Medium-risk security reports

The Katholischer Deutscher Frauenbund e.V. (KDFB) Diözesanverband Bamberg is a regional non-profit organization dedicated to advocating for women's equality in society, politics, and church within Germany. The website serves as an information hub for events, membership, and organizational news, targeting women interested in social and spiritual empowerment. It is part of a larger national federation with a clear mission and values centered on solidarity, justice, and empowerment. Technically, the site is built on WordPress with modern plugins such as Gravity Forms and Yoast SEO, supported by Matomo analytics and Captcha.eu for security. The hosting is likely provided by GoDaddy, indicated by the domain control nameservers. Security posture is good with HTTPS and bot protection, though some HTTP security headers could be improved. Privacy compliance is strong with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. Overall, the site is professional, trustworthy, and well-maintained, reflecting the organization's credibility and commitment to its mission.

KAB Bamberg is a regional non-profit organization dedicated to social justice, providing its members with legal advice and representation before labor and social courts. The organization also offers educational events and campaigns focused on social issues. The website is built on TYPO3 CMS, hosted by SchlundTech, and employs Matomo analytics with privacy-conscious configurations. The site demonstrates good technical maturity with responsive design, clear navigation, and comprehensive content relevant to its audience. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though it lacks explicit incident response and security policy documentation. Overall, the site reflects a trustworthy and professional presence for a non-profit entity in Germany.

Ackermann-Gemeinde Bamberg is a small regional non-profit organization focused on cultural and social activities related to German-Czech heritage. It operates as part of the larger Ackermann-Gemeinde network, providing events, news, and community engagement. The website is professionally designed with good content quality and clear navigation, targeting members and interested individuals in the cultural sector. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Matomo analytics, hosted on a reliable provider. Security posture is adequate with HTTPS and cookie consent mechanisms, though some security headers and explicit policies are missing. Overall, the site is trustworthy and compliant with GDPR, with clear contact information and partner links.

KEB - Katholische Erwachsenenbildung in der Stadt und im Landkreis Bayreuth e.V. is a regional non-profit educational organization focused on adult education and family programs in the Bayreuth area of Germany. The website provides comprehensive information about their programs, events, and services, targeting adults interested in cultural and educational activities. The organization holds a QESplus certification, indicating adherence to quality standards in education. The site is well-structured, professionally designed, and offers clear navigation and contact information.

bildungshaus-obertrubach.de appears to be a small-scale website focused on gambling and casino legal topics, targeting a mature audience interested in gambling. The site content is minimal, with a single main service link labeled 'Casino Legal' and multiple gambling-related trust badges displayed prominently. The technical infrastructure leverages Cloudflare for DNS and CDN services and includes the Swiper.js library for UI elements. However, the site lacks comprehensive content, privacy and cookie policies, and contact information, which limits its professionalism and user trust. Security posture is moderate due to the use of Cloudflare and trust badges but lacks visible security headers and incident response contacts. Overall, the website is functional but basic, with room for significant improvements in content, compliance, and security.

The website is a domain sales landing page hosted as a subdomain of forsaledomain.net, offering a domain for sale alongside a curated list of discounted product deals primarily sourced from Amazon. The business model appears to be a combination of domain sales and affiliate marketing targeting German-speaking consumers interested in bargain shopping. The site uses basic modern web technologies including Google Fonts and JavaScript for live search and affiliate link tracking. However, it lacks critical business and security information such as privacy policies, contact details, and HTTPS enforcement. The WHOIS data for the domain is missing, indicating the domain is likely unregistered or parked, which significantly reduces trustworthiness. Overall, the site is functional but minimalistic and lacks professional business credibility and security maturity.

KEB - Katholische Erwachsenenbildung BA - FO - ERH e.V. is a regional non-profit organization focused on adult education within the Catholic community in the Bamberg, Forchheim, and Erlangen-Höchstadt areas of Germany. The website provides comprehensive information about educational offerings, family programs, events, and community services, targeting adults interested in faith-based learning and community engagement. The organization maintains a strong regional presence with partnerships to official church bodies and social initiatives. Technically, the website employs a modern technology stack including Bootstrap, jQuery, and Matomo analytics, ensuring a responsive and user-friendly experience. Privacy compliance is well addressed with a detailed cookie consent mechanism and GDPR-aligned privacy policy. Security posture is good with HTTPS, reCAPTCHA, and anonymized analytics fallback, though some security headers could be improved. Overall, the site is professional, trustworthy, and well-maintained, reflecting the organization's mission and values.

KEB - Katholische Erwachsenenbildung BA - FO - ERH e.V. is a regional non-profit organization focused on adult education within the Catholic community in the Bamberg, Forchheim, and Erlangen-Höchstadt areas of Germany. The website provides comprehensive information about educational offerings, events, family education, and community services, targeting adults interested in faith-based learning and community engagement. The organization holds a quality certification (QESplus) and maintains partnerships with regional church entities and social initiatives. Technically, the website is built on a modern stack including Bootstrap, jQuery, and specialized plugins for media and content presentation, hosted on kirche-bamberg.de infrastructure. It is mobile-optimized and provides a good user experience with clear navigation and relevant content.

