Germany security reports

J

J.P. Morgan

jpmorgan.com

79

J.P. Morgan Germany is a regional branch of the global financial services leader JPMorgan Chase & Co., providing a wide range of banking, investment, and asset management services. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to corporate and institutional clients. The technical infrastructure leverages Adobe Experience Manager CMS, Akamai CDN, and advanced analytics tools, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforcement, modern security headers, and privacy compliance including GDPR adherence. However, the absence of WHOIS data is notable but likely due to registry privacy or technical reasons rather than malicious intent. Overall, the site demonstrates high professionalism and trustworthiness.

L

Laerdal Medical

laerdal.com

73

Laerdal Medical is a globally recognized leader in healthcare simulation, training, and emergency care education products and software. The company focuses on improving the quality and efficiency of simulation trainings through innovative software and debriefing systems. The website is professionally designed, localized for German users, and reflects a mature digital presence with multiple language versions and consistent branding. The technical infrastructure leverages modern web technologies, including jQuery, Google Tag Manager, Facebook Pixel, and Hotjar, hosted behind Cloudflare DNS services. Security posture is solid with HTTPS enabled and domain status protections, though DNSSEC is not enabled and security headers are not evident in the provided data. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. No contact information or incident response details are found in the provided content, which limits user trust and compliance transparency. Overall, the website is trustworthy and professional but would benefit from enhanced privacy disclosures and security best practices.

F

Fristam Pumps

fristam.de

43

Fristam Pumps is a well-established German manufacturer specializing in high-quality hygienic stainless steel pumps and mixers, serving industries such as food, beverage, pharmaceutical, and personal care. With over 115 years of history and a global presence in more than 50 countries, the company positions itself as a leader in hygienic pumping solutions. Their website reflects a mature digital presence with comprehensive product information, case studies, and customer testimonials, targeting industrial clients seeking durable and efficient pumping equipment. Technically, the website is built on WordPress with modern plugins like WPBakery, Slider Revolution, and Yoast SEO, ensuring good SEO, mobile responsiveness, and user experience. The site uses HTTPS with a good SSL configuration and implements cookie consent mechanisms compliant with GDPR. Analytics tools include Matomo and Google Analytics, indicating moderate user tracking balanced with privacy considerations. From a security perspective, the site enforces HTTPS and uses security-related plugins but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. WHOIS data is minimal but consistent with the company's German origin and long history, supporting legitimacy. Overall, Fristam Pumps demonstrates a strong business and technical foundation with good security hygiene. Strategic improvements include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and compliance.

S

Der Domainname sportsaller-muenchen.de steht zum Verkauf.

sportsaller-muenchen.de

44

The website sportsaller-muenchen.de is a domain sales landing page offering the domain for €200 with a focus on secure and trusted domain transactions via a Treuhand (escrow) service. The business model centers on domain brokerage and investment, targeting buyers seeking strong, memorable domains to enhance their marketing and brand presence. The site emphasizes trust through verified seller status and a history of successful domain transfers since 2005. Technically, the site uses jQuery 3.6.0 and custom JavaScript, with moderate performance and good mobile optimization. However, it lacks advanced security headers and visible SSL/TLS configuration details. Privacy and cookie policies are absent, and no contact information or social media links are provided, limiting transparency and compliance. Overall, the site is professionally designed and functional but could improve in privacy compliance and security posture.

M

MAXX Fitnessgeräte

maxxfitnessgeraete.de

55

MAXX Fitnessgeräte operates a German-language e-commerce website specializing in the sale of new and used fitness equipment, including cardio and strength training devices. The company targets fitness studios, gyms, and private customers seeking affordable fitness solutions. The website is hosted on the ePages platform via Strato hosting, employing modern JavaScript libraries such as jQuery and RequireJS, and integrates Etracker for analytics. The site demonstrates good technical maturity with responsive design, accessibility features, and SEO optimization. Security posture is solid with HTTPS enforced, secure form tokens, and cookie consent mechanisms, although explicit security policies and incident response contacts are absent. Overall, the business presents a professional and trustworthy online presence with clear contact channels and product offerings.

R

R. Mächtel Bauunternehmung GmbH

maechtel-bau.de

41

R. Mächtel Bauunternehmung GmbH is a small, regionally focused construction company based in Bad Schönborn, Germany. The company specializes in various construction services including renovations, new builds, repairs, and barrier-free living designs. Their website is professionally designed using WordPress with modern plugins such as Yoast SEO and Borlabs Cookie for SEO and privacy compliance respectively. The technical infrastructure is solid, hosted on Schlund Technologies with HTTPS enabled and moderate performance. Security posture is adequate but could be improved by adding security headers and publishing comprehensive privacy and terms of service policies. No critical vulnerabilities or suspicious content were detected. Overall, the website reflects a legitimate and professional business with room for compliance and security enhancements.

H

Heizungsbau Sprich GmbH

heizungsbau-sprich.de

44

Heizungsbau Sprich GmbH is a German small business specializing in customized solutions for heating, sanitation, and ventilation systems, including solar energy installations. The company offers services such as renovation and new installations of heating systems, bathroom renovations, and apprenticeships. The website reflects a professional and consistent brand image, targeting private and commercial customers seeking energy-efficient and sustainable heating and sanitary solutions. Technically, the website is built on WordPress using Elementor and TheGem theme, with SEO optimization via Yoast and standard plugins for contact forms and GDPR compliance. The hosting provider is likely Strato, inferred from plugin usage. Security posture is good with HTTPS enforced, but lacks visible security headers and explicit security policies. No vulnerabilities or suspicious elements were detected. Overall, the website is well-structured, mobile-optimized, and trustworthy, though it could benefit from enhanced security headers and incident response documentation.

