High-risk security reports

M

Mundimex, Inc.

mundi.com

39

Mundimex, Inc. operates the website mundi.com, offering natural water softener systems and fuel saving solutions targeted at homeowners and production facilities. The company positions itself as a leading market brand recommended by experts, focusing on energy efficiency and environmental protection. The business model centers on product sales with a focus on cost savings and sustainability. The website is built on WordPress using Elementor and WooCommerce, hosted on SiteGround, and integrates analytics tools such as Google Analytics and Microsoft Clarity. The site demonstrates good design quality, mobile optimization, and SEO practices, though accessibility features are basic. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Contact information is limited to a phone number, with no email or physical address disclosed. Social media presence includes Facebook and LinkedIn profiles. Overall, the domain registration is consistent and long-standing, supporting business legitimacy.

Kirschner Sport & Mode GmbH operates a local retail and hospitality business in Serfaus, Austria, focusing on sports equipment sales and tourist accommodation. The website serves as an informational portal linking to partner apartment rental sites and providing contact details for the business. The market position is local with a small business scale, targeting tourists and local customers interested in sports and lodging. Technically, the website is basic with static HTML, CSS, and JavaScript, lacking modern CMS or frameworks and showing poor mobile optimization and accessibility. Security posture is weak due to absence of HTTPS enforcement, security headers, and privacy policies, exposing the site to potential risks and compliance issues. Overall, the site is functional but requires significant improvements in security, privacy compliance, and technical modernization to enhance trust and user experience.

B

Cookie-Information

bachersport.com

43

The website www.bachersport.com currently serves primarily as a cookie consent information page with embedded cookie management for skirentalresorts.com widgets. The site lacks substantive business content, contact information, privacy policy, or terms of service pages, limiting its utility and trustworthiness. The WHOIS lookup failed to return any registration data, suggesting the domain may be unregistered, expired, or in a transitional state, which raises significant legitimacy concerns. Technically, the site uses basic HTML, CSS, and JavaScript with cookie consent mechanisms and tracking cookies from Google Analytics, Facebook, and Matomo. However, no advanced security headers or HTTPS status was provided, limiting the security posture assessment. Overall, the site exhibits minimal digital maturity and lacks critical compliance and business credibility elements.

S

Skischule Huber

skischule-huber.at

43

Skischule Huber is a small Austrian ski school business providing ski instruction services primarily targeting tourists and skiers in Austria. The website content analyzed is limited to a cookie information page, indicating compliance with GDPR through a detailed cookie consent mechanism. The business appears to operate locally with a focus on hospitality and tourism services. Technically, the website uses standard web technologies and likely runs on TYPO3 CMS, with tracking implemented via Matomo and Google Analytics, respecting user consent preferences. Security posture is moderate with room for improvement, particularly in implementing security headers and providing explicit security policies. No contact information or terms of service were found, which limits business credibility and user trust. Overall, the website is functional but basic in content and technical sophistication.

R

Rechtsanwälte im Experten-Branchenbuch.de

experten-branchenbuch.de

49

Experten-Branchenbuch.de is a well-established German online directory specializing in legal, tax, and business consulting professionals. It offers extensive listings of experts such as lawyers, notaries, tax advisors, and mediators, serving a broad audience seeking specialized professional services. The platform also provides expert advice articles and premium listing options, positioning itself as a trusted resource in its niche market. Technically, the website employs a traditional web stack with jQuery and Matomo analytics, ensuring basic modern web functionality and privacy compliance through cookie consent mechanisms. Security posture is solid with HTTPS enforced and privacy-respecting analytics configurations, though improvements in security headers and incident response transparency are recommended. Overall, the site presents a professional and trustworthy front with good content quality and user experience, suitable for its target audience.

S

SV OG Darmstadt08

svogdarmstadt08.de

36

SV OG Darmstadt08 is a local non-profit dog training club based in Darmstadt, Germany, specializing in training German Shepherds and dogs of all breeds and ages. The club offers a variety of training programs including puppy groups, obedience, protection training, agility, rally obedience, and mantrailing. They actively engage their community through events, competitions, and news updates, supported by several sponsors and partners. The website serves as an information hub for members and prospective visitors, providing training schedules, news, and event details. Technically, the website is built on Joomla CMS with common extensions such as K2 and JEvents, and uses frontend frameworks like Bootstrap and UIkit. The site is moderately performant, mobile-optimized, and SEO-friendly. Hosting appears to be provided by kasserver.com based on nameserver data. No advanced analytics or tracking tools are detected, indicating a privacy-conscious approach. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks security headers and explicit incident response or security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Contact information is not explicitly provided on the homepage, which may impact user trust and support accessibility. Overall, the website is a well-maintained community resource with good content quality and technical implementation but could improve in security best practices and user contact accessibility to enhance trust and compliance.

H

Hunde Erziehungs Beratung

heb-andersartig.de

49

Hunde Erziehungs Beratung is a small German-based dog training and behavioral consultation service focused on improving the relationship between dog owners and their pets through perspective change, communication, and species-appropriate activities. The website is professionally designed using WordPress with Elementor and Astra theme, featuring good SEO practices and structured data for enhanced search visibility. Privacy and cookie policies are implemented with consent mechanisms, reflecting GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Contact information is primarily via contact forms, with no explicit emails or phone numbers found. Overall, the site is trustworthy, accessible, and well-positioned for its niche market.