The website is a domain sales and affiliate marketing landing page offering various product deals across multiple categories such as electronics, home & kitchen, beauty, clothing, and toys. It promotes Halloween deals for 2025 and indicates that the domain is currently for sale. The site targets general consumers looking for discounted products and operates primarily as an affiliate marketing platform with domain sales as a secondary focus. Technically, the site uses modern web standards including HTML5, CSS3, JavaScript, and Google Fonts, with a responsive design optimized for mobile devices. However, it lacks advanced security headers and privacy policies, which reduces its compliance posture. The security posture is basic with HTTPS assumed but no explicit security headers or contact information for incident response. The WHOIS data is unavailable, indicating the domain or subdomain is either unregistered or dynamically assigned, which raises questions about legitimacy and trustworthiness. Overall, the site is functional and safe for general audiences but lacks transparency and compliance features expected from professional e-commerce platforms.

KEB MittenInFranken e.V. is a regional non-profit organization based in Nürnberg, Germany, focused on adult education and community engagement. The website offers a variety of educational programs, workshops, and events centered around theology, philosophy, culture, family education, and social competencies. The organization targets adults interested in religious and cultural education within the Nürnberg region. The business model is non-profit, emphasizing community service and educational outreach. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Font Awesome, FancyBox, Revolution Slider, JWPlayer, Google reCAPTCHA, and Matomo analytics. It is hosted on rzone.de nameservers and uses a CMS likely based on FlexiWeb. The site is mobile-optimized with good navigation and SEO practices, though accessibility features are basic. From a security perspective, the site enforces HTTPS, uses cookie consent banners, and integrates bot protection via Google reCAPTCHA. Matomo analytics is configured with anonymous tracking fallback to respect privacy. However, security headers are not explicitly detected, and no incident response or vulnerability disclosure information is provided. The site shows good privacy compliance with comprehensive policies and GDPR adherence. Overall, the website is professional, trustworthy, and well-suited for its non-profit educational mission. There are no critical security issues or suspicious content. Recommendations include enhancing security headers, adding incident response contacts, and improving accessibility for broader compliance.

The website keb-an.de represents the Katholische Erwachsenenbildung MittenInFranken e. V., a non-profit Catholic adult education organization serving the Ansbach-Neustadt/Aisch region in Germany. It offers educational programs, events, seminars, and community engagement services targeted at adults interested in Catholic education and cultural activities. The site is well-structured with clear navigation and professional design, supporting a positive user experience. The presence of downloadable program PDFs and detailed event listings further enhance its utility for the target audience. Technically, the website employs a modern technology stack including Bootstrap, jQuery, Font Awesome, FancyBox, Revolution Slider, JWPlayer, Google reCAPTCHA, and Matomo Analytics. It is hosted likely on kirche-bamberg.de infrastructure, uses HTTPS with good SSL configuration, and implements cookie consent mechanisms compliant with GDPR. Accessibility and SEO are basic but functional, with room for improvement in security headers and accessibility features. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, cookie consent with opt-in/out, and bot protection via reCAPTCHA. Matomo Analytics is used with anonymous tracking fallback to respect user privacy. However, explicit security policies and incident response information are not published, and security headers are not visibly configured, representing areas for enhancement. Overall, the website is trustworthy, safe, and professionally maintained, with no indications of malicious activity or content safety concerns. The domain WHOIS data aligns with the business identity, supporting legitimacy. Strategic recommendations include implementing security headers, publishing security policies, and enhancing accessibility compliance to further strengthen the site's security posture and user trust.

KEB Kronach is a regional non-profit organization focused on adult education within the Catholic community in Landkreis Kronach, Germany. The organization offers a variety of educational, cultural, and religious programs targeting adults seeking meaningful personal and societal development. The website reflects a well-structured, content-rich platform with clear navigation and professional design, supporting its mission effectively. Technically, the site employs a modern tech stack including Bootstrap, jQuery, and JWPlayer, hosted on servers consistent with the domain's nameservers. Privacy and cookie compliance are well implemented, with a granular consent mechanism and detailed privacy policy in German. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though security headers could be improved. The site uses Matomo analytics with anonymous tracking fallback, respecting user privacy. Contact information and certifications enhance business credibility. Overall, the site is trustworthy, professional, and well-aligned with its educational mission.

Noahworks, operated by descript GmbH, provides specialized software solutions tailored for youth work and adult education organizations in Germany. Their offerings focus on digital management of funding, educational facilities, and event organization, targeting both full-time and volunteer staff in non-profit and educational sectors. The company positions itself as a niche provider with a strong emphasis on reducing administrative overhead and enhancing communication with stakeholders. The website reflects a professional and consistent brand image, supported by customer testimonials and success stories.

Eberspächer Hydraulik is a medium-sized manufacturing company based in Germany specializing in hydraulic systems and components. The website presents a professional and consistent brand image targeting industrial and infrastructure clients. The technical infrastructure relies on Bootstrap 3 and Font Awesome, indicating a moderately modern but not cutting-edge technology stack. The website is accessible and mobile-optimized with good user experience but lacks advanced SEO and accessibility features. Security posture is moderate with no detected security headers or explicit SSL configuration details. Privacy compliance is weak due to absence of privacy and cookie policies. Contact information is limited to a contact form without explicit emails or phone numbers. Overall, the website is functional and professional but would benefit from enhanced security, privacy, and compliance features.

