High-risk security reports

G

Grundstücksgesellschaft Franz-Mehring-Platz 1 mbH

muenzenbergforum.de

46

The Internationales Willi Münzenberg Forum is a German non-profit organization that serves as a loose network of scientific project groups, political-cultural education providers, and media enterprises. The website reflects a niche educational and cultural collaboration platform with a focus on political culture and media projects. It targets politically and culturally engaged audiences, providing resources such as events, journals, and a library. The organization appears small and specialized, with a founding date around 2015. Technically, the website is built on WordPress 6.8.3, utilizing modern plugins such as Yoast SEO, Contact Form 7, and GDPR compliance tools like ShapePress DSGVO. Hosting is provided by Hetzner in Germany, aligning with the website's language and business location. The site demonstrates good mobile optimization, SEO practices, and moderate performance. From a security perspective, the site enforces HTTPS and implements GDPR-compliant cookie consent mechanisms. However, no explicit security headers were detected, and there is no visible security or incident response policy. No vulnerabilities or exposed sensitive data were found in the HTML content. The absence of contact emails and phone numbers is mitigated by the presence of contact forms and social media channels. Overall, the website presents a professional and trustworthy front for a small non-profit organization. Recommendations include enhancing security headers, adding explicit security policies, and possibly publishing vulnerability disclosure information to improve transparency and security posture.

C

common verlagsgenossenschaft eG

oxiblog.de

48

OXI Blog is a German media publication focused on alternative economic perspectives, operated by common verlagsgenossenschaft eG. The website offers articles, digital and print subscriptions, and a newsletter targeting a general audience interested in economic and social topics. The business model relies on content publication supported by subscriptions and donations, positioning itself as a niche media outlet in Germany. Technically, the site is built on WordPress with a modern tech stack including Yoast SEO, GDPR-compliant cookie consent via ShapePress DSGVO, and analytics through Matomo and WP Statistics. Hosting is provided by Hetzner, a reputable German provider, ensuring reliable infrastructure. Security posture is strong with HTTPS enforced, use of reCAPTCHA for forms, and cookie consent mechanisms, though some security headers and explicit incident response contacts are missing. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, with no signs of content blocking or WAF interference.

T

transform!europe

transform-network.net

47

transform!europe is a well-established European non-profit network focused on alternative political thinking and dialogue, primarily targeting left-wing activists, academics, and political groups. Founded in 2009, it offers a range of services including publications, events, webinars, podcasts, and a multilingual newsletter. The website is professionally designed with consistent branding and good content quality, supporting multiple languages and optimized for SEO and mobile devices. The technical infrastructure is based on WordPress with modern plugins and frameworks, hosted behind Cloudflare DNS services, and uses Google Analytics for user tracking. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced DNS security (DNSSEC) and security headers. No explicit security or incident response policies are published. Overall, the website is credible and trustworthy with a moderate security maturity level.

N

nd - Journalismus von links

neues-deutschland.de

49

nd - Journalismus von links is a German left-wing news media outlet providing political, cultural, and social news and analysis. The website offers multiple subscription models, podcasts, newsletters, and voluntary donation options, reflecting a cooperative ownership business model. It targets a general audience interested in leftist perspectives on current affairs. The site is well-branded and professionally maintained with consistent content quality and clear navigation.

D

Die Linke im Europaparlament

dielinke-europa.eu

44

Die Linke im Europaparlament is a political group representing left-wing interests within the European Parliament, focusing on social justice, peace, and democracy in Europe. The website serves as an information hub for their parliamentary activities, news, publications, and contact with representatives. It targets European citizens interested in progressive politics and EU governance. The organization maintains a consistent brand presence and leverages official EU affiliations to establish trust. Technically, the website is built on WordPress with common plugins such as Contact Form 7 and uses modern web technologies including jQuery and FontAwesome. The site is hosted by http.net Internet GmbH and demonstrates moderate performance with good mobile optimization and basic accessibility features. SEO practices are well implemented with proper metadata and Open Graph tags. From a security perspective, the site enforces HTTPS and includes privacy consent mechanisms in its contact forms, aligning with GDPR requirements. However, it lacks advanced security headers and a public vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data indicates a consistent and legitimate domain registration. Overall, the website presents a professional and trustworthy digital presence for a political organization, with room for improvement in security hardening and cookie consent implementation to enhance privacy compliance and user trust.