E

Elektro Henschel GmbH

elektro-henschel.de

58

Elektro Henschel GmbH is a small German company specializing in electrical installation, energy-saving solutions, and smart home technologies. The company positions itself as a regional expert offering comprehensive consulting, installation, and maintenance services. Their website reflects a professional and consistent brand image, targeting both private and commercial customers interested in modern electrical solutions and energy efficiency. The business model focuses on service delivery combined with product offerings from well-known manufacturers. Technically, the website is built on TYPO3 CMS with a moderate performance profile and good mobile optimization. The use of older JavaScript libraries like jQuery 1.8.3 suggests some technical debt, but overall the site is functional and well-structured. Security posture is solid with HTTPS enforced and cookie consent implemented, though the absence of explicit security headers and incident response information indicates room for improvement. Privacy compliance is good, with a comprehensive privacy policy and cookie management. Overall, the website is trustworthy and professional, with clear contact information and no signs of suspicious activity.

Betting Umzüge oHG is a well-established moving company based in Lörrach, Germany, with over 60 years of experience in providing private and commercial moving services, including senior moves and storage solutions. The company targets both private individuals and businesses primarily in the Lörrach region and across Germany. Their website reflects a professional and trustworthy business with clear service offerings and positive customer testimonials, supported by industry association memberships. Technically, the website is built on the Contao Open Source CMS platform, utilizing modern JavaScript libraries such as jQuery and Mmenu.js for enhanced user experience. The site is mobile-optimized and includes a cookie consent mechanism compliant with GDPR requirements. Performance is moderate with good SEO and accessibility basics in place. From a security perspective, the site enforces HTTPS and uses session and CSRF protection cookies. However, it lacks advanced security headers and does not publish explicit security or incident response policies. No vulnerabilities or suspicious content were detected, and the domain registration data aligns well with the business claims, indicating a trustworthy online presence. Overall, Betting Umzüge oHG presents a solid digital footprint with room for improvement in security policy transparency and advanced security controls. The risk level is low, and the company demonstrates good compliance with privacy regulations.

P

Plus Bus Tours

plusbustours.de

39

Plus Bus Tours is a small, family-run transportation company based in Mittelhessen, Germany, specializing in customized bus tours and group travel services. Founded in 1995, the company offers a range of services including city trips, round trips, and short trips for groups ranging from 8 to 53 people. Their business model focuses on personalized service and reliable execution, targeting clubs, families, and organizations seeking group travel solutions. The website reflects a consistent brand image and provides clear contact information, enhancing trustworthiness. Technically, the website is built on WordPress using the Elementor page builder, leveraging modern web technologies such as jQuery and Swiper.js for interactive elements. The site is mobile-optimized and performs moderately well, with good SEO practices evident through meta tags and structured data. Hosting appears to be managed via your-server.de, with secure HTTPS configuration in place. From a security perspective, the site benefits from HTTPS encryption and shows no signs of exposed sensitive data or vulnerable libraries. However, it lacks explicit security headers and does not provide public security or incident response policies. Privacy compliance is partially addressed with a privacy policy and terms of service available, but the absence of a cookie consent mechanism is a notable gap. No analytics or tracking scripts were detected, indicating minimal user tracking. Overall, the website presents a professional and trustworthy front for the business with a solid technical foundation. To enhance security and compliance posture, the company should implement security headers, add incident response information, and introduce a cookie consent mechanism to fully comply with GDPR requirements.

B

Bundesverband Deutscher Inkasso-Unternehmen e.V.

inkasso.de

39

The Bundesverband Deutscher Inkasso-Unternehmen e.V. (BDIU) operates as the leading industry association for debt collection companies in Germany. The website inkasso.de serves as a comprehensive platform providing information about the association's advocacy role, services for consumers, and member resources. The site targets both businesses in the debt collection sector and consumers seeking information about debt collection processes. BDIU holds a significant market position, representing approximately 70% of active debt collection companies in Germany, and offers key services including advocacy, consumer protection, and education through its affiliated Inkassoakademie. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies such as jQuery and Google Tag Manager for analytics. The site demonstrates good mobile optimization and SEO practices, with a moderate performance profile. The presence of a cookie consent mechanism and a comprehensive privacy policy indicates a strong commitment to privacy compliance. However, some areas such as explicit security policies and incident response contacts are not publicly documented. From a security perspective, the site enforces HTTPS and implements cookie consent, but lacks visible security headers and a published security policy. No vulnerabilities or exposed sensitive data were detected in the analysis. The WHOIS data is limited but does not raise concerns, supporting the legitimacy of the domain. Overall, the website presents a professional and trustworthy front for the association, with room for improvement in security transparency and incident response readiness. Strategically, the BDIU website effectively supports its role as an industry leader and consumer advocate. Enhancing security disclosures and providing clearer incident response channels would strengthen trust and compliance posture. Continued investment in technical modernization and privacy practices will support sus…

A

AL-TEC Elektromeisterbetrieb

al-tec-elektromeisterbetrieb.de

53

AL-TEC Elektromeisterbetrieb is a small, specialized electrical and security technology service provider based in Meerbusch, Germany. The company offers a broad range of services including UPS systems, emergency and safety lighting, batteries, LED lighting, security technology, building technology, communication technology, photovoltaic systems, and e-mobility charging stations. Their website reflects a professional local business with clear contact information and detailed service descriptions, targeting both private and commercial customers in the energy and electrical sectors. Technically, the website is built on the IONOS MyWebsite CMS platform, utilizing modern web technologies such as HTML5, CSS3, JavaScript, and jQuery plugins for enhanced user experience. The site is mobile optimized and performs moderately well, with good SEO practices and accessibility at a basic level. Hosting appears to be provided by IONOS, inferred from CMS and script sources. From a security perspective, the website enforces HTTPS and avoids exposing sensitive data or vulnerable libraries. However, it lacks important security headers and does not provide a privacy policy, cookie consent mechanism, or incident response contact information, which are critical for GDPR compliance and user trust. No analytics or tracking scripts were detected, indicating minimal user tracking. Overall, the website is safe, professional, and trustworthy for general audiences, but improvements in privacy compliance and security best practices are recommended to enhance its security posture and regulatory adherence.