Brunata Minol is a leading German service provider specializing in metering, IoT, and energy management solutions tailored for the housing and real estate sectors. Their offerings include heating cost billing, water and heat meters, smoke detector services, E-Mobility solutions, and energy certificates, positioning them as a comprehensive partner for landlords, property managers, and tenants. The company operates under the Minol-ZENNER-Gruppe umbrella, indicating a strong corporate backing and market presence. Technically, the website is built on the Contao Open Source CMS platform, leveraging modern JavaScript libraries such as jQuery and jQuery UI. The site is well-structured, mobile-optimized, and incorporates accessibility and SEO best practices. Hosting is managed via Managed IP, consistent with enterprise-grade infrastructure. The site employs HTTPS with good SSL configuration and includes cookie consent mechanisms aligned with GDPR requirements. From a security perspective, the website demonstrates solid practices including secure forms, no visible vulnerabilities, and privacy compliance. However, it lacks explicit security policy and incident response pages, which could enhance transparency and trust. The WHOIS data aligns well with the website's claims, showing consistent domain registration and no suspicious patterns. Overall, the site reflects a professional, trustworthy, and mature digital presence suitable for its target audience in the energy and real estate sectors. Strategic improvements could focus on publishing dedicated security and incident response information to further strengthen security posture and user confidence.

Fliesen Lang GmbH & Co KG is a small, established tile laying specialist operating in Kirchheim unter Teck, Germany. The company offers a range of services including consultation, planning, and installation of tiles and natural stone for residential and commercial properties. Their website reflects a professional local business with clear service descriptions and contact information. Technically, the site is built on the IONOS MyWebsite CMS platform, uses modern web technologies like HTML5, CSS3, and JavaScript libraries such as jQuery and swipebox, and is hosted by IONOS with HTTPS enabled, ensuring secure connections. However, the site lacks privacy and cookie policies, security headers, and incident response information, which are important for compliance and security posture. Overall, the website is functional, well-branded, and trustworthy but could improve in privacy compliance and security best practices.

Wenzelburger KG is a medium-sized German company specializing in the production and supply of high-quality construction materials including transport concrete, aggregates such as gravel, sand, and crushed stone, as well as logistics and earthworks services. With over 60 years of regional presence, the company serves primarily B2B clients in the construction and infrastructure sectors. The website reflects a professional and consistent brand image, providing comprehensive contact information and business details. Technically, the site is built on WordPress using popular plugins and themes, hosted by Hetzner Online GmbH, and demonstrates moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit incident response policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy and well-maintained, though improvements in security and privacy practices are recommended.

Festool GmbH is a well-established German manufacturer and retailer of high-quality power tools and system solutions targeted at professional craftsmen. Founded in 1925, the company holds a strong market position as a premium brand in the manufacturing and retail sectors. Their website reflects a professional and comprehensive digital presence, offering detailed product information, customer support, and e-commerce capabilities. The target audience is clearly professional tradespeople seeking reliable and tailored power tool solutions. Technically, the website employs modern technologies such as Vue.js, Google Tag Manager, and Usercentrics for consent management, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities. Privacy compliance is robust, with clear GDPR-aligned privacy and cookie policies and a consent mechanism. Business credibility is high, supported by transparent contact information, legal company data, and consistent branding. Overall, the website demonstrates a mature and secure digital infrastructure suitable for a large enterprise in the manufacturing industry.

Stadtwerke Nürtingen GmbH is a regional utility company providing essential services including electricity, gas, water, district heating, and highspeed internet to the Nürtingen area in Germany. The company emphasizes regional economic support and customer-centric service, offering digital tools such as mobile apps and online customer portals to enhance user experience. Their market position is that of a trusted regional energy and telecommunications provider with a medium-sized operational footprint. Technically, the website is built on the Neos CMS platform using the Flow PHP framework, with modern JavaScript libraries and a responsive design ensuring good performance and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved and incident response information is not publicly detailed. Overall, the website is professional, trustworthy, and compliant with GDPR, serving a general audience without any adult or questionable content.

Männer GmbH & Co. KG is a certified German waste disposal and logistics company specializing in container services and tailored waste management solutions. The company targets commercial clients requiring professional disposal and transport of various waste types. Their website reflects a regional market position with clear service offerings and contact information. Technically, the site is built on Joomla CMS with modern frameworks like Bootstrap and includes consent management and Matomo analytics, indicating a moderate level of digital maturity. Security posture is good with HTTPS and CSRF protections, though additional security headers and explicit policies could enhance it. Overall, the site is professional, GDPR compliant, and trustworthy with no blocking or suspicious indicators.

