High-risk security reports

The Sabine-Ball-Grundschule website represents a small private primary school in Germany with a Christian educational perspective. The site provides comprehensive information about the school, its pedagogical approach, enrollment procedures, and after-school care (Hort). The school targets parents and guardians of primary school children and positions itself as a nurturing and family-oriented institution. The website is built on TYPO3 CMS and uses modern web technologies including jQuery and Parsley for form validation, with Matomo for analytics, indicating a moderate level of digital maturity. The site is well-structured, mobile-optimized, and includes social media integration to engage the community. Security posture is adequate with HTTPS usage and no visible vulnerabilities, though security headers and explicit policies could be improved. Privacy compliance is basic, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Overall, the website is professional, trustworthy, and safe for general audiences.

Immanuel-Kita is a small, specialized childcare provider in Germany focusing on Christian early childhood education. The website is professionally designed using TYPO3 CMS and integrates modern web technologies such as jQuery and Parsley.js for form validation. The site includes a cookie consent mechanism and uses Matomo for analytics, reflecting a moderate level of user tracking with privacy considerations. Social media integration is strong, linking to Facebook, Instagram, and YouTube, enhancing community engagement. However, explicit privacy policies and terms of service pages are not found, which could be improved for compliance and transparency. Security posture is good with HTTPS enforced but lacks advanced security headers and a public security policy or incident response contact. Overall, the website is trustworthy, content-rich, and well-positioned within its niche educational sector.

Immanuel-Grundschule is a small, private primary school in Germany with a Christian educational perspective. The website is built on TYPO3 CMS and integrates modern JavaScript libraries and Matomo analytics for user tracking. It offers detailed information about the school, its pedagogical approach, and related services such as after-school care (Hort). Social media presence is active with links to Facebook, Instagram, and YouTube. The site lacks an explicit privacy policy and visible contact emails or phone numbers, which are areas for improvement. Security posture is moderate with HTTPS enabled but missing security headers and no published security or incident response policies. Overall, the website is professional, trustworthy, and well-structured for its audience.

K

Kompetenzzentrum Internationale Jugendarbeit und non-formale Bildung

kvleipzig-international.de

44

The Kompetenzzentrum Internationale Jugendarbeit und non-formale Bildung is a small non-profit organization based in Leipzig, Germany, focused on international youth work and non-formal education. The website presents a professional and consistent brand image, offering services such as youth exchanges, training seminars, and workshops. It targets youth and professionals in the youth work sector, supported by local and EU funding partners. Technically, the site is built on WordPress using modern themes and plugins, with good SEO and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is trustworthy and well-maintained, reflecting the organization's mission and activities effectively.

C

ConFedersicurezza

confedersicurezza.it

49

ConFedersicurezza is an Italian federation coordinating private security associations, serving as a key industry representative and service provider. The website reflects a medium-sized organization with a clear focus on advocacy, publications, events, and member coordination. The technical infrastructure is based on standard web technologies including Bootstrap, jQuery, and Google Analytics with IP anonymization, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and visible CSRF protections on forms. Overall, the site is professional, GDPR compliant, and trustworthy, with room for security enhancements.

Ö

Österreichisches Spendengütesiegel

osgs.at

47

The Österreichisches Spendengütesiegel is an Austrian non-profit organization dedicated to certifying charitable organizations to ensure transparency and trust in the donation sector. The website serves as an informational and trust-building platform targeting donors and charitable entities within Austria. It offers certification services and promotes the quality seal as a mark of reliability. Technically, the website is built on WordPress using the Elementor framework, with modern fonts and responsive design elements, providing a good user experience and moderate performance. Security-wise, the site employs HTTPS and several security headers, indicating a solid baseline security posture, though it lacks visible incident response or security policy disclosures. Privacy compliance is limited, with no explicit privacy or cookie policies detected, which could be improved to meet GDPR standards. Overall, the domain registration data aligns well with the website's claims, supporting its legitimacy and trustworthiness.

C

Circus Pikard

circus-pikard.at

45

Circus Pikard is a small family circus based in Austria, offering live circus entertainment including artists, clowns, jugglers, and animal acts. The website promotes their 2025 tour and ticket reservation options, targeting a general family audience. The business operates regionally with a focus on live performances and seasonal events such as a winter circus. Technically, the website uses older web technologies like PHP, MySQL, Prototype.js, and Scriptaculous, with a basic but functional design. The site lacks modern CMS or advanced frameworks and shows moderate performance and SEO optimization. Security posture is weak, with no visible HTTPS enforcement or security headers, and no cookie consent mechanism, which raises compliance concerns under GDPR. Contact information is minimal, limited to a phone number and a Facebook page link. Overall, the site is trustworthy for its business purpose but requires improvements in security and privacy compliance.