The Projektnetzwerk Ländliche Räume Niedersachsen website serves as an official regional government platform aimed at consolidating and promoting projects in rural areas of Lower Saxony, Germany. It provides categorized project listings, information on regional development programs, and facilitates project visibility for stakeholders such as municipalities and project managers. The platform is supported by various ministries and government entities, reinforcing its authoritative position in the regional development sector. Technically, the website is built on the connectiv! WebCMS 6 platform, employs standard web technologies including JavaScript and YouTube APIs, and uses etracker for analytics with respect for user privacy. While the site is accessible and well-structured, it lacks some modern security headers and explicit cookie consent mechanisms, which are areas for improvement. The security posture is generally good with HTTPS enforced and no visible vulnerabilities, but could benefit from enhanced security policies and incident response disclosures. Overall, the website is trustworthy, professionally maintained, and serves its target audience effectively with a moderate technical maturity level.

N

Startseite - NIEDERSACHSEN PACKT AN

niedersachsen-packt-an.de

44

The website 'niedersachsen-packt-an.de' appears to be a regional government or public initiative site focused on the Niedersachsen (Lower Saxony) region in Germany. The site uses WordPress CMS with performance optimization via WPRocket and includes custom fonts and scripts. The content is primarily in German and targets the general public in the region. The site design and navigation are good, with mobile optimization present. However, there is a lack of explicit privacy, cookie, and terms of service policies, as well as no visible contact information, which impacts compliance and trust. Security posture is minimal with no detected security headers or incident response contacts. The domain uses official Niedersachsen name servers, indicating legitimacy, but WHOIS data is limited. Overall, the site is functional and professional but could improve in privacy and security transparency.

W

WInTO GmbH

winto-gmbh.de

46

WInTO GmbH is a regional economic development company operating under the Landkreis Oberhavel in Germany. The company focuses on improving the economic structure of the region by providing comprehensive services including project development, business support, and networking. Their website reflects a professional and consistent brand image targeting businesses, investors, and regional partners. Technically, the site uses modern frontend technologies and privacy-conscious analytics with Matomo and Cookiebot. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security policies and incident response information are absent. Overall, the site is trustworthy and well-positioned as a government-related economic development entity.

The website skinbiblos.it is registered since 2017 with a valid domain registration expiring in 2026, indicating a stable domain ownership. However, the website content is completely minimal with an empty HTML body and no metadata, scripts, or visible content. There are no privacy, cookie, or terms of service policies present, nor any contact information or social media links. Technically, the site lacks modern web technologies, security headers, and DNSSEC is not enabled, which are areas for improvement. The SSL configuration is basic but HTTPS is presumably enabled given the domain status. The security posture is weak due to lack of security best practices and absence of incident response or vulnerability disclosure information. Overall, the site appears to be either under development or abandoned, with very low content and business credibility. The risk is low in terms of malicious content but the lack of transparency and security features reduces trust and compliance. Strategic recommendations include adding comprehensive privacy and cookie policies, improving security headers and SSL configuration, and providing clear contact and business information to enhance trust and compliance.

W

WaveDigital s.r.o.

wavedigital.cz

44

WaveDigital s.r.o. is a Czech-based digital agency specializing in custom web development, web applications, e-commerce solutions, PPC advertising, and SEO optimization. Established in 2018, the company positions itself as a reliable partner for businesses seeking modern digital solutions. The website reflects a professional and consistent brand image, targeting business clients primarily in the Czech Republic. The company leverages popular CMS and page builder technologies such as WordPress and Elementor, combined with modern marketing and analytics tools including Google Analytics, Microsoft Clarity, Hotjar, and Facebook Pixel. Cookie consent is managed via Cookiebot, indicating attention to privacy compliance, although explicit privacy and terms of service pages are not found.

Impresa Fidata is a regional project focused on supporting construction companies in Abruzzo, Italy, by providing a free service to validate subcontractor documentation and promote compliance with safety regulations. The initiative is realized by FORMEDIL ABRUZZO with the contribution of INAIL Abruzzo, targeting construction firms registered in Edilcassa Abruzzo. The website serves as an informational and promotional platform for this project, offering contact details and links to partner organizations. Technically, the website is built using SitePad CMS and incorporates common web technologies such as jQuery, Bootstrap Grid, Font Awesome, and cookie consent scripts. The site is accessible, mobile-optimized, and presents a professional design with clear navigation. However, it lacks explicit privacy and terms of service pages, which are important for compliance and user trust. From a security perspective, the site uses HTTPS but does not show evidence of security headers or advanced security practices. No forms or data collection fields are present on the homepage, reducing immediate data exposure risks. The absence of WHOIS registration data is a notable concern, potentially indicating privacy protection or data unavailability, which slightly reduces trustworthiness. Overall, the website is functional and serves its informational purpose well but would benefit from enhanced privacy compliance, security hardening, and transparency regarding domain registration to improve trust and compliance posture.

