explicit security headers and privacy policies. No contact or business information is provided on the page, limiting transparency and trust signals. Overall, the site is functional for its purpose but could improve in security best practices and compliance documentation.

E

Erste Wohnungsgenossenschaft Berlin-Pankow eG

ewg-pankow.de

41

Erste Wohnungsgenossenschaft Berlin-Pankow eG is a medium-sized housing cooperative based in Berlin, Germany, providing residential housing and community services primarily in the northern part of the city. The cooperative offers energetically renovated homes within well-maintained residential complexes and fosters a social environment for its members. The website reflects a local community-focused business model with clear contact channels and membership information. Technically, the site is built on WordPress using Elementor and several plugins for booking and GDPR compliance, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though there is room for improvement in security headers and incident response transparency. Overall, the website is professional, accessible, and compliant with GDPR, supporting a trustworthy online presence for the cooperative.

Akademie der Gesundheit Berlin/Brandenburg e.V. operates a professional educational website focused on health sector vocational training and education. The website positions itself as a regional leader in health education within Berlin and Brandenburg, targeting students and professionals seeking career development in healthcare. The business model is that of a non-profit educational institution offering structured courses and training programs. The site content is well-organized, professionally designed, and consistent with the brand identity. Technically, the website is built on WordPress 6.7.4 using the Avada theme and integrates several modern plugins including Yoast SEO for search optimization, Real Cookie Banner Pro for GDPR-compliant cookie management, and Google Tag Manager for analytics and marketing tags. The site demonstrates good mobile optimization and moderate performance. Hosting is managed via domaincontrol.com name servers, indicating a standard commercial hosting environment. From a security perspective, the site enforces HTTPS and employs a comprehensive cookie consent mechanism with granular user controls. While explicit security headers like Content-Security-Policy or X-Frame-Options are not clearly detected, no critical vulnerabilities or exposed sensitive data were found. The privacy policy is comprehensive and GDPR compliant, and contact information is clearly provided. However, the site lacks publicly available incident response or security policies, which could be improved. Overall, the website presents a low-risk profile with good privacy compliance and a solid technical foundation. Strategic recommendations include enhancing security headers, publishing incident response policies, and continuous monitoring of third-party scripts to maintain security posture.

B

BGO

findalternative.co.uk

43

Findalternative.co.uk is a website promoting a real estate development project named '105 Victoria Street' in London, managed by the developer BGO. The site focuses on showcasing the workspace and commercial property offerings with a target completion date in Q3 2026. The business model centers on real estate development and leasing, targeting commercial tenants and businesses seeking workspace in a prime London location. The website is professionally designed with modern web technologies, including SVG graphics and Google Analytics integration, indicating a moderate level of digital maturity. However, the site lacks critical compliance elements such as privacy and cookie policies, and no forms or extensive contact details are provided, limiting user engagement and transparency. Security posture is moderate with HTTPS usage but no visible security headers or explicit security policies. The domain registration is consistent with the business timeline and registered through a reputable registrar, supporting legitimacy. Overall, the site presents a professional front for a niche real estate project but requires improvements in privacy compliance, security best practices, and richer contact information to enhance trust and regulatory adherence.

S

SAUREN Financial Group

sauren.de

48

SAUREN Financial Group is a well-established German investment firm specializing in qualitative fund analysis and asset management with over 30 years of experience. The company focuses on investing in fund managers rather than funds themselves, offering a range of Dachfonds including multi-asset, absolute return, and responsible investment funds. Their market position is strong within Germany, supported by multiple industry awards and a clear business model targeting both private investors and distribution partners in approved jurisdictions. The website reflects a professional and trustworthy brand with comprehensive legal and compliance disclosures.

istitutimissionari.it represents the Conferenza degli Istituti Missionari in Italia (CIMI), a non-profit organization uniting Italian missionary institutes to promote missionary spirit and initiatives. The website provides information about their mission, events such as the Festival della Missione, publishing activities via EMI, and community projects like intercongregational living in Modica. The target audience is Italian-speaking individuals interested in missionary and religious activities. Technically, the site is built on WordPress using the Divi theme, with responsive design and moderate performance. Security posture is good with HTTPS and DNSSEC enabled, but lacks advanced security headers and formal vulnerability disclosure. Privacy and cookie policies are missing, and Google Analytics is installed but not configured, indicating room for privacy compliance improvement. The domain is newly registered, which contrasts with the organization's long history, suggesting a recent domain acquisition or migration. Overall, the site is professional and trustworthy but could enhance compliance and security transparency.