My Pawtner Tanja Schafberg-Cambeis is a small local dog training school based in Germersheim, Germany, offering scientifically grounded and certified dog training services. The website presents a professional image with consistent branding and clear navigation, targeting dog owners seeking quality training. The business emphasizes certified trainers compliant with German animal protection laws and maintains membership in relevant dog training associations. Technically, the website is built on the cm4all platform hosted by Strato, utilizing older JavaScript libraries and standard web technologies. While the site is mobile optimized and user-friendly, it lacks modern security headers and updated libraries, which could pose risks. Security posture is moderate with a cookie consent mechanism in place but missing privacy and terms of service pages. No contact emails or phone numbers are explicitly provided on the homepage, which slightly impacts business credibility. Overall, the website is safe, professional, and suitable for its target audience but would benefit from enhanced security and compliance documentation.

L

learn-together.de

learn-together.de

49

The website www4.learn-together.de currently functions as a parked domain with minimal content primarily focused on advertising blocks served via Google Adsense and Bodis domain parking services. There is no clear business description, contact information, or user engagement features, indicating the site is not actively used for business operations or educational services despite the domain name. The technical infrastructure is basic, relying on standard HTML, CSS, and JavaScript with no advanced frameworks or CMS detected. Security posture is weak with no HTTPS detected and absence of security headers or privacy compliance mechanisms. Overall, the site presents low trustworthiness and limited value to visitors beyond advertising revenue generation.

HSC Schwarzenbruck e.V. is a German dog sports and training club offering a variety of courses and activities for dog owners, including puppy training, young dog training, basic courses, and specialized dog sports such as Tunierhundesport and Spürhundsport. The club serves a local audience of dog enthusiasts and provides a platform for course registration and event scheduling. The website is professionally designed using WordPress and Elementor, hosted by Manitu, and demonstrates good digital maturity for a small non-profit organization. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though improvements in security headers and privacy compliance mechanisms are recommended. Overall, the website is trustworthy and well-suited for its target audience.

P

Petricks Hundeschule Bad Salzuflen

petricks-hundeschule.de

47

Petricks Hundeschule Bad Salzuflen is a specialized dog training service provider based in Germany, offering a range of training options including puppy training, individual and group sessions, online courses, and coaching. The business emphasizes fair, sustainable, and individualized training methods, targeting dog owners in Bad Salzuflen, Bielefeld, and surrounding regions. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content about services and the founder, Anja Petrick. Technically, the site is built on WordPress with Elementor, hosted on SiteGround, and uses modern web technologies and plugins such as Borlabs Cookie for GDPR-compliant cookie management and Google Analytics for tracking. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the website presents a trustworthy and credible business with transparent contact information and social media presence.

The website pfotenchaoten.de is a domain sales landing page operated by nomino GmbH, a German domain marketplace company. It offers the premium domain pfotenchaoten.de at a promotional price, targeting businesses and entrepreneurs seeking a solid domain foundation. The site includes customer testimonials and a Denic partnership logo, enhancing trust. Technically, the site uses older JavaScript libraries such as jQuery 1.11.0 and easySlider 1.7, with basic mobile optimization and SEO. Security posture is moderate but lacks visible HTTPS confirmation and security headers. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or terms of service. Contact information is limited to a phone number with no email addresses or social media links. Overall, the site is functional but could improve in security and compliance aspects.

B

Braun-Klabes GmbH

braun-klabes.de

48

Braun-Klabes GmbH operates a specialized dog services business in Germany, offering dog training, a dog hotel, daycare, and a BARF shop. The company targets dog owners seeking quality care and training in the Münsterland region. The website is built on WordPress with WooCommerce and several plugins, indicating a moderate level of digital maturity. The site is well-structured, mobile-optimized, and provides comprehensive service information, although explicit contact details are limited to a contact page form. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks advanced security headers and published policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional and trustworthy but could improve in security and privacy transparency.

Hundeschule dog's time is a small, specialized dog training and coaching business based in Ostfriesland, Germany. The company focuses on a binding-oriented, respectful, and everyday-appropriate approach to dog training, offering services such as individual and group training, behavior therapy, puppy care, mantrailing, dog pension, and online courses. The website is built on a modern WordPress platform using Elementor and related plugins, providing a professional and user-friendly experience. Security posture is solid with HTTPS, cookie consent, and privacy policy in place, though additional security headers and incident response information could enhance trust. Overall, the business presents a credible and trustworthy online presence with clear contact details and legal compliance.

The website schlaue-pfoten.de currently displays a single message indicating that the site has been closed, with no additional business information or services presented. The lack of content and absence of contact details or policies suggest that the business is either no longer operational or the website is under maintenance or decommissioned. Technically, the site is minimalistic with no detected scripts, analytics, or modern web technologies, and no evidence of HTTPS or security headers was found. The security posture is weak due to the absence of standard security practices and policies. Overall, the site presents a low trust profile and minimal digital maturity.