Volksbank Mittlerer Neckar eG is a regional cooperative bank in Germany focused on providing banking and financial services to private customers. The website targets private customers and emphasizes the strength of the cooperative banking group. The site uses modern web technologies including Angular and Angular Material, with performance monitoring via Dynatrace. The technical infrastructure appears solid with HTTPS enabled and a professional design, although some security best practices such as security headers and explicit privacy policies are missing. No signs of blocking or WAF interference were detected, allowing full content access. Overall, the site is professional and trustworthy but could improve transparency and compliance by adding privacy, cookie, and security policies.

hagebau Gebrüder Ott Baustoffe GmbH is a well-established regional building materials retailer in Germany, operating since 1928 with locations in Kirchheim and Nürtingen. The company offers a broad range of construction and building supplies, supported by digital tools such as configurators and integrated data interfaces to optimize customer ordering processes. The website reflects a mature digital presence with modern technologies including SAP Hybris Commerce, Usercentrics for consent management, and Piwik PRO for analytics. Security posture is solid with HTTPS and consent mechanisms in place, though some security headers could be improved. Privacy compliance is partially addressed via a consent management platform, but explicit privacy and terms of service pages were not found in the provided content. Overall, the site is professional, trustworthy, and well-optimized for SEO and user experience.

Romina Mineralbrunnen GmbH is a well-established mineral water bottling company based in Reutlingen-Rommelsbach, Germany, with a strong regional presence primarily in Baden-Württemberg and neighboring regions. The company produces and distributes popular mineral water brands EiszeitQuell and SilberBrunnen, operating multiple production lines and employing around 130 staff. Their business model focuses on manufacturing and regional distribution through beverage and food retail channels, including bio markets and hospitals. The website reflects a professional and consistent brand image with clear navigation and relevant content for their target audience. Technically, the website is built on WordPress using standard JavaScript libraries such as jQuery and Swiper.js. It demonstrates good mobile optimization and SEO practices, though accessibility features are basic. The site uses HTTPS with no detected blocking or WAF challenges, and includes a cookie consent mechanism compliant with GDPR requirements. Analytics tracking via Google Analytics is implemented but disabled by default pending user consent. From a security perspective, the site employs HTTPS and cookie consent best practices but lacks explicit security headers and a dedicated security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is consistent with the business claims, showing no suspicious patterns and supporting the legitimacy of the domain. Overall, Romina Mineralbrunnen GmbH presents a trustworthy and professional online presence with good compliance and security posture for its business size and sector. Recommendations include enhancing security headers, publishing a security policy, and providing incident response contacts to further strengthen trust and compliance.

Brändle Präzisionsteile GmbH is a specialized German manufacturing company focusing on precision machining techniques such as honing and deep hole drilling. The company targets industrial clients requiring high-quality precision parts and offers services including quality assurance and consulting. Their market position is that of a niche precision parts manufacturer with a clear B2B business model. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses common analytics and marketing tools such as Google Tag Manager, eTracker, and Cookiebot for consent management. Hosting appears to be provided by 1&1 IONOS, inferred from nameservers. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility is basic. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms compliant with GDPR. However, explicit security headers like CSP or X-Frame-Options are not evident in the provided data, suggesting room for improvement. No vulnerabilities or exposed sensitive data were detected. Incident response and security policies are not publicly documented. Overall, the website presents a low-risk profile with strong privacy compliance and business credibility. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining up-to-date software to mitigate potential vulnerabilities.

The Lions Club Nürtingen-Teck/Neuffen is a small, regional non-profit organization focused on social support and fundraising activities within the Nürtingen-Kirchheim/Teck area in Germany. Founded in 2004, the club engages in community service projects, primarily benefiting children, youth, and families in need. Their key fundraising events include the Lions Advent calendar and the local duck race, which support regional youth organizations and hospice services. The website reflects a consistent brand identity aligned with the international Lions Club movement and provides clear information about their mission and activities. Technically, the website is built on WordPress using common plugins and frameworks such as WPBakery Page Builder, Bootstrap, and Slider Revolution. It is served over HTTPS with a valid SSL certificate, ensuring secure connections. The site is moderately optimized for performance and mobile devices, though accessibility and SEO optimizations are basic. No advanced analytics or tracking tools are detected, indicating a privacy-conscious approach. From a security perspective, the site lacks several best practices such as security headers and explicit incident response contacts. There is no cookie consent mechanism despite GDPR applicability, and no vulnerability disclosure or security policy pages are present. However, no critical vulnerabilities or exposed sensitive data were found. The WHOIS data is consistent with the website's claims, showing a stable and legitimate domain registration. Overall, the website is trustworthy and professional for its non-profit purpose but could improve in privacy compliance and security hardening to better protect visitors and demonstrate regulatory adherence.

IITR Datenschutz GmbH is a German-based company specializing in data protection and information security services. They provide a range of solutions including external data protection officer services, compliance kits, audits, certifications, and online training. Their target audience includes small and medium-sized enterprises as well as larger organizations seeking cost-effective and expert data protection solutions. The company maintains a strong market position with certified products and a professional online presence supported by client testimonials and social media engagement. Technically, the website is built on Joomla CMS with Bootstrap framework, offering a responsive and well-structured user experience. Security measures include HTTPS enforcement and CAPTCHA-protected forms, though some security headers are missing. Privacy compliance is partially addressed but lacks explicit privacy and cookie policies in the visible content. WHOIS data shows no privacy protection but has an unusual domain status that warrants further verification. Overall, the website demonstrates a solid business credibility and technical maturity with room for improvement in privacy and security transparency.