M

Missionari Saveriani in Italia

saveriani.it

41

Missionari Saveriani in Italia operates a comprehensive web portal serving the Italian-speaking community interested in the religious missionary activities of the Missionari Saveriani. The website provides news, events, publications, multimedia content, and donation options, positioning itself as a key information hub for the organization. The domain has a long history dating back to 2001, reinforcing its established presence in the non-profit religious sector. Technically, the site is built on Joomla CMS with modern UI frameworks like Bootstrap and UIkit, ensuring good mobile responsiveness and user experience. However, the domain is currently expired, posing a risk to availability and trust. Security posture is moderate with HTTPS enabled and CSRF protections, but lacks security headers and DNSSEC. Privacy compliance is adequate with clear privacy and cookie policies, though no explicit cookie consent mechanism is implemented. Overall, the site is professional, trustworthy, and well-maintained but should address domain renewal and enhance security headers to improve resilience and compliance.

The website jplayer.it is currently inaccessible beyond a Cloudflare security challenge page, which prevents access to any actual business content or information. The domain WHOIS data is suspicious, showing a creation date in the future (September 18, 2025), which undermines trust and legitimacy. No privacy, cookie, or terms of service policies are present, nor is there any contact information or business description visible. The site uses Cloudflare Turnstile for bot verification, indicating a security mechanism to prevent automated access. Overall, the website lacks transparency and content, making it impossible to assess the business or its services accurately. The security posture is moderate due to HTTPS and DNSSEC, but the absence of security headers and policies reduces confidence.

C

Chrysalide Binding

chrysalide-binding.ch

49

Chrysalide Binding is a Swiss cultural foundation focused on promoting young literary talent in the German, French, and Italian-speaking regions of Switzerland. It operates under the Sophie und Karl Binding Stiftung and continues the legacy of the Studer/Ganz-Stiftung by awarding literary prizes, organizing text workshops, and supporting debut authors with publication opportunities. The website is multilingual and professionally designed to serve authors and literary communities in Switzerland. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses SEO and analytics tools to optimize reach. Security posture is solid with HTTPS and no exposed vulnerabilities, though improvements are needed in security headers and privacy compliance mechanisms. Overall, the site is trustworthy and well-positioned within its niche cultural sector.

P

ProLitteris, Schweizerische Genossenschaft für Urheberrechte an Literatur und Kunst

prolitteris.ch

49

ProLitteris is a Swiss cooperative society specializing in the collective management of copyright for literature and visual arts. It serves authors, publishers, broadcasters, and cultural institutions by managing rights, licensing, and remuneration distribution. The organization holds an official and recognized position within Switzerland's copyright ecosystem, providing essential services to its stakeholders. The website reflects this professional and non-profit orientation with clear multilingual support and comprehensive information on services and legal frameworks. Technically, the site is built on WordPress with a modern tech stack including jQuery, FontAwesome, and Matomo analytics, ensuring a functional and user-friendly experience. Privacy compliance is well addressed with a detailed privacy policy and cookie consent mechanisms. Security posture is solid with HTTPS, reCAPTCHA, and no visible vulnerabilities, though improvements in security headers and incident response disclosures are recommended. Overall, the website is trustworthy, professional, and well-aligned with its business objectives.

S

SwissFoundations

swissfoundations.ch

49

SwissFoundations is a leading non-profit umbrella organization representing charitable foundations in Switzerland, founded in 2001. The organization provides networking, advocacy, standards, and practical tools to support its members. The website reflects a mature digital presence with multilingual support, professional design, and comprehensive content tailored to its target audience of Swiss foundations and stakeholders. Technically, the site is built on WordPress with modern plugins and SEO optimizations, delivering a good user experience with mobile responsiveness and accessibility. Security posture is solid with HTTPS, reCAPTCHA integration, and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is trustworthy, professional, and well aligned with the organization's mission and market position.