B

B. Joosten / Joosten Tankwagenreinigung

b-joosten.de

62

B. Joosten / Joosten Tankwagenreinigung is a small German business specializing in tank truck cleaning and logistics services. The website presents a professional image with a clear focus on their core services, targeting businesses and individuals in need of specialized transportation and cleaning solutions. The company appears to have been established around 2016, consistent with the domain's content and metadata. Technically, the website is built on WordPress using the Divi theme and incorporates SEO best practices via the Yoast SEO plugin. A cookie consent mechanism is implemented, reflecting awareness of privacy compliance requirements. Security posture is adequate with HTTPS enabled and cookie consent in place, though additional security headers and explicit security policies would enhance trust. No critical vulnerabilities or suspicious indicators were found. Overall, the website is well-structured, user-friendly, and compliant with GDPR standards, supporting a trustworthy business presence in the transportation sector.

B

Braun & Sohn Druckerei GmbH & Co. KG

braun-und-sohn.de

41

Braun & Sohn Druckerei GmbH & Co. KG is a well-established German family-owned printing company founded in 1913, specializing in both printed and digital media solutions. Their services encompass a broad range of offerings including offset and digital printing, media design, fulfillment, logistics, and data security. The company emphasizes innovation combined with tradition and customer-centric service, positioning itself as a trusted medium-sized player in the manufacturing sector. The website reflects this with professional content, clear navigation, and visible certifications such as DDV, FSC, and Blauer Engel, reinforcing trust and compliance. Technically, the website is built on TYPO3 CMS and uses legacy JavaScript libraries like jQuery 1.7.2 and Modernizr. While the site is accessible and mobile-optimized to a basic degree, some technical debt is evident through outdated scripts and minor HTML errors. Hosting appears stable with Schlundtech and Rackbutler nameservers. SEO and accessibility are basic but functional. No advanced analytics or tracking tools were detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS and secure form submissions but lacks visible security headers and uses outdated JavaScript libraries, which could expose it to vulnerabilities. No incident response or vulnerability disclosure information is present, and no cookie consent mechanism was found, which may impact GDPR compliance. Overall, the security posture is moderate but could be improved with updates and enhanced security controls. The overall risk assessment is moderate with no critical issues detected. Strategic recommendations include updating JavaScript libraries, fixing HTML errors, implementing security headers, and adding cookie consent mechanisms to improve compliance and security posture. The business credibility is strong, supported by clear contact information and certifications, making the site trustworthy for its target a…

Malerbetrieb Krings is a well-established master painter company based in Nideggen, Germany, with a history dating back to 1964. The company specializes in painting, wallpapering, thermal insulation systems, floor coverings, and scaffolding services, serving a diverse clientele including private households, businesses, and public institutions. Their focus on quality materials, customer satisfaction, and collaboration with local trade partners positions them as a trusted local service provider. Technically, the website is built on WordPress using Elementor and Astra theme, with standard plugins for forms and cookie consent, reflecting a moderate level of digital maturity. Security posture is good with HTTPS and cookie consent implemented, but lacks advanced security headers and incident response information. Overall, the website is professional, GDPR compliant, and safe for general audiences, though improvements in security policies and transparency could enhance trust further.

G

GRIMME Landmaschinenfabrik SE & Co. KG

grimme.co.uk

64

GRIMME Landmaschinenfabrik SE & Co. KG is a well-established German manufacturer specializing in agricultural machinery for potatoes, beets, and vegetables. With a history dating back to 1861 and a domain registered since 1996, the company holds a strong market position as a leader and innovator in root crop technology. Their product portfolio is extensive, supported by aftersales services, a digital customer portal, and a used machinery marketplace, targeting agricultural businesses and farmers worldwide. The website reflects a professional and comprehensive digital presence with clear branding and consistent messaging. Technically, the website leverages modern web technologies including Next.js, React, and ButterCMS, hosted on Cloudflare infrastructure. It is optimized for performance, mobile responsiveness, and accessibility, with good SEO practices. Cookie consent is managed via Usercentrics, indicating attention to privacy compliance. However, explicit privacy policies and terms of service are not directly found on the main site, which is a compliance gap. From a security perspective, the site uses HTTPS with a client transfer lock on the domain, but DNSSEC is not enabled, representing a minor security shortfall. No vulnerability disclosure or incident response contacts are published, which could be improved. Overall, the security posture is solid but could benefit from enhanced transparency and DNS security. The overall risk assessment is low, with no signs of malicious content or suspicious registrations. Strategic recommendations include publishing comprehensive privacy and security policies, enabling DNSSEC, and establishing a vulnerability disclosure program to enhance trust and compliance.

