High-risk security reports

C

home - communeagence.ch

communeagence.ch

49

The website communeagence.ch represents a small communication agency focused exclusively on serving French-speaking Swiss municipalities. The business appears to be niche and specialized, targeting a specific regional audience. The website is built on WordPress using the Divi theme, incorporating modern web technologies such as Google Analytics and Google Tag Manager for tracking, with IP anonymization enabled to enhance privacy. However, the site lacks visible privacy and cookie policies, which are critical for GDPR compliance and user trust. Security posture is moderate with HTTPS enabled but missing important security headers and incident response information. Overall, the site is functional and professionally designed but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

V

Vårdföretagarna

vardforetagarna.se

48

Vårdföretagarna is a Swedish organization representing private healthcare and social care providers. The website serves as a professional platform offering advocacy, reports, news, and member services to stakeholders in the healthcare sector. The organization holds a strong market position within Sweden's private care industry, targeting healthcare providers and policymakers. Technically, the site is built on WordPress with modern plugins like Gravity Forms and Yoast SEO, ensuring good SEO and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers are missing and no explicit incident response policies are published. Overall, the site is professional, trustworthy, and compliant with GDPR, but WHOIS data for the exact domain is missing, which slightly impacts trust. Strategic improvements in security policies and transparency could enhance credibility.

K

Katholischer Akademiker/innenverband der Erzdiözese Wien

kav-wien.at

49

KAV Wien is a small non-profit organization affiliated with the Catholic Archdiocese of Vienna, focused on fostering dialogue between faith, science, and various religions through cultural and educational events. The website presents a professional and consistent brand image, targeting academics and religious communities in Austria. Technically, the site is built on Joomla CMS with common web technologies and provides a moderate performance and good mobile optimization. Security posture is adequate with HTTPS and CSRF protections but lacks advanced security headers and incident response disclosures. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and safe for general audiences.

K

Katholische Jugend Österreich

kjweb.at

42

Katholische Jugend Österreich is a prominent non-profit youth organization affiliated with the Roman Catholic Church in Austria. It focuses on engaging young people through church-related social projects, educational programs, and advocacy. The organization holds a strong market position as the leading Catholic youth body in Austria, offering key services such as social action campaigns, liturgical materials, and festival pastoral care. The website reflects a professional and consistent brand image targeting young Austrians involved in church activities. Technically, the website is built on WordPress with modern plugins like Yoast SEO and Matomo Analytics, ensuring good SEO and privacy-respecting analytics. The site is mobile-optimized and uses Bootstrap for responsive design. Performance is moderate with room for improvement in accessibility and security headers. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and a cookie consent mechanism indicates areas for enhancement. Privacy compliance is strong with a comprehensive privacy policy and GDPR adherence, though cookie consent could be improved. Overall, the website is trustworthy, well-maintained, and aligned with its organizational mission. Strategic improvements in security policies, cookie management, and accessibility would further strengthen its digital maturity and compliance.

The Katholische Männerbewegung der Erzdiözese Wien is a small non-profit religious organization focused on men's spiritual engagement and community activities within the Vienna region. Their website serves as a portal for event announcements, spiritual resources, and organizational information, targeting men and families interested in faith-based activities. The site is built on WordPress using the Customizr theme and incorporates modern JavaScript libraries such as jQuery and Modernizr, indicating a moderate level of technical maturity. Performance and mobile optimization are adequate, with good navigation and content relevance. Security posture is acceptable with HTTPS enabled, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy and professional, supporting the organization's mission effectively.

G

greenants. Mosbach, Mosbach GbR

greenants.de

46

greenants. Mosbach, Mosbach GbR is a small-sized full-service internet agency based in Germany, specializing in digital transformation consulting, TYPO3 CMS development, e-commerce solutions, and online marketing services. The company targets businesses seeking to leverage digital opportunities and improve their online presence through tailored strategies and technical implementations. Their website demonstrates a professional and consistent brand image with comprehensive service descriptions and client references, positioning them as a trusted regional player in the technology sector. Technically, the website is built on TYPO3 CMS, integrates modern marketing and analytics tools such as Google Analytics and Facebook Pixel, and employs Cookiebot for GDPR-compliant cookie management. Hosting appears to be provided by a reputable provider (kasserver.com). The site is mobile-optimized with good SEO practices, though accessibility features are basic. Performance is moderate, with room for improvement in security headers and explicit incident response policies. From a security perspective, the site uses HTTPS with anonymized IP tracking for analytics and enforces cookie consent. However, no explicit security policies or incident response contacts are published. No critical vulnerabilities or exposed sensitive data were detected. The domain registration data aligns well with the website's business identity, supporting legitimacy and trustworthiness. Overall, greenants.de presents a secure, professional, and GDPR-compliant digital presence suitable for its business model. Strategic improvements in security headers, incident response transparency, and accessibility could further enhance its posture and trustworthiness.