Ö

Österreichische Krebshilfe

dontsmoke.at

46

The website www.dontsmoke.at is a professionally developed health awareness platform operated by the Österreichische Krebshilfe, focusing on smoking cessation and lung cancer prevention. It provides educational content, symptom checking tools (LUIS), and resources to support smokers and the general public in Austria. The site benefits from strong partnerships with reputable medical and research institutions, enhancing its credibility and outreach. Technically, the site is built on TYPO3 CMS with modern web technologies, offering good mobile optimization, accessibility, and SEO. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and policies could be improved. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the site is trustworthy, user-friendly, and serves an important public health mission.

C

Culture accessible Genève

culture-accessible.ch

46

Culture accessible Genève operates as a non-profit platform dedicated to promoting cultural accessibility for people with disabilities in the Geneva region. The website provides comprehensive listings of accessible cultural events, venues, and accessibility measures, targeting disabled audiences and the general public interested in inclusive culture. The platform maintains partnerships with local government and accessibility organizations, reinforcing its regional leadership in this niche. Technically, the website is built on October CMS, leveraging modern web technologies including Google Analytics, Google Tag Manager, and ReadSpeaker for accessibility. The site demonstrates good mobile optimization, accessibility features, and SEO practices, although performance is moderate. The absence of explicit privacy and cookie policies indicates room for compliance improvement. From a security perspective, the site uses HTTPS and implements basic anti-spam measures in its contact form. However, it lacks explicit security headers and a vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. The domain registration is privacy protected but consistent with the non-profit nature of the project, supporting legitimacy. Overall, the website is trustworthy, well-designed, and focused on its mission, but should enhance privacy compliance and security headers to improve its security posture and regulatory adherence.

K

Krolstudio

krolstudio.com

38

Krolstudio is a small, Geneva-based design and communication agency specializing in graphic design, web design, photography, video, and event communication services. The company emphasizes high-quality visual identity creation and a multidisciplinary approach to meet client needs. The website reflects a professional business with clear service offerings and contact information, targeting businesses and individuals seeking creative design solutions. Technically, the website is built on WordPress with common plugins such as Yoast SEO, and uses jQuery and tracking tools like Google Analytics and Facebook Pixel. Hosting is provided by Infomaniak Network SA, a reputable Swiss hosting provider. The site is moderately optimized for performance and mobile, though SEO is limited by a noindex,nofollow robots meta tag. From a security perspective, the site uses HTTPS and has domain transfer protection, but lacks DNSSEC and security headers. There is no visible privacy or cookie policy, which is a compliance gap. Tracking scripts indicate moderate user tracking without explicit consent mechanisms. Overall, the security posture is average with room for improvement. The website content is safe for general audiences, with no adult or questionable content detected. The domain registration is consistent with the business age and location, supporting legitimacy. Strategic recommendations include adding privacy and cookie policies, enabling DNSSEC, implementing security headers, and improving SEO settings to enhance visibility and compliance.

B

BE MOVIE

be-movie.ch

47

BE MOVIE is a cultural event platform dedicated to showcasing Bernese films through cinema screenings and online streaming. It targets film enthusiasts, families, and youth, offering workshops and awarding film prizes. The website is built on WordPress with Elementor, using modern web technologies and includes social media integration and Google reCAPTCHA for form security. While the site demonstrates good technical implementation and business credibility, it lacks explicit privacy and cookie policies, which impacts its privacy compliance score. Security posture is solid with HTTPS and security headers present, but incident response information is missing. Overall, the website is trustworthy and professionally presented, serving as a regional media event hub.

B

BIM-Handbuch

bimhandbuch.at

45

BIM-Handbuch.at is a specialized educational platform providing comprehensive resources for Building Information Modeling (BIM) targeted at planning professionals such as architects and engineers primarily in Austria. The website offers a freely downloadable BIM handbook, print versions for sale, video tutorials, and practical downloadable materials. It is supported by professional chambers and federations, enhancing its credibility and trustworthiness. Technically, the site is built using the Hugo static site generator with Bootstrap and jQuery, delivering a fast, mobile-optimized, and accessible user experience. Security posture is solid with HTTPS and secure form handling, though it lacks explicit cookie consent and some security headers. Privacy compliance is basic but includes a privacy policy and GDPR consent on newsletter subscription. Overall, the site is professional, trustworthy, and well-positioned as a niche educational resource in the BIM domain.

B

Bundeskammer der Ziviltechniker:innen I Arch + Ing

arch-e.eu

46

ARCH-E is a European platform dedicated to promoting architectural design competitions (ADCs) across Europe, focusing on increasing participation especially among small and female-led architectural practices. The platform offers research, practical tools, and advocacy, supported by a consortium reaching over 560,000 architects and co-funded by the European Union. The website provides extensive resources including reports, a network, glossaries, maps, and evaluation tools to support ADCs. Technically, the site uses modern web technologies such as Bootstrap, Masonry.js, and Piwik PRO analytics, with good mobile optimization and a professional design. Security posture is solid with HTTPS and CSRF protections, though some improvements are recommended in cookie consent and security policy disclosures. Overall, the site is trustworthy, well-branded, and serves a specialized professional audience effectively.