The website cassaedilechietipescara.it currently serves a security challenge page that blocks direct access to its content, indicating the presence of a Web Application Firewall or similar security mechanism. The domain is newly registered in December 2024, consistent with a recently launched or under-development site. The visible content is minimal and primarily a redirect countdown with a browser integrity check, showing no substantive business or service information. The site uses very outdated CMS versions (Joomla 1.5 and WordPress 2.5), which are known to have multiple security vulnerabilities, posing a significant risk if not updated. There are no visible privacy, cookie, or terms of service policies, nor any contact information, which limits trust and compliance assessment. The site does implement DNSSEC and HTTPS, which are positive security indicators, but lacks security headers and modern best practices. Overall, the site is in a protected but immature state with significant gaps in content, security, and compliance.

The website ance.it is currently inaccessible due to a Wordfence security block that restricts access from certain areas for security reasons. The page presented is a Wordfence-generated block page with no business content, contact information, or policies visible. The domain is longstanding, registered since 1997, indicating an established presence, but no registrant details are publicly available to verify ownership or business legitimacy. The technical infrastructure includes WordPress CMS with Wordfence security plugin active, but no further technical or SEO details can be assessed due to the block. Security posture is partially enforced by Wordfence, but lack of visible security headers and policies limits confidence. Privacy compliance and business credibility cannot be evaluated due to lack of accessible content. Overall, the site is currently not usable for analysis or business engagement.

L

LiteSpeed Technologies Inc

http3check.net

47

HTTP3Check.net is a specialized online tool provided by LiteSpeed Technologies Inc that allows users to verify HTTP/3 and QUIC protocol support on any given URL. The service targets web developers, IT professionals, and website administrators seeking to assess modern web protocol adoption. The website is professionally designed using the UIkit framework and integrates Google Analytics and Google Tag Manager for user tracking and analytics. The domain is registered with NameCheap and uses Cloudflare DNS, reflecting a stable and legitimate technical infrastructure. However, the site lacks visible security headers and cookie consent mechanisms, which are important for enhancing security and privacy compliance. The privacy policy is present but limited in scope, and no direct contact or incident response information is provided.

K

Klinikum Saarbrücken gGmbH

klinikum-saarbruecken.de

49

Klinikum Saarbrücken gGmbH operates a large, modern hospital facility located in Saarbrücken, Germany, providing comprehensive medical services across 17 specialized departments and 18 interdisciplinary centers. The institution positions itself as a regional maximal care provider with a strong emphasis on quality, patient safety, and community engagement. The website serves multiple audiences including patients, visitors, healthcare professionals, and prospective employees, offering detailed information about medical services, educational programs, and career opportunities. The presence of certifications and compliance information underscores its commitment to healthcare standards and regulatory adherence. Technically, the website is built on the TYPO3 CMS platform, leveraging a modern technology stack including jQuery, Bootstrap, and Matomo analytics for privacy-conscious user tracking. The site demonstrates good mobile optimization, accessibility features, and SEO practices. The cookie consent mechanism and privacy policy are well implemented, reflecting GDPR compliance. The site integrates multiple social media channels and provides a newsletter signup, enhancing user engagement. From a security perspective, the site enforces HTTPS and employs cookie consent management. No critical vulnerabilities or exposed sensitive data were detected in the content. However, there is room for improvement in publishing explicit incident response policies, security headers, and vulnerability disclosure mechanisms. The WHOIS data aligns with the website's claims, indicating a legitimate and professionally managed domain. Overall, Klinikum Saarbrücken's website reflects a mature digital presence with strong business credibility and privacy compliance. Strategic enhancements in security transparency and incident response readiness would further strengthen its posture.

S

Stadtwerke Saarbrücken Bäder GmbH

saarbruecker-baeder.de

49

Saarbrücker Bäder is a municipal swimming pool and fitness service provider operated by Stadtwerke Saarbrücken Bäder GmbH, serving the local community in Saarbrücken, Germany. The website offers information on swimming pools, aqua courses, fitness and relaxation programs, family activities, and an online ticketing platform. It positions itself as a local public service provider focused on wellness and recreational activities. Technically, the site uses a modern JavaScript stack including jQuery, Owl Carousel, and the Foundation framework, with TYPO3 CMS likely powering the backend. The site is mobile-optimized and provides basic accessibility features. Security-wise, HTTPS is used, and cookie consent mechanisms are in place, but explicit security headers and incident response policies are not publicly documented. The domain registration data aligns well with the website's municipal nature, indicating legitimacy and trustworthiness.