B

Budafok-Tétény Városfejlesztő Kft.

zold22.hu

45

The website zold22.hu serves as an official local government platform for Budapest's 22nd district, focusing on environmental initiatives and community engagement. It provides residents with news, events, and useful information related to green programs and local government activities. The site is positioned as a trusted community resource with clear contact information and consistent branding. Technically, the site is built on WordPress 6.8.1 with custom themes and scripts. It demonstrates moderate performance and good mobile optimization, though accessibility and SEO could be improved. The absence of advanced analytics or tracking scripts suggests a privacy-conscious approach, but the lack of a cookie consent mechanism is a compliance gap. From a security perspective, the site uses HTTPS and secure form inputs but lacks important security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's local government identity, supporting legitimacy. Overall, the site is safe, professional, and trustworthy with room for improvement in privacy compliance and security hardening. Strategic recommendations include implementing security headers, adding cookie consent, and publishing incident response information.

B

Budafok-Tétény - Közösségre Kapcsolva

kozossegrekapcsolva.hu

43

The website 'Közösségre kapcsolva - Budafok-Tétény' serves as a digital platform for the local government of Budapest's 22nd district, Budafok-Tétény, focusing on participatory budgeting and community engagement. It provides residents with information about community projects, news updates, and facilitates idea submissions and voting processes. The platform is positioned as a key tool for fostering local civic participation and transparency in municipal decision-making. Technically, the site is built on WordPress using the Elementor page builder, integrating modern web technologies such as Google Tag Manager and Google Analytics for tracking and marketing purposes. The site is mobile optimized and employs standard SEO practices including structured data markup to enhance search engine visibility. Cookie consent mechanisms are implemented to comply with GDPR requirements, and a newsletter subscription form is integrated via Mailchimp. From a security perspective, the website uses HTTPS with a good SSL configuration, though explicit security headers are not fully detected. No critical vulnerabilities or exposed sensitive data were found. The site lacks dedicated security policy or incident response pages, which could be improved to enhance transparency and preparedness. Privacy compliance is well addressed with clear cookie consent and a comprehensive privacy policy document. Overall, the website demonstrates a solid digital presence for a local government initiative, with good content quality, user experience, and compliance posture. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and improving accessibility features to further strengthen the platform's trustworthiness and resilience.

P

Pfarrei Heiligste Dreifaltigkeit Beverungen

heiligstedreifaltigkeit-beverungen.de

41

Pfarrei Heiligste Dreifaltigkeit Beverungen is a local parish organization serving multiple communities in the Weserbergland region of Germany. Founded in 2013, it provides religious services, community events, and pastoral care to its congregation. The website is well-structured, offering event schedules, news updates, and contact information tailored to parishioners and local residents. The target audience includes families, children, and church members seeking spiritual and community engagement. The business model is non-profit and community-focused, with a strong emphasis on local religious and social activities. Technically, the website is built on TYPO3 CMS with Bootstrap for responsive design, hosted on SchlundTech servers. The site demonstrates moderate performance and good mobile optimization. SEO and accessibility are adequately addressed, though accessibility features could be enhanced. The technical infrastructure is modern and stable, supporting the parish's digital presence effectively. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks several security headers and does not publish a formal security or incident response policy. No cookie consent mechanism is present, which is a GDPR compliance gap. No analytics or tracking scripts are detected, indicating minimal user tracking. Overall, the security posture is solid but could be improved with additional headers and privacy controls. The overall risk assessment is low, with no signs of malicious activity or suspicious domain registration. Strategic recommendations include implementing cookie consent, adding security headers, and publishing security policies to enhance trust and compliance. The website is trustworthy, professional, and serves its community well, but there is room for improvement in privacy and security transparency.

Aquis Grana GmbH operates the Aquis Grana Cityhotel, a 4-star hotel located in the heart of Aachen, Germany. The hotel targets tourists and business travelers seeking comfortable accommodation near key city landmarks such as the Aachen Cathedral. The website offers information about hotel services, gastronomy, event hosting, and special packages, supporting multiple languages to cater to international visitors. The business model focuses on hospitality services with a local market position emphasizing quality and location. Technically, the website is built on a proprietary CMS (some.oner - black.t CMS) and uses common web technologies such as jQuery, Fancybox, and Slick Slider for UI components. The site is mobile optimized with good navigation and basic SEO practices. No advanced analytics or tracking tools are detected, and cookie consent mechanisms are implemented in compliance with GDPR. From a security perspective, the site uses HTTPS and has implemented cookie consent but lacks explicit security headers and documented security policies. No vulnerabilities or exposed sensitive data were detected in the provided content. WHOIS data aligns with the business location and domain usage, indicating legitimacy. Overall, the website presents a professional and trustworthy online presence suitable for its hospitality business. The overall risk is low, with recommendations to enhance security headers, improve accessibility, and expand security documentation to strengthen compliance and trust.