T

TGZ Halle Technologie- und Gründerzentrum Halle GmbH & Bio-Zentrum Halle GmbH

weinberg-campus.de

47

The Weinberg Campus - Technologiepark website represents a well-established technology and innovation hub located in Halle, Germany. The organization supports startups, researchers, and companies primarily in the fields of Digital Health and Smart Green Technology by providing infrastructure, advisory services, and networking opportunities. The website is professionally designed, content-rich, and targets a broad audience including entrepreneurs, investors, and the regional business community. Technically, the site is built on Drupal CMS, hosted by Alfahosting, and employs modern web technologies such as Matomo for analytics and CookiesJSR for cookie consent management. Security posture is solid with HTTPS enforced and privacy compliance mechanisms in place, although some advanced security headers and explicit security policies are absent. Overall, the site is trustworthy, accessible, and compliant with GDPR requirements, making it a credible digital presence for the organization.

E

Evidence

evidence.io

49

Evidence.io is a US-based SaaS company founded in 2018 that provides real-time social proof notification services designed to boost conversions and sales for marketers, e-commerce businesses, SaaS companies, agencies, and booking services. The platform integrates with popular tools such as Zapier, WordPress, Shopify, and others, positioning itself as a leading solution in social proof marketing. The website is professionally designed, mobile-optimized, and offers a free 14-day trial to attract users. Technically, the site is built on WordPress using Oxygen Builder, with a modern tech stack including various marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Inspectlet. Hosting is via AWS, ensuring reliable infrastructure. Security posture is solid with HTTPS enforced and domain transfer protection, though DNSSEC is not enabled and security headers are missing, which are recommended improvements. Privacy compliance is basic with a privacy policy and GDPR compliance badge present, but no cookie consent mechanism detected. Overall, the site is trustworthy, with consistent WHOIS data and clear business contact information. Strategic recommendations include enhancing DNS security, adding security headers, and improving privacy compliance mechanisms.

C

Club of Rome

thefifthelement.earth

49

The Fifth Element website represents the Club of Rome, a well-known non-profit organization based in Switzerland. The site appears to be a recent initiative launched in 2023, focusing on advocacy and awareness likely related to sustainability or global challenges. The website is built on WordPress using the Divi theme, with standard SEO and analytics tools such as Yoast SEO and Google Analytics integrated via MonsterInsights and Google Tag Manager. Cookie consent is managed through CookieYes and Cookie Law Info plugins, indicating a basic level of privacy compliance. However, explicit privacy policies, terms of service, and contact information are not found, which could be improved to enhance transparency and compliance. The domain registration details are consistent with the organization, registered with EuroDNS SA and protected against unauthorized transfers. No WAF or blocking mechanisms are detected, and the site content is accessible and professional.

C

Corporate Watch

corporatewatch.org

48

Corporate Watch is a UK-based non-profit media organization established in 1996, specializing in investigative journalism and research focused on corporate power, social justice, and environmental issues. The organization provides publications, training, and activist support, positioning itself as a niche player in the media sector dedicated to corporate accountability. The website is built on WordPress with WooCommerce integration for sales and donations, utilizing modern web technologies including Matomo for analytics and OpenPGP.js for secure communications. The site demonstrates good design quality, clear navigation, and mobile optimization, serving a target audience of activists, researchers, and socially conscious individuals. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, though improvements are recommended such as enabling DNSSEC and adding security headers. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Overall, the website is trustworthy and professional, with clear contact information and recognized media certifications.

C

Creative3Studio

creative3studio.com

47

Creative3Studio is a small IT services company based in India, specializing in WordPress design, website development, graphic design, ecommerce solutions, PHP development, mobile development, and online marketing. The company targets businesses and individuals seeking comprehensive digital solutions. The website is built on WordPress using the Astra theme and Elementor page builder, indicating a modern and flexible technical infrastructure. The site is mobile optimized and uses standard web technologies including jQuery and FontAwesome. Security posture is good with HTTPS enforced and use of Google reCAPTCHA on forms, but lacks advanced security headers and published security policies. The absence of WHOIS data and privacy/cookie policies are notable gaps that reduce overall trust and compliance. Contact information is clearly presented, and social media presence is active on Facebook, Twitter, and LinkedIn. Overall, the website is professional and functional but would benefit from enhanced privacy compliance and security transparency.

W

WeMove Europe

wemove.eu

48

WeMove Europe is a well-established non-profit organization focused on social and environmental activism across Europe. The website serves as a community hub for campaigns, petitions, and advocacy efforts aimed at transforming Europe for the benefit of people, future generations, and the planet. The organization leverages digital platforms to mobilize citizens and influence policy. Technically, the website is built on modern frameworks such as Next.js and React, with integrations for analytics (Matomo), cookie consent (Cookiebot), and secure payment processing (PayPal and Stripe). The site demonstrates good performance, mobile optimization, and accessibility standards. Security posture is strong with HTTPS, security headers, and anti-bot measures like Google reCAPTCHA Enterprise. However, explicit security policies and incident response contacts are not publicly disclosed, representing an area for improvement. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a credible platform for its mission.