The domain idqsa.com is registered with a reputable registrar and has a valid registration period until 2026. However, the website itself is inaccessible, returning a 404 Not Found error with no meaningful content or metadata. There are no visible business details, contact information, or policies published on the site. The technical infrastructure appears minimal with no detectable CMS, frameworks, or analytics tools. Security posture is basic with no advanced headers or DNSSEC enabled. Overall, the site lacks digital maturity and does not provide sufficient information to assess business credibility or security readiness.

C

CoESS

coess.org

49

CoESS is a well-established European confederation representing the private security industry, advocating for quality, compliance, and public-private collaboration. The organization serves as a voice for 23 national associations across 17 EU member states, representing a significant portion of the private security sector. Their website reflects a professional and consistent brand image, targeting industry stakeholders and EU institutions. Technically, the site uses a custom or unknown CMS with common JavaScript libraries and cookie consent tools, hosted by a reputable provider. Security posture is generally good with HTTPS and cookie consent, though improvements are recommended in DNSSEC, security headers, and fixing minor PHP warnings. Privacy compliance is adequate with a privacy policy and cookie banner. Overall, the site is trustworthy and functional with moderate technical sophistication.

The website federsicurezza.it is currently inaccessible due to a bot challenge screen that blocks normal content access. This challenge uses a JavaScript proof-of-work captcha mechanism and includes a noindex meta tag, indicating a security or WAF layer is active. Due to this, no business, contact, or policy information is available for analysis. The domain WHOIS data is suspicious, showing a creation date in the future (2025), which undermines trust in the domain's legitimacy. The technical infrastructure includes use of Cloudfront CDN and modern JavaScript features for bot mitigation, but lacks visible security headers and DNSSEC. Overall, the site is not currently providing meaningful content or transparency about its operations.

C

Con Magazine

conmagazine.it

44

Con Magazine is an Italian online video magazine dedicated to exploring social issues and their intersection with culture, education, sports, economy, and communication. Established in 2014 and registered as a periodical in Rome, it serves a niche audience interested in social cohesion and community development. The website leverages WordPress CMS with modern front-end technologies such as Bootstrap and jQuery, ensuring a responsive and user-friendly experience. Privacy compliance is robust, with integrated Iubenda cookie consent and a comprehensive privacy policy. Security posture is good with HTTPS and privacy-conscious analytics (Matomo with disabled cookies), though some security headers could be enhanced. Contact information is clearly provided, and partnerships with notable organizations like Con i Bambini and Fondazione Con il Sud reinforce credibility.

I

INDIGO FILM SRL

indigofilm.it

49

Indigo Film SRL is an established independent film production company based in Italy, specializing in films, TV series, documentaries, and factual content. The company maintains a professional and well-branded online presence with a website optimized for both desktop and mobile users. Their market position is that of a medium-sized player in the Italian media production industry, targeting a general audience interested in independent film and television content. The website demonstrates good digital maturity with a modern WordPress CMS, SEO optimization via Yoast, and compliance with GDPR through an integrated cookie consent mechanism. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although formal security policies and incident response information are not published. Overall, the site is trustworthy and professionally managed, with strong social media integration and clear business information. Strategic recommendations include enhancing security headers, publishing a security policy, and providing incident response contacts to further improve trust and compliance.

The website ydea.it is currently a parked domain page primarily advertising the domain for sale. The content is minimal, with no business services or company information presented. The domain was registered in 2012 and is consistent with a long-held domain now offered for resale. Technically, the site uses basic JavaScript and external ad network scripts, hosted via Amazon Cloudfront CDN. There is no evidence of a CMS or advanced frameworks. Security posture is weak with no visible security headers or privacy policies, and no HTTPS status provided. The site lacks contact information, privacy, cookie, or terms of service policies, indicating low compliance and business credibility. Overall, the site is low trust and low content quality, suitable only for domain investors or buyers.

G

gastroevents GmbH & Co. KG

ulmmesse-catering.de

41

The website www.ulmmesse-catering.de represents gastroevents GmbH & Co. KG, a small hospitality business specializing in catering services for the Ulm Messe trade fair. The site provides information about catering offerings, job opportunities, and accommodation partnerships, targeting event organizers and visitors. The business operates locally with a clear focus on event catering and hospitality services. Technically, the website is built on WordPress using the Divi theme, with jQuery and a cookie consent plugin. Hosting is provided by cloudpit, as indicated by the nameservers. The site is moderately performant, mobile-optimized, and has basic accessibility and SEO features. Security posture is good with HTTPS enforced and a cookie consent mechanism, but lacks security headers and explicit security policies. Privacy compliance is strong with a clear privacy policy and GDPR-compliant cookie consent. Contact information is available with a physical address and company email. No social media or phone contact is explicitly provided. Overall, the site is professional, trustworthy, and safe for general audiences.