R

Rat für Formgebung - German Design Council

german-design-council.de

47

The German Design Council (Rat für Formgebung) is a well-established German institution founded in 1953, serving as a leading authority in design. It supports companies in brand and design development, promotes young design talent, and fosters design discourse. The organization operates through awards, research studies, events, and consulting services, targeting businesses, designers, and brand experts. The website is professionally designed, multilingual, and uses TYPO3 CMS with modern web technologies. It features GDPR-compliant cookie consent and integrates Google Tag Manager for analytics. Security posture is solid with HTTPS and basic security headers, though additional headers and explicit security policies could enhance protection. No critical vulnerabilities or blocking mechanisms are detected. Contact information includes a verified company email and social media presence, but no explicit phone numbers or physical addresses are found in the provided content. Overall, the site is trustworthy, well-maintained, and aligned with its business mission.

B

Bystricoviny.sk

bystricoviny.sk

43

Bystricoviny.sk is a regional Slovak media portal focused on delivering news, cultural content, and sports coverage primarily for the Banská Bystrica area. Established in 2008, it serves a medium-sized audience with a mix of articles, videos, and community information. The site leverages WordPress with common plugins and frameworks such as Bootstrap and jQuery, indicating a standard but effective technical infrastructure. The presence of partner logos and active social media links enhances its local credibility. Technically, the website is moderately performant and mobile-optimized, with good SEO practices and structured data for search engines. However, it lacks advanced security headers and explicit privacy or security policies, which are areas for improvement. The site uses HTTPS with anonymized IP tracking in Google Analytics, showing some privacy awareness but lacks a cookie consent mechanism, which is important for GDPR compliance. Security posture is adequate but could be strengthened by implementing security headers, publishing incident response and vulnerability disclosure policies, and enhancing privacy compliance. No critical vulnerabilities or malicious content were detected. Overall, the website is trustworthy and professional but would benefit from enhanced security and privacy transparency. Strategic recommendations include improving security headers, adding cookie consent, publishing security policies, and maintaining up-to-date software to ensure continued trust and compliance.

M

Ministerstvo cestovného ruchu a športu SR

mincrs.sk

44

The website https://mincrs.sk/ is the official online presence of the Ministry of Tourism and Sports of the Slovak Republic. It serves as a comprehensive portal providing information on government policies, tourism development, sports funding, legislation, and public services related to these sectors. The site targets Slovak citizens, sports organizations, tourists, and government stakeholders, positioning itself as an authoritative source for national tourism and sports affairs. The business model is that of a government public service entity, with no commercial activities. The website content is well structured, professionally presented, and consistent with official government branding. Technically, the site is built on WordPress 6.8.1 using the Kadence theme and Bootstrap 5.1.3 framework, supported by jQuery and LiteSpeed caching for performance optimization. The site is mobile-optimized with good SEO practices and basic accessibility features. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS with an excellent SSL configuration and implements a cookie consent mechanism compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, security headers like Content Security Policy and HSTS are not explicitly present, and there is no published security policy or incident response information. The WHOIS data confirms the domain's legitimacy as a government entity with consistent registration details. Overall, the website demonstrates a strong security posture and good privacy compliance, with high business credibility as an official government portal. Recommendations include enhancing security headers, publishing explicit security policies, improving accessibility, and considering a security.txt file for vulnerability disclosures to further strengthen trust and compliance.

G

Große Kreisstadt Neuburg an der Donau

neuburgpuls.de

42

NeuburgPuls.de is a local event platform dedicated to promoting cultural, culinary, and community events in Neuburg an der Donau, Germany. It serves residents and visitors by providing a comprehensive calendar of concerts, theater, exhibitions, workshops, and public tours. The platform is supported by the local government, as evidenced by official contact information and the nature of the content. The website is well-structured, mobile-optimized, and uses modern web technologies including Pimcore CMS, Bootstrap, and Font Awesome. It integrates consent management and accessibility tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and privacy policies in place, although some security headers could be improved. Overall, NeuburgPuls.de presents a trustworthy and professional online presence for local event promotion.

S

Stadtbücherei St. Pankratius

buecherei-gescher.de

49

The Stadtbücherei St. Pankratius is a public library serving the community of Gescher, Germany, operated under the Catholic parish and supported by local government and cultural institutions. It offers a broad range of physical and digital media, including books, CDs, DVDs, games, and eMedia via the bibload.de portal. The library also organizes educational and cultural events, supports reading promotion projects, and provides various services such as guided tours and media lending. The website is professionally designed using TYPO3 CMS, with good navigation and mobile optimization, reflecting a mature digital presence for a small public institution. Security measures include HTTPS and email obfuscation, with cookie consent managed by Usercentrics, though some security headers and policies are absent. Overall, the site is trustworthy, accessible, and compliant with GDPR requirements.