H

Heraeus Group

heraeus.com

75

Heraeus Group is a globally recognized, family-owned technology company headquartered in Hanau, Germany, with a rich history spanning over 350 years. The company specializes in advanced materials and innovative technology solutions across multiple sectors including metals and recycling, healthcare, semiconductor and electronics, and industrial applications. Their business model focuses on providing customized, technology-driven solutions to industrial and healthcare customers worldwide. The website reflects a mature digital presence with comprehensive content, strong branding, and a clear focus on sustainability and innovation. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, supported by a Magnolia CMS backend. It employs industry-standard analytics and consent management tools, ensuring compliance with privacy regulations like GDPR. The site is mobile-optimized, accessible, and SEO-friendly, providing a positive user experience. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers such as Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is a notable concern, potentially indicating privacy protection or registry issues, which slightly impacts trustworthiness. Overall, Heraeus Group's website demonstrates a strong business and technical foundation with good security practices, though improvements in security header implementation and transparency in domain registration are recommended to enhance trust and compliance.

G

GoDaddy Operating Company, LLC

thepalacebingo.com

63

The website is a domain sales landing page hosted by GoDaddy, offering the domain thepalacebingo.com for purchase or lease. It targets domain buyers and investors, primarily German-speaking users, and provides secure transaction services with multiple payment options. The platform leverages modern web technologies including React and Next.js, ensuring good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and reCAPTCHA integration. However, WHOIS data for the domain is unavailable, indicating the domain may be unregistered or in transition, which slightly reduces trustworthiness. Overall, the site is professional, secure, and compliant with privacy regulations.

G

Georgsmarienhütte GmbH

gmh.de

65

Georgsmarienhütte GmbH is a well-established German steel manufacturer specializing in sustainable and high-quality steel products, including raw steel, bar steel, and blank steel. Founded in 1856 and operating under the GMH Gruppe, the company is a pioneer in green steel production using electric arc furnace technology, contributing significantly to circular economy efforts. Their key markets include automotive, machinery, and energy sectors, supported by a comprehensive product portfolio and sustainability initiatives such as TÜV SÜD validated Product Carbon Footprint calculations. Technically, the website is built on a modern WordPress platform with Bootstrap and Alpine.js, featuring responsive design, good SEO, and accessibility standards. Security is well addressed with strict Content Security Policies, HTTPS, and other headers, although explicit security and incident response policies are not published. Cookie consent is managed via Borlabs Cookie, ensuring GDPR compliance to a good extent. The security posture is strong with no visible vulnerabilities or exposed sensitive data, but the absence of a privacy policy and terms of service pages represents compliance gaps. The domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness. Overall, the website presents a professional, trustworthy, and technically sound digital presence for a large manufacturing enterprise.

G

GoDaddy Operating Company, LLC

johnodonnell.com

63

The website johnodonnell.com is a domain sales landing page hosted and operated by GoDaddy Operating Company, LLC, a leading global domain registrar and aftermarket platform. The site offers the domain for sale at a fixed price with secure transaction and fast transfer guarantees. The target audience is domain investors and buyers, primarily German-speaking, as indicated by the localized content. The business model is focused on domain aftermarket sales, leveraging GoDaddy's extensive infrastructure and brand trust. The marketplace position is strong, supported by a high Trustpilot rating and professional presentation. Technically, the site is built using modern web technologies including React 18 and Next.js, ensuring good performance, mobile optimization, and accessibility. Security best practices are observed with HTTPS enforcement, security headers, and reCAPTCHA integration for forms. The site uses multiple external trusted domains for analytics, payment processing, and customer reviews, maintaining a secure and compliant environment. Security posture is robust with no detected vulnerabilities or exposed sensitive data. However, explicit security policies and incident response contacts are not published, which could be improved. Privacy compliance is strong with clear privacy and cookie policies, GDPR adherence, and consent mechanisms. Business credibility is reinforced by clear contact phone numbers, professional content, and trust indicators. Overall, the website presents a low-risk profile with a solid security and privacy foundation. Strategic recommendations include publishing dedicated security and incident response pages, adding vulnerability disclosure information, and enhancing security contact transparency to further strengthen trust and compliance.

The website for M&R Fahrzeugtechnik Paderborn is currently inaccessible due to a PHP error, resulting in an error page being displayed instead of functional content. The company appears to operate in the vehicle technology sector in Germany, but no detailed business information or services are presented on the site. The technical infrastructure is based on Joomla CMS, but the presence of a PHP error indicates a lack of maintenance or misconfiguration. No privacy, cookie, or terms of service policies are present, and no contact information is available, which negatively impacts user trust and compliance. Security posture is weak due to visible errors and lack of security headers or HTTPS confirmation. Overall, the site is not currently suitable for professional or customer-facing use and requires urgent technical remediation.

P

passepartout bilder & rahmen

passepartout-fundke.de

38

The website www.passepartout-fundke.de represents a small, local retail business specializing in pictures and framing services, operating since 1984 in Greven, Germany. The business offers framed art, custom framing, and art prints from various artists, targeting local customers and art enthusiasts. The website is built on the cm4all Homepage Designer platform hosted by Telekom Deutschland, using standard web technologies such as HTML5, CSS3, JavaScript, and jQuery. The site is accessible without any WAF or blocking mechanisms and contains rich visual content including photo slideshows and videos. However, it lacks advanced security headers and privacy compliance mechanisms such as cookie consent banners. Contact information is clearly provided via email and phone, but no contact forms or social media links are present.

M

McDonald's Deutschland

mcdonalds.de

66

McDonald's Deutschland operates as the German branch of the global McDonald's fast food chain, providing localized content, promotions, and restaurant information for customers in Germany. The website is professionally designed, leveraging Adobe Experience Manager and a modern technology stack including Adobe Launch and Akamai services, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS, cookie consent mechanisms, and no visible vulnerabilities or exposed sensitive data. However, WHOIS data is unavailable, likely due to privacy protection, which is common for large brands. Overall, the site demonstrates a mature digital presence aligned with corporate standards and GDPR compliance.