The website 'Parken in Ulm' serves as an informational platform providing live updates on parking availability across multiple parking facilities in Ulm, Germany. It targets drivers and cyclists looking for parking options, offering real-time data, route guidance, and facility details. The business behind the site appears to be the Ulmer Parkbetriebs-GmbH, a local parking management entity. The site is well-branded, consistent, and provides clear contact information, enhancing its credibility. Technically, the site is built on the Odoo CMS platform and leverages modern web technologies including MapLibre GL for interactive maps and FontAwesome for icons. The site is mobile-optimized with good navigation and SEO practices. Hosting is managed via the d9t.de infrastructure, consistent with the domain's nameservers. Performance is moderate with no major technical issues detected. From a security perspective, the site uses HTTPS and includes CSRF tokens, but lacks visible HTTP security headers and a cookie consent mechanism, which are areas for improvement. No forms or data collection points are present on the main page, reducing immediate data exposure risks. No incident response or security policies are published, which could be enhanced to improve trust. Overall, the website is safe, professional, and trustworthy with a solid business focus on transportation services. Strategic improvements in privacy compliance and security headers would elevate its security posture and regulatory adherence.

M

Marathon-Photos.com Limited

marathon-photos.com

37

Marathon Photos Live is a globally operating sports photography company specializing in mass participation event photography, with a presence in 70 countries and a large volume of images and athletes served. The company positions itself as a world leader in this niche, offering event photography services and image sales primarily targeting athletes and event organizers. The website is professionally designed using modern web technologies such as Vue.js, with good mobile optimization and SEO practices. Privacy and cookie policies are implemented with user consent mechanisms, supporting GDPR compliance. However, direct contact information such as emails or phone numbers is not publicly listed, relying on contact forms instead. The WHOIS data is privacy protected, limiting verification of domain age and registrant details, but the website's content and social media presence support its legitimacy. Security posture is adequate with HTTPS enforced, but lacks visible security headers and explicit security policies. Overall, the site demonstrates a good balance of business credibility, technical implementation, and privacy compliance, with room for improvement in security transparency and accessibility.

S

SUN Sportmanagement GmbH

ulmer-klimalauf.de

46

Ulmer Klimalauf is a virtual running event organized by SUN Sportmanagement GmbH, focused on climate protection through community participation. The event encourages participants to collect kilometers by running, walking, or hiking, supporting climate-related projects such as water supply initiatives in Uganda. The website is well-branded, professionally designed, and provides comprehensive information about the event, partners, and sustainability efforts. Technically, the site is built on WordPress with Elementor and uses Cloudflare DNS for performance and security. Security posture is good with HTTPS and no visible vulnerabilities, though security headers and cookie consent mechanisms could be improved. Contact information and privacy policies are clearly presented, supporting GDPR compliance. Overall, the site is trustworthy and serves its target audience effectively.

anonystats.de is a small-scale, internal-use web analytics service focused on anonymous and GDPR-compliant web logging. The website content is minimal, indicating the service is not publicly marketed but used internally. The technical infrastructure is simple, leveraging Bootstrap for styling and a custom JavaScript analytics script. There is no evidence of complex CMS or third-party analytics services, reflecting a lightweight and privacy-conscious approach. Security posture is moderate; while no security headers or cookie consent mechanisms are detected, the absence of forms and minimal external dependencies reduce attack surface. The WHOIS data shows consistent domain registration and legitimate name servers, supporting the domain's trustworthiness. Overall, the website is safe, with no adult or questionable content, but lacks public business and contact information, limiting external trust signals.

A

adfocus GmbH

getback.ch

45

Getback, operated by adfocus GmbH, is a Swiss-based technology company specializing in conversion optimization and web-push notification services tailored for e-commerce platforms. The company offers a SaaS solution that tracks user behavior on online shops and delivers targeted campaigns to increase conversion rates and customer engagement. Their market position is supported by a portfolio of reputable clients including Ikea, Tchibo, and Jumbo, indicating strong industry trust and relevance. The website is professionally designed, multilingual, and provides comprehensive information about their services and benefits. Technically, the website is built on WordPress with modern plugins such as Gravity Forms and Yoast SEO, and integrates Google Analytics and Tag Manager for user tracking and performance analysis. The site is mobile-optimized and demonstrates good SEO practices. Security-wise, HTTPS is enforced with anonymized IP tracking in analytics, and anti-spam measures are implemented in forms. However, explicit security headers and cookie consent mechanisms are lacking, representing areas for improvement. Overall, the security posture is solid but could be enhanced by adopting additional HTTP security headers and publishing formal security policies. Privacy compliance is adequate with a clear privacy policy, but cookie consent is missing. The domain registration is transparent and consistent with the business identity, reinforcing legitimacy. There are no indications of malicious content or blocking mechanisms, allowing full access to the site. Strategically, Getback is well-positioned in the e-commerce marketing technology sector with a clear value proposition and trusted client base. Enhancing security and privacy features would further strengthen their market credibility and compliance posture.

