Germany security reports

V

vaylens GmbH

vaylens.com

69

vaylens GmbH is a medium-sized German company specializing in EV charging management software, providing solutions to simplify, monetize, and grow electric vehicle charging networks across Europe. Founded in 2009 and operating under the parent company KOSTAL Group, vaylens holds a strong market position as a leading B2B SaaS provider in the energy and transportation sectors. Their website reflects a professional and consistent brand image with clear business information and a focus on their core services. Technically, the website is built on modern technologies including Webflow CMS, GSAP animations, and integrates multiple analytics and marketing tools such as Google Analytics, HubSpot, Microsoft Clarity, and Cookiebot for GDPR-compliant cookie management. Hosting is provided via AWS infrastructure with DNS managed by Amazon Route 53. The site demonstrates good performance, mobile optimization, and SEO practices. From a security perspective, the site enforces HTTPS, employs clientTransferProhibited domain status, and uses cookie consent mechanisms to comply with privacy regulations. However, DNSSEC is not enabled, and some security headers are not explicitly detected, suggesting room for improvement. No critical vulnerabilities or exposed sensitive data were found. Incident response and security policy information are not publicly available. Overall, vaylens.com presents a trustworthy and professional digital presence with strong compliance to privacy laws and a solid technical foundation. Strategic recommendations include enabling DNSSEC, publishing a security policy and incident response contacts, and enhancing security headers to further strengthen the security posture.

C

Compleo Charging Solutions GmbH & Co. KG

compleo-charging.com

67

Compleo Charging Solutions GmbH & Co. KG operates a professional website focused on providing high-quality electric vehicle charging stations and related solutions. The company targets businesses and consumers interested in sustainable mobility, offering a range of AC and DC charging hardware, software services, and onsite support for large projects. The website demonstrates a solid market position with over 100,000 delivered charging points and multiple patents, indicating technological innovation and industry trust. Technically, the website is built on TYPO3 CMS, integrates Google Tag Manager for analytics, and uses Usercentrics for GDPR-compliant consent management. The site is well-structured, mobile-optimized, and SEO-friendly, reflecting a mature digital presence. Security posture is good with HTTPS enforced and consent mechanisms in place, though some security headers are missing and no explicit incident response or vulnerability disclosure information is published. The WHOIS data is unavailable or missing, which slightly reduces trust but is mitigated by the professional website and business information. No blocking or WAF mechanisms were detected, and the site content is fully accessible. Social media presence across major platforms supports brand visibility and customer engagement. Overall, Compleo Charging Solutions presents a credible and professional online presence with room for improvement in security transparency and WHOIS data clarity.

S

SOMA GmbH

soma.de

62

SOMA GmbH is a well-established German manufacturing company specializing in Prüftechnik (testing technology), automation, industrial dosing technology, and digital worker assistance systems. With a 50-year history and as part of the KOSTAL Group, SOMA holds a strong market position as a reliable system supplier and innovator in its industry sectors. The website reflects a professional and consistent brand image, targeting industrial clients in automotive, electronics, and manufacturing sectors. Technically, the site is built on TYPO3 CMS, uses modern JavaScript frameworks, and integrates consent management and analytics tools effectively. Security posture is strong with HTTPS enforcement and good privacy compliance, though some security headers could be improved. Overall, the site is well-optimized for SEO, accessibility, and mobile use, providing a trustworthy and user-friendly experience.

L

Leopold Kostal GmbH & Co. KG

kostal-drives-technology.com

64

KOSTAL Drives Technology is a well-established industrial technology company specializing in frequency converters and motor control solutions. With a heritage spanning over 100 years, the company holds a strong market position as a leader in energy-efficient and sensorless motor control technologies. Their product portfolio targets diverse industrial sectors including machinery, water treatment, renewable energy, logistics, and building technology. The website reflects a professional and comprehensive digital presence, supporting global operations with multiple languages and extensive product information. Technically, the website is built on TYPO3 CMS and incorporates modern web technologies such as Bootstrap, Swiper.js, and Google Tag Manager. It demonstrates good performance, mobile optimization, and accessibility features. Privacy compliance is robust, featuring a consent management platform (Usercentrics) and clear GDPR-aligned policies. Security posture is strong with HTTPS enforcement and secure form handling, though some security headers could be explicitly improved. The WHOIS data is unavailable or not found, which is unusual but the website's content, branding, and external references to the Kostal group domains support its legitimacy. No WAF or blocking mechanisms were detected, allowing full content access and analysis. Overall, the site is trustworthy, professional, and well-maintained, with minor recommendations for enhanced security headers and vulnerability disclosure practices.