T

Themes Camp

themescamp.com

49

Themes Camp is a small technology business specializing in the development and sale of professional WordPress themes and web templates. Their website targets website managers and developers seeking easy-to-use, customizable themes without coding. The company has a moderate market presence with over 12,500 users and partnerships with major platforms like Elementor and ThemeForest. Technically, the website is built on WordPress using Elementor and several plugins, with good SEO and mobile optimization. Security posture is solid with HTTPS and asynchronous loading of analytics scripts, but lacks some security headers and published policies. The absence of WHOIS data raises legitimacy concerns, though the website content and branding appear professional. Contact is available via a form but lacks direct emails or phone numbers. Privacy and cookie policies are not found, indicating compliance gaps. Overall, the site is functional and trustworthy but would benefit from enhanced transparency and security documentation.

L

La Guida Nomade

laguidanomade.it

46

La Guida Nomade is an Italian online portal dedicated to conscious travelers seeking wellness, artisanal, agricultural, commercial, and tourism experiences that respect health, life, and the environment. The website serves as a niche directory and content platform, positioning itself as a reference point for sustainable and mindful travel in Italy. The business is small-sized, founded around 2018, and operates under the parent project La Grande Via. The portal offers categorized listings, blog content, and a contact form to engage users. Technically, the website is built on WordPress with WooCommerce for product listings, enhanced by popular plugins such as Yoast SEO, Revolution Slider, and WPBakery Page Builder. It uses modern web technologies including Google Analytics for tracking, Google Fonts, and FontAwesome icons. The site is moderately optimized for performance and mobile devices, with good SEO practices and structured data implemented. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA for form protection. However, it lacks explicit security headers like a full Content-Security-Policy and does not publish a security policy or incident response contacts. Privacy compliance is basic, with no visible privacy or cookie policies or consent mechanisms, which is a gap given GDPR requirements. Overall, the website is accessible, professionally designed, and content-rich, targeting a general audience interested in sustainable travel and lifestyle. The security posture is adequate but can be improved with better policy disclosures and headers. The domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

The website demeter.it is currently serving a security challenge page powered by BitNinja, which blocks access until the visitor completes a CAPTCHA validation. This indicates that the site or its visitors have triggered security mechanisms likely due to suspicious or automated traffic. The page content is minimal and focused solely on security verification, with no direct business or service information accessible. The domain is well-established, created in 2000, and DNSSEC is enabled, suggesting legitimate domain registration. However, the lack of visible business content, contact information, or privacy policies limits the ability to assess the company's market position or credibility. Technically, the site uses AngularJS and jQuery to render the challenge page, but no modern SEO or accessibility features are evident. Security posture is moderate due to the presence of DNSSEC and domain status OK, but the absence of security headers and policies is noted. Overall, the site is currently inaccessible for normal browsing, resulting in a low AI score and limited analysis capability.

WInTO GmbH is a regional government-related company focused on economic, innovation, and tourism promotion in the Oberhavel region of Germany. The website primarily serves as an imprint (Impressum) page providing legal and contact information. The business operates in the government sector with a small organizational size and targets local businesses and stakeholders interested in regional development. The website content is minimal and professional but lacks comprehensive privacy, cookie, and security policies, which are important for compliance and trust. Technically, the website uses basic HTML and CSS with no detected CMS or advanced frameworks. Hosting appears to be on generic servers indicated by the nameservers. The site shows basic mobile optimization and accessibility but lacks SEO optimization and security headers. No analytics or tracking scripts are present, indicating minimal user tracking. From a security perspective, the site uses HTTPS (assumed but not explicitly confirmed), but no security headers or incident response contacts are provided. There are no forms or user input fields, reducing attack surface. However, the absence of privacy and cookie policies is a compliance gap under GDPR. WHOIS data is partially consistent but lacks detailed registrant information, slightly reducing trustworthiness. Overall, the website is safe and professional but basic in content and technical sophistication. Strategic improvements in privacy compliance, security headers, and SEO would enhance trust and digital maturity.

R

Romantik Hotel Gebhards

gebhardshotel.de

43

Romantik Hotel Gebhards is a historic hospitality business located in Göttingen, Germany, offering accommodation, event hosting, and dining services. The website reflects a well-established brand with a focus on guest experience and local tourism. The business targets tourists, business travelers, and event organizers, positioning itself as a premium local hotel with a strong reputation. Technically, the site is built on Silverstripe CMS and integrates multiple booking engines, showing a moderate level of digital maturity. The site is mobile optimized and uses modern tracking and consent tools such as Google Tag Manager and Cookiebot. Security posture is adequate with HTTPS and consent mechanisms in place, but lacks explicit security headers and published security policies. Privacy compliance is partial, with cookie consent but no visible privacy or terms pages. Overall, the site is professional and trustworthy with room for improvement in security and compliance documentation.

V

Velo Voss

velo-voss.de

43

Velo Voss is a small, established bicycle retailer located in Göttingen, Germany, specializing in high-quality e-bikes and bicycles. The company offers personalized consultation, repair services, bike leasing options, and training opportunities. They are a Bosch-certified eBike expert, which enhances their credibility and market position. The website is professionally designed with good content quality, clear navigation, and mobile optimization. Technically, it is built on WordPress with modern plugins and SEO tools, hosted on a German hosting provider. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the website reflects a trustworthy and professional local business with a clear focus on customer service and quality products.

