Medium-risk security reports

Münchener Hypothekenbank eG operates the website mhb-plus.de to promote its Mitglieder-Plus membership program, offering cashback and insurance benefits primarily through partnerships with R+V Versicherung. The site targets members and potential members of the bank, providing clear information on benefits and contact options. Technically, the site is built on Drupal 11 with Bootstrap Barrio theme, uses Matomo for analytics, and Cookiebot for GDPR-compliant cookie consent management. The hosting infrastructure is likely provided by Deutsche Telekom, inferred from the nameservers. Security posture is solid with HTTPS and cookie consent mechanisms, though security headers and incident response policies are not explicitly published. Privacy compliance is supported by Cookiebot's comprehensive privacy policy, though no direct privacy policy page on the domain was found. Contact information includes a phone number and a contact form, but no direct email addresses or social media links were detected. Overall, the website is professional, trustworthy, and well-structured, suitable for its financial services audience.

Münchener Hypothekenbank eG operates the website www.meindarlehen.de as a digital customer portal for mortgage loan management. The portal offers services such as personal data updates, payout requests, repayment options, contract adjustments, and membership management, targeting loan customers primarily in Germany. The website reflects an established financial institution with a medium-sized market presence and a focus on customer self-service through a modern web interface. Technically, the site is built on Drupal CMS, utilizing common libraries such as jQuery, Bootstrap, FontAwesome, and Slick Carousel for UI components. The site is mobile-optimized and accessible, with moderate performance characteristics. Security posture is good with HTTPS enforced and cookie consent managed via Cookiebot, but lacks explicit security headers and published security policies. Analytics are handled via Matomo, indicating a privacy-conscious approach. Contact information is clearly provided, enhancing business credibility. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

DZ BANK AG is a leading German corporate and investment bank serving cooperative banks and their clients. The website demonstrates a mature digital presence with comprehensive information on corporate governance, compliance, sustainability, investor relations, and client services. The technical infrastructure leverages Adobe Experience Manager CMS, modern JavaScript libraries, and privacy-conscious analytics tools such as Matomo and Usercentrics. Security posture is strong with HTTPS enforcement, security headers, and consent management, though the absence of a public security.txt and incident response contacts suggests room for improvement. The missing WHOIS data is a notable anomaly but does not detract from the professional and trustworthy nature of the website content. Overall, DZ BANK's website reflects a well-established financial institution with a strong emphasis on compliance and sustainability.

IPConcept is a specialized financial services company focused on fund administration and management solutions, operating primarily in Germany, Luxembourg, and Switzerland. It is a 100% subsidiary of DZ PRIVATBANK, providing services such as private label funds, alternative investment funds, risk management, order management, performance analysis, and reporting. The company targets asset managers, institutional clients, and banks, positioning itself as a reliable partner with a strong backing from a major bank. The website content is professional, well-structured, and GDPR compliant, reflecting a mature digital presence.

Stadtwerke Göttingen AG is a regional energy utility company serving Göttingen and its surrounding areas with electricity, gas, district heating, and water services. The company emphasizes sustainability and innovation, offering additional services such as photovoltaic systems and e-mobility solutions under its brand neuwerk. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to residential and commercial customers. Technically, the site is built on TYPO3 CMS and integrates modern analytics and marketing tools with a strong focus on GDPR compliance through a consent management platform. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy and trustworthiness of the site.

Wir-e.de is a German-language platform dedicated to enabling institutions, communities, and individuals within the church context to create, discover, and subscribe to websites quickly and free of charge. The platform serves a niche market focused on church-related digital presence, providing a valuable service to non-profit and community organizations. Technically, the website is built on a modern Ruby on Rails stack, utilizing Bootstrap and Font Awesome for UI components, and includes a custom CMS for content management. The site is mobile responsive and implements basic accessibility and SEO features. Security-wise, the site enforces HTTPS, includes standard security headers, and uses CSRF tokens in forms, reflecting a good security posture. However, it lacks publicly available security policies, incident response contacts, and vulnerability disclosure mechanisms. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, indicating GDPR awareness. Overall, the website is trustworthy, professional, and well-suited for its target audience, though it could improve transparency and contactability.

Sparkasse Göttingen is a regional financial institution providing a broad range of banking and financial services including online banking, loans, credit cards, investments, insurance, and real estate services. The website targets both private and corporate customers with a strong emphasis on secure and user-friendly online banking experiences. The bank maintains a solid market position within the Göttingen region, supported by comprehensive service offerings and a professional digital presence. Technically, the website is built on a modern infrastructure likely powered by Adobe Experience Manager CMS, utilizing JavaScript, CSS, and React components for dynamic content. The site is well-optimized for mobile devices and accessibility, featuring clear navigation and SEO best practices. The presence of cookie consent mechanisms and privacy policies indicates a mature approach to data protection and compliance. From a security perspective, the website enforces HTTPS and includes session management features such as session timeout warnings. While explicit security headers are not fully confirmed, the overall posture is strong with no visible vulnerabilities or exposed sensitive data. However, the absence of a published security policy or incident response contact suggests room for improvement in transparency and readiness. Overall, the site is trustworthy, professionally maintained, and compliant with GDPR requirements. It demonstrates a high level of digital maturity suitable for a financial institution, with recommendations focusing on enhancing security disclosures and incident response transparency.