I

Immobiliengruppe Saarbrücken

sib-saarbruecken.de

48

Immobiliengruppe Saarbrücken is a regional real estate service provider focused on housing rentals, commercial spaces, property management, parking, and insurance services primarily serving the Saarbrücken area. The website reflects a municipal or public service affiliation, offering information on housing, job opportunities, and community projects. Technically, the site uses modern JavaScript libraries and the Foundation framework, likely powered by TYPO3 CMS, delivering a responsive and accessible user experience. Security posture is moderate with HTTPS usage and no exposed sensitive data, but lacks explicit security headers and cookie consent mechanisms. Tracking is performed via etracker with respect for Do Not Track settings. Overall, the site is professional, trustworthy, and safe for general audiences, though improvements in privacy compliance and security policies are recommended.

S

Stadtwerke Saarbrücken

saarbruecker-stadtwerke.de

42

Stadtwerke Saarbrücken is a large municipal utility company serving the Saarbrücken region in Germany, providing energy, water, and public transport services. The website reflects a professional and regionally focused business with a strong market position as a key regional employer and service provider. The technical infrastructure uses modern JavaScript libraries and a TYPO3 CMS backend, indicating moderate digital maturity. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit privacy and cookie policies. Tracking is done via eTracker without visible consent mechanisms, indicating room for privacy compliance improvement. Overall, the website is trustworthy and well-maintained but could enhance security and privacy transparency.

S

Saarbahn GmbH

saarbahn.de

42

Saarbahn GmbH is a regional public transportation provider serving the Saarbrücken area in Germany. The company operates local transit services including trams and buses, offering timetable information, ticket sales, and subscription services to its customers. It is a subsidiary of Stadtwerke Saarbrücken GmbH, a major regional utility and service provider. The website provides comprehensive service information, customer support, and news updates relevant to its target audience of local commuters and travelers. Technically, the website employs a modern technology stack including jQuery, Owl Carousel, Foundation framework, and accessibility tools like ReadSpeaker. The site is mobile-optimized and structured for good user experience and SEO. The CMS appears to be TYPO3, indicating a professional content management approach. Performance is moderate with good mobile and accessibility features. From a security perspective, the site uses HTTPS and secure form submissions but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. Tracking is done via etracker, with moderate user tracking levels. No critical vulnerabilities or blocking mechanisms were detected, indicating a stable security posture. Overall, Saarbahn GmbH's website is a trustworthy and professional platform for regional public transport services, though it would benefit from enhanced privacy compliance and security header implementation to align with best practices and regulatory requirements.

I

internett GmbH

internett.de

46

internett GmbH is a German IT services company specializing in designing, building, and operating reliable IT systems, hosting, virtual office solutions, and data center services. With over 25 years of experience, they focus on free and open hardware and software, serving businesses that require distributed IT infrastructure and modern IT management platforms. The company maintains a professional and consistent online presence with a well-structured website built on WordPress and Elementor, indicating a mature digital infrastructure. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though improvements in security headers and vulnerability disclosure policies are recommended. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks cookie consent mechanisms. Overall, the website reflects a trustworthy and credible business with moderate to good technical and security maturity.

The website pixelx.de is currently inaccessible, returning a 403 Forbidden error page served by nginx. This prevents any meaningful content or business information extraction. The domain WHOIS data is limited due to DENIC's privacy policies, revealing only nameservers and a last updated date, with no registrar, creation, or expiry dates. Consequently, the business overview, market position, and key services cannot be determined. The technical infrastructure cannot be assessed beyond the presence of multiple nameservers. Security posture is weak due to lack of accessible content, absence of security headers, and no visible SSL/TLS configuration. Overall, the site appears inactive or restricted, resulting in a low trust and legitimacy score.

C

Catholic Bishops' Conference of England and Wales

cbcew.org.uk

49

The Catholic Bishops' Conference of England and Wales operates an official website providing authoritative information about the Catholic Church's activities, leadership, safeguarding, and community engagement within England and Wales. The site serves a broad audience including clergy, laity, and the general public interested in religious affairs. It offers news, events, podcasts, and educational resources, positioning itself as a trusted source for Catholic-related content in the region. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates SEO and analytics tools such as Yoast SEO and Google Analytics, reflecting a mature digital infrastructure. The site is hosted on reliable CDN services ensuring moderate to good performance and mobile responsiveness. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations including GDPR. The lack of WHOIS data for the exact subdomain queried is explained by it being a subdomain, with the main domain being legitimate and well-established. Strategic recommendations include enhancing security headers and maintaining regular updates to sustain security and compliance.