A

AKB Stiftung

akb-stiftung.de

42

The AKB Stiftung website represents a small, regional non-profit foundation with a family heritage focus. The site content is minimal but clearly communicates the foundation's regional engagement and mission. The business model is typical for a non-profit foundation, relying on regional initiatives and likely donations or grants. The market position is niche and localized, with no evident commercial activities or services offered online. Technically, the website is built on WordPress using the Enfold theme and several plugins including Slider Revolution and MediaElement.js. The site is served over HTTPS, indicating a basic level of security. However, the technical implementation is basic with limited mobile optimization and no advanced SEO or accessibility features detected. The site lacks privacy and cookie policies, which is a compliance gap. From a security perspective, the site has HTTPS enabled but lacks security headers and does not disclose any security or incident response policies. There are no visible vulnerabilities or exposed sensitive data, but the absence of security best practices and policies suggests room for improvement. No analytics or tracking scripts are present, indicating minimal user tracking. Overall, the website is safe and appropriate for a general audience, with no adult or questionable content. The lack of contact information and compliance documentation reduces trust and business credibility. Strategic improvements in privacy compliance, security headers, and contact transparency are recommended to enhance trust and compliance.

V

VGH Stiftung

vgh-stiftung.de

44

VGH Stiftung is a medium-sized non-profit foundation based in Germany, focusing on cultural education, literature, monument preservation, and scientific research. The foundation supports various projects and events primarily in northern Germany, including literary festivals, educational workshops, and scientific awards. The website reflects a professional and consistent brand image with a clear focus on its cultural mission. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Borlabs Cookie for cookie consent management. The site is mobile-optimized and uses HTTPS, ensuring secure communications. However, there is a lack of explicit privacy policy and terms of service pages, which impacts privacy compliance ratings. Security headers are not detected, suggesting room for improvement in security hardening. No direct contact information or incident response contacts are visible, which could affect user trust and compliance. Overall, the website is well-structured and trustworthy but would benefit from enhanced privacy and security disclosures.

Arbeit und Kultur Saarland gGmbH is a well-established non-profit organization dedicated to supporting cultural actors and projects in the Saarland region of Germany. The organization provides advisory services, project initiation, funding, and networking opportunities to foster a vibrant cultural scene. Their website reflects a professional and consistent brand presence with a focus on cultural events and community engagement. Technically, the site is built on the ProcessWire CMS with modern frameworks like UIkit and includes cookie consent mechanisms to comply with GDPR. Security posture is moderate with HTTPS usage and cookie consent but lacks visible advanced security headers or incident response policies. The domain registration data is minimal but consistent with a non-profit hosted on generic servers. Overall, the website is trustworthy, safe, and well-suited for its target audience.

The Gesellschaft für Medienförderung Saarland – Saarland Medien – mbH is a regional media promotion company based in Saarland, Germany, focusing on supporting film, games, and media location development. The website clearly communicates its business focus and upcoming liquidation status effective January 1, 2025. The target audience includes media professionals, filmmakers, game developers, and regional stakeholders. The business operates primarily as a public sector entity providing funding, networking, and promotional services within the media industry. Technically, the website is built on WordPress using Visual Composer, Bootstrap 4, and several common plugins such as Events Manager and Contact Form 7. The site is served over HTTPS with good SSL configuration, though it lacks advanced security headers and cookie consent mechanisms. Performance and mobile optimization are moderate to good, with basic accessibility and SEO features. From a security perspective, the site employs HTTPS and some security plugins but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy policy present but no cookie consent banner. Overall, the website is professional, trustworthy, and suitable for its business purpose, though improvements in security headers, privacy compliance, and incident response transparency are recommended to enhance its security posture and regulatory adherence.

The website www.saarland.de is currently inaccessible due to a 403 Forbidden error page indicating that a security service or WAF is blocking access. The page content is minimal and only displays a block message without any business or contact information. The domain appears to be a legitimate German government domain based on its .de TLD and nameservers pointing to teresto.net, likely a hosting or DNS provider. However, the lack of accessible content prevents a full assessment of the website's business model, services, or compliance posture. Technically, the site uses basic CSS and font resources but no advanced frameworks or analytics are detected. Security headers and SSL configuration cannot be evaluated due to the block. Overall, the site’s security posture is unclear but the presence of a WAF indicates some level of protection. Privacy and compliance documentation are absent from the accessible content.

CCTV News Content Co., Ltd. operates www.cctvplus.com as a global international video agency specializing in news video content, live streaming, archives, and special video services. The company targets media professionals, broadcasters, and international audiences interested in comprehensive news coverage, particularly related to China and global affairs. Their business model revolves around content provision and distribution with subscription and service offerings such as AI speech translation and virtual studio services. The website reflects a medium-sized media entity with consistent branding and professional content quality.