D

DIE BÜCHEREI St. Johannes Baptist Beverungen

buecherei-beverungen.de

47

DIE BÜCHEREI St. Johannes Baptist Beverungen is a small, community-focused public library serving the Beverungen area in Germany. The website provides information about library services, reading promotion programs such as the SommerLeseClub, and access to media catalogs and digital lending platforms. The library is affiliated with the local parish, indicating a non-profit and community-supported business model. The site is well-structured, content-rich, and targets a broad audience including children, youth, and families. Technically, the website is built on Joomla CMS using the Helix Ultimate template framework and Bootstrap 5.3.2, hosted by webgo.de. The site is mobile-optimized with moderate performance and basic accessibility features. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit security policy or incident response information is published. Overall, the website demonstrates a solid security and privacy compliance stance with GDPR-aligned policies and minimal user tracking. No critical vulnerabilities or suspicious elements were detected. The domain registration data aligns with the website content and hosting provider, supporting legitimacy. Strategic improvements could include adding security headers, publishing a security.txt file, and enhancing accessibility. The risk level is low given the nature of the site and its limited exposure to sensitive data or complex transactions. The site is suitable for its community audience and maintains a trustworthy online presence.

G

Große Kreisstadt Neuburg an der Donau - Amt für Kultur & Tourismus

neuburg-ist-kultur.de

46

The website 'neuburg-ist-kultur.de' serves as the official cultural portal for the city of Neuburg an der Donau, Germany. It provides comprehensive information on cultural institutions such as the Stadttheater, the Bücherturm library, museums, galleries, and cultural events including a summer academy. The site targets residents and visitors interested in cultural activities and promotes the city's cultural offerings effectively. The business model is government-driven cultural service and tourism promotion, positioning itself as the primary official source for cultural information in the region. Technically, the website is built on the Pimcore CMS platform, utilizing modern web technologies including Bootstrap 5 for responsive design, JavaScript libraries for consent management (Consentmanager CMP), accessibility (EyeAble), and analytics (Matomo). The site demonstrates good mobile optimization and basic accessibility features, with moderate performance. SEO practices are well implemented with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS and uses a consent management platform to comply with privacy regulations. No critical vulnerabilities or exposed sensitive data were detected. However, security headers like CSP or HSTS are not explicitly observed and could be improved. Privacy compliance is good, with a clear privacy policy and cookie consent mechanism. Contact information is clearly provided, enhancing trust. Overall, the site is trustworthy, professionally designed, and well-maintained, with no signs of malicious content or blocking mechanisms. It effectively serves its purpose as a government cultural information portal. Strategic recommendations include enhancing security headers, publishing explicit security policies, and maintaining up-to-date third-party scripts to further strengthen security posture.

P

PINKFiSH Creatives – Jasmin Wolf

pinkfish.at

47

PINKFiSH Creatives is a small Austrian creative agency specializing in corporate design, print, web, marketing, and brand communication services. The company has a solid regional presence with multiple awards and nominations, indicating a reputable market position. Their website is professionally designed using TYPO3 CMS and incorporates privacy-conscious analytics via Matomo. Contact information is clearly provided, supporting business credibility. However, the site lacks visible cookie consent mechanisms and security headers, which are areas for improvement in compliance and security. Overall, the website reflects a trustworthy and competent creative agency with room to enhance its security posture and privacy compliance.

R

reitbuch.com GmbH

hundeplan.com

48

hundeplan.com is a specialized online booking platform designed for dog schools and dog boarding facilities, enabling streamlined customer self-service for booking, credit management, and invoicing. It is a spin-off of the well-established reitbuch.com platform, which serves equestrian businesses. The website is professionally designed, mobile-optimized, and provides clear business and contact information, supporting trust and usability. Technically, it uses modern front-end frameworks like Bootstrap and MDB, with no detected CMS or complex backend technologies visible from the HTML. Security posture is moderate with room for improvement, particularly in DNSSEC and HTTP security headers. Privacy compliance is strong, with explicit cookie consent and a privacy policy in place. No blocking or WAF challenges were detected, allowing full content access.

S

Schloss Blumenthal

schloss-blumenthal.de

44

Schloss Blumenthal operates as a hospitality and event venue business located in Germany, offering hotel accommodations, organic dining, seminar and conference facilities, wedding and event hosting, and an organic farm with a community living project. The website is well-structured, professionally designed, and targets tourists, event organizers, and local community members interested in sustainable and communal living experiences. The business model integrates hospitality services with organic farming and community engagement, positioning itself as a niche player in the regional hospitality market with a focus on sustainability. Technically, the website is built on WordPress with a modern plugin ecosystem including WooCommerce, Yoast SEO, and GDPR compliance tools. It uses HTTPS with good SSL configuration and includes a cookie consent mechanism aligned with GDPR requirements. The site is mobile-optimized and employs Matomo for analytics, indicating a moderate level of digital maturity. Performance is moderate with room for optimization. From a security perspective, the site enforces HTTPS and uses security plugins to protect content and obfuscate email addresses. However, it lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is strong with clear cookie consent and a comprehensive privacy policy. Overall, the website presents a low-risk profile with good business credibility and privacy compliance. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, and considering a vulnerability disclosure policy to improve trust and security posture.