I

InterPflege Westfalen GmbH

inter-pflege.de

46

InterPflege Westfalen GmbH is a small healthcare service provider specializing in ambulatory nursing and elderly care in Dortmund, Germany. Established in 2011, the company offers professional and individualized care services supported by a team of qualified nursing and social care professionals. The website reflects a local market position with clear communication channels and a focus on trust and professionalism. Technically, the website is built on WordPress using the Enfold theme, incorporating modern web technologies such as jQuery, Google Tag Manager, and Borlabs Cookie for GDPR-compliant cookie consent. Hosting is provided by Alfahosting, inferred from the nameservers. The site is mobile-optimized with moderate performance and good SEO practices. Security posture is solid with HTTPS enforced, spam protection on forms, and cookie consent mechanisms. However, there is room for improvement by implementing security headers and publishing explicit security policies or vulnerability disclosure information. No critical vulnerabilities or suspicious content were detected. Overall, the website demonstrates a trustworthy and professional online presence suitable for its healthcare service business. Strategic recommendations include enhancing security headers, adding incident response information, and improving accessibility features to further strengthen compliance and user trust.

Reisebüro Lauffer Manuela Colloff is a small local travel agency based in Recklinghausen, Germany, specializing in personalized travel consultation and booking services including flights, cruises, and bus travel. The website presents a professional and user-friendly interface with clear contact information and service offerings, targeting general consumers seeking travel planning assistance. Technically, the site employs modern web technologies such as Bootstrap 4, jQuery, Swiper.js, and integrates Google Maps and Matomo analytics, reflecting a moderate level of digital maturity. Security posture is solid with HTTPS enforced and cookie consent implemented, though the absence of explicit security policies and incident response contacts suggests room for improvement. Overall, the website is trustworthy and compliant with GDPR requirements, with no signs of malicious content or vulnerabilities detected.

Stilblüte GmbH is a specialized garden and landscaping company based in Blankenhof, Germany, offering a broad range of services including garden design, lawn care, fence construction, path building, and woodcutting. The company targets private, commercial, and industrial clients in the local region and positions itself as an experienced and reliable provider with over 20 years of experience and more than 1000 completed projects. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website uses modern web technologies such as HTML5, CSS3, JavaScript, Google Fonts, and Bootstrap framework for responsive design. Hosting is provided by netcup, a reputable German hosting provider. The site performs moderately well with good mobile optimization but lacks advanced accessibility features and SEO enhancements beyond basic meta tags. From a security perspective, the site uses HTTPS (implied by URLs and JSON-LD data), but no explicit security headers were detected in the provided data. A cookie consent banner is implemented, indicating some privacy awareness, but no privacy policy or terms of service pages were found. No incident response or vulnerability disclosure information is provided, and no analytics or tracking scripts were detected, suggesting minimal user tracking. Overall, the website is safe and suitable for general audiences, with no adult or questionable content. The domain WHOIS data is minimal but consistent with a legitimate hosting provider. The absence of detailed registrant information slightly reduces trust but does not indicate suspicious activity. Strategic recommendations include publishing a privacy policy, adding security headers, and providing incident response contacts to enhance security posture and compliance.

G

Glas- & Solarreinigung Marcel Lange

pv-reinigung-lange.de

53

Glas- & Solarreinigung Marcel Lange is a small certified specialist company based in Mecklenburg Vorpommern, Germany, offering professional cleaning services for solar and photovoltaic installations as well as glass cleaning. The company positions itself as the first certified solar and photovoltaic cleaner in the region, targeting solar panel owners and businesses requiring maintenance to improve performance and longevity of their installations. The website is built on the IONOS MyWebsite platform, featuring a moderate technical infrastructure with basic mobile optimization and clear navigation. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is limited due to absence of cookie consent mechanisms and detailed privacy policies. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

The website www.glaser-metallbau.de currently serves as a redirect or domain parking page managed by Parklogic, with no accessible business content or metadata. There is no evidence of company information, contact details, or service descriptions. The technical infrastructure is minimal, relying on JavaScript redirects and advertising scripts typical of parked domains. Security posture cannot be properly assessed due to lack of content and security headers. The domain WHOIS data indicates use of Parklogic name servers, suggesting the domain is not actively used by the business it purports to represent. Overall, the site lacks transparency, business credibility, and compliance indicators, resulting in a low trust and security score.

H

Hauskrankenpflege "humaniter" Petra Sielaff GmbH

humaniter-kyritz.de

36

Hauskrankenpflege "humaniter" Petra Sielaff GmbH is a small, local healthcare service provider based in Kyritz, Germany, specializing in home nursing and care services since 1994. The company offers a range of services including in-home care, household management, medical nursing, and supportive care, targeting residents in the Ostprignitz-Ruppin region. The website reflects a consistent and professional brand image with clear contact information and service descriptions, positioning the company as a trusted local care provider. Technically, the website employs a traditional tech stack including Bootstrap, jQuery, and various UI plugins such as Slider Revolution and Owl Carousel. The site is moderately optimized for performance and mobile devices but lacks advanced CMS or modern frameworks. Hosting is managed via GoDaddy's domain control services. SEO and accessibility are basic but functional. From a security perspective, the site lacks visible HTTPS enforcement and security headers, and no incident response or security policies are published. There is no cookie consent mechanism or advanced privacy compliance features, which may pose compliance risks under GDPR. No analytics or tracking scripts are detected, indicating minimal user tracking. Overall, the website is functional and trustworthy for its business purpose but requires significant improvements in security posture and privacy compliance to meet modern standards. Strategic enhancements in SSL deployment, security headers, and privacy policies are recommended to reduce risk and improve user trust.