Ristorante Fellini is a family-run Italian restaurant based in Göttingen, Germany, offering traditional Italian pizzas and dishes with an online ordering platform powered by Shopify. The website targets local customers seeking authentic Italian cuisine with convenient online access. The business operates in the hospitality sector with a small-sized footprint and a focus on community engagement. Technically, the website leverages modern web technologies including Shopify's e-commerce platform, jQuery, Font Awesome for icons, and Cookiebot for cookie consent management, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the website uses HTTPS and implements cookie consent, but lacks explicit security headers and formal privacy or terms of service documentation, which are areas for improvement. No WAF or blocking mechanisms were detected, and the WHOIS data is minimal but not suspicious. Overall, the website is functional and trustworthy for its business purpose but would benefit from enhanced security and compliance documentation.

The Göttinger Kulturstiftung is a small non-profit cultural foundation affiliated with the city of Göttingen, Germany. It focuses on supporting cultural activities through funding and public information. The website serves as an informational portal for cultural funding opportunities and donation options, targeting local cultural organizations and citizens. The business model is centered on non-profit cultural promotion with a clear local focus. Technically, the website is built on a custom CMS platform (NOLIS) using standard web technologies such as JavaScript and CSS. It features a responsive design with accessibility options like font resizing and contrast toggling. The site is well-structured with clear navigation and SEO-friendly metadata. Performance is moderate with no major issues detected. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, it lacks advanced security headers and does not publish explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were found. The WHOIS data confirms domain legitimacy and consistency with the organization's identity. Overall, the website is professional, trustworthy, and suitable for its target audience. Strategic improvements could include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to strengthen security posture and user trust.

Stiftung Niedersachsen is a regional cultural foundation dedicated to promoting and funding cultural projects throughout the German state of Niedersachsen. The foundation operates as a non-profit entity, supporting a wide range of cultural sectors including music, theater, museums, literature, and social culture. Their website reflects a professional and well-structured digital presence, targeting cultural institutions, artists, and non-profit projects within the region. The foundation's market position is that of a key regional cultural supporter with a clear focus on fostering cultural diversity and sustainability.

The website www.niedersachsen.de is the official portal of the Lower Saxony state government in Germany. It serves as a comprehensive information hub for residents, government officials, and other stakeholders, providing detailed content on politics, state administration, culture, energy, emergency monitoring, integration, and public services. The site is well-structured, multilingual, and professionally designed, reflecting its authoritative government status. The business model is purely informational and service-oriented, targeting the general public and specific groups such as refugees and local citizens. Technically, the site uses a mature technology stack including jQuery, Video.js, FancyBox, Slick Carousel, DataTables, and Matomo analytics, managed via the Powerslave Liveserver CMS. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks some security headers and explicit cookie consent mechanisms. Overall, the security posture is good with no detected vulnerabilities or suspicious content. The domain WHOIS data is privacy-protected as per DENIC policies, consistent with a government domain. The site lacks explicit security policies or incident response contacts, which could be improved. Privacy compliance is generally good, though cookie consent mechanisms should be enhanced. The risk assessment is low, with recommendations focusing on improving security headers, cookie consent, and publishing security policies to enhance trust and compliance. The site is trustworthy, professional, and safe for general audiences.

Büchergilde Gutenberg is a well-established German book community and cooperative founded in 1924, offering curated book subscription boxes, an online bookshop, and literary events. The website reflects a professional and consistent brand presence targeting German-speaking book lovers and literature enthusiasts. Technically, the site uses modern frameworks such as Next.js and React, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled but lacks visible security headers and formal privacy or cookie policies. No incident response or vulnerability disclosure information is provided, which could be improved to enhance trust and compliance. Overall, the domain and website appear legitimate and consistent with the business history and sector.

Eugen Pfeifer GmbH is a medium-sized German company specializing in climate technology, including planning, installation, and operation of climate, air, and refrigeration systems. The company targets both industrial and private customers, emphasizing tailored solutions for air conditioning and industrial refrigeration. Their market position is that of an experienced regional specialist with a focus on quality and customer service. Technically, the website is built on Joomla CMS with Bootstrap and jQuery, offering a modern and responsive user experience, though some accessibility and SEO improvements are possible. Security posture is solid with HTTPS and cookie consent mechanisms, but lacks advanced security headers and incident response information. Overall, the site is professional and trustworthy, though contact information is not explicitly presented on the homepage, which could be improved for better business credibility.