A

Aktionsbündnis gegen Gewalt, Rechtsextremismus und Fremdenfeindlichkeit

aktionsbuendnis-brandenburg.de

36

Aktionsbündnis Brandenburg is a small non-profit coalition based in Germany focused on combating violence, right-wing extremism, and racism. The organization provides educational materials, political impulses, and support for civil society initiatives, targeting a broad audience including political youth organizations and activists. The website is built on WordPress with a moderate technical infrastructure including WooCommerce and various plugins for events and podcasting. Security posture is adequate with HTTPS enabled but lacks published security policies and vulnerability disclosures. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy with a clear mission but could improve transparency and compliance.

M

Mobile Beratung gegen Rechtsextremismus Berlin (MBR)

mbr-berlin.de

47

Mobile Beratung gegen Rechtsextremismus Berlin (MBR) is a well-established non-profit organization founded in 2001, dedicated to providing consultation and support to individuals and groups in Berlin facing right-wing extremism, racism, and anti-Semitism. The organization offers on-site support, educational publications, and media analysis to empower its target audience, primarily Berlin residents affected by these issues. The website reflects a focused mission with clear contact channels and trust signals such as funding acknowledgments and a PGP key for secure communication. Technically, the site is built on WordPress with modern plugins and responsive design, ensuring good usability and moderate performance. Security posture is solid with HTTPS and secure communication options, though it lacks explicit security headers and cookie consent mechanisms. Overall, the site is professional, trustworthy, and serves a critical social function.

Faith in Politics is a UK-based non-profit organization focused on providing Catholic parliamentary and public affairs internships. The program offers interns a year-long experience engaging with political landscapes and the Church's social action efforts, primarily through placements with Members of Parliament and CAFOD. The website currently displays a maintenance page with minimal content, limiting full assessment of its digital maturity. Technically, the site is built on WordPress with Bootstrap and uses HTTPS with CDN support, indicating a moderate level of infrastructure quality. Security posture is basic with HTTPS enabled but lacking security headers and privacy compliance mechanisms. No contact or policy information is present, which reduces trust and compliance scores. Overall, the site appears legitimate based on domain registration data but requires improvements in content availability, privacy compliance, and security practices to enhance credibility and user trust.

The website Catholicsinhealthcare.co.uk serves as a resource hub for lay Catholics, priests, and chaplains working in healthcare across various disciplines. It is positioned as a niche informational platform within the healthcare sector, specifically targeting the Catholic community in the United Kingdom. The domain has been registered since 2006, indicating a long-standing presence, but the current site is under maintenance, limiting content accessibility and user engagement. Technically, the site is built on WordPress with Bootstrap 3.3.7, indicating a standard CMS-based infrastructure with moderate technical maturity. The site lacks advanced security headers and privacy compliance features, and no analytics or tracking tools are detected. Mobile optimization and accessibility are basic, and the overall design and user experience are poor due to the maintenance page blocking content. From a security perspective, the absence of security headers and privacy policies, combined with the lack of contact or incident response information, suggests a low security posture. The SSL configuration is basic but present. The domain registration is consistent and legitimate, with no suspicious patterns detected. Overall, the site currently presents a low risk but also low utility due to its maintenance status. Strategic recommendations include publishing privacy and cookie policies, implementing security best practices, improving accessibility and mobile responsiveness, and providing clear contact and incident response channels to enhance trust and compliance.

T

TIVENTS

tivents.app

45

TIVENTS operates a German-language platform focused on connecting users with a wide network of local partners including cultural institutions, sports clubs, restaurants, and event organizers. The website serves as a partner selection portal with extensive listings and links to partner microsites, supporting event promotion and ticketing services. The platform targets local businesses and customers interested in cultural and leisure activities within Germany. Technically, the site employs modern frontend technologies such as Bootstrap, Livewire, and FontAwesome, ensuring a responsive and user-friendly experience. However, some areas such as security headers and cookie consent mechanisms could be improved to enhance compliance and security posture. The security evaluation shows good SSL implementation but lacks explicit security policies or incident response contacts. Overall, the site is legitimate, professionally designed, and maintains a moderate trust level with room for security and privacy enhancements.