Expertise AI is a technology company specializing in AI-powered conversational agents designed to enhance B2B sales and marketing efforts. Their platform offers advanced chat and voice AI solutions that engage, qualify, and enrich prospects in real time, integrating seamlessly with major CRM systems like HubSpot and Salesforce. Positioned as a leading AI chatbot solution in the HubSpot Marketplace, Expertise AI targets sales and marketing teams seeking to improve lead conversion and pipeline generation through automation and personalization. Technically, the website leverages a modern stack including React and Next.js, supported by robust analytics and performance monitoring tools such as Google Analytics, Microsoft Clarity, and DebugBear. The site demonstrates excellent design quality, mobile optimization, and SEO practices, reflecting a mature digital infrastructure. Security is well addressed with HTTPS enforcement, SOC2 Type II and GDPR compliance, and enterprise-grade encryption, although some minor compliance gaps such as the absence of a cookie consent banner were noted. The security posture is strong with no detected vulnerabilities or exposed sensitive data. However, the lack of a public vulnerability disclosure or incident response contact information suggests room for improvement in transparency and readiness. Overall, the domain appears legitimate despite privacy-protected WHOIS data, which is common for SaaS providers. The company maintains trust through certifications, customer testimonials, and a partner ecosystem. Strategically, Expertise AI is well positioned in the AI SaaS market with a comprehensive product offering and strong compliance credentials. Continued focus on privacy compliance enhancements and security transparency will further strengthen their market trust and regulatory alignment.

Holidu GmbH operates the Holidu Smart Destination platform, providing innovative and comprehensive destination management solutions tailored for tourism destinations and hosts. The company leverages advanced technology combined with personal service to optimize marketing and booking processes for vacation rentals and related services. Their market position is strong, supported by multiple subsidiary brands and a medium-sized operation based in Germany. Technically, the website employs modern frameworks such as React and Tailwind CSS, hosted on AWS infrastructure, with good performance and mobile optimization. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, though explicit security policy documentation and incident response contacts are absent. Overall, the site is professional, trustworthy, and compliant with GDPR, with extensive analytics and marketing integrations. The domain registration data aligns well with the business claims, indicating legitimacy and consistency.

The website www.bad-duerkheim.de serves as the official municipal portal for the city of Bad Dürkheim in Germany. It provides comprehensive information about local government services, cultural events, tourism, and citizen services. The site is well-structured and targets residents, tourists, and local businesses, positioning itself as a key information hub for the region. The business model is typical of a government entity, focusing on public service delivery and community engagement. Technically, the website is built on the Ionas4 CMS platform, utilizing modern web technologies including SystemJS, Lit Web Components, and jQuery for legacy support. The site demonstrates good mobile optimization, accessibility, and SEO practices. Hosting is managed via Telekom Domains, indicating a stable and reputable infrastructure. From a security perspective, the site enforces HTTPS with strong SSL configurations and uses integrity attributes on scripts and fonts to prevent tampering. However, it lacks explicit security headers such as Content-Security-Policy and does not publish a security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is safe, professional, and trustworthy, with minor gaps in privacy and security policy disclosures. It does not contain any adult or questionable content, making it suitable for a general audience.

Westfalen-Blatt is a well-established regional news media company serving the Ostwestfalen-Lippe region in Germany. The website offers comprehensive news coverage, including local events, sports, and classifieds, supported by subscription and advertising revenue models. It is part of the larger Zeitungsgruppe Münster media group, indicating a strong market position in regional media. The site is professionally designed with consistent branding and good content quality targeting a general audience in Germany.

The website www.schifferstadt.de serves as the official digital presence of the Stadtverwaltung Schifferstadt, the local government administration of Schifferstadt, Germany. It provides comprehensive information and services related to living, governance, culture, tourism, economy, and environmental initiatives in the city. The site targets residents, visitors, and local businesses, offering structured navigation and a broad range of municipal services. The business model is that of a government entity focused on public service delivery and community engagement. Technically, the website employs modern web technologies including AngularJS, SystemJS, and the Ionas CMS platform. It is hosted on German infrastructure with nameservers indicating regional providers. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. Security is robust with HTTPS enforced and script integrity checks, although explicit security headers and policies could be enhanced. From a security and compliance perspective, the site implements a cookie consent mechanism and uses an accessibility tool (eye-able). However, it lacks explicit privacy policy, terms of service, and vulnerability disclosure pages, which are recommended for full GDPR compliance and transparency. No critical vulnerabilities or suspicious activities were detected. The WHOIS data aligns well with the website's government nature, showing consistent registration and hosting. Overall, the site is professional, trustworthy, and well-suited for its public service role. Strategic improvements include publishing comprehensive privacy and security policies, enhancing security headers, and providing incident response contacts to strengthen compliance and user trust.