The website redintelligence.net is minimalistic, consisting solely of a frameset that loads an external domain (www.redvertisment.com). There is no substantive content, metadata, or business information present on the site. The domain is registered since 2012 with INWX GmbH and is currently active with no privacy protection enabled. The lack of HTTPS and security headers indicates a weak security posture. No privacy, cookie, or terms of service policies are available, and no contact information or social media presence is found. Overall, the site appears to be a placeholder or redirect without meaningful business presence or user engagement features. Technically, the site uses outdated HTML frameset technology and lacks modern web standards such as responsive design, SEO metadata, or analytics. The hosting provider is inferred from the registrar data but no direct hosting details are available. Performance and accessibility cannot be fully assessed due to minimal content. From a security perspective, the absence of HTTPS and security headers is a significant concern. The domain registration is stable and consistent, but the website itself does not demonstrate compliance with privacy regulations or security best practices. No vulnerabilities or malicious indicators are detected, but the site’s minimalism and redirection behavior warrant caution. Overall risk is moderate due to lack of content and security features. Strategic recommendations include enabling HTTPS, adding privacy and cookie policies, improving website content and structure, and implementing security headers to enhance trust and compliance.

Digitális Erőmű is a Hungarian educational and cultural institution focused on providing digital pedagogical resources and interactive exhibition spaces. It serves teachers, students, and the local community by offering modern educational tools such as the Digipédia system and hosting various exhibitions and events. The website reflects a regional cultural hub with a clear focus on education and community engagement. Technically, the site is built on WordPress and uses common front-end libraries like jQuery and Bootstrap, delivering a moderate performance with good mobile optimization. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though it lacks advanced security headers and explicit incident response information. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism. Overall, the site is professional, trustworthy, and well-aligned with its business purpose.

3dorszagjaro.hu is a Hungarian website dedicated to providing virtual 3D tours of cultural heritage sites across Hungary. The platform showcases 128 digitized locations, enabling users to explore these sites virtually. The business operates in a niche market focused on cultural tourism and digital heritage preservation. The website is built on WordPress and employs common web technologies such as jQuery, Bootstrap, and Google Analytics for tracking visitor interactions. The site is well designed with good navigation and mobile optimization, providing a positive user experience. However, it lacks some privacy compliance features such as a cookie consent mechanism and does not provide direct contact information or detailed security policies. The domain registration is consistent with the business age and content, indicating legitimacy. Overall, the website demonstrates moderate technical maturity and a good content offering but could improve in security and privacy compliance aspects.

The website digiko.tech currently returns a 403 Forbidden error page, indicating that the content is inaccessible to the public. Due to this restriction, no business information, contact details, or policies are available for analysis. The domain is relatively new, registered in August 2022, and managed by Tucows.com Co. with standard domain transfer protections enabled. DNSSEC is not enabled, which is a minor security gap. The hosting appears to be provided by host-anycast.it and host-anycast.com. The lack of accessible content and metadata prevents a full assessment of the company's business model, services, or market position. Technically, the site shows minimal implementation with no visible scripts, forms, or SEO optimizations. Security posture is limited by the absence of security headers and DNSSEC, but no critical vulnerabilities are evident from the data provided.

#

#clicksgefühle

clicksgefuehle.at

49

Clicksgefühle is a Vienna-based digital agency specializing in TYPO3 and WordPress web development, AI optimization, SEO, and UX consulting. They serve B2B clients, medium-sized enterprises, government agencies, universities, and public institutions primarily in Austria, Germany, and Switzerland. The agency positions itself as a trusted partner with a strong focus on user-friendly, scalable, and future-proof websites and online shops. Their market presence is reinforced by long-term client relationships and multiple certifications, including Google Partner and Certified Web Accessibility Expert. Technically, the website leverages modern web technologies such as WordPress CMS, Gravity Forms, Yoast SEO, Google Tag Manager, and various JavaScript libraries like Alpine.js and GSAP. The site demonstrates excellent mobile optimization, accessibility, and SEO practices, contributing to a fast and professional user experience. Tracking and marketing tools are integrated responsibly, with standard industry ad networks and pixels. From a security perspective, the site uses HTTPS and shows no obvious vulnerabilities or exposed sensitive data. However, it lacks explicit security headers and published privacy or cookie policies, which are important for GDPR compliance and user trust. The absence of WHOIS data limits domain trust verification, but the website's content quality and certifications mitigate some concerns. Overall, Clicksgefühle presents a professional and credible digital agency with strong technical and business maturity. To enhance security posture and compliance, they should publish comprehensive privacy and cookie policies, implement security headers, and provide clear contact information for incident response.

1

1749

1749.hu

45

1749.hu is a Hungarian literary and cultural media platform founded in 2020, offering a variety of content including prose, poetry, essays, interviews, and news. The website targets a general audience interested in literature and culture, positioning itself as a niche content provider with a consistent brand and good content quality. Technically, the site uses modern frontend technologies such as Bootstrap, AOS, and integrates analytics tools like Gemius, Hotjar, and Google Tag Manager. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is solid with HTTPS enforced and no exposed sensitive data, but lacks security headers and a formal security policy. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information is limited to a contact form without direct emails or phone numbers. Overall, the site is trustworthy and professionally maintained but could improve in privacy and security transparency.