S

Samariterbund Bad Ischl

asb-badischl.com

48

Samariterbund Bad Ischl is a local non-profit organization based in Austria, providing Samaritan and emergency community services. The website is built on WordPress using the Divi theme, reflecting a standard CMS infrastructure with moderate technical maturity. The site is accessible without any WAF or security challenges, and it employs HTTPS with a good SSL configuration. However, the absence of privacy and terms of service policies, lack of security headers, and missing explicit contact information represent compliance and security gaps. The domain is long-standing and registered consistently with the organization's profile, indicating high legitimacy. Overall, the website serves its local community purpose but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

S

Schweizer Buchpreis

schweizerbuchpreis.ch

48

The Schweizer Buchpreis website represents a well-established Swiss literary prize organization founded in 2017. It serves a niche audience of literature enthusiasts, authors, and publishing professionals primarily in Switzerland and German-speaking regions. The site provides information about the prize, nominees, events, and downloadable promotional materials, supported by recognized cultural partners. The business model is non-profit and focused on cultural promotion through annual awards and related events. Technically, the website is built on WordPress with common plugins such as Yoast SEO and Contact Form 7, enhanced by Google reCAPTCHA for bot protection. The site demonstrates good mobile optimization, SEO practices, and moderate performance. The technology stack is modern and appropriate for the organization's needs, though hosting details are not explicitly identified. From a security perspective, the site enforces HTTPS and uses reCAPTCHA, but lacks explicit security headers and a cookie consent mechanism, which are recommended for improved compliance and protection. No vulnerabilities or exposed sensitive data were detected. Privacy policy is present and GDPR compliant, but cookie consent and incident response contacts are missing. Overall, the website is professional, trustworthy, and secure for its purpose, with minor improvements recommended in privacy compliance and security headers. The domain registration is consistent with the organization's identity and history, supporting high legitimacy and trustworthiness.

The analyzed content corresponds to a Chrome internal error page (chrome-error://chromewebdata/) that displays the offline dinosaur game when no internet connection is available. There is no actual website content, business information, or external links present. The page is a local browser resource and not a public website. Consequently, no business description, contact information, or privacy/security policies are available. The technical infrastructure is limited to client-side JavaScript and HTML5 Canvas used for the game rendering within the browser environment. No external hosting, CMS, or analytics services are involved. Security posture and privacy compliance cannot be assessed due to the nature of the content. Overall, this is not a website but a browser error page, and no meaningful business or security analysis applies.

B

Bibliotheksgesellschaft Celle

lese-experten.de

45

The website www.lese-experten.de represents a regional educational initiative managed by the Bibliotheksgesellschaft Celle, aimed at promoting reading skills among 5th and 6th grade students in the Celle area of Germany. The project collaborates with local public libraries, schools, and sponsors to provide curated book selections, quizzes, and events to encourage children's engagement with reading. The website content is well-structured, informative, and targeted primarily at students, educators, and parents within the region. Technically, the site is built on TYPO3 CMS with Bootstrap, ensuring responsive design and moderate performance. Security posture is adequate with HTTPS enforced and cookie consent implemented, though additional security headers and explicit policies could enhance protection. WHOIS data aligns with the website's regional and organizational claims, indicating legitimacy and transparency.

LiteraTour Nord is a cultural non-profit initiative managed by Literaturhaus Hannover e.V., organizing annual literary tours featuring contemporary German-speaking authors. The website serves as an information portal for event schedules, author profiles, and archival content, targeting literature enthusiasts and academic audiences in northern Germany. The business model relies on sponsorships, notably from the VGH Stiftung, and collaboration with local literature houses and universities. The site is professionally designed and consistently branded, reflecting a well-established regional cultural presence. Technically, the website is built on TYPO3 CMS, utilizing common front-end libraries such as jQuery, Bootstrap, and Font Awesome. It employs Matomo analytics with Do Not Track enabled, indicating some privacy awareness. The site is mobile optimized and SEO friendly, though accessibility features are basic. Hosting is managed via domaincontrol.com name servers, a reputable provider. Performance is moderate with room for optimization. From a security perspective, the site uses HTTPS and has implemented Do Not Track in analytics, but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance. No incident response or security policy information is published. The absence of contact emails and phone numbers on the main page limits direct communication channels. Overall, the security posture is adequate but could be improved with standard best practices. The overall risk is low given the non-profit cultural nature and absence of suspicious content. Strategic recommendations include implementing cookie consent, adding security headers, publishing security policies, and enhancing contact information visibility to improve trust and compliance.