Südwestrundfunk (SWR) is a large regional public broadcasting organization serving the German states of Baden-Württemberg and Rheinland-Pfalz. The website www.swr.de serves as a comprehensive portal for news, radio, television, and online media content including live streams and event calendars. The site targets a general audience interested in regional and national news, culture, sports, and lifestyle content. Technically, the website employs modern web technologies such as ES6 JavaScript modules, lazy loading, and integrates analytics tools like Chartbeat and Piano Analytics, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and no visible sensitive data exposure, though explicit security headers and vulnerability disclosures are not evident. Privacy compliance is limited in the visible content, lacking explicit privacy and cookie policies or consent mechanisms. Overall, the site is professional, trustworthy, and well-branded, consistent with a public media entity.

PFPRO IT Services is a small German IT company based in Saarbrücken, specializing in professional web development, IT consulting, and support services. Founded in 2008, the company offers a range of services including consulting, custom web application development, IT support, remote maintenance, and emergency IT services. They also provide a cloud-based industry solution called PFPRO Cloud R6 targeting sectors like gastronomy and entertainment. The website is well-structured, professionally designed, and targets both businesses and private users in the local region. The company maintains an active presence on LinkedIn, Xing, and GitHub, enhancing its professional credibility. Technically, the website employs a modern technology stack including Bootstrap, FontAwesome, jQuery, Owl Carousel, and Matomo for analytics, combined with Usercentrics for GDPR-compliant cookie consent management. The site is mobile-optimized and uses HTTPS with good SSL configuration. However, explicit security headers are not detected, and no dedicated security policy or incident response information is provided. The website demonstrates good privacy compliance and moderate user tracking through Matomo. From a security perspective, the site shows a solid baseline with HTTPS and consent management but lacks advanced security headers and documented incident response processes. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data aligns well with the website's business claims, showing consistent registration information and domain age appropriate for the company's founding date. Overall, PFPRO IT Services presents a trustworthy and professional online presence with good technical implementation and privacy compliance. Strategic improvements could include enhancing security headers, publishing a security policy, and providing incident response contacts to further strengthen trust and security posture.

The website vergabe.saarland serves as the official electronic procurement platform for the Saarland region in Germany, operated by Zweckverband eGo-Saar. It provides public sector entities such as cities, municipalities, and state administration with a centralized platform to publish tenders and manage electronic submissions. The platform targets businesses and contractors interested in public procurement within Saarland, offering services like digital download of tender documents and electronic bid submission. The site is well-branded with official logos and maintains a professional appearance consistent with government standards. Technically, the website is built on WordPress 6.8.3 with common web technologies such as jQuery and Slick Carousel for UI components. Hosting is provided by plusserver.com, and the site uses HTTPS with a valid SSL certificate. Cookie consent is implemented with an opt-in mechanism for Google Analytics and Facebook Ads, reflecting a good level of privacy compliance. However, some security headers are missing or misconfigured, such as an empty Content-Security-Policy and lack of DNSSEC, which slightly reduce the security posture. From a security perspective, the site enforces HTTPS and uses clientTransferProhibited status on the domain to prevent unauthorized transfers. The WHOIS data aligns well with the website's governmental purpose, showing consistent registration details. No signs of malware, phishing, or suspicious activity were detected. The cookie consent mechanism and privacy policy indicate GDPR compliance, but no explicit security policy or incident response information is published. Overall, vergabe.saarland is a legitimate, regionally focused government procurement platform with good content quality and business credibility. Security practices are adequate but could be improved by enabling DNSSEC, configuring security headers properly, and publishing security policies. The site is safe for general audiences and does not contain any adult or questionable content.

The website www.saarland.de is currently inaccessible due to a 403 Forbidden error page indicating that a security service or WAF is blocking access. The page content is minimal and only displays a block message without any business or contact information. The domain appears to be a legitimate German government domain based on its .de TLD and nameservers pointing to teresto.net, likely a hosting or DNS provider. However, the lack of accessible content prevents a full assessment of the website's business model, services, or compliance posture. Technically, the site uses basic CSS and font resources but no advanced frameworks or analytics are detected. Security headers and SSL configuration cannot be evaluated due to the block. Overall, the site’s security posture is unclear but the presence of a WAF indicates some level of protection. Privacy and compliance documentation are absent from the accessible content.

The website www.115.de serves as the official German government service portal providing citizens with a centralized phone number (115) to access administrative information and services from federal, state, and local authorities. It targets the general public in Germany, offering comprehensive support for a wide range of administrative topics. The site is well-positioned as a trusted, nationwide service with over 71 million reachable citizens and multiple service centers. The content is professionally curated, accessible, and includes features for easy language and sign language support. Technically, the site is built on the TYPO3 CMS platform, leveraging modern web technologies such as Matomo for privacy-compliant analytics and Cookiebot for consent management. The site demonstrates good mobile optimization, accessibility, and SEO practices. The use of consent-based tracking and blocking mechanisms reflects a mature approach to privacy compliance. From a security perspective, the site enforces HTTPS and integrates cookie consent mechanisms to manage user privacy. While explicit security headers are not fully visible in the provided data, the overall posture is good with no evident vulnerabilities or exposed sensitive data. However, the site lacks publicly available security policies or incident response contacts, which could be improved. Overall, www.115.de is a high-quality, trustworthy government service website with strong privacy and usability features. It is recommended to enhance security transparency by publishing security policies and implementing comprehensive security headers to further strengthen its security posture.