The website www.speyer.de is the official digital presence of the city of Speyer, Germany, serving as a comprehensive portal for tourism, culture, city services, and public information. It positions itself as a trusted source for residents and visitors, highlighting Speyer's UNESCO World Heritage status and providing rich content on local attractions, events, and services. The site targets tourists, local citizens, and cultural enthusiasts, offering multilingual support and accessible design. Technically, the site employs modern web technologies including the ionas4 CMS, SystemJS module loader, AngularJS directives, and integrates analytics tools such as Google Analytics and Matomo. It features responsive design and accessibility enhancements, including the eye-able accessibility tool and cookie consent management compliant with GDPR. Performance is moderate, with good mobile optimization and SEO practices. From a security perspective, the site enforces HTTPS and implements privacy and cookie policies with user consent mechanisms. However, it lacks explicit security headers and published incident response or vulnerability disclosure policies. No critical vulnerabilities or suspicious content were detected. The WHOIS data is minimal but consistent with a legitimate municipal domain. Overall, the website demonstrates a strong business credibility and technical maturity suitable for a government entity, with room for improvement in security policy transparency and technical security headers. The risk profile is low, with no indications of malicious activity or compliance failures.

Diakonisches Werk Württemberg is a large non-profit social service organization based in Germany, focusing on providing a wide range of social welfare services including disability support, health and care, youth and family assistance, migration aid, and international disaster relief. The organization holds a strong regional leadership position in Württemberg and operates with a comprehensive digital presence including a well-structured website, social media channels, and online member services. The website is built on TYPO3 CMS and integrates privacy-conscious technologies such as Matomo analytics with IP anonymization and a robust cookie consent mechanism. Security posture is solid with HTTPS enforced and secure login forms, though there is room for improvement in publishing explicit security policies and headers. Overall, the site demonstrates professionalism, trustworthiness, and compliance with GDPR requirements.

Der evangelische Fachverband für Teilhabe (BeB) is a German non-profit organization affiliated with Diakonie, dedicated to advocating for people with disabilities and mental illnesses. It represents over 600 evangelical institutions and initiatives, focusing on improving social and political conditions to promote full participation and inclusion. The website provides comprehensive information about its activities, publications, events, and membership services, targeting stakeholders in social and disability sectors. Technically, the site is built on WordPress with modern plugins and good accessibility and SEO practices. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, serving as a credible platform for its mission.

Katholische Nachrichten-Agentur GmbH (KNA) is a specialized German news agency focusing on religious, social, cultural, and ethical topics. Founded in 1952 and operating under the parent company PubliKath GmbH, KNA offers a range of news services including full news feeds, thematic services, and image services. The website is professionally designed, content-rich, and targets media professionals, religious communities, and the general public interested in religion and social issues. The business model revolves around subscription-based news delivery and specialized thematic news services. Technically, the website is built on the TYPO3 CMS platform, utilizing modern web technologies such as jQuery and bxSlider for interactive content. The site is mobile optimized with good SEO practices, though accessibility features are basic. Performance is moderate, with no critical technical issues detected. Hosting details are not explicitly identified. From a security perspective, the site enforces HTTPS with excellent SSL configuration but lacks visible security headers and public security policies. No vulnerabilities or exposed sensitive data were found. Privacy compliance is generally good with a comprehensive privacy policy and terms of service, but the absence of a cookie consent mechanism is a notable gap. Contact information is clearly provided, enhancing business credibility. Overall, the website is trustworthy, professionally maintained, and aligned with its business purpose. Strategic improvements include implementing cookie consent, enhancing security headers, and publishing incident response information to strengthen compliance and security posture.

The website represents the Deutschsprachige Provinz der Don Bosco Schwestern, a Catholic women's religious order active since 1922 in Germany and Austria. Their mission focuses on education, accompaniment, and housing for children and youth. The organization maintains a professional online presence with clear branding, comprehensive content, and active social media channels. Technically, the site uses a modern CMS (siteswift), jQuery, and various UI libraries, with a cookie consent manager ensuring GDPR compliance. Security posture is moderate with CSRF protections and consent mechanisms but lacks visible HTTP security headers and published security policies. WHOIS data is unavailable, which slightly reduces domain trust but does not detract from the site's professionalism. Overall, the site is a credible, well-maintained digital asset for a non-profit religious organization.

Salesianer Don Boscos is a well-established non-profit Catholic religious order operating in Austria since 1903, focusing on social and youth services including education, pastoral care, and community support. The organization maintains a professional and content-rich website that effectively communicates its mission and services to socially disadvantaged youth and the general public. The site is supported by a modern technical infrastructure using the siteswift CMS and various JavaScript libraries, ensuring good user experience and mobile optimization. Security posture is moderate with CSRF protections and cookie consent mechanisms in place, though explicit security headers and incident response policies are absent. Privacy compliance is strong with clear privacy and cookie policies and GDPR consent management. Overall, the website reflects a credible and trustworthy organization with transparent contact information and active social media presence.