T

THEATERuntendrunter

theateruntendrunter.de

53

THEATERuntendrunter is a small local theater organization based in Germany, providing theatrical performances and cultural events primarily targeted at the local community and theater enthusiasts. The website is built on the Wix platform, indicating a moderate level of digital maturity with basic technical infrastructure. The site uses HTTPS and includes some modern JavaScript polyfills and error monitoring via Sentry, but lacks advanced security headers and privacy compliance documentation. Contact information and formal policies such as privacy or cookie policies are not present, which limits trust and compliance posture. Overall, the site is functional but basic in design and content, suitable for a small cultural entity.

E

Eggeling Bedachungs- und Sanierungs GmbH

dachdecker-eggeling.de

58

Eggeling Bedachungs- und Sanierungs GmbH is a specialized roofing and construction service provider based in Sülzetal, Germany, serving the Magdeburg and Landkreis Börde regions. Established in 1990, the company offers a range of services including roof installation, renovation, roof plumbing, wood construction, chimney repairs, scaffolding, and crane rental. The website reflects a professional and consistent brand image targeting both private and industrial customers. The business positions itself as a leading local expert with a strong focus on quality and customer service. Technically, the website is built using modern web standards with HTML5, CSS3, and JavaScript, hosted on AWS infrastructure. It employs Google Analytics for visitor insights and uses a cookie consent mechanism compliant with GDPR. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Embedded YouTube videos are present but disabled by default due to cookie settings. From a security perspective, the site enforces HTTPS and uses cookie consent to manage privacy. However, it lacks explicit security headers such as Content-Security-Policy and does not publish a dedicated security or incident response policy. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business claims, showing no suspicious patterns. Overall, the website demonstrates a solid digital presence with good privacy compliance and a trustworthy business profile. Strategic improvements could focus on enhancing security headers, publishing security policies, and adding incident response contacts to further strengthen trust and compliance.

mr.sol Alternative Energie und Heizungstechnik is a small, specialized service provider based in Germany focusing on renewable energy heating solutions including biomass heating, solar thermal systems, and sanitary installations. Founded in 1994, the company has a strong local presence in the Leipzig and Markranstädt region, offering expert services in modern heating technologies such as pellet and wood heating systems. The website reflects a professional and consistent brand image with clear contact information and certifications that enhance trust. Technically, the website is built on WordPress using modern plugins and themes such as WPBakery Page Builder and Yoast SEO, indicating a moderate level of digital maturity. The site is mobile optimized and performs moderately well, though there is room for improvement in accessibility and performance optimization. SEO practices are adequately implemented with proper meta tags and structured data. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks important security headers and a vulnerability disclosure policy. The contact forms do not have active CAPTCHA protection, which could expose the site to spam. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or terms of service. No social media or analytics tracking is evident, which limits user tracking but also reduces marketing insights. Overall, the website is trustworthy and professional with a good business focus but could improve its security posture and privacy compliance to better protect users and enhance credibility.

H

Hertel GmbH Bad Schandau

hertel-gmbh-badschandau.de

49

Hertel GmbH Bad Schandau operates a regional news and analysis platform focused on Bad Schandau and its surroundings, delivering topical content across politics, science, technology, sports, and culture. Founded in 2022, the company positions itself as a local media provider offering comprehensive insights to a general audience. The website employs modern web technologies including Next.js and React, hosted with Cloudflare DNS services, ensuring a contemporary digital infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content categories. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit incident response policies. Privacy compliance is basic, with cookie and privacy policies present but no active consent mechanism. Overall, the website is safe, professional, and trustworthy, though improvements in security transparency and contact information visibility are recommended.

A

apotheken.de

apotheken.de

71

apotheken.de is a well-established German healthcare and pharmacy information portal offering extensive content on diseases, symptoms, therapies, medications, and pharmacy services including emergency pharmacy locators and medication pre-orders. The website targets the general German-speaking public seeking reliable health information and pharmacy-related services. The business model appears to be based on providing valuable health content and services, likely monetized through advertising and partnerships. Technically, the site employs modern web technologies including JavaScript frameworks, Google Tag Manager, and Cookiebot for consent management, hosted on Amazon AWS infrastructure. The site is responsive and optimized for mobile devices with good SEO and accessibility features. Security-wise, the website enforces HTTPS, uses security headers, and implements a comprehensive cookie consent mechanism aligned with GDPR requirements. No critical vulnerabilities or suspicious patterns were detected. Overall, apotheken.de demonstrates a strong security posture, good privacy compliance, and high content quality, making it a trustworthy source for health information. Strategic recommendations include publishing explicit security and incident response policies, adding vulnerability disclosure mechanisms, and enhancing transparency around data protection officer contacts.

I

immitec GmbH

immitec.de

44

immitec GmbH is a small German company specializing in sustainable energy and capital concepts, focusing on the development, financing, and operation of solar and energy storage projects. With over 20 years of experience, the company positions itself as a trusted partner combining financing expertise with tangible asset projects. The website reflects a professional and consistent brand image targeting investors and clients interested in renewable energy investments. Technically, the site uses modern frameworks such as Bootstrap and AOS for animations, is mobile-optimized, and hosts fonts locally to ensure GDPR compliance. Security-wise, the site uses HTTPS (implied by og:url), but lacks explicit security headers and cookie consent mechanisms. No forms or tracking scripts are present, indicating a privacy-conscious approach. WHOIS data aligns well with the website's claims, showing a consistent and legitimate registration. Overall, the site is well-designed, trustworthy, and secure with minor improvements recommended in security headers and privacy notices.