CCTV News Content Co., Ltd. operates www.cctvplus.com as a global international video agency specializing in news video content, live streaming, archives, and special video services. The company targets media professionals, broadcasters, and international audiences interested in comprehensive news coverage, particularly related to China and global affairs. Their business model revolves around content provision and distribution with subscription and service offerings such as AI speech translation and virtual studio services. The website reflects a medium-sized media entity with consistent branding and professional content quality.

The website www.dreamstime.com is currently inaccessible due to a PerimeterX Web Application Firewall (WAF) security challenge page requiring human verification. This prevents access to any meaningful content, metadata, or business information. The WHOIS query for the domain returned no match, indicating either a WHOIS server issue or domain registration anomaly, which limits the ability to verify domain ownership and legitimacy. The site uses modern web technologies such as JavaScript and Google Fonts but lacks visible security headers or privacy compliance information in the accessible content. Overall, the security posture and compliance status cannot be fully assessed due to the blocked content. The domain appears legitimate but lacks publicly available registration data and accessible website content for full evaluation.

Antares Project GmbH is a German company specializing in advancing digital education through its Edupool platform, which facilitates easy and fast lesson planning and a marketplace for educational media and apps. The company has a strong presence across all German federal states and is used by a majority of schools in Germany. Supported by partnerships with major educational publishers and Deutsche Telekom AG, as well as funding from the EU and regional government, Antares positions itself as a key player in the digital education sector. Technically, the website is built on modern web technologies using Webflow CMS and includes minimal but effective analytics via Plausible, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS implied, but lacks advanced security headers and explicit policies. Privacy compliance is reasonable with a privacy policy present but no cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with its business goals.

The website www.lernsax.de/wws/9.php appears to be a minimal content page primarily embedding an iframe with a session-based PHP URL. There is no visible business branding, metadata, or descriptive content to ascertain the company's market position or services. The technical infrastructure includes basic JavaScript libraries such as jQuery and local scripts, hosted on nameservers associated with bringe.net. The site lacks HTTPS information and security headers, indicating a weak security posture. No privacy, cookie, or terms of service policies are present, and no contact or business information is available, limiting trust and compliance evaluation. Overall, the site appears to be an internal or restricted access portal rather than a public-facing business website.

Bildungsmediathek NRW is a regional educational media platform serving schools and educators in North Rhine-Westphalia, Germany. It offers a wide range of educational media, apps, and materials to support teaching and learning. The platform is supported by governmental and regional bodies, ensuring a trusted and authoritative source of educational content. The website is professionally designed with clear navigation and a strong focus on accessibility and user experience. Technically, it employs modern web technologies including JavaScript frameworks and privacy-focused analytics, hosted likely on specialized educational cloud infrastructure. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is strong with clear privacy and terms policies, but lacks a cookie consent mechanism. Overall, the site is trustworthy, well-maintained, and serves its educational mission effectively.

GEOMAR Helmholtz-Zentrum für Ozeanforschung Kiel is a prominent German research institution specializing in oceanographic and climate research. The website serves as a comprehensive platform for scientific information, research programs, expeditions, and public outreach. It targets researchers, students, policymakers, and the general public interested in marine and climate sciences. Affiliated with the Helmholtz Association, GEOMAR holds a strong market position in the education and government research sectors. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries such as jQuery and Slick Slider, providing a responsive and accessible user experience. The site demonstrates good SEO practices and mobile optimization, though performance is moderate. Security posture is solid with HTTPS enforced and some security headers present, but could be improved by adding more comprehensive headers and visible incident response policies. Overall, the site is trustworthy and professional, with clear branding and consistent content quality. However, it lacks a visible cookie consent mechanism and explicit security contact information, which are areas for improvement. The domain registration data aligns well with the website content, reinforcing legitimacy and trustworthiness.

Fastenaktion der Diözese St.Pölten is a well-established non-profit organization founded in 1963, operating under the Diocese of St. Pölten in Austria. The organization focuses on supporting international development projects in health, education, pastoral care, and environmental responsibility through donations and volunteer efforts. The website serves as an information hub and donation platform, targeting parish communities and supporters interested in charitable development cooperation. Technically, the site is built on WordPress using the TwentySixteen theme, with modern accessibility and cookie consent features implemented. Hosting is inferred to be on Amazon Web Services, ensuring reliable performance and security. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although security headers could be improved. Privacy compliance is well addressed with a clear cookie consent mechanism and a GDPR-compliant privacy policy. Overall, the website presents a professional, trustworthy, and user-friendly experience aligned with its non-profit mission.