H

Halmos Béla Program

halmosbelaprogram.hu

44

Halmos Béla Program is a Hungarian cultural initiative dedicated to promoting folk music bands, folk clubs, and related cultural activities. The website serves as an informational and promotional platform targeting folk music enthusiasts and the cultural community in Hungary. It operates as a non-profit cultural program with institutional backing, providing news, event information, and support for folk culture. Technically, the site is built on WordPress with common plugins and scripts such as jQuery, Google Analytics, and Facebook Pixel, indicating a moderate level of digital maturity. The site is mobile-optimized and has good SEO practices but lacks some accessibility features. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though it lacks advanced security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professional but could improve in privacy and security transparency.

M

MOL-Új Európa Alapítvány

molujeuropaalapitvany.hu

44

MOL-Új Európa Alapítvány is a Hungarian non-profit foundation established in 2022, focusing on supporting Central European contemporary art, cultural, social, sports, and sustainability programs. The foundation operates primarily through grant programs and partnerships, targeting a broad audience interested in cultural and social development. The website reflects a consistent brand identity and provides relevant information about its activities and supported initiatives. Technically, the site is built on Joomla CMS with Bootstrap framework, offering a responsive and moderately performant user experience. Security posture is adequate with HTTPS and CSRF protections, though lacking some security headers and explicit incident response policies. Privacy compliance is partially met with available privacy and cookie policies but missing explicit consent mechanisms. Overall, the site is professional, trustworthy, and well-positioned within its sector.

N

NOZ/mh:n MEDIEN

noz-mhn.de

44

NOZ/mh:n MEDIEN is a large regional media group in Germany offering a diverse portfolio of print and digital media products including newspapers, magazines, and audio content. The company positions itself as a leading regional news provider with a focus on delivering timely and valuable information to its audience. The website is professionally designed using WordPress and Elementor, with good SEO and mobile optimization. The technical infrastructure includes modern plugins and analytics via Matomo, hosted on servers associated with basecom.de. Security posture is solid with HTTPS and cookie consent mechanisms in place, though explicit security policies and incident response information are not published. Overall, the site is trustworthy and compliant with GDPR requirements.

N

netzwerk n e.V.

plattform-n.org

49

netzwerk n e.V. operates plattform n, a specialized online community platform dedicated to sustainability initiatives at German higher education institutions. The platform offers a comprehensive suite of collaboration and networking tools including real-time chat, document collaboration, file storage, event management, and a marketplace, all integrated within a user-friendly and open source environment. The organization positions itself as a non-profit entity focused on fostering sustainable development through digital community engagement. Technically, the website is built on WordPress with modern plugins and integrates open source tools like Rocket.Chat and Nextcloud, reflecting a mature and well-maintained infrastructure. Security posture is solid with HTTPS and reCAPTCHA usage, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is strong with clear policies and GDPR adherence, though cookie consent mechanisms could be enhanced. Overall, the platform demonstrates high professionalism, trustworthiness, and a clear mission aligned with its target audience of sustainability-focused academic groups.

A

ASW gGmbH

asw-berufsakademie.de

45

ASW gGmbH is a well-established educational institution based in Saarland, Germany, specializing in dual study programs and professional continuing education. The organization offers state-recognized and accredited bachelor degrees with a strong emphasis on practical and scientific learning. Their market position is supported by accreditations such as AQAS and recognition in the CHE ranking, positioning them as a reputable player in the education sector. The website targets prospective students and professionals seeking advanced training, providing comprehensive information and personalized counseling services. Technically, the website is built on TYPO3 CMS with Bootstrap 5, leveraging modern web technologies including jQuery and Leaflet.js for interactive maps. The site demonstrates good mobile optimization, accessibility, and SEO practices, ensuring a positive user experience. Hosting is managed via DomainControl, and the site uses HTTPS with a cookie consent mechanism to comply with privacy regulations. From a security perspective, the site enforces HTTPS and includes cookie consent management, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Tracking is limited and consent-based, primarily using Google Tag Manager and OnSite tracking. Overall, the security posture is solid but could be enhanced by implementing additional security headers and formalizing incident response disclosures. The overall risk assessment is low, with the website presenting a professional, trustworthy, and compliant digital presence. Strategic recommendations include adding security headers, publishing a security policy, and introducing a vulnerability disclosure program to further strengthen trust and security culture.