S

Stadt Frankfurt am Main

kufti.de

48

KUFTI is a cultural and leisure ticket initiative operated by the Stadt Frankfurt am Main, targeting children and youth under 18 years old. The website provides information about free or low-cost access to museums, the zoo, and cultural highlights in Frankfurt. It offers multilingual support and a newsletter subscription to keep the audience informed. The business model is a public service promoting cultural engagement among young residents and students in Frankfurt. Technically, the site is built on WordPress with modern plugins such as Yoast SEO, WPML for multilingual support, and Borlabs Cookie for privacy compliance. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response information are absent. Overall, the site is trustworthy, professional, and compliant with GDPR requirements, serving as a reliable government cultural resource.

B

büro indiebook

indiebook.de

44

büro indiebook is a small, specialized business founded in 2010 that provides representation services exclusively for independent book publishers across Germany. The company operates through three representatives covering different federal states, focusing on serving the book trade rather than private customers. The website is professionally designed using WordPress and the Avada theme, with clear navigation and relevant content tailored to its niche audience. Hosting is provided by rzone.de, and the site uses HTTPS with a moderate performance profile. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is limited, with no cookie consent mechanism detected, though a privacy policy is linked in the Impressum. Contact is primarily via email, with no phone or physical address listed on the main page. Overall, the website is trustworthy and serves its business purpose well but could improve in privacy and security transparency.

T

Till Schaap Edition GmbH

tillschaapedition.ch

49

Till Schaap Edition GmbH is a Swiss-based publishing company specializing in art, photography, and cultural history books. The company operates an e-commerce website built on Magento, targeting art enthusiasts and collectors primarily in Switzerland and German-speaking regions. The website presents a professional design with clear navigation and multilingual support (German, English, French). Technically, the site uses modern web technologies including Google Analytics and Google Tag Manager for tracking, and it enforces HTTPS for secure communications. However, it lacks advanced security headers and cookie consent mechanisms, which impacts its privacy compliance posture. No explicit security or incident response policies are published, which could be improved to enhance trust and compliance. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and consistency. The website content is safe and appropriate for a general audience.

D

Das Narr

dasnarr.ch

45

Das Narr is a Swiss literary magazine established in 2011, focusing on publishing young and fresh literary voices. The website serves as an e-commerce platform for selling magazine issues and related merchandise, and it actively engages its audience through social media channels like Instagram and Facebook. The site is built on WordPress with WooCommerce and uses modern plugins and themes to deliver a good user experience. SEO is well implemented with Yoast SEO and structured data. Security posture is adequate with HTTPS and some security best practices, though there is room for improvement in security headers and incident response transparency. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Overall, the website is professional, trustworthy, and well-positioned in its niche market.

D

Der gesunde Menschenversand GmbH

menschenversand.ch

48

Der gesunde Menschenversand GmbH operates a German-language publishing and e-commerce website focused on spoken word, slam poetry, and literary works. The company targets a niche audience interested in cultural and literary content, offering books, audiobooks, music, and event promotion. The website is professionally designed with consistent branding and clear navigation, supporting a positive user experience. The business is small-sized, based in Switzerland, and founded around 2019, with a clear market position as a specialized literary publisher. Technically, the website is built on WordPress with WooCommerce for e-commerce functionality, enhanced by Yoast SEO for search optimization. It uses modern JavaScript libraries such as jQuery and Slick Slider for UI components, and integrates Google Analytics and Mailchimp for marketing and analytics. The site is mobile-optimized and performs moderately well, though accessibility features are basic. From a security perspective, the site enforces HTTPS with excellent SSL configuration but lacks explicit security headers and a published security policy or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism implemented, which is a gap given GDPR applicability. Overall, the website is trustworthy and professional with a solid business foundation. Strategic improvements in privacy compliance and security practices would enhance its posture and user trust.

I

INSOR AG

editionmaulhelden.com

41

Edition Maulhelden is a small Swiss cultural publishing platform specializing in literary works, performances, and autobiographical writing workshops. The website is professionally designed using TYPO3 CMS and integrates multimedia content such as videos and podcasts. The business targets German-speaking literature enthusiasts and operates with a niche cultural focus. Technically, the site uses modern web technologies including jQuery, Webflow CSS, and Google Analytics with IP anonymization, but lacks some advanced security headers and cookie consent mechanisms. The domain registration is consistent with the business timeline, and no suspicious patterns were detected. Overall, the website demonstrates moderate digital maturity with room for improvement in security and privacy compliance.