Katholische Aktion der Erzdiözese Wien is a small non-profit Christian organization affiliated with the Archdiocese of Vienna. It focuses on societal and ecological engagement to foster a more just and peaceful world, targeting socially conscious Christians and community members in Austria. The website provides information on their activities, volunteer opportunities, spiritual programs, and newsletters to keep their audience engaged. Technically, the website is built on the siteswift-CMS platform, utilizing modern JavaScript libraries such as jQuery, Swiper, and Magnific Popup. It implements cookie consent management via Klaro and uses Google Analytics for visitor tracking. The site is mobile-optimized and accessible, though SEO optimization is basic. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, but lacks advanced security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good with a clear privacy and cookie policy, including consent mechanisms. Overall, the website is professional, trustworthy, and well-maintained, with clear contact information and consistent branding. Strategic improvements could include enhanced security headers, publishing incident response contacts, and adding a vulnerability disclosure policy to strengthen security posture and trust.

Meine Kirchenzeitung is a regional media outlet focused on church and community news in Tirol, Austria, providing current news, reports, opinions, and images primarily related to religious and local topics. The website offers services such as news articles, ePaper subscriptions, event listings, and community photo sharing, targeting readers interested in faith and regional affairs. The business model is based on media publishing with advertising and subscription revenue streams. The site maintains consistent branding and professional editorial content, supported by author profiles and clear privacy policies.

Fressnapf is a large retail company specializing in pet supplies, serving primarily the German market. The website presents a professional design with good mobile optimization and moderate performance. The technical infrastructure includes Adobe Tag Manager for marketing and analytics purposes, and the domain is hosted with EuroDNS, indicating a stable hosting environment. However, the website lacks visible privacy and cookie policies, security headers, and explicit contact information, which are critical for compliance and trust. The WHOIS data is consistent with a legitimate business, showing no privacy protection or suspicious registration patterns. Overall, the site demonstrates a moderate digital maturity but requires improvements in security and privacy compliance to enhance trust and regulatory adherence.

Katholische Kirche Kärnten operates as the official online portal for the Catholic Church in the Kärnten region of Austria, providing daily news, event information, and community engagement tools for its audience. The website serves as a comprehensive resource for parishioners and interested individuals, offering spiritual content, organizational updates, and access to church services and events. The platform maintains a consistent brand identity and high content quality, reflecting its role as a trusted religious institution's digital presence. Technically, the website employs a modern tech stack including jQuery, Slick Slider, and Google Analytics, with a responsive design optimized for mobile devices. The site uses HTTPS with strong SSL configuration and incorporates privacy and cookie consent mechanisms, demonstrating compliance with GDPR and user privacy standards. While no explicit security policies or incident response contacts are published, the site follows good security practices such as CSRF protection and encrypted form submissions. Security posture is solid with no detected vulnerabilities or suspicious domains linked. The site integrates social media channels effectively and maintains transparency through an impressum and privacy policy. Overall, the website is professional, trustworthy, and well-maintained, supporting the Catholic Church's mission in the region. Recommendations include enhancing security headers, publishing a formal security policy or incident response contact, and considering a terms of service page to further improve compliance and user trust.

Katholische Kirche Steiermark operates as the official Catholic Diocese of Graz-Seckau, Austria, providing religious, educational, and community services. The website serves as a comprehensive portal for diocesan news, parish information, faith education, and community engagement. It holds a strong regional position as a trusted religious authority with a history dating back to 1218. Technically, the site is built on the siteswift-CMS platform, leveraging modern JavaScript libraries such as jQuery and Swiper.js, and integrates Google Maps and Matomo analytics. The site is mobile-optimized and accessible, with a clear navigation structure and professional design. Security posture is solid with HTTPS, security headers, and CSRF protections, though explicit security policies and incident response details are not publicly disclosed. Privacy compliance is well managed with a comprehensive privacy policy and cookie consent mechanism. Overall, the site is trustworthy, professional, and well-maintained, serving its target audience effectively.

Katholische Kirche Vorarlberg / Diözese Feldkirch operates as a regional Catholic Church institution in Austria, providing religious services, community engagement, cultural heritage preservation, and educational programs. The website serves as a comprehensive portal for parishioners and the general public interested in church activities and spiritual resources. The organization positions itself as a trusted non-profit entity with a strong regional presence in Vorarlberg. Technically, the website is built on the siteswift CMS platform, utilizing modern JavaScript libraries such as jQuery, Photoswipe, and Swiper for enhanced user experience. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be improved. Security posture is solid with HTTPS enforced, CSRF protection in forms, and a GDPR-compliant cookie consent mechanism via Klaro. However, additional security headers and published security policies would strengthen the security framework. Overall, the website is professional, trustworthy, and well-aligned with its mission, though contact information and incident response details are not explicitly visible in the provided content.