F

Familie Gundolf

tiroler-abend.com

47

The Tiroler Abend website represents a well-established cultural entertainment business operated by the Familie Gundolf, specializing in traditional Tyrolean music, dance, and shows since 1967. The company targets a broad audience including families, tourists, and students, positioning itself as a key cultural ambassador for Innsbruck and the Tirol region. The website is professionally designed, multilingual, and offers comprehensive information about events, ticketing, and special programs. Technically, the site is built on TYPO3 CMS, integrates modern analytics tools, and delivers multimedia content effectively, though some performance optimizations could be considered. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but lacks some security headers and cookie consent mechanisms. The absence of WHOIS registration data is a notable concern, impacting trust and legitimacy scores. Overall, the site is credible and user-friendly but would benefit from enhanced privacy compliance and security transparency.

I

Ing. S. Konrad GmbH

schlosserei-konrad.at

47

Ing. S. Konrad GmbH is a traditional metalworking company based in Austria, specializing in manufacturing and installing metal constructions such as bridge railings, aluminum railings, steel constructions, and welding services. With over 50 years of experience, the company serves both public and private clients, emphasizing quality, durability, and customer satisfaction. The website reflects a well-established regional business with a clear focus on craftsmanship and reliability. Technically, the site is built on TYPO3 CMS with modern front-end libraries like Bootstrap and jQuery, providing a responsive and user-friendly experience. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks advanced security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional and trustworthy, though improvements in security and privacy compliance are recommended.

H

Huber TV

huber-tv.at

47

Huber TV is a regional telecommunications provider based in Landeck, Austria, offering bundled services including cable TV, fiber-optic internet, and VoIP telephony. The company emphasizes regional, personal, and fast service with a competent team supporting customers. Their market position is focused on local residential customers seeking high-speed internet and comprehensive TV and telephone solutions. Technically, the website is built on TYPO3 CMS, integrates Matomo for analytics, and uses Klaro for cookie consent, reflecting a modern and privacy-conscious digital infrastructure. The site is mobile-optimized with good SEO and accessibility basics. Security-wise, the site enforces HTTPS and cookie consent but lacks advanced security headers and published security policies, indicating room for improvement. Overall, the website is professional, trustworthy, and compliant with GDPR, though it could enhance transparency around security and incident response. The domain registration data aligns well with the business claims, supporting legitimacy.

I

IHC Karlheinz Eckhart e.U.

daskuma.at

47

IHC Karlheinz Eckhart e.U. is a small, regional Austrian company specializing in web hosting services with a strong focus on Typo3 CMS hosting, email hosting, domain registration, and digital consulting. The company emphasizes personalized customer support and has over 20 years of experience serving small and medium-sized enterprises, startups, and hospitality clients primarily in Tirol, Austria. They collaborate closely with Werbeagentur Falkner for web design services, providing a comprehensive digital solution. Technically, the website is built on modern web technologies including PHP 7.4, MySQL, Linux, and Bootstrap, with a CMS focus on Typo3. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, while HTTPS is assumed, explicit security headers and formal security policies are not published, representing an area for improvement. Privacy compliance is partially met with a privacy policy and terms of service available, but lacks a cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with the business's regional and service-oriented positioning.

W

Werbeagentur Falkner Clemens

werbeagentur-falkner.at

44

Werbeagentur Falkner Clemens is a small, regionally focused web agency based in Landeck, Austria, specializing in accessible and barrier-free web design compliant with WCAG and BFSG standards. The company offers a comprehensive suite of services including web design, hosting, content creation, graphic design, and print media, targeting hotels, apartments, and businesses primarily in the Tirol region. The website demonstrates a professional and consistent brand presence with a clear portfolio showcasing client references. Technically, the site is built on TYPO3 CMS with modern web technologies and emphasizes accessibility and responsive design. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some improvements such as security headers and incident response policies are recommended. Privacy compliance is partial due to the absence of a cookie consent mechanism. Overall, the website is trustworthy, well-structured, and serves its business purpose effectively.

F

Fürstlich und Gräflich Fuggersche Stiftungs-Administration

fuggerei-next500.de

47

The website www.fuggerei-next500.de represents the Fürstlich und Gräflich Fuggersche Stiftungs-Administration, a historic non-profit foundation providing social housing and social engagement initiatives rooted in the Fuggerei community in Augsburg, Germany. The site commemorates the 500-year legacy of the Fuggerei and promotes the global applicability of its core social ideas under the 'Fuggerei NEXT500' initiative. The foundation is positioned as a socially significant entity with a medium organizational size and a strong cultural heritage. Technically, the website employs modern web standards including HTML5, CSS3, JavaScript, and SVG graphics, hosted on Schlundtech infrastructure. It integrates Matomo Analytics with privacy-conscious settings and provides a cookie consent mechanism compliant with GDPR. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. Security-wise, HTTPS is enforced, and no critical vulnerabilities or exposed sensitive data were detected. However, formal security policies and incident response contacts are absent, suggesting room for improvement in transparency and security governance. Overall, the website is professional, trustworthy, and aligned with its non-profit mission, with recommendations to enhance security documentation and incident response readiness.