G

GoDaddy Operating Company, LLC

screamingcolour.com

62

This website is a domain aftermarket sales landing page operated by GoDaddy Operating Company, LLC, targeting German-speaking users interested in acquiring the domain screamingcolour.com. The platform offers domain purchase, leasing, and brokerage services with secure transaction guarantees. The site leverages modern web technologies including React and Next.js, hosted on GoDaddy infrastructure, providing a moderate performance and basic mobile optimization. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although explicit security headers could be improved. Privacy and cookie policies are present and GDPR compliant, supporting user trust. Overall, the site is a legitimate, professionally branded domain sales platform with moderate content quality and clear business intent.

Y

Yahoo

yahoo.com

72

Yahoo operates as a major global internet services company offering products such as search, email, news, and advertising. This specific page is dedicated to managing user privacy and consent in compliance with GDPR, targeting German users. The company maintains a strong market position with a comprehensive privacy framework and transparent user consent mechanisms. Technically, the site uses modern web technologies including JavaScript and CSS, and integrates analytics via YAHOO.i13n.Rapid. Security is robust with HTTPS enforced and CSRF protections in place, though some security headers could be improved. Overall, the site demonstrates good privacy compliance and user trustworthiness.

B

Body & Strumpf

body-strumpf.de

58

Body & Strumpf is a German-based e-commerce retailer specializing in hosiery, bodysuits, and related accessories. The company emphasizes its over 45 years of experience and offers free shipping within Germany, targeting consumers interested in quality hosiery products. The website is built on the plentymarkets platform using Vue.js, integrating PayPal for payment processing. The site demonstrates a good level of digital maturity with responsive design and clear navigation, although some accessibility features could be improved. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and published security policies. Overall, the business presents a professional and trustworthy online presence with room for enhanced privacy and security compliance.

S

Schuller & Lier Transporte Gmbh & Co. KG

schuller-transporte.de

39

Schuller & Lier Transporte Gmbh & Co. KG is a German transportation company established in 1951, specializing in the transport of various goods, container rental, and delivery of construction materials. The company operates a sizable fleet and emphasizes traditional, familial, and efficient service. Their website is professionally designed using WordPress and Elementor, providing clear information about their services and contact details. The site is fully accessible with no blocking mechanisms detected, indicating good digital maturity. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and published security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the business presents a credible and professional front, though WHOIS data is missing, which slightly reduces trustworthiness.

A

A. Kißling Galvanische Werke GmbH

kissling-galvanik.de

40

A. Kißling Galvanische Werke GmbH is a well-established German company specializing in galvanic surface finishing and restoration services since 1932. The company offers a broad range of electroplating and chemical coating services, including hard chrome plating, chemical nickel plating, zinc plating, silver plating, and specialized restoration of vintage car parts. Their market position is strong within the manufacturing sector, supported by certifications such as ISO 9001 and environmental awards. The website is professionally designed using WordPress and Elementor, hosted on a reputable German provider, and provides clear contact information and service descriptions. However, the site lacks a cookie consent mechanism and explicit security headers, which are areas for improvement in privacy compliance and security posture. Overall, the company demonstrates a solid business presence with good technical infrastructure and a trustworthy online footprint.

F

Fahrrad Schill

fahrrad-schill.de

58

Fahrrad Schill is a small local bicycle retailer and service provider based in Germany, specializing in sales and maintenance of bicycles including E-Bikes and children's bikes. The website is built on WordPress using the Gutenberg editor and Go-X theme, providing a modern and responsive user experience suitable for local customers. The site is well-structured with clear navigation and professional branding, although it lacks advanced privacy and security policies. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and cookie consent mechanisms. Overall, the website presents a trustworthy and professional image for a small business but would benefit from enhanced privacy compliance and security best practices.

G

Gaetano Biondo GmbH

gaetano-biondo-stuckateur.de

49

Gaetano Biondo GmbH is a small, specialized master craftsman company based in Saarbrücken, Germany, providing high-quality plastering, stucco, drywall, and thermal insulation services since 2006. The company targets private customers, architects, and businesses within Saarland and nearby regions, emphasizing traditional craftsmanship combined with modern techniques. Their website reflects a professional local business with clear service offerings and contact information but lacks comprehensive privacy and security policies. Technically, the site is built on WordPress with Elementor, showing moderate performance and good mobile optimization but missing key security headers and privacy compliance features. The security posture is adequate with HTTPS enabled but could be improved by adding security headers and privacy mechanisms. Overall, the website is trustworthy and professional but should address compliance and security gaps to enhance user trust and regulatory adherence.

S

Steurer GmbH

steurer-metallbau.de

57

Steurer GmbH is a family-owned metal construction company based in Kehl am Rhein, Germany, specializing in steel and metal constructions including staircases, balconies, railings, and custom metal art. With a heritage spanning three generations, the company emphasizes quality craftsmanship combined with modern technology to deliver durable and functional solutions. The website reflects a professional and consistent brand presence targeting both business and end customers in the manufacturing sector. Technically, the site is built on the Chayns CMS platform using React and modern JavaScript libraries, offering good mobile optimization and user experience. Security posture is adequate with HTTPS enforced but lacks advanced security headers and formal privacy or cookie policies, indicating room for compliance improvements. Overall, the website is trustworthy and safe, with clear contact information and certifications mentioned, though it would benefit from enhanced privacy and security disclosures.