F

Festival aufm Platz

festival-aufmplatz.de

45

Festival aufm Platz is a well-established cultural festival in Niedersachsen, Germany, offering free open-air literary and musical events supported by reputable foundations such as the VGH Stiftung and Niedersächsische Sparkassenstiftung. The website reflects a professional and accessible platform with good SEO and accessibility features, built on WordPress with modern plugins and frameworks. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or suspicious elements were detected. The site lacks explicit contact emails or phone numbers on the homepage, and no terms of service or security policies are published, which could be enhanced for transparency. Overall, the site is trustworthy, well-branded, and serves a general audience with safe content.

B

Biker's Point Fuchs Uslar

bikerspoint-fuchs.de

49

Biker's Point Fuchs Uslar is a specialized motorcycle dealership based in Germany, focusing on Honda and KTM motorcycles with a particular emphasis on Goldwing and Trikes, positioning itself as a leading European provider in this niche. The website is built on WordPress using the Divi theme, indicating a modern and flexible technical infrastructure. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. Security posture is strong with HTTPS enabled and appropriate security headers, but lacks explicit security and privacy policies on the site. Contact information is not clearly presented, which may affect user trust and compliance. Overall, the site is professional and functional but would benefit from enhanced transparency and compliance documentation.

G

Gebrauchtrad24 GmbH

gebrauchtrad24.de

49

Gebrauchtrad24 GmbH operates a professional e-commerce and retail platform specializing in used and new bicycles, e-bikes, and S-Pedelecs, primarily targeting consumers in Germany. With over 30 years of experience in the two-wheeler industry, the company offers a comprehensive range of products including leasing options, rentals, and workshop services. The website is well-branded, consistent, and provides clear contact information and social media presence, enhancing customer trust. Technically, the website is built on a modern WordPress CMS with WooCommerce for e-commerce functionality and Elementor for design. It uses several plugins for enhanced search and payment processing. The site is mobile-optimized and includes SEO best practices. Cookie consent management is implemented via CookieYes, ensuring GDPR compliance. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms but lacks explicit security headers and publicly available security policies or incident response contacts. No vulnerabilities or suspicious content were detected. The WHOIS data aligns with the business claims, showing consistent registration and no privacy protection, which supports legitimacy. Overall, the website presents a low-risk profile with good privacy compliance and business credibility. Strategic improvements in security headers and incident response transparency could further enhance trust and security posture.

The Liturgy Office website serves as the official online presence for the Department for Christian Life and Worship under the Catholic Bishops' Conference of England and Wales. It provides liturgical resources, calendar information, prayers, and news relevant to the Catholic community in England and Wales. The site targets clergy, church members, and religious scholars, positioning itself as a trusted resource within the religious non-profit sector. The business model is non-commercial, focusing on service and information dissemination. Technically, the website employs basic web technologies including HTML5, CSS, Google Fonts, and Google Tag Manager for analytics. The site lacks a modern CMS and advanced frameworks, indicating a relatively simple infrastructure. Performance and mobile optimization are basic, with room for improvement in accessibility and SEO. No forms or user input fields reduce complexity and security risks. From a security perspective, the site uses HTTPS (assumed but not explicitly confirmed), but lacks DNSSEC and security headers, which are recommended for enhanced protection. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. The WHOIS data is transparent and consistent with the organization's identity, supporting legitimacy. No critical vulnerabilities or suspicious patterns were detected. Overall, the website is a reliable and safe resource with good business credibility but requires improvements in privacy compliance, security hardening, and technical modernization to enhance user trust and regulatory adherence.