D

Divi Ultimate - Divi Child Theme

diviultimate.com

48

Divi Ultimate is a specialized provider of Divi child themes for WordPress, offering a comprehensive product with over 200 reusable Divi library items and multiple pre-made homepage concepts. The business operates primarily through a subscription-based Pro Membership model, targeting web designers and developers who use the Divi WordPress theme. The website demonstrates a consistent brand presence and provides extensive product information, though lacks explicit privacy and cookie policies on the main site. Technically, the site is built on WordPress with WooCommerce and the Divi theme, leveraging modern web technologies and Google Fonts. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Marketing is supported by Facebook Pixel tracking, indicating moderate user tracking. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

DIE VIELEN is a German non-profit organization dedicated to promoting an open, solidaric, diverse, and democratic society. The website serves as a platform to present their advocacy campaigns, cultural projects, event calendar, and press resources. The organization targets a general audience interested in social justice and anti-right-wing extremism initiatives. The website is built on WordPress with modern frontend technologies such as Vue.js, indicating a moderate level of digital maturity. Hosting is managed via domaincontrol.com name servers, commonly associated with GoDaddy. From a security perspective, the website enforces HTTPS and uses secure form submission endpoints, but lacks visible security headers and explicit privacy or cookie policies, which are important for GDPR compliance. No incident response or vulnerability disclosure information is provided. The site does not appear to use analytics or tracking services, suggesting minimal user tracking. Overall, the security posture is adequate but could be improved with additional headers and compliance documentation. The website content is safe for general audiences with no adult or questionable content detected. Navigation and design quality are good, providing a professional user experience. Contact options are limited to forms without direct email or phone contacts. The WHOIS data is minimal but consistent with a legitimate domain registration. No WAF or blocking mechanisms were detected, allowing full content access for analysis.

The website principiaspa.it is currently inaccessible beyond a security challenge page that performs browser integrity checks and automatic redirects, indicating the presence of a Web Application Firewall or similar security mechanism. The visible content is minimal and primarily technical, with no substantive business or contact information available. The site appears to be running outdated CMS versions (Joomla 1.5 and WordPress 2.5), which are known to have multiple security vulnerabilities. The WHOIS data is suspicious, showing a domain creation date in the future (April 2025), which undermines the legitimacy and trustworthiness of the domain. No privacy, cookie, or terms of service policies are present, and no contact details or social media links are found on the page.

The website at geigertamas.hu currently presents an empty HTML page with no visible content, metadata, or interactive elements. This lack of content prevents meaningful analysis of the business, its services, or its market positioning. The domain is privacy protected, which limits the ability to verify registrant details or assess legitimacy. Technically, the site lacks modern web technologies, security headers, and compliance policies, indicating a low level of digital maturity. Security posture is minimal with no evidence of HTTPS or security best practices. Overall, the site appears inactive or a placeholder, posing a low trust level and high risk for users seeking business information or services.

T

Transparency Deutschland

hochschulwatch.de

26

Hochschulwatch is a transparency-focused website operated under the auspices of Transparency Deutschland, a non-profit organization dedicated to exposing and preventing corruption, particularly in the context of German higher education institutions. The site currently serves as an informational resource highlighting the interconnections between business and academia in Germany. The homepage indicates the site is undergoing reconstruction and updates, limiting available content. Contact information is clearly provided, reinforcing organizational legitimacy. Technically, the website employs a simple and common technology stack including Bootstrap, jQuery, and LESS for styling. The site is mobile responsive and moderately performant but lacks advanced technical features such as CMS integration or analytics. No security headers or advanced security configurations are detected, and the site does not currently provide privacy or cookie policies, which impacts compliance and user trust. From a security perspective, the site uses HTTPS (assumed from URL scheme though not explicitly confirmed), but lacks security headers and formal policies related to privacy and incident response. No forms or data collection mechanisms are present, reducing immediate risk exposure. The WHOIS data is minimal but consistent with a legitimate small non-profit project. No WAF or blocking mechanisms are detected, and the content is safe for general audiences. Overall, the site scores moderately on AI evaluation due to limited content and missing compliance documentation. Strategic improvements in privacy policy publication, security header implementation, and enhanced content will improve trust and compliance posture.

S

Studentischer Akkreditierungspool

studentischer-pool.de

42

The Studentischer Akkreditierungspool website serves as an educational and organizational platform dedicated to involving students in accreditation processes within higher education in Germany. It offers seminars, workshops, and networking events targeted at politically active students interested in quality assurance and accreditation. The site is built on a WordPress CMS with a professional theme and uses modern web technologies such as Bootstrap and jQuery, providing a good user experience and mobile optimization. However, it lacks visible privacy and cookie policies, which are critical for GDPR compliance. Security posture is moderate with HTTPS enabled but missing key security headers and incident response information. Contact is available via a form but no direct emails or phone numbers are published. Overall, the site is legitimate and trustworthy but could improve compliance and security transparency.

F

freie zusammenschluss von student*innenschaften (fzs) e.V.

contre-le-racisme.de

48

Festival contre le Racisme is a German non-profit campaign platform organized by recognized student organizations (fzs and BAS) to facilitate anti-racism events and activism within university communities. The website serves as a hub for event organization, resource sharing, and networking, targeting students and academic institutions. Technically, the site is built on WordPress with standard plugins and hosted by Manitu, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS and email obfuscation, but lacks advanced security headers and incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professionally maintained but could improve in security and privacy transparency.