V

Verlag Die Brotsuppe

diebrotsuppe.ch

42

Verlag Die Brotsuppe is a small Swiss publishing company specializing in literary works including fiction, poetry, children's books, and essays. The company actively promotes authors and organizes cultural events such as readings and festivals, targeting literary audiences primarily in Switzerland. The website reflects a focused niche publisher with a consistent brand and good content quality. Technically, the site uses jQuery and Font Awesome, with moderate performance and good mobile optimization, but lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS assumed but no visible security headers or explicit security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the site is professional and trustworthy but could improve in security and privacy compliance.

E

edition8

edition8.ch

48

edition8.ch is the online presence of a small Swiss literary publishing house focused on German-language books, author promotion, and cultural literary events. The website provides news, book information, author details, and event schedules, targeting literary readers and cultural audiences primarily in Switzerland and German-speaking regions. The business model centers on publishing and event organization with a niche market position in the literary media sector. Technically, the site uses modern frontend technologies including Tailwind CSS, Laravel Livewire, Alpine.js, and Statamic CMS, indicating a moderate level of digital maturity. The site is mobile optimized and has good navigation and content quality, though accessibility and SEO could be improved. Security posture is moderate with HTTPS usage and no visible sensitive data exposure, but lacks security headers and explicit security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism or GDPR indicators. Overall, the site is professional and trustworthy but could enhance compliance and security practices.

M

Moluna GmbH

moluna.de

49

Moluna GmbH operates www.moluna.de, a German e-commerce platform specializing in books, music, games, toys, and lifestyle products. The website offers a broad catalog with detailed categorization and targets general consumers interested in German-language media and related products. The business model combines direct online retail with affiliate marketing partnerships, leveraging trusted payment providers like Klarna. Technically, the site uses a custom e-commerce platform with modern JavaScript libraries such as jQuery and Flickity, and integrates multiple marketing and analytics tools including Google Analytics and Facebook Pixel. The website is mobile-optimized with good navigation and content quality. Security posture is solid with HTTPS enforced and use of security tokens, though security headers could be enhanced. Privacy compliance is good, featuring a cookie consent mechanism and comprehensive privacy policy. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the business.

B

Book2look International GmbH

book2look.de

46

Book2look International GmbH operates a specialized social media marketing platform focused on the book publishing industry. Their core offering is the creation of interactive book widgets called Biblets, which enable publishers, booksellers, and bloggers to showcase books with look inside features, multimedia content, and direct purchase links. The company has established a strong market presence with over 1,000 publishers worldwide, including major names, positioning itself as a key player in digital book marketing. Technically, the website is built on ASP.NET WebForms with modern JavaScript libraries and supports progressive web app features, hosted on Rackspace with HTTPS and monitoring via New Relic. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and headers could be improved. Overall, the site is professional, accessible, and trustworthy, serving a niche but global audience effectively.

S

swips.ch

swips.ch

41

swips.ch is a Swiss-based media platform dedicated to promoting independent publishers in Switzerland. The website provides book previews, publisher directories, event announcements, and downloadable brochures, targeting publishers and literary enthusiasts. The platform occupies a niche market within the Swiss publishing industry, offering curated content and fostering community engagement among independent publishers. Technically, the website is built on WordPress 5.9.2, utilizing plugins such as Document Gallery and WP Statistics for content presentation and analytics. The site is mobile-optimized with a good user experience and clear navigation. Security-wise, HTTPS is enforced, and Wordfence security scripts are present, but there is a lack of explicit security headers and formal privacy or cookie policies, indicating room for compliance improvement. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

B

büro indiebook

buero-indiebook.de

46

büro indiebook is a small, specialized agency representing independent book publishers across Germany. Founded in 2010, it operates through three regional representatives covering all federal states. The website serves as an informational portal for publishers and book trade professionals, providing contact details and publisher lists. Technically, the site is built on WordPress with the Avada theme and uses common plugins for media management and analytics. The site is hosted likely by a German provider (rzone.de) and uses HTTPS with valid SSL, ensuring secure connections. However, the site lacks advanced security headers and cookie consent mechanisms, which are important for GDPR compliance. No forms or phone contacts are present; communication is primarily via email. Overall, the site is professional and functional but could improve privacy compliance and security posture.

Quart Online is a German-language academic magazine focused on the intersection of religion, science, society, and culture. It operates primarily as a subscription-based publication offering quarterly issues and an online archive. The website is professionally designed using WordPress with a consistent brand identity and clear navigation, targeting a general audience interested in scholarly discourse on religion and related societal topics. Technically, the site employs modern web technologies and plugins, ensuring good mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks some advanced security headers and explicit incident response contacts. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and well-maintained, suitable for its niche audience.