C

Catholic Bishops' Conference of England and Wales

dayforlife.org

49

The Catholic Bishops' Conference of England and Wales operates a professional and authoritative website dedicated to religious advocacy and raising awareness on life issues. The site provides comprehensive resources including messages, prayer booklets, and grant information, targeting Catholics and interested individuals in England and Wales. The organization holds a strong market position as a recognized religious authority with consistent branding and a clear mission. Technically, the website is built on WordPress with modern technologies such as Bootstrap, Yoast SEO, and Google Analytics, hosted with CDN support for performance. The site demonstrates good mobile optimization, accessibility, and SEO practices, reflecting a mature digital infrastructure. From a security perspective, the site uses HTTPS and employs security best practices, although explicit security headers are not detected in the provided data. No vulnerabilities or exposed sensitive data were found. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website presents a low risk profile with strong business credibility and technical maturity. The main limitation is the lack of WHOIS data due to querying the 'www' subdomain, but this does not detract from the site's legitimacy. Strategic recommendations include enhancing security headers and publishing explicit security and incident response policies.

C

Catholic Bishops' Conference of England and Wales

taking-stock.org.uk

45

Taking Stock is a non-profit project managed by the Catholic Bishops' Conference of England and Wales, focusing on the architectural and historical review of Catholic churches and chapels across England and Wales. The website serves as an informational resource and partnership platform involving dioceses and Historic England. The target audience includes researchers, heritage professionals, and the Catholic community. The business model is collaborative and heritage-focused, with a niche market position in religious architectural documentation. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and advanced SEO plugins like Yoast. Hosting utilizes a CDN for performance, and Google Analytics is implemented for visitor tracking. The site demonstrates good mobile optimization and basic accessibility features, though there is room for improvement in security headers and cookie consent mechanisms. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data or vulnerable libraries. However, it lacks explicit security policies, incident response information, and cookie consent banners, which are important for GDPR compliance and user trust. No critical vulnerabilities or suspicious activities were detected. Overall, the website is professionally maintained with a strong business credibility and good content quality. Strategic recommendations include enhancing privacy compliance with cookie consent, implementing security headers, and publishing security and incident response policies to improve trust and compliance posture.

The Kairos Forum is a specialized consultancy focused on supporting people with intellectual disabilities through spiritual and community engagement. It provides advisory services to religious organizations, educational providers, and health and social care sectors, with a notable history of training over two thousand teachers in the UK. The organization also collaborates internationally, including with the Pontifical Council for Culture. The website is built on WordPress with common plugins and presents a professional, content-rich platform targeting organizations and individuals involved in disability support and education. Technically, the site uses modern web technologies and HTTPS but lacks some security headers and privacy compliance documentation. No WHOIS registrant data is available due to query failure, but the domain appears legitimate and consistent with the business profile. Overall, the site demonstrates good business credibility and technical implementation but should improve privacy and security policy disclosures to enhance trust and compliance.

The website at mafis-digital.de currently presents no accessible content, with an empty HTML body and no metadata or visible information. This lack of content prevents any meaningful analysis of the business, its services, or its market positioning. The domain is registered with standard UI-DNS name servers, but no registrant or organizational data is available to verify legitimacy or business claims. Technically, the site lacks HTTPS, security headers, and any detectable technologies or frameworks, indicating a minimal or placeholder web presence. Security posture is weak due to the absence of basic protections and policies. Overall, the site appears either blocked, under construction, or abandoned, resulting in a low trust and credibility score.

F

FormPro Angola

formpro-angola.org

44

FormPro Angola is a vocational training and workforce development project focused on Angola, resulting from cooperation between Angola and Germany. The website provides educational resources, event information, and publications related to professional training. It targets professionals, trainees, and institutions involved in Angola's labor market development. The project is positioned as a niche non-profit educational initiative supported by reputable partners such as BMZ and GIZ. Technically, the website uses an older CMS (KONTEXT-CMS) and includes legacy technologies like jQuery 1.7.1, indicating moderate digital maturity. The site is accessible and well-structured but lacks modern security and privacy features. Security posture is moderate with no visible HTTPS enforcement or security headers and outdated JavaScript libraries posing potential risks. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is safe and professional but requires updates to improve security and compliance.