The website www.lagerkochbuch.at is a non-profit community platform operated by the Diözesanleitung der Jungschar Wien, focused on providing cooking recipes, meal planning tools, and shopping list generation for youth groups and volunteers preparing meals for large groups. The site is well-branded and consistent with the Austrian youth organization Jungschar Wien, targeting children, youth leaders, and adult volunteers. Technically, the site uses an AngularJS 1.x framework with Bootstrap and Material Design components, delivering a moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, but lacks modern security headers and uses an outdated JavaScript framework that may expose vulnerabilities. Privacy compliance is good with a visible privacy and cookie policy, though terms of service and explicit security policies are missing. Overall, the site is trustworthy, safe, and professionally presented, but would benefit from technical modernization and enhanced security practices.

The website jungscharshop.at is an e-commerce platform operated by the Catholic Jungschar organization in Austria, offering religious educational materials, games, and gifts targeted at youth groups and church communities. The site serves a niche market within the non-profit religious sector, focusing on supporting youth work through product sales. The technical infrastructure uses Bootstrap, jQuery, and Google Analytics, with basic mobile optimization and accessibility features. While the site is functional and professionally designed, some backend PHP warnings are visible, indicating code quality issues that could pose security risks. Cookie consent and privacy policies are implemented, reflecting GDPR compliance awareness, but explicit security policies and incident response information are absent. Overall, the site is moderately secure and trustworthy but would benefit from technical and security improvements.

Dreikönigsaktion is a non-profit charitable organization affiliated with the Catholic youth group in Austria, focusing on providing aid and development assistance to over a million people in Africa, Asia, and Latin America. The website serves as an informational and fundraising platform, leveraging the TYPO3 CMS and modern web technologies to deliver content primarily in German to a general audience. The organization maintains a consistent brand presence and demonstrates a commitment to privacy through the implementation of a cookie consent mechanism and the use of privacy-respecting analytics tools like Matomo. Security posture is solid with HTTPS enforced, though there is room for improvement in security headers and explicit security policies. Overall, the website is professional, trustworthy, and well-positioned within its sector.

The website 'Aufrunden, bitte.' is a charitable initiative operated by Caritas Österreich in partnership with major Austrian retail chains such as BILLA, PENNY, BIPA, and SUTTERLÜTY. It enables customers to round up their purchase amounts to support social projects for disadvantaged people in Austria. The initiative has been active since 2013 and has collected significant donations, demonstrating strong market presence and community engagement. The website content is well-structured, professionally designed, and targets Austrian consumers with clear calls to action and informative content about the initiative and its impact. Technically, the website uses a modern tech stack including Bootstrap for responsive design, jQuery for interactivity, and integrates Google Analytics and Facebook SDK for tracking and social media engagement. The site is mobile optimized and SEO friendly, although some accessibility features could be improved. Security practices include anonymized IP tracking and a cookie consent banner, but there is a lack of explicit security headers and no published security or incident response policies. From a security perspective, the site is accessible without WAF blocking and shows no signs of vulnerabilities or exposed sensitive data. However, it lacks advanced security policies and vulnerability disclosure mechanisms. The WHOIS data confirms the domain is legitimately registered to Caritas Österreich with consistent registration details and domain age matching the initiative's history. Overall, the website is trustworthy, professionally maintained, and compliant with basic privacy regulations. Strategic improvements in security headers, incident response transparency, and vulnerability disclosure would enhance its security posture and user trust.

The website www.ife-austria.at represents an established non-profit organization under Caritas Austria, focused on facilitating international volunteer deployments in social projects across multiple continents. It targets individuals seeking meaningful volunteer experiences abroad, providing structured programs, risk assessments, and support. The site is well-branded, consistent, and offers comprehensive information about its services and deployment locations. Technically, the site is built on TYPO3 CMS, leveraging modern JavaScript libraries such as jQuery and Swiper, and integrates Sentry for error monitoring. It demonstrates good mobile optimization, accessibility, and SEO practices. The presence of a detailed cookie consent mechanism and GDPR-compliant privacy policy reflects a mature approach to privacy compliance. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities. However, explicit security policies and incident response information are not published, which could be improved. Analytics and tracking are implemented responsibly with user consent. Overall, the site is professional, trustworthy, and secure, with minor areas for enhancement in transparency around security policies and direct contact information.

Emmaus Innsbruck is a small non-profit organization affiliated with Caritas der Diözese Innsbruck, focused on supporting homeless and unemployed individuals with prior addiction issues. Their services include various labor and integration assistance programs, psychotherapeutic support, and a solidarity-based agricultural project. The website is professionally designed with clear navigation and relevant content tailored to their target audience. Technically, the site uses basic web technologies including an outdated jQuery version, lacks advanced security headers, and does not implement cookie consent mechanisms, indicating room for improvement in security and privacy compliance. Security posture is moderate with HTTPS usage but missing modern security best practices. Overall, the domain registration data aligns well with the organization's profile, supporting legitimacy and trustworthiness.