Teach Cambridge is a specialized educational platform providing OCR teachers with access to a wide range of teaching resources, including assignments, examiner reports, exemplars, past papers, and training materials. The platform is positioned as a secure, personalized website under the reputable Cambridge University Press & Assessment brand, targeting educators involved in OCR qualifications. The business model focuses on supporting teachers with high-quality, official resources to enhance learner assessment preparation. Technically, the website is built using modern React technology, hosted with Cloudflare DNS services, and integrates analytics tools such as Google Tag Manager and Hotjar for user behavior insights. The site demonstrates good mobile optimization and a professional design, although accessibility and SEO optimizations are basic. Security-wise, the site enforces HTTPS and uses clientTransferProhibited domain status, but lacks DNSSEC and advanced security headers. No explicit security or incident response policies are published, indicating room for improvement in transparency and compliance. Overall, the website is trustworthy, safe, and well-aligned with its educational mission, but could benefit from enhanced security practices and clearer contact channels.

University Admissions Tests UK (UAT-UK) is a specialized educational service offering three computer-based admissions tests (ESAT, TMUA, TARA) for entry into top UK universities. The service is a collaboration between Imperial College London and the University of Cambridge, leveraging Pearson VUE's global test center network. The website is professionally designed, mobile-optimized, and provides comprehensive information about test dates, registration, bursaries, and access arrangements. Technically, the site uses WordPress CMS with modern performance and privacy tools, including Google Tag Manager and a cookie consent plugin. Security posture is good with HTTPS and no exposed sensitive data, though explicit security policies and incident response contacts are absent. Privacy compliance is strong with clear cookie and privacy policies and opt-in consent mechanisms. The domain is long-established, registered directly with Nominet, and consistent with the site's UK educational focus, indicating high legitimacy and trustworthiness.

The website wegweiser-kita-schule-frankfurt.de serves as an informational portal focused on childcare and school services in Frankfurt am Main. It is a collaborative effort between the city's school authority and a media partner, providing structured listings and search functionalities for parents and residents. The site uses modern web technologies such as Ionic Framework and Angular, ensuring a responsive and user-friendly experience, particularly on mobile devices. However, the site lacks explicit contact information, cookie consent mechanisms, and comprehensive privacy or security policies, which are important for compliance and user trust. Security headers are not detected, indicating room for improvement in security posture. Overall, the site appears legitimate and professionally maintained but could benefit from enhanced privacy and security features.

The website artkaleidoscope.de serves as a regional art magazine focused on Frankfurt/Main and the Rhein-Main area, providing quarterly publications, interviews, stories, and reports on current art events, artists, and exhibitions in museums, galleries, and off-spaces. The target audience primarily consists of art enthusiasts and cultural consumers within the region. The business model revolves around media publication and digital content delivery, including a mobile app. Technically, the site is built on Weblication CMS, uses HTTPS, and integrates etracker analytics for user tracking with a cookie consent mechanism. The design and content quality are good, with clear navigation and mobile optimization. Security posture is moderate, with HTTPS enabled but lacking explicit security headers and detailed privacy policies. Contact is available via a web form, but no direct emails or phone numbers are provided. Overall, the site is safe, professional, and trustworthy for general audiences.

The MuseumsuferCard website represents a well-established cultural offering managed by k/c/e Marketing GmbH in cooperation with the Kulturamt der Stadt Frankfurt am Main. It provides annual access cards to 39 museums and cultural events in Frankfurt and surrounding areas, targeting culture enthusiasts, families, and tourists. The site is professionally designed with clear navigation, mobile optimization, and rich content describing the product offerings and benefits. Technically, the site uses modern JavaScript libraries such as Swiper.js, integrates Google Tag Manager and Facebook Pixel for analytics and marketing, and employs Usercentrics for GDPR-compliant consent management. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is good with a clear privacy policy and cookie consent mechanism. Contact information is comprehensive, enhancing business credibility. Overall, the site scores high on professionalism, trustworthiness, and user experience.

CITY CARD is a regional cultural discount card service focused on providing residents and visitors of Frankfurt and the Rhein-Main area with exclusive 2for1 offers and discounts across events, leisure, gastronomy, and shopping. The website presents a professional and content-rich platform with a clear focus on cultural and lifestyle benefits, targeting a general audience interested in local cultural engagement. The business model revolves around membership and promotional partnerships with local vendors and event organizers, positioning CITY CARD as a key player in the regional cultural discount market. Technically, the website employs a moderate technology stack including jQuery, Google Tag Manager, and Usercentrics for consent management. The site is served over HTTPS with basic privacy compliance mechanisms in place, including a privacy policy and cookie consent banner. However, there is room for improvement in security headers and mobile optimization. The site features extensive image-based animations to promote offers, enhancing user engagement but potentially impacting performance. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and default denial of tracking until user consent. Google Analytics is integrated but disabled by default, respecting privacy regulations. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests a moderate security maturity level. Overall, CITY CARD's website is trustworthy, professionally maintained, and compliant with GDPR requirements. Strategic enhancements in security headers, mobile responsiveness, and explicit policy disclosures would further strengthen its security posture and user trust.