E

EWIVS Certification

ewivs.com

38

EWIVS Certification is a specialized certification provider focusing on person certifications according to ISO 17024, targeting experts and assessors primarily in Germany and Europe. The company offers transparent, practice-oriented certification processes with personal support and a money-back guarantee for pre-checks, positioning itself as a trusted niche player in the certification market. Technically, the website is built on WordPress using the Divi theme, with modern SEO and cookie consent implementations, and moderate performance and mobile optimization. Security posture is good with HTTPS and cookie consent but lacks some advanced security headers and explicit incident response information. The absence of WHOIS registration data raises legitimacy concerns, though the professional website content and structured data suggest a legitimate business. Overall, the site scores well on content quality and technical implementation but could improve business credibility and security transparency.

K

KielRegion GmbH

mokwi.de

48

KielRegion GmbH operates the MokWi platform, a regional government-backed initiative focused on providing free, sustainable, and community-oriented digital collaboration tools for projects in the KielRegion of Germany. The platform facilitates project management, networking, and visibility for local initiatives, emphasizing non-profit and sustainable development. The website is professionally designed, well-structured, and targets community groups and organizations within the region. Technically, the site is built on WordPress with modern plugins for SEO, cookie consent, and analytics, hosted on Dogado servers. Security posture is strong with HTTPS, cookie consent management, and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is robust, with clear privacy and cookie policies and GDPR adherence. Overall, the site reflects a trustworthy, professional regional government initiative with good digital maturity and community focus.

D

Donaubüro gemeinnützige GmbH

donaufest.de

49

The Donaufest website represents a well-established international cultural festival organized by the Donaubüro gemeinnützige GmbH in Germany. It showcases a rich program of cultural events spanning ten days and involving ten countries along the Danube River. The festival emphasizes cultural exchange, artistic performances, and family-friendly activities, positioning itself as a significant cultural event in the region with recognition such as the EFFE Label. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and Cloudflare for DNS and CDN services. The site is mobile-optimized and presents good design and navigation, although accessibility could be improved. Security posture is strong with HTTPS and security headers in place, but lacks visible cookie consent and formal security policies. Overall, the site is trustworthy and professional, though it would benefit from enhanced privacy compliance and clearer contact information.

U

Ulmer Volksfest | Das Familien-Volksfest

ulmer-volksfest.de

48

Ulmer Volksfest is a German family festival event website providing information about the Ulmer Volksfest, a traditional family-oriented festival. The site targets local families and visitors interested in festival events. It is built on WordPress and uses modern tools such as Cookiebot for cookie consent management and Google Analytics for visitor tracking. The website demonstrates good technical maturity with responsive design and SEO optimization, although some security headers are missing. The security posture is solid with HTTPS enabled and no visible vulnerabilities, but could be improved by adding security headers and explicit privacy and terms of service pages. Overall, the website is trustworthy and professional, serving its purpose effectively as an event information portal.

The website www.schwoermontag.com serves as an informational portal dedicated to the Ulmer Schwörmontag and the associated Schwörwoche events. It provides visitors with event details, historical context, and multimedia content to engage local residents and tourists interested in these cultural festivities. The site monetizes primarily through advertising and affiliate ticket sales, positioning itself as a niche local event information provider. Technically, the site employs a standard web stack including Bootstrap and jQuery, with Google Adsense and other ad networks integrated alongside a consent management platform to ensure GDPR compliance. Security posture is moderate, with HTTPS implied but lacking explicit security headers and documented incident response channels. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content appears legitimate and professional. Overall, the site offers a good user experience with clear navigation and relevant content but would benefit from enhanced security practices and verified domain registration.

U

Ulmer Zelt

ulmerzelt.de

46

Ulmer Zelt is a regional cultural event organizer based in Germany, hosting summer music and cultural festivals near the Ausee and Donau rivers. The website serves as an information hub for event programs, ticket sales, and visitor information, targeting a general audience including families and music enthusiasts. The business operates primarily as an event organizer with a focus on community engagement and cultural experiences. Technically, the website is built on WordPress with modern plugins such as Modern Events Calendar and Easy Video Player, and uses the Astra theme with SEO optimization via Rank Math. The site is mobile-optimized and performs moderately well, though some accessibility features could be improved. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks security headers and formal security policies. Privacy compliance is minimal, with no visible privacy or cookie policies, which is a notable gap. Overall, the site is professional and trustworthy for its purpose but would benefit from enhanced privacy and security measures.

Ulmer Weihnachtscircus is a small regional event organizer specializing in an annual Christmas circus show in Ulm, Germany. The website provides detailed information about the event schedule, ticket sales, and partners, targeting families and local visitors. The business has a solid regional presence with longstanding tradition and partnerships with local media and sponsors. Technically, the website uses outdated technologies such as jQuery 1.2.3 and Flash, lacks HTTPS enforcement, and does not implement modern privacy or security standards. Security posture is weak due to missing HTTPS, lack of security headers, and use of deprecated libraries. Privacy compliance is minimal with no cookie consent or GDPR indicators. Overall, the site is functional but requires modernization and security improvements to meet current standards.