The website www.paintingsofsungminkim.at is currently inaccessible beyond a Cloudflare security challenge page that requires human verification. Due to this, no actual business content, contact information, or policies are available for analysis. The site appears to be protected by Cloudflare's Turnstile captcha mechanism, indicating a security posture that includes bot mitigation but also limits external analysis. Without access to the underlying content, it is not possible to assess the company's market position, services, or compliance status. The lack of visible metadata, forms, or external business links further restricts insight into the site's operations. Technically, the site is hosted behind Cloudflare, leveraging their security and performance services. However, no CMS, frameworks, or additional technologies are detectable from the challenge page. The security posture cannot be fully evaluated due to the lack of accessible content and headers. No privacy or cookie policies are found, and no contact or incident response information is available. Overall, the site is currently in a blocked state for analysis, resulting in a low AI score and limited insights. For a comprehensive evaluation, access beyond the Cloudflare challenge is necessary. The current security setup suggests a focus on preventing automated access, but it also impedes transparency and trust assessment.

D

Demokratie und Respekt

demokratieundrespekt.at

49

Demokratie und Respekt is a small non-profit initiative based in Austria dedicated to defending liberal and social democracy against the rise of right-wing populist parties, specifically targeting the FPÖ under Herbert Kickl. The website serves as an informational and mobilization platform offering documentation, political education, petitions, and donation opportunities. It targets politically engaged Austrian citizens and groups concerned about democratic values. Technically, the site is built on WordPress, uses jQuery, and integrates privacy-conscious analytics via Matomo. The site is well-structured, mobile-optimized, and includes a cookie consent mechanism compliant with GDPR. Security posture is good with HTTPS enforced, but lacks some security headers and explicit security policies. No direct contact emails or phone numbers are published, which is common for advocacy platforms. Overall, the site is trustworthy and professional with a clear mission and consistent branding.

Arbeit und Leben Thüringen is a reputable non-profit educational organization focused on political youth and adult education in Thuringia, Germany. Supported by the German Trade Union Confederation and Volkshochschulen, it offers seminars, projects, and educational consulting to promote democracy, sustainability, and social participation. The website reflects a consistent brand and provides relevant content for its target audience. Technically, the site is built on Joomla CMS with MooTools, hosted by Hetzner, and uses HTTPS, but lacks some modern security headers and cookie consent mechanisms. Security posture is moderate with no critical vulnerabilities detected. Overall, the site is trustworthy and professionally maintained, though improvements in privacy compliance and security policies are recommended.

A

Arbeit und Leben Sachsen-Anhalt gGmbH

aul-lsa.de

47

Arbeit und Leben Sachsen-Anhalt gGmbH is a regional non-profit educational organization based in Magdeburg, Germany, focused on supporting individuals on their educational paths through a variety of programs including political education, workplace education, basic education, and fair employment initiatives. The organization targets adult learners, employees, and youth, offering seminars, educational leave opportunities, and events to foster personal and societal development. The website reflects a well-structured and consistent brand presence with clear navigation and regularly updated content. Technically, the site is built on WordPress with a custom theme, delivering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professional, serving its educational mission effectively.

The website arbeitundlebenmv.de currently serves a 404 error page indicating that the site is not configured or accessible. There is no visible business content, contact information, or policies available. The site is built on TYPO3 CMS and hosted via kasserver.com name servers, but it lacks proper configuration and published content. Due to the absence of accessible content, no meaningful business overview or market positioning can be determined. Technically, the site shows minimal implementation with no security headers or HTTPS status available, indicating a low digital maturity level. Security posture is weak due to lack of HTTPS and security best practices. Overall, the site is non-functional and provides no user or business value in its current state.

A

Arbeit und Leben Hessen gGmbH

aul-hessen.de

48

Arbeit und Leben Hessen gGmbH is a regional non-profit organization based in Germany focused on promoting democracy and participation through educational seminars and workshops. Their offerings target adults and young adults, including youth education, adult education, and workplace diversity programs. The website is professionally designed, well-structured, and provides comprehensive information about their services and upcoming events. Technically, the site is built on WordPress with modern plugins and uses Matomo for analytics and CookieYes for consent management, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers and policies could be improved. Privacy compliance is strong with clear GDPR-aligned policies and consent mechanisms. Overall, the site is trustworthy, transparent, and serves its educational mission effectively.

B

Bildungsgemeinschaft ARBEIT und LEBEN Bremerhaven e. V.

arbeitundleben-bhv.de

46

Arbeit und Leben Bremerhaven is a well-established non-profit educational organization based in Germany, providing a wide range of seminars, workshops, and advisory services primarily focused on workers, youth, and social participation. With over 50 years of experience, it holds a strong regional presence and cooperates with trade unions and social partners to deliver its services. The website reflects a professional and consistent brand image with clear contact information and relevant content for its target audience. Technically, the site is built on WordPress with modern plugins and frameworks such as Bootstrap, ensuring good mobile optimization and accessibility. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and incident response disclosures. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and functional, serving its educational mission effectively.