Genussakademie Frankfurt is a well-established culinary school and event organizer founded in 2004, offering a wide range of cooking courses, tastings, private dining experiences, and culinary travel options primarily targeting consumers interested in gastronomy and cooking in the Frankfurt region. The website demonstrates a solid technical infrastructure with the use of modern JavaScript libraries, Google Tag Manager, and a consent management platform, reflecting a mature digital presence. Security posture is adequate with HTTPS enabled and consent mechanisms in place, though improvements such as enabling DNSSEC and adding security headers are recommended. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, supporting a positive user experience and business credibility.

WWF Schweiz operates the Panda Club website as a child-friendly educational platform focused on wildlife and environmental awareness. The site leverages WordPress CMS with modern technologies including jQuery, Google Tag Manager, and Usercentrics for consent management. The website is well-branded, consistent, and professionally designed to engage children with interactive and informative content about animals and conservation efforts. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is robust, linking to a comprehensive GDPR-compliant privacy policy managed by WWF Schweiz. Overall, the site represents a trustworthy and legitimate non-profit entity with a clear mission and audience.

Duda.news is a German online media platform providing current news and educational content specifically tailored for children, with a regional focus on Cologne and global topics. The site offers a variety of content including children's news, an animal ABC, a lexicon, and interactive tips, positioning itself as a niche educational news provider. The platform is built on WordPress CMS, utilizing common plugins such as Yoast SEO, Contact Form 7, and cookie consent tools, indicating a moderate level of digital maturity and technical infrastructure. The website is well-structured, mobile-optimized, and regularly updated, reflecting good content quality and user experience. Security posture is adequate with HTTPS enforced and cookie consent implemented, though improvements in security headers and vulnerability disclosure mechanisms are recommended. Overall, the site demonstrates a trustworthy and professional presence with no signs of malicious activity or adult content, making it suitable for its target audience of children and families.

Zentrale für Unterrichtsmedien im Internet e.V. (ZUM) is a German non-profit organization dedicated to promoting digital education and open teaching materials since 1997. The website serves as a portal offering various educational platforms and tools, targeting educators, students, and learners interested in digital and open educational resources. The organization operates on a volunteer basis and is funded through donations, emphasizing free and accessible teaching content. Technically, the website is built on WordPress with modern plugins and libraries, including interactive H5P content and privacy-focused Matomo analytics. The site is well-structured, mobile-optimized, and provides clear navigation and relevant content. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or suspicious activities were detected. Overall, the site reflects a mature, trustworthy educational platform with strong compliance to GDPR and privacy standards.

Anafra operates a specialized e-commerce platform focused on server hardware, components, and IT services, prominently featuring Supermicro builds. The website targets IT professionals and businesses in European markets, offering a broad catalog of products and services including virtual private servers, IT management, hosting, and warranty services. The platform supports multiple languages and currencies, enhancing accessibility for its target audience. Technically, the website employs a modern tech stack with jQuery, Google Tag Manager, Microsoft Clarity, and live chat integrations, indicating a mature digital infrastructure. Performance and mobile optimization are adequate, though accessibility features could be improved. Security posture is solid with HTTPS enforcement, captcha on login forms, and cookie consent mechanisms, but lacks explicit security headers and published security policies. Overall, the website is professional, trustworthy, and compliant with GDPR cookie consent requirements, though it would benefit from enhanced transparency in security and privacy policies.

MorgueFile is a well-established online platform founded in 2001 that provides a large collection of over 410,000 free stock photos for commercial and creative use. The website targets creative professionals such as illustrators, designers, educators, and the general public seeking free image resources. Its business model primarily revolves around offering free content while monetizing through affiliate marketing partnerships, notably with Shutterstock. The site maintains a consistent brand presence and offers a user-friendly experience with good navigation and mobile optimization. Technically, MorgueFile employs modern web technologies including Vue.js for its frontend, integrates multiple analytics and tracking services such as Google Analytics, Google Tag Manager, and Hotjar, and uses Cloudflare for DNS and likely CDN services. The website performance is moderate with good SEO and accessibility basics, though there is room for improvement in security headers and DNS security. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but lacks DNSSEC and security headers which are recommended best practices. Privacy compliance is basic; while a privacy policy and terms of service exist, there is no cookie consent mechanism or advanced GDPR compliance indicators. No direct contact information or incident response contacts are provided, which could be improved for transparency and trust. Overall, MorgueFile presents a trustworthy and professional platform with a strong market position in free stock photography. Strategic improvements in security practices and privacy compliance would enhance its risk posture and user trust.

GetSimpleCMS is an open source content management system focused on simplicity and efficiency, written in PHP and designed as a flatfile CMS. The project is community-supported and originally developed by Chris Cagle. The website serves as an informational and project hub hosted on GitHub Pages, providing documentation, credits, and links to the GitHub repository. The technical infrastructure is modern for a static site, leveraging Jekyll for site generation and GitHub for hosting. The CMS itself requires PHP and certain extensions, targeting developers and small to medium website owners seeking a lightweight CMS solution. Security posture is moderate; while the CMS recommends Apache for security and .htaccess usage, the website lacks HTTPS enforcement and security headers, which should be addressed. Privacy and cookie policies are absent, and no direct contact information is provided, limiting compliance and user trust. Overall, the site is legitimate and trustworthy as an open source project but would benefit from improved security and privacy practices.