C

Caren Lay MdB

caren-lay.de

49

The website www.caren-lay.de represents Caren Lay, a member of the German Bundestag affiliated with the DIE LINKE party. It serves as a political communication platform focusing on housing policy, social issues, and club policy. The site provides articles, brochures, and information about her political work and positions. The target audience is German-speaking citizens interested in left-wing politics and social housing matters. The business model is centered on political representation and public engagement. Technically, the site is built on KONTEXT-CMS 3.9.9, uses modern frontend technologies such as Tailwind CSS and FontAwesome, and includes jQuery 3.5.1. Hosting is provided by Warenform, with CDN usage for fonts and images. The site is mobile optimized and has good SEO practices. Analytics are handled by Matomo with an opt-in cookie consent mechanism, reflecting a privacy-conscious approach. From a security perspective, the site enforces HTTPS and uses cookie consent with opt-in for tracking. However, it lacks explicit security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent and legitimate, supporting trustworthiness. Overall, the site demonstrates a good security posture but could improve by adding security headers and incident response information. The overall risk is low given the nature of the site as a political information platform with no sensitive transactions or personal data collection beyond a contact form. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility features to further strengthen trust and compliance.

D

Dieter Janecek

dieterjanecek.de

49

Dieter Janecek's website serves as the official online presence for a German Bundestag member representing Munich-West/Mitte. The site focuses on political communication, providing news, event information, and a newsletter subscription to engage constituents and supporters of the Green party. The business model centers on political representation and public outreach, targeting German citizens and political stakeholders. The website is well-branded, consistent, and offers multilingual support, enhancing accessibility for a broader audience. Technically, the site is built on WordPress using a modern tech stack including jQuery, Swiper.js, and several reputable plugins for events, forms, and multilingual content. The site demonstrates good mobile optimization and moderate performance, with a clean and professional design. SEO and accessibility are basic but adequate for the site's purpose. From a security perspective, the website enforces HTTPS and implements a GDPR-compliant cookie consent mechanism with granular user controls. No critical vulnerabilities or exposed sensitive data were detected. However, security headers are not explicitly present, and there is no dedicated security or incident response policy visible. The WHOIS data aligns with the website content, indicating a legitimate and consistent domain registration. Overall, the website presents a low-risk profile with good privacy compliance and a solid security posture for a political site. Strategic improvements could include adding security headers, incident response information, and enhanced accessibility features to further strengthen trust and compliance.

F

Fabio De Masi

fabio-de-masi.de

49

Fabio De Masi's website serves as an official political platform providing comprehensive information about his role as a member of the European Parliament. The site offers visitors access to news, media content, transparency reports, and opportunities to subscribe to newsletters. The target audience primarily consists of European citizens interested in political affairs and transparency. The business model is centered on public political representation and information dissemination, with a strong emphasis on transparency and engagement through social media and newsletters. Technically, the website is built on the KONTEXT-CMS platform, utilizing legacy jQuery and modern FontAwesome icons, hosted by warenform.de. The site demonstrates moderate performance and good mobile optimization but could benefit from updating outdated libraries and enhancing accessibility features. Security-wise, the site employs HTTPS and an opt-in cookie consent mechanism with Matomo analytics, reflecting good privacy compliance. However, the absence of security headers and the use of an outdated jQuery version present moderate risks. No explicit security or incident response policies are published, and contact information is limited to forms and social media links. Overall, the website is professional, trustworthy, and compliant with GDPR, but improvements in security posture and technical modernization are recommended.