L

Leopold Kostal GmbH & Co. KG

kostal-industrie-elektrik.com

62

Leopold Kostal GmbH & Co. KG operates the Kostal Industrie Elektrik website, providing advanced electronic, electromechanical, and mechatronic solutions across multiple industrial sectors including drives, electronics, and photovoltaics. The company targets industrial clients and partners, positioning itself as a large, established player in manufacturing and energy technology. The website is built on TYPO3 CMS with modern JavaScript frameworks and includes GDPR-compliant privacy and cookie policies. Security posture is strong with HTTPS and consent management, though explicit security policies and incident response details are absent. WHOIS data is unavailable, which slightly reduces trust but the professional presentation and multiple related domains support legitimacy. Overall, the site is well-structured, accessible, and professionally maintained.

K

KOSTAL Kontakt Systeme GmbH & Co. KG

kostal-kontakt-systeme.com

66

KOSTAL Kontakt Systeme GmbH & Co. KG is a specialized manufacturer and distributor of electromechanical components, primarily connector systems for the automotive industry. As part of the KOSTAL Group, it holds a strong market position with international presence across nine locations in eight countries. The company offers a broad portfolio including contact systems, robust connectors for harsh environments, and solutions for electromobility and miniaturization. The website reflects a professional and comprehensive digital presence with detailed product catalogs and corporate information. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes GDPR-compliant consent management. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security headers are not detected. The absence of WHOIS data reduces domain trustworthiness but the overall business credibility remains high due to consistent branding and corporate affiliation.

K

KOSTAL Electro Mobility

kostal-electro-mobility.com

65

KOSTAL Electro Mobility is a division of the globally active KOSTAL Group specializing in engineering and manufacturing advanced power electronics for electric and hybrid vehicles. Their offerings include onboard chargers, DC/DC converters, charge interface control units, and integrated solutions designed for global OEMs. The company emphasizes scalable, reliable, and innovative near-battery systems tailored to evolving market demands. The website reflects a mature business with consistent branding and a clear focus on B2B automotive and energy sectors. Technically, the website is built on TYPO3 CMS with modern web technologies including Google Tag Manager and Usercentrics for privacy compliance. The site is well-structured, mobile-optimized, and includes accessibility features. Privacy and cookie policies are comprehensive and GDPR compliant. However, no explicit security policy or incident response information is published, and no direct contact emails or phone numbers are provided, which could be improved. Security posture is good with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data for the domain is a concern, suggesting either a recent registration or restricted WHOIS information. Despite this, the professional content and multiple related Kostal domains support legitimacy. Overall, the site scores well on content quality, technical implementation, and privacy compliance but could enhance transparency on security and contact details. Strategic recommendations include adding explicit security policies, publishing incident response contacts, verifying and publishing domain registration details, and providing direct contact information to improve trust and compliance.

K

KOSTAL Automobil Elektrik GmbH & Co. KG

kostal-automobil-elektrik.com

63

KOSTAL Automobil Elektrik GmbH & Co. KG is a globally recognized automotive supplier specializing in mechatronic and electronic components for electromobility and future vehicle user interfaces. The company positions itself as a worldwide leader with a strong focus on innovation, energy efficiency, and embedding people-centric solutions. Their product portfolio includes Comfort Electronics, Comfort Controls, and Drive Controls, targeting automotive manufacturers and partners. The website reflects a mature digital presence built on TYPO3 CMS, integrating modern technologies such as Google Tag Manager and Usercentrics for privacy compliance. The content is professionally curated, with clear navigation and multilingual support, indicating a well-established corporate identity. However, the WHOIS data for the domain is missing or indicates the domain is unregistered, which raises concerns about domain registration legitimacy despite the professional website content.