Caritas Schulen is a well-established non-profit educational institution in Austria specializing in social, health, and care profession training for youth and adults. The website reflects a professional and accessible platform with comprehensive educational offerings and strong cooperation with social organizations. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes accessibility and SEO best practices. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security headers and incident response information are absent. Overall, the site is trustworthy and compliant with GDPR, serving its target audience effectively.

Freiwilligen Zentrum Salzburg is a regional non-profit organization dedicated to promoting and coordinating voluntary social engagement in the Salzburg region of Austria. The organization acts as a hub and service center for volunteers and social institutions, offering information, placement, and training services. The website is professionally designed using WordPress with modern plugins such as Elementor and Yoast SEO, providing a good user experience and mobile optimization. Social media integration and a cookie consent mechanism demonstrate digital maturity and privacy awareness. Security posture is solid with HTTPS and privacy-respecting analytics via Matomo, though explicit privacy and security policies are not published. WHOIS data confirms the legitimacy and consistency of the domain registration with the organization's claims.

youngCaritas Österreichweit is a non-profit organization focused on youth engagement in social actions and workshops across Austria. The website serves as a national platform to promote various campaigns, workshops, and youth participation initiatives aimed at helping people in need. The organization targets children, youth, teachers, and multipliers with a clear mission to facilitate social responsibility and community involvement. Technically, the website is built on WordPress with modern plugins for SEO, cookie management, and social sharing, demonstrating a moderate to good level of digital maturity. The site is mobile optimized and uses HTTPS with standard security headers, reflecting a good security posture. However, explicit privacy and terms of service pages were not found in the provided content, indicating room for improvement in compliance documentation. Overall, the website is professional, trustworthy, and safe for general audiences.

Helium Development is a specialized technology company focused on building Shopify apps and providing website design services tailored to e-commerce merchants. Established in 2015, the company positions itself as a Shopify Expert, delivering reliable and customer-centric software solutions that enhance online business operations. Their website reflects a professional and consistent brand image, targeting Shopify merchants seeking custom app development and improved user experience. Technically, the website employs modern JavaScript technologies, integrates analytics and user behavior tracking tools such as Google Tag Manager and Hotjar, and maintains good mobile optimization and SEO practices. Hosting and DNS configurations are standard, with domain registration secured through GoDaddy and DNS managed via NS1, although DNSSEC is not enabled. From a security perspective, the site enforces HTTPS and domain registration locks, indicating good domain security hygiene. However, the absence of DNSSEC, security headers, and a public incident response contact or vulnerability disclosure page suggests areas for improvement. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, Helium Development presents a trustworthy and professional online presence with moderate to strong security posture and compliance. Strategic enhancements in DNS security and security policy transparency would further strengthen their risk profile and customer trust.

nd-aktuell.de is a German left-wing political news media website operated under a cooperative business model. It offers news articles, podcasts, newsletters, and subscription services targeting politically engaged readers interested in progressive perspectives on politics, society, culture, and sports. The website is well-branded, professionally designed, and provides rich content with clear navigation and multiple engagement channels including social media and donation options. Technically, the site runs on a custom CMS (KONTEXT-CMS) with legacy jQuery and modern consent management tools, hosted by SINMA. It uses Matomo analytics for privacy-friendly tracking and implements GDPR-compliant cookie consent. Security posture is good with HTTPS enforced, but lacks explicit security headers and published security policies. Contact information is primarily via web forms and cooperative site links, with no direct emails or phone numbers found. Advertising is present but limited to programmatic ads and Facebook Pixel tracking. Overall, the site is trustworthy, safe, and well-positioned in its niche media market.

WARENFORM GbR is a small, established German agency founded in 2001 specializing in communication solutions, design, and custom software development primarily for NGOs, political entities, unions, and media organizations. Their service offerings include consulting, corporate design, website development, print materials, event communication, and bespoke software applications. The company maintains a professional online presence with a well-structured website built on the KONTEXT-CMS platform, leveraging modern JavaScript libraries and Matomo analytics with privacy-conscious configurations. Security posture is solid with HTTPS and Content-Security-Policy headers, though improvements are recommended in cookie consent and formal security policies. Contact information is transparent and complete, including a published PGP key for secure communication. Overall, the website reflects a trustworthy and credible business with a moderate technical maturity and good compliance with privacy regulations.