F

FAHR MINERALÖLE GmbH

fahr-mineraloele.de

44

Fahr Mineralöle GmbH is a small, regionally focused energy supplier based in Gottmadingen, Germany, with a history spanning over 60 years. The company specializes in supplying heating oil, diesel, bio heating oil, lubricants, and AdBlue® to private and commercial customers primarily in the Hegau region. Their business model centers on personalized service and direct delivery, emphasizing reliability and trust. The website reflects this local, customer-centric approach with clear contact information and product offerings. Technically, the website is built on the Contentserver24 CMS platform, utilizing common web technologies such as jQuery, Bootstrap, and FontAwesome Pro. The site is mobile responsive and includes a cookie consent mechanism, indicating awareness of privacy compliance. Performance is moderate, with room for improvement in accessibility and SEO optimization. No advanced frameworks or analytics services are detected. From a security perspective, the site uses HTTPS and implements a cookie consent banner, but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the content. WHOIS data is minimal but does not raise suspicion, though it lacks detailed registrant information. Overall, the security posture is adequate for a small business but could benefit from enhancements. The overall risk assessment is low, with no critical issues found. Strategic recommendations include implementing security headers, publishing security policies, and enhancing technical SEO and accessibility to improve digital maturity and trust.

R

Restaurant DELPHI

restaurant-delphi.com

41

Restaurant DELPHI is a small, local Greek specialty restaurant located in Karlsruhe, Germany, offering a variety of traditional Greek dishes and beverages in a Mediterranean ambiance. The website is built on WordPress using the Avada theme and includes common plugins such as Yoast SEO and LayerSlider, indicating a moderate level of digital maturity. The site is well-structured, mobile-optimized, and provides clear contact information and social media links, enhancing customer engagement. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and an incident response contact, which could be improved. The absence of WHOIS data raises concerns about domain registration legitimacy, which should be investigated further to ensure trustworthiness. Overall, the website presents a professional and trustworthy front for the restaurant business with room for technical and security enhancements.

S

SFS Maschinen- und Gerätebau GmbH

sfs-brachttal.de

50

SFS Maschinen- und Gerätebau GmbH is a small manufacturing company based in Germany specializing in machinery and device construction, including hydraulic and pneumatic cylinders, welding, repairs, and maintenance services. With over 25 years of experience, the company targets industrial clients requiring specialized manufacturing and repair solutions. The website is built on Joomla CMS and uses common JavaScript libraries such as jQuery and MooTools, indicating a moderately modern technical infrastructure. The site is accessible and mobile-optimized but lacks advanced SEO and accessibility features. Security posture is moderate with presence of CSRF tokens but absence of security headers and unclear SSL configuration. Privacy compliance is weak due to missing privacy and cookie policies. Advertising scripts from a third-party ad network are present, which may impact user privacy. Overall, the website is professional and trustworthy but would benefit from enhanced security and compliance measures.

R

Raumausstattung Ulrich Thomas

raumausstattung-u-thomas.de

32

Raumausstattung Ulrich Thomas is a small German retail business specializing in interior decoration products such as flooring, wall coverings, fabrics, and sun protection solutions. The website is professionally designed using TYPO3 CMS and targets local homeowners and clients interested in home decoration in Bad Endbach, Germany. The site provides clear contact information but lacks advanced privacy and security features such as cookie consent and security headers. The business appears legitimate with consistent WHOIS data and no suspicious indicators. The website is accessible with no blocking or WAF challenges detected.

P

Pflegedienst zur Sonnenblume

pflegedienst-zur-sonnenblume.de

47

Pflegedienst zur Sonnenblume is a small regional mobile nursing service provider operating primarily in the Hoyerswerda area and surrounding towns in Germany. The company focuses on delivering compassionate and respectful care to individuals in need of nursing support at home. Their website reflects a professional and consistent brand image, with clear descriptions of their services and target audience. The business appears well-established since 2015, with a clear local market presence. Technically, the website is built on WordPress using the Divi theme, enhanced with plugins for SEO, accessibility, and GDPR compliance. Hosting is provided by Strato servers, and the site uses HTTPS with a good SSL configuration. The website is moderately performant and mobile-optimized, providing a good user experience. From a security perspective, the site employs HTTPS and privacy-focused plugins but lacks advanced security headers and explicit incident response or security policy disclosures. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with a comprehensive privacy and cookie policy and consent mechanisms in place. Overall, the website demonstrates a solid digital presence with good content quality and privacy compliance. Strategic improvements in security headers, incident response information, and broader contact details could enhance trust and security posture further.

T

Test

subaru.de

50

The website www.subaru.de represents Subaru Deutschland, a large automotive business focused on all-wheel drive SUVs and electric vehicles tailored for the German market. The site offers comprehensive services including vehicle configuration, test drives, dealer search, and after-sales support. The business model centers on direct consumer engagement through digital channels, supported by a professional and well-branded online presence. Technically, the site is built on the HubSpot CMS platform, leveraging modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Mouseflow, with a strong emphasis on GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforcement and standard security headers, although explicit security policies and incident response contacts are not published. The WHOIS data is minimal and lacks detailed registrant information, which slightly reduces trust but does not outweigh the professional presentation and compliance indicators. Overall, the site is well-structured, user-friendly, and trustworthy for its target audience.

T

Teuwsen Sportgeraete

teuwsen-sportgeraete.de

44

Teuwsen Sportgeraete is a German-based small manufacturing company specializing in custom fitness and rehabilitation equipment with nearly 40 years of experience. The company offers tailored solutions including custom-built devices, powder coating, and upholstery services, targeting fitness studios, rehabilitation centers, and private customers with specific space requirements. The website is built on WordPress with modern plugins such as Slider Revolution and integrates Google reCAPTCHA for form security. While the site is professionally designed and provides clear navigation, it lacks some advanced privacy and security features such as cookie consent mechanisms and security headers. The domain registration data is consistent with the business claims, supporting legitimacy. Overall, the company maintains a moderate security posture with room for improvement in compliance and technical security practices.