Katholische Jungschar Südtirols is the largest children's organization in South Tyrol, Italy, serving over 9,500 children with more than 350 groups and 2,200 group leaders. The organization provides a wide range of services including annual programs, courses, campsites, and media resources aimed at children and youth. Their market position is strong within the regional non-profit sector focused on youth development. Technically, the website is built on WordPress with modern plugins and frameworks, offering good mobile optimization and SEO. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms in place, though explicit security policies and incident response contacts are absent. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

K

Katholische Jungschar Österreichs

kaleidio.at

47

The website kaleidio.at represents a well-established non-profit organization, the Katholische Jungschar Österreichs, focused on organizing large-scale children's summer camps and community events in Austria and South Tyrol. It serves a broad audience of children and families, emphasizing child protection, community engagement, and pastoral care. The site is professionally designed with consistent branding and clear navigation, supporting its position as a leading event organizer in its sector. Technically, the site is built on TYPO3 CMS and leverages modern JavaScript libraries such as jQuery and Leaflet.js for interactive features. It integrates a GDPR-compliant cookie consent mechanism via the TRUENDO Privacy Center and uses Google Analytics with IP anonymization. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be improved. From a security perspective, the site uses HTTPS with anonymized analytics but lacks explicit security headers and publicly available incident response or vulnerability disclosure policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear privacy and cookie policies in German. Contact information is limited to an email address, with no phone or physical address explicitly provided. Overall, kaleidio.at is a trustworthy and professionally managed website for a non-profit organization with a clear mission and community focus. Strategic improvements in security headers, incident response transparency, and expanded contact details would enhance its security posture and user trust.

D

Dreikönigsaktion der Katholischen Jungschar Österreichs

kinderarbeitstoppen.at

47

The website www.kinderarbeitstoppen.at is a well-structured non-profit advocacy platform operated by Dreikönigsaktion der Katholischen Jungschar Österreichs, focused on combating child labor globally through awareness campaigns, educational materials, and political advocacy for supply chain legislation. The site targets a broad audience including activists, educators, and policymakers, positioning itself as a trusted voice in child labor issues within Austria and Europe. Technically, the site is built on TYPO3 CMS, leveraging modern JavaScript libraries and privacy-conscious analytics tools such as Matomo, alongside Google Tag Manager and Facebook Pixel for marketing and tracking. The presence of a comprehensive cookie consent mechanism and GDPR-compliant privacy policy reflects a mature approach to privacy and compliance. Security posture is strong with HTTPS enforced and no evident vulnerabilities, though some security headers could be improved. Overall, the site demonstrates good digital maturity and professionalism, with clear contact information and active social media engagement. The domain registration data aligns well with the website's claims, supporting legitimacy and trustworthiness.

The website jungscharshop.at is an e-commerce platform operated by the Catholic Jungschar organization in Austria, offering religious educational materials, games, and gifts targeted at youth groups and church communities. The site serves a niche market within the non-profit religious sector, focusing on supporting youth work through product sales. The technical infrastructure uses Bootstrap, jQuery, and Google Analytics, with basic mobile optimization and accessibility features. While the site is functional and professionally designed, some backend PHP warnings are visible, indicating code quality issues that could pose security risks. Cookie consent and privacy policies are implemented, reflecting GDPR compliance awareness, but explicit security policies and incident response information are absent. Overall, the site is moderately secure and trustworthy but would benefit from technical and security improvements.

C

Caritas Österreich

aufrunden.at

48

The website 'Aufrunden, bitte.' is a charitable initiative operated by Caritas Österreich in partnership with major Austrian retail chains such as BILLA, PENNY, BIPA, and SUTTERLÜTY. It enables customers to round up their purchase amounts to support social projects for disadvantaged people in Austria. The initiative has been active since 2013 and has collected significant donations, demonstrating strong market presence and community engagement. The website content is well-structured, professionally designed, and targets Austrian consumers with clear calls to action and informative content about the initiative and its impact. Technically, the website uses a modern tech stack including Bootstrap for responsive design, jQuery for interactivity, and integrates Google Analytics and Facebook SDK for tracking and social media engagement. The site is mobile optimized and SEO friendly, although some accessibility features could be improved. Security practices include anonymized IP tracking and a cookie consent banner, but there is a lack of explicit security headers and no published security or incident response policies. From a security perspective, the site is accessible without WAF blocking and shows no signs of vulnerabilities or exposed sensitive data. However, it lacks advanced security policies and vulnerability disclosure mechanisms. The WHOIS data confirms the domain is legitimately registered to Caritas Österreich with consistent registration details and domain age matching the initiative's history. Overall, the website is trustworthy, professionally maintained, and compliant with basic privacy regulations. Strategic improvements in security headers, incident response transparency, and vulnerability disclosure would enhance its security posture and user trust.

Y

youngCaritas Österreichweit

youngcaritas.at

41

youngCaritas Österreichweit is a non-profit organization focused on youth engagement in social actions and workshops across Austria. The website serves as a national platform to promote various campaigns, workshops, and youth participation initiatives aimed at helping people in need. The organization targets children, youth, teachers, and multipliers with a clear mission to facilitate social responsibility and community involvement. Technically, the website is built on WordPress with modern plugins for SEO, cookie management, and social sharing, demonstrating a moderate to good level of digital maturity. The site is mobile optimized and uses HTTPS with standard security headers, reflecting a good security posture. However, explicit privacy and terms of service pages were not found in the provided content, indicating room for improvement in compliance documentation. Overall, the website is professional, trustworthy, and safe for general audiences.