sinma GmbH is a small German telecommunications company specializing in providing full-service internet solutions tailored for business customers. Their offerings include fiber optic leased lines, DSL with fixed IPs, web hosting, server housing, virtual servers, backup solutions, VPN networks, and related services such as domain management and firewalls. The company emphasizes high availability and security in their network solutions and has been operating since 1991, indicating a long-standing presence in the market. The website reflects a professional and consistent brand image with clear navigation and relevant business content targeting German business clients. From a technical perspective, the website employs basic web technologies including JavaScript and CSS without modern frameworks or CMS detected. The site is moderately optimized for performance and accessibility but lacks advanced mobile optimization. There is no evidence of analytics or tracking scripts, which suggests minimal user tracking. However, the absence of security headers and explicit SSL/TLS information indicates room for improvement in technical security measures. Security posture evaluation reveals gaps such as missing privacy and cookie policies, lack of security headers, and limited contact information. No incident response or vulnerability disclosure information is provided, which could impact trust and compliance. The WHOIS data shows partial consistency with the website's claims but lacks detailed registrant information, limiting full legitimacy verification. Overall, the site is accessible without WAF or blocking mechanisms, and content safety is rated safe with no adult or questionable content. The overall risk assessment suggests the company maintains a moderate security and compliance posture suitable for its business scale but should prioritize implementing privacy policies, enhancing security headers, and expanding contact information to improve trust and regulatory compliance. Strategic recommendations include publishing comprehensive privacy and cookie policies with consent mechanisms, enforcing HTTPS with proper security headers, and establishing clear incident response and vulnerability disclosure channels.

BGO Living is a Canadian property management company specializing in residential apartments and townhomes across multiple provinces. The company emphasizes exceptional resident service, community engagement, and environmental responsibility, managing over 45 rental communities. Their website reflects a professional and modern digital presence built on Vue.js and the Rentsync platform, with good mobile optimization and accessibility features. Privacy and cookie compliance are well implemented with clear policies and user consent mechanisms. Security posture is moderate with room for improvement in HTTP security headers and explicit incident response information. The absence of WHOIS data reduces domain trust slightly but does not detract significantly from the overall legitimacy given the professional content and external references. Strategic recommendations include enhancing security headers, verifying SSL configuration, and publishing explicit security policies to improve trust and compliance.

Welput is a large, specialist unlisted Central London office fund managed by BentallGreenOak (BGO). The company focuses on creating sustainable, wellness-oriented office environments with a strong emphasis on future-proofing and community engagement. Their portfolio includes major developments such as 105 Victoria Street and Regent's Wharf, targeting high sustainability certifications like BREEAM Outstanding and WELL Platinum. The website reflects a professional and modern digital presence built on WordPress, with good SEO and mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements such as DNSSEC and security headers are recommended. Overall, the site is trustworthy and well-aligned with the business's market position and audience.

BGO Cold Chain is a specialized real estate investment and development company focusing on cold storage facilities worldwide. The company offers a comprehensive suite of services including development, acquisitions, asset management, and investment management, positioning itself as a major player in the cold chain real estate sector. Their website reflects a professional and modern digital presence built on the HubSpot CMS platform, integrating marketing and analytics tools such as Google Analytics 4 and Google reCAPTCHA for form security. The site is well-structured, mobile-optimized, and provides a clear user experience with relevant business content and contact mechanisms via forms. Security posture is solid with HTTPS enforced and domain transfer protections in place, though improvements such as enabling DNSSEC and updating legacy libraries are recommended. Privacy compliance is addressed with a visible privacy policy and cookie consent mechanisms, but explicit security and incident response policies are absent. Overall, the website and domain registration data indicate a legitimate, newly established business with a good level of professionalism and trustworthiness.

ClikFIX Resident appears to be a web portal designed for residents, likely in the property management or real estate sector. The website provides a platform for residents to access services and interact with property management. However, the domain's WHOIS data is missing, indicating the domain may not be registered or is blocked, which raises concerns about the legitimacy and operational status of the website. The technical infrastructure uses AngularJS and Bootstrap, indicating a modern but basic frontend implementation. Security posture is weak due to lack of HTTPS verification, security headers, and privacy compliance. Overall, the site lacks critical trust and compliance indicators, limiting its credibility and raising risk concerns.

ClikFIX operates an online portal primarily focused on appointment booking and service scheduling. The website uses AngularJS and Bootstrap frameworks, indicating a moderately modern technical infrastructure. However, the absence of WHOIS registration data and domain registrar information raises concerns about the domain's legitimacy and registration status. The website lacks critical compliance documents such as privacy and cookie policies, as well as contact information, which impacts its business credibility and privacy compliance scores. Security posture is minimal with no detected security headers or advanced configurations, and no analytics or tracking technologies are observed, suggesting limited user tracking and data collection. Overall, the website is functional but basic in content and design quality, with a low trustworthiness rating due to missing registration and compliance information.

füreinand' is a well-established Austrian non-profit community platform dedicated to fostering mutual support and volunteering across Austria. With over 43,000 members, it operates under the auspices of Caritas and partners with prominent media outlets to maximize outreach and impact. The website offers a professional, accessible, and content-rich experience, encouraging community participation through various missions and initiatives. Technically, the site leverages TYPO3 CMS, modern JavaScript libraries, and robust form validation, ensuring a responsive and user-friendly interface. Security-wise, the site employs HTTPS, cookie consent mechanisms, and error monitoring via Sentry, though it could enhance security headers and publish formal security policies. Overall, the platform demonstrates strong compliance with GDPR and privacy standards, reflecting its commitment to user trust and data protection.