Z

Zusammen für Demokratie

zusammen-fuer-demokratie.de

41

Zusammen für Demokratie is a German non-profit coalition comprising 73 civil society organizations dedicated to defending democracy and human rights. The website serves as a platform to provide resources, campaign materials, and support for local initiatives and activists. It positions itself as a significant player in the democratic advocacy space within Germany, offering workshops, donation facilitation, and educational content. The target audience includes civil society groups, activists, and the general public interested in democratic values. Technically, the website is built on WordPress 6.8.3, utilizing common libraries such as jQuery and jQuery UI, along with plugins like Udesly WP App and Koko Analytics for analytics. Hosting is provided by agenturserver, indicated by the nameservers. The site demonstrates moderate performance with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS with excellent SSL configuration but lacks several security headers that could enhance protection. No vulnerabilities or exposed sensitive data were detected. However, the absence of a cookie consent mechanism and explicit security or incident response policies indicates room for improvement in compliance and security posture. Overall, the website is professional, trustworthy, and well-aligned with its non-profit mission. Strategic recommendations include implementing GDPR-compliant cookie consent, adding security headers, publishing a vulnerability disclosure or security.txt file, and enhancing incident response transparency to strengthen trust and compliance.

L

Landeshauptstadt Saarbrücken

saarbruecken.de

42

The website www.saarbruecken.de is the official digital portal for the city government of Saarbrücken, Germany. It serves as a comprehensive platform providing municipal services, event information, and citizen engagement tools. The site targets residents and visitors, offering access to public transport details, cultural events, administrative services, and online appointment booking. The business model is that of a government service portal, positioning itself as the authoritative source for city-related information and services.

H

Domain Default page

hdw.dev

41

The website hdw.dev currently serves as a default placeholder page generated by Plesk, a hosting control panel platform. It does not represent an active business or service but provides informational content about Plesk and related tools such as Sitejet Builder and WP Guardian. The site targets web professionals and site owners interested in hosting management solutions. Technically, the site uses basic HTML, CSS, and JavaScript with no detected CMS or advanced frameworks. The hosting environment is likely managed via Plesk. Security posture is minimal with no visible HTTPS enforcement or security headers, and no privacy or cookie policies are present. The domain WHOIS data is privacy protected, limiting trust assessment. Overall, the site is functional as a placeholder but lacks business and security maturity.

S

S optic spol. s r. o.

soptic.cz

49

S optic spol. s r. o. operates a well-established private optical retail business in Prague, Czech Republic, with over 30 years of tradition. The company offers comprehensive eye care services including eyeglasses, contact lenses, eye examinations, and repairs, targeting consumers seeking professional and personalized optical solutions. The website reflects a mature digital presence with modern technologies such as Cookiebot for consent management, Google Tag Manager for analytics, and slick interactive UI components. The business demonstrates strong customer trust through detailed team profiles and positive customer reviews. Security posture is solid with HTTPS and consent mechanisms, though explicit security headers and formal privacy policies are missing, representing areas for compliance improvement. Overall, the website is professional, user-friendly, and trustworthy, supporting the company’s market position as a leading local optical retailer.

L

Lekarnanakaterine.cz

lekarnanakaterine.cz

44

Lekarnanakaterine.cz is a small Czech website focused on health, wellness, herbal remedies, and erotic massage services. The site primarily offers informational content and blog posts targeting a general adult audience interested in these topics. It operates on the PrestaShop CMS platform and monetizes through Google Adsense advertising. The website is newly established in 2023 and uses Cloudflare DNS services with HTTPS enabled, ensuring basic security standards. However, it lacks comprehensive business contact information, terms of service, and advanced security headers, which limits its trustworthiness and compliance posture. The content includes adult-oriented themes related to sensual massage but does not contain explicit adult content, positioning it as mature content for adults. Overall, the site is functional but basic in design and technical implementation.

The website massage123.cz is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block, which prevents any meaningful content or business information from being retrieved or analyzed. The domain has been registered since 2016 and uses Cloudflare for DNS and security services. Due to the block, no privacy policies, contact information, or business details are available on the site. The technical infrastructure relies on Cloudflare's security platform, but the lack of accessible content limits the assessment of the site's digital maturity and user experience. Security posture cannot be fully evaluated; however, the presence of Cloudflare indicates some level of protection against attacks. Overall, the site presents a high risk of poor user experience and low trust due to inaccessibility and lack of transparency.