U

Universitätsklinikum Leipzig

wirsindukl.de

47

The website 'wirsindukl.de' serves as the official recruitment portal for Universitätsklinikum Leipzig, the largest hospital in Leipzig, Germany. It provides comprehensive information about job opportunities, benefits, career development, and international recruitment. The site targets healthcare professionals and applicants seeking employment or training in medical and administrative fields. The business is well-positioned in the healthcare sector with recognized certifications and a strong employer brand. Technically, the site is built on GravCMS, uses modern JavaScript libraries like jQuery and Swiper.js, and implements GDPR-compliant cookie consent mechanisms. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is good with HTTPS enforced and secure forms, though it lacks explicit security policy and incident response information. Overall, the site is professional, trustworthy, and compliant with privacy regulations, making it a reliable resource for prospective employees.

N

nd - Journalismus von links

dasnd.de

49

nd-aktuell.de is a German left-wing political news media website operated under a cooperative business model. It offers news articles, podcasts, newsletters, and subscription services targeting politically engaged readers interested in progressive perspectives on politics, society, culture, and sports. The website is well-branded, professionally designed, and provides rich content with clear navigation and multiple engagement channels including social media and donation options. Technically, the site runs on a custom CMS (KONTEXT-CMS) with legacy jQuery and modern consent management tools, hosted by SINMA. It uses Matomo analytics for privacy-friendly tracking and implements GDPR-compliant cookie consent. Security posture is good with HTTPS enforced, but lacks explicit security headers and published security policies. Contact information is primarily via web forms and cooperative site links, with no direct emails or phone numbers found. Advertising is present but limited to programmatic ads and Facebook Pixel tracking. Overall, the site is trustworthy, safe, and well-positioned in its niche media market.

B

Berlin Partner

berlin-partner.de

47

Berlin Partner is a government-affiliated economic and technology promotion agency focused on supporting business growth, innovation, and investment in Berlin. The organization provides tailored business services, networking opportunities, and consulting to companies, investors, and scientific institutions in one of Germany's most dynamic economic regions. The website reflects a professional and consistent brand presence with multilingual support and a focus on accessibility and user experience. Technically, the site is built on TYPO3 CMS, hosted on Colt infrastructure, and employs modern frontend technologies including jQuery and Flexslider. Privacy compliance is addressed through an embedded consent manager and a comprehensive privacy policy. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though additional security headers and published policies could enhance trust. Overall, the website is well-maintained, trustworthy, and serves its target audience effectively.

C

Centre for the New Midlands CIC

thenewmidlands.org.uk

48

The Centre for the New Midlands CIC operates as an independent, not-for-profit think tank dedicated to generating and sharing innovative ideas to address social and economic challenges in the West Midlands region. The organization engages with residents and partners to foster evidence-based research and regional collaboration. Their digital presence is built on a modern WordPress infrastructure with a professional design and clear navigation, supporting their mission through events, reports, and thought leadership content. However, the absence of privacy and cookie policies, as well as missing WHOIS data, slightly detracts from their overall digital maturity and trustworthiness. Security posture is solid with HTTPS and no visible vulnerabilities, but could be improved with enhanced security headers and published policies. Overall, the website effectively supports the organization's goals but would benefit from improved compliance and transparency measures.

The website wme-expo.com is currently inaccessible due to a security robot challenge screen implementing a proof-of-work CAPTCHA. This indicates the presence of a Web Application Firewall (WAF) or similar security mechanism blocking direct access to the site content. As a result, no meaningful business or contact information is available on the page. The domain is registered with Register SPA since 2021, with no privacy protection and no DNSSEC enabled. The site uses AWS Cloudfront CDN for hosting some assets. The technical infrastructure includes modern JavaScript features and Web Workers for the CAPTCHA challenge, but no CMS or frameworks are detected. Security posture is minimal but includes a custom CAPTCHA challenge to mitigate automated access. Privacy and cookie policies are absent, and no contact or incident response information is provided. Overall, the site is not currently accessible for full analysis, limiting the ability to assess business credibility or compliance.

I

ICM

icm.ch

48

ICM AG is an established Swiss company specializing in organizing international congresses focused on circular economy, particularly in vehicle, electronics, and battery recycling sectors. The company positions itself as a leader in this niche, providing a platform for industry experts and decision makers to network and share knowledge. The website reflects a professional and consistent brand image with good content quality and multilingual support. Technically, the site is built on WordPress with modern plugins and optimization tools, ensuring good performance and mobile responsiveness. Security posture is solid with HTTPS and basic security practices, though there is room for improvement in security headers and explicit security policies. Privacy compliance is partially addressed with cookie consent but lacks a dedicated privacy policy page. Overall, the site is trustworthy and well-maintained, supporting the company's business model effectively.