S

Schwazer Frauen

schwazerfrauen.at

44

Schwazer Frauen is a local non-profit advocacy group based in Schwaz, Austria, focused on promoting gender equality and combating violence against women and children. The organization collaborates with the city government and local experts to organize awareness campaigns, educational courses, and community support initiatives such as the Frauen-Nacht-Taxi for safe transportation. The website serves as an informational and promotional platform for these activities, targeting women and girls in the local community. Technically, the website is built on WordPress using the Avada theme and Yoast SEO plugin, indicating a moderate level of digital maturity. The site is mobile-optimized and includes multimedia content such as images and videos to engage visitors. Hosting appears to be managed through a local Austrian registrar and hosting provider, with HTTPS enabled for secure communications. From a security perspective, the site benefits from HTTPS but lacks several security headers that could enhance protection. No privacy or cookie policies are present, which represents a compliance gap with GDPR and related regulations. No explicit contact information or incident response channels are published, limiting transparency in security and privacy matters. Overall, the website is trustworthy and professional in its presentation and content but would benefit from improved privacy compliance and enhanced security practices to better protect users and demonstrate regulatory adherence.

M

multimaps360

multimaps360.de

45

multimaps360 is a specialized service provider offering interactive 360° panorama tours, virtual walkthroughs, and drone aerial photography primarily targeting municipalities, tourism organizations, cultural sites, and businesses. The company leverages modern digital marketing tools to enhance visibility and engagement for its clients. The website is built on WordPress using the Divi theme and incorporates LiteSpeed caching and Matomo analytics, reflecting a moderate level of technical maturity and privacy awareness. Security posture is solid with HTTPS enabled, though improvements are recommended in security headers and cookie consent implementation. Overall, the site is professional, content-rich, and accessible, supporting a small-sized business with a clear niche in digital media and marketing.

B

Bundesverband Soziokultur e.V.

utopolis.online

47

Utopolis.online is a German non-profit cultural initiative operated by Bundesverband Soziokultur e.V., focusing on promoting socio-cultural activities in urban neighborhoods through artistic and community engagement projects. The website serves as an information hub for the UTOPOLIS program, showcasing project results, providing a toolbox of methods, and sharing news and events. The platform targets cultural practitioners, local communities, and stakeholders interested in neighborhood development through culture. Technically, the site is built on WordPress with modern plugins and frameworks, including Matomo for privacy-conscious analytics. The site is well-structured, mobile-optimized, and integrates cookie consent mechanisms, reflecting good privacy compliance. Security posture is adequate with HTTPS and domain transfer protection, though DNSSEC is not enabled and security headers are missing, representing areas for improvement. No contact emails or phone numbers are explicitly provided, which may limit direct communication. Overall, the site is trustworthy, professionally maintained, and aligned with its non-profit mission.

S

Steve Zeidler

froodmat.com

42

The website froodmat.com serves as the professional portfolio for photographer Steve Zeidler, showcasing his photography work primarily in Germany and Switzerland. The site targets photography enthusiasts and potential clients seeking commercial and personal photography services. The business model is focused on portfolio presentation and commissions, positioning itself as a niche professional photographer with a small business footprint. The website is built on the Koken CMS platform and employs modern web technologies including jQuery, Google Analytics, and Matomo for visitor tracking. The design is professional and mobile optimized, providing a good user experience with clear navigation and relevant content. However, the site lacks critical privacy and cookie policies, as well as contact information, which impacts its compliance and trustworthiness.

M

Mobiteam GmbH

mobiteam.de

46

Mobiteam GmbH is a specialized German web design and development agency based in Berlin, founded in 2012. The company offers custom web design, eCommerce solutions, online marketing, consulting, and technical maintenance services primarily targeting corporate and business clients. They have a strong market position supported by awards and positive client testimonials. Technically, the website is built on WordPress with modern plugins and analytics tools, optimized for mobile and SEO. Security posture is good with HTTPS and cookie consent but lacks explicit security policies and incident response information. Overall, the domain registration and business information are consistent and trustworthy. Strategic recommendations include publishing privacy and security policies and enhancing incident response transparency.

M

Memento Park

mementopark.hu

39

Memento Park is a cultural and historical tourist attraction located in Budapest, Hungary. It offers visitors a unique experience centered around the communist dictatorship era through its Statue Park, cinema, exhibitions, and guided tours. The website serves as an informational and booking platform targeting general audiences interested in history and cultural tourism. Technically, the site is built on WordPress using the Foundation framework and integrates third-party services such as FareHarbor for bookings and Google Analytics for tracking. The site is mobile optimized and presents a professional design with clear navigation. Security-wise, the website enforces HTTPS and avoids exposing sensitive data, but lacks some security headers and explicit incident response or security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is trustworthy and legitimate, with room for improvement in security and privacy practices.

B

Budapest Brand Nonprofit Zrt.

budapestbrand.hu

45

Budapest Brand Nonprofit Zrt. operates a comprehensive city branding and cultural promotion website focused on Budapest, Hungary. The organization aims to foster a sense of community and pride among Budapest residents and visitors through articles, podcasts, campaigns, and events. The website is well-structured, content-rich, and professionally designed, reflecting a mature digital presence for a nonprofit entity founded in 2020. Technically, the site leverages WordPress CMS with Bootstrap and AngularJS components, integrating multiple analytics and marketing tools such as Google Analytics, Microsoft Clarity, and Facebook Pixel. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements in security headers and cookie consent mechanisms are recommended. Privacy compliance is supported by a comprehensive GDPR-aligned privacy policy, but cookie consent is lacking. Overall, the site is trustworthy, with consistent branding and active social media engagement, positioning it as a key cultural and governmental communication platform for Budapest.