B

Bundesregierung

gleichstellungsbericht.de

45

The website gleichstellungsbericht.de is an official German government platform dedicated to publishing gender equality reports and related information. It serves as a key resource for policymakers, administrators, and the public interested in gender equality progress and recommendations in Germany. The site provides access to current and past reports, event announcements, and downloadable documents, positioning itself as a trusted governmental information source. The business model is informational and regulatory, with a focus on transparency and public engagement in gender equality matters. Technically, the website is built on WordPress and employs common web technologies such as jQuery and Owl Carousel for interactive content. It integrates a sophisticated accessibility tool (digi·access) supporting multiple languages and accessibility needs, reflecting a high level of digital maturity and inclusiveness. Hosting is managed via domaincontrol.com (GoDaddy), a reputable provider. The site demonstrates good mobile optimization and SEO practices. From a security perspective, the site enforces HTTPS and includes essential security headers, contributing to a strong security posture. No vulnerabilities or exposed sensitive data were detected. However, the absence of a cookie consent mechanism, explicit security policies, and vulnerability disclosure pages indicates areas for improvement in compliance and transparency. No incident response contacts or data protection officer information were found, which are recommended for enhanced trust and regulatory adherence. Overall, the website is professional, trustworthy, and well-maintained, with a strong focus on accessibility and content quality. Strategic recommendations include implementing cookie consent, publishing security and incident response policies, and adding vulnerability disclosure information to further strengthen compliance and user trust.

P

Photography for work

photo-for-work.org

46

The website 'Photography for work' is a niche portfolio site showcasing photographic content related to various industrial sectors such as mining, energy, railway, steel making, and women at work. The site appears to be informational or artistic in nature rather than commercial, targeting a general audience interested in work-related photography. The technical infrastructure is based on an older CMS (KONTEXT-CMS) and uses legacy JavaScript libraries like jQuery 1.10.2, with additional gallery and photo viewing plugins. The site is mobile optimized with basic accessibility and SEO features but lacks modern enhancements and performance optimizations. Security posture is weak due to lack of visible HTTPS enforcement, absence of security headers, and no privacy or cookie policies. No contact or incident response information is provided, limiting transparency and trust. Overall, the site is functional but basic, with moderate trustworthiness and a low security maturity level.

The website schoenearbeit.de represents a small-scale design service operated by Christine Massuthe, a diploma designer based in Berlin, Germany. The site provides basic contact information and a simple presentation of the business but lacks comprehensive business or security policies. The business appears to be a freelance or consultancy service targeting local clients seeking design expertise. Technically, the website is built with basic HTML, CSS, and a small JavaScript file for image swapping. There is no evidence of a CMS or modern frameworks, and the site shows minimal mobile optimization and SEO efforts. Hosting is likely provided by the nameserver operator Warenform.de. No analytics or tracking technologies are detected, indicating a low digital maturity level. From a security perspective, the site lacks HTTPS information and security headers, which are critical for protecting user data and ensuring trust. No privacy, cookie, or incident response policies are present, which raises compliance concerns especially under GDPR. The contact information is clearly displayed, but no formal security or data protection measures are evident. Overall, the website is functional but basic, with moderate trustworthiness due to clear contact details but limited security and compliance features. Strategic improvements in security posture, privacy compliance, and technical modernization are recommended to enhance business credibility and user trust.

5

52°Nord | Paris-Berlin

52nord.eu

49

52°Nord | Paris-Berlin is a small German media production company specializing in film and media content including interviews, thematic films, image films, fiction, and portraits. Their website is built on WordPress and showcases their services and content with a focus on the German-speaking audience. The company provides clear contact information including a physical address in Berlin, phone number, and email, enhancing their business credibility. Technically, the website uses an older WordPress version (5.3.20) with plugins such as MetaSlider and Vipers Video Quicktags, and includes jQuery 1.12.4. The site is hosted via domainfactory GmbH, a reputable registrar and hosting provider. The site is moderately optimized for performance and mobile devices but lacks advanced accessibility and SEO features. No analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the website uses HTTPS but lacks important security headers such as Content-Security-Policy and X-Frame-Options. There is no visible cookie consent mechanism or privacy policy compliance banner, which is a GDPR compliance gap. No incident response or security policy information is provided. The site does not expose sensitive data or show signs of vulnerabilities but uses an outdated jQuery version which could pose risks. Overall, the website is safe with no adult or questionable content, and the domain registration is consistent with the business profile. Recommendations include implementing security headers, updating JavaScript libraries, adding cookie consent and privacy compliance mechanisms, and improving accessibility and SEO to enhance security posture and user trust.