V

vıvis Konferenzen - TK Verlag

vivis.de

40

vivis.de is a professional website representing 'vıvis Konferenzen - TK Verlag', a small-sized German company specializing in organizing conferences and publishing related to waste management and environmental technology. With a history spanning approximately 50 years, the company holds a reputable position in the energy and environmental sector, offering specialized conferences and high-quality publications. The website is well-structured, content-rich, and targets professionals and stakeholders in the circular economy and environmental technology fields. Technically, the site is built on WordPress using modern tools like Elementor and Astra theme, with Google Tag Manager integrated for analytics. Security posture is adequate with HTTPS enabled, but lacks explicit security headers and cookie consent mechanisms, which are recommended for GDPR compliance. No blocking or WAF interference was detected, allowing full content accessibility. Overall, the site demonstrates good business credibility and technical maturity, though improvements in privacy compliance and security best practices are advised.

H

HAMMEL Recyclingtechnik GmbH

hammel.de

39

HAMMEL Recyclingtechnik GmbH is a German-based manufacturer specializing in recycling and shredding machinery, serving industrial clients and waste management sectors. The company offers a range of products including primary and secondary shredders, screening and sorting technology, processing plants, and services such as used equipment sales, rentals, and transportation. The website reflects an established medium-sized business with international reach and multilingual support. Technically, the site is built on Joomla CMS with Gantry 5 framework and uses popular plugins like Revolution Slider. The hosting is provided by kasserver.com, and the site uses HTTPS with good SSL configuration. Security posture is moderate but could be improved by implementing security headers and publishing security policies. Privacy compliance is limited, lacking cookie consent mechanisms and GDPR indicators. Overall, the website is professional, well-branded, and trustworthy, though it would benefit from enhanced privacy and security practices.

T

TKH Security SRL

tkhsecurity.it

45

TKH Security SRL is a medium-sized Italian company specializing in intelligent electronic security systems, including video surveillance, access control, intrusion detection, and fire protection, with a focus on vertical markets such as transportation, energy, hospitality, and public infrastructure. The company operates primarily through distributors, system integrators, and qualified installers, leveraging over 25 years of experience and being part of the TKH Group N.V. The website reflects a professional digital presence with comprehensive product and solution offerings, supported by downloadable corporate reports and brochures. Technically, the site uses a Magento-based platform with modern JavaScript libraries and integrates cookie consent management and analytics tools, ensuring GDPR compliance. Security posture is solid with HTTPS and DNSSEC enabled, though some security headers could be improved. The domain registration data aligns well with the business claims, enhancing trustworthiness. Overall, the company presents a credible and professional image in the security technology sector.

The website bettinivideo.com is currently inaccessible beyond a security check page that performs a browser integrity test and automatic redirect. The visible content is minimal and primarily serves as a gatekeeper, indicating the presence of a Web Application Firewall or similar security mechanism, likely BitNinja as referenced by the external link. The site appears to be running outdated CMS platforms (Joomla 1.5 and WordPress 2.5), which are no longer supported and pose significant security risks. No business, contact, or policy information is available on the accessible page, limiting the ability to assess the company's market position or services. The technical infrastructure shows signs of legacy technology with poor mobile optimization and accessibility.

The website aylook.com currently serves a robot challenge screen designed to verify that visitors are human before granting access. This challenge uses a client-side JavaScript proof-of-work captcha mechanism, indicating the presence of a Web Application Firewall (WAF) or anti-bot protection layer. Due to this blocking, no actual business content, contact information, or policies are accessible for analysis. The page is minimalistic, with no metadata, forms, or SEO elements, and relies on AWS Cloudfront CDN for hosting static assets. The lack of visible security headers and privacy policies suggests limited compliance and security posture visibility. Overall, the site is inaccessible for meaningful content or business evaluation in its current state.

P

Pierre Schilling

pierreschilling.cool

48

Pierre Schilling is an independent artist and designer specializing in web design, comics, graphic design, and illustration. The website serves as a professional portfolio showcasing his projects, exhibitions, and publications. The site targets art enthusiasts and potential clients seeking creative services. The business model is that of a creative professional presenting work and attracting commissions or collaborations. The website is built on WordPress, using modern web technologies including lazy loading and SVG graphics, providing a good user experience with responsive design. However, some technical aspects such as security headers and privacy compliance are lacking. The security posture is moderate with HTTPS enabled but missing advanced headers and policies. No privacy or cookie policies were found, indicating potential GDPR compliance gaps. Overall, the website is trustworthy and professional but could improve in privacy and security best practices.

M

Musikschule der Seegemeinden

musikschule-seegemeinden.ch

48

The Musikschule der Seegemeinden website represents a local Swiss music school serving the municipalities of Weggis, Vitznau, and Greppen. It offers a variety of music education services including instrumental lessons, singing, ensembles, and youth and adult education. The institution is supported by the local municipalities and targets children, youth, and adults residing in these areas. The website is built on TYPO3 CMS and uses modern web technologies such as jQuery and Google Analytics. The design is professional and mobile-optimized, providing a good user experience with clear navigation and relevant content focused on music education. However, the site lacks visible privacy and cookie policies, which impacts GDPR compliance and user trust.