O

Olive Digital Consultancy Ltd.

olivedc.co.uk

45

Olive Digital Consultancy Ltd. is a small UK-based digital consultancy firm focused on helping clients leverage and monetize their digital assets. The website is currently a 'coming soon' placeholder with minimal content, highlighting services such as web design, SEO, and digital marketing targeted primarily at businesses in the West Midlands region. The company appears to have been founded in 2017 and is registered in England and Wales. Technically, the website uses standard web technologies including Normalize.css, Google Fonts, Font Awesome icons, and integrates Mailchimp for email subscriptions and Google Analytics for visitor tracking. The site is basic in design and mobile optimization, with no detected CMS or hosting provider information. Performance is moderate with basic SEO and accessibility features. From a security perspective, the site uses HTTPS implied by canonical tags and external form submission URLs, but lacks visible security headers such as CSP or HSTS. No privacy, cookie, or terms of service policies are present, indicating compliance gaps. The WHOIS lookup failed due to domain naming issues, preventing verification of domain registration details and reducing trustworthiness. Overall, the website presents a moderate risk profile with room for improvement in security posture, privacy compliance, and domain legitimacy verification. Strategic recommendations include implementing security headers, publishing privacy and cookie policies, verifying domain registration, and enhancing technical and content quality to build trust and compliance.

B

Bundesverband Soziokultur e.V.

soziokultur.de

45

Bundesverband Soziokultur e.V. is a German non-profit umbrella organization supporting socio-cultural institutions with programs, advocacy, and resources focused on sustainability, democracy, and cultural participation. The website is built on WordPress with a modern tech stack including Leaflet maps, Slick carousel, and Matomo analytics, reflecting a mature digital presence. Security posture is solid with HTTPS and cookie consent, though security headers and explicit incident response policies are absent. Overall, the site is professional, content-rich, and trustworthy, serving a specialized cultural audience effectively.

The website for domain vhs-aichach-friedberg.de is currently non-functional, displaying a TYPO3 'Page Not Found' error due to missing site configuration. There is no accessible content, business information, or user engagement features available. The site appears to be hosted on GoDaddy infrastructure as indicated by the nameservers. Due to the lack of content and configuration, the website does not provide any privacy, cookie, or terms of service policies, nor does it offer contact information or security-related disclosures. Technically, the site uses TYPO3 CMS but is not properly configured, resulting in a poor user experience and no SEO value. Security posture cannot be fully assessed but is likely poor given the absence of HTTPS confirmation and security headers. Overall, the website is not currently serving its intended purpose and presents a high risk for trust and credibility.

A

Aachener Krimitage

aachener-krimitage.de

44

Aachener Krimitage is a regional cultural event organizer specializing in literary festivals focused on crime and suspense literature in Aachen, Germany. The website provides detailed event information, partner and sponsor details, and contact information primarily targeting fans of crime literature and cultural event attendees. The business model revolves around organizing events, ticket sales, and collaboration with local partners and sponsors. Technically, the website is built on Joomla CMS using the Helix Ultimate template framework and Bootstrap, hosted by Cloudpit. The site is mobile-optimized and performs moderately well with good SEO practices. Security posture is solid with HTTPS enforced and a cookie consent mechanism in place, though it lacks security headers and a privacy policy page. Overall, the domain registration is consistent with the website's purpose and location, indicating legitimacy. The site is safe for general audiences with no adult content detected.

Nogajski.de is a German small business website offering professional photography and web design services, boasting over 20 years of experience in photography and over 10 years in web development. The site targets individuals and businesses seeking quality visual and web solutions. The business operates in a niche local market with a clear focus on service delivery. Technically, the website employs common JavaScript libraries such as jQuery, lazySizes for image optimization, WOW.js for animations, and Piwik/Matomo for analytics, hosted on kasserver.com. The site is moderately optimized for mobile devices and performance, with basic SEO and accessibility features. Security posture is moderate but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance. The WHOIS data is limited but does not raise immediate concerns, though more registrant details would improve trust. Overall, the website is professional and functional but could benefit from enhanced security and privacy compliance measures.

BÜCHERBAUKASTEN K. Motzet Verlagsgesellschaft mbH operates a specialized book catalog publishing service targeting independent bookstores in Germany. With a 50-year history, the company offers customized book catalogs and curated book recommendations, positioning itself as a niche player in the retail and media sectors. The website is built on WordPress and uses legacy JavaScript libraries, indicating moderate digital maturity. While the site provides clear contact information and cookie consent mechanisms, it lacks modern security headers and uses outdated software versions, which pose potential security risks. Overall, the business demonstrates credibility and a consistent brand presence but should modernize its technical infrastructure to enhance security and performance.