G

Gwärb Weggis

gwaerb-weggis.ch

46

Gwärb Weggis is a local business association website serving the Weggis community in Switzerland. It promotes regional businesses, provides a member directory, event information, and sells gift vouchers redeemable at member businesses. The website is built on WordPress using Elementor and several Jet plugins, indicating a modern and flexible technical infrastructure. The site is well-branded and consistent, targeting local residents and visitors interested in supporting local commerce. Security posture is adequate with HTTPS and security headers in place, but lacks explicit privacy and security policies. The site uses Google Analytics for visitor tracking but does not provide cookie consent mechanisms, which is a compliance gap. Overall, the website is professional and trustworthy but could improve privacy compliance and security transparency.

Z

ZoomDesign

zoomdesign.ch

48

ZoomDesign is a Swiss agency specializing in design, web development, and communication services based in Geneva. The website presents a professional image with a modern tech stack including Vue.js and popular JavaScript libraries, indicating a contemporary digital infrastructure. However, the site lacks explicit privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security posture is moderate with no visible security headers or incident response information, and no vulnerability disclosure mechanisms are present. Overall, the site is functional and professional but would benefit from enhanced privacy and security features to improve compliance and trustworthiness.

Glassdoor is a prominent technology company offering an online platform for job seekers and employers, focusing on job listings, company reviews, and salary information. The website analyzed is the German localized domain (glassdoor.de), currently presenting a Cloudflare security challenge page that blocks direct content access. This indicates the use of advanced security measures to protect against bots and malicious traffic. The technical infrastructure leverages Cloudflare services including Turnstile CAPTCHA and Google Analytics for traffic analysis. However, the current page lacks visible privacy, cookie, or terms of service policies, and no contact or security incident response information is provided on this challenge page. The security posture is difficult to fully assess due to content blocking, but the use of Cloudflare suggests a baseline of security best practices. Overall, the site is legitimate and consistent with the Glassdoor brand but limited in accessible content for full analysis.

B

Bixa TechnoConsulting

bixa.cc

49

Bixa TechnoConsulting is a small German technology consulting company specializing in IT services such as virtualization, server migration, Drupal hosting, and Microsoft Exchange Server consulting. The website serves as a technical blog and service portal targeting IT professionals and businesses seeking specialized IT consulting. The company positions itself as a niche provider with expertise in Linux, Drupal, and Microsoft technologies. Technically, the website is built on Drupal CMS with jQuery and integrates Google Analytics for visitor tracking. The site is accessible over HTTPS but lacks modern security headers and explicit privacy or cookie policies, indicating room for improvement in security and compliance. The content is primarily technical and professional, with no adult or questionable material detected. Overall, the website demonstrates moderate digital maturity with basic mobile optimization and accessibility features. Security posture is average due to missing headers and lack of explicit incident response or security policies. The domain uses privacy protection for WHOIS data, which is common for small consultancies but limits transparency. Strategic recommendations include implementing security headers, adding privacy and cookie policies, improving contact information visibility, and enhancing compliance with GDPR requirements.

H

Haus der Sprachmittlung

haus-der-sprachmittlung.de

49

Haus der Sprachmittlung is a non-profit organization based in Rheinland-Pfalz, Germany, focused on advancing and professionalizing language mediation services. Operating under the umbrella of Arbeit und Leben gGmbH and commissioned by the Ministry for Family, Women, Culture and Integration (MFFKI), it provides resources, events, and software to support qualified language mediators and stakeholders in the social sector. The website is well-structured, professionally designed, and targets various actors involved in language mediation including mediators, clients, and commissioning bodies. Technically, the site is built on TYPO3 CMS with embedded Vimeo videos and uses an outdated jQuery version, which presents a security concern. The hosting is via a reputable German provider, Schlund Technologies. Security posture is moderate with HTTPS enabled but lacking visible security headers and modern JavaScript libraries. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism detected. Contact information is clear and trustworthy, enhancing business credibility. Overall, the site is a reliable resource for language mediation in the region with room for technical and security improvements.

The website 2025.mdcies.ch appears to be a small-scale or private site hosted on WordPress using the Divi theme. The content is minimal and primarily technical, with no visible business descriptions, contact information, or privacy and cookie policies. The site targets a French-speaking audience in Switzerland but lacks clear business or service information. Technically, the site uses standard web technologies such as jQuery and Google Fonts but lacks advanced security headers or analytics tools. The security posture is weak due to missing security policies and headers, and the domain registration is privacy protected, limiting trust assessment. Overall, the site is accessible without WAF or blocking mechanisms but requires significant improvements in transparency, security, and compliance to enhance trust and professionalism.

COMMUNEapp is a technology product offered by COMMUNEagence, providing a secure login portal primarily targeting administrators or users of their platform. The website is focused on authentication with support for Google Authenticator two-factor authentication, indicating a moderate security posture. The technical infrastructure relies on established JavaScript libraries and CSS frameworks such as jQuery, Bootstrap, and FontAwesome, supporting a functional and moderately optimized user experience. However, the site lacks visible privacy and cookie policies, security headers, and contact information, which limits its compliance and trustworthiness from a security and privacy perspective. Overall, the site is accessible without WAF or blocking mechanisms, but improvements in security headers, privacy compliance, and transparency are recommended.