D

Develey Food Service

develey-foodservice.de

45

Develey Food Service operates as a medium-sized company in Germany specializing in foodservice products, particularly sauces and condiments. The website serves as a digital presence targeting foodservice businesses and professionals, providing product information and potentially ordering capabilities. The technical infrastructure is based on WordPress CMS with the The7 theme and performance optimization via WPRocket. The site shows basic mobile optimization and SEO features but lacks advanced accessibility and security configurations. Security posture is weak due to missing security headers and absence of visible privacy or cookie policies, which may impact compliance with GDPR and other regulations. No incident response or vulnerability disclosure information is provided, limiting transparency and trust. Overall, the website is functional but requires improvements in security, privacy compliance, and contact transparency to enhance business credibility and user trust.

C

Carmigo Shop

carmigo.de

63

Carmigo Shop is a German e-commerce retailer specializing in high-quality automotive lubricants and accessories manufactured in Germany. The company positions itself as a reliable partner for both automotive and industrial lubricant needs, targeting vehicle owners and industrial clients primarily within Germany. The website reflects a niche market focus with a strong emphasis on product quality and customer service, supported by customer reviews and partnerships such as with the RGS Racing Team. Technically, the site is built on the Shopify platform using the Impulse theme, leveraging modern JavaScript modules and Shopify's payment infrastructure, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is solid with HTTPS enforced, cookie consent implemented, and no visible vulnerabilities or exposed sensitive data. However, the absence of explicit privacy policies, terms of service, and contact information limits full compliance and trust. Overall, the site is professional and functional but could improve transparency and compliance documentation.

T

Telehouse - Rechenzentrum Frankfurt Colocation & Cloud

telehouse-rechenzentrum.de

56

Telehouse - Rechenzentrum Frankfurt Colocation & Cloud operates one of Germany's largest and most modern data centers, strategically located in Frankfurt, a key digital hub in Europe. The company offers comprehensive colocation, connectivity, and cloud services, leveraging 100% green energy and a carrier-neutral approach with access to over 400 carriers and cloud providers. As a subsidiary of KDDI Corporation, Telehouse benefits from a global infrastructure footprint and 25 years of industry experience. The website reflects a mature digital presence with interactive 3D visualizations and detailed service descriptions targeting business customers requiring reliable data center solutions. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and WPBakery Page Builder, enhanced by Three.js for 3D content. It employs Google Analytics, Google Tag Manager, and Google Ads for analytics and marketing, alongside a GDPR-compliant cookie consent mechanism. Performance and mobile optimization are good, though accessibility features could be improved. Security posture is solid with HTTPS enabled and no exposed sensitive data, but lacks explicit security headers and published security policies. The security evaluation identifies strengths in encrypted communications and cookie consent but notes the absence of published privacy policies, terms of service, incident response, and vulnerability disclosure information. No critical vulnerabilities or suspicious content were detected. Overall, the website is professional, trustworthy, and well-positioned for its target market, though improvements in transparency and security documentation are recommended. Strategically, Telehouse should enhance its privacy and security documentation, implement security headers, and consider publishing a vulnerability disclosure policy to strengthen trust and compliance. These steps will support its market leadership and regulatory adherence in the evolving European data center landscape.

W

Whow Games GmbH

myjackpot.se

65

Myjackpot.se is a Swedish-language social casino platform operated by Whow Games GmbH, a German company specializing in free online slot games. The website offers a variety of slot games accessible via web and mobile platforms, with no real money gambling involved, targeting adult users aged 18 and above. The platform supports social login options including Facebook, Google, and Paypal, enhancing user convenience. The site is part of a broader international network of similar sites in multiple languages, indicating a well-established market presence in the social casino niche. Technically, the website employs modern web technologies, cookie consent mechanisms compliant with GDPR, and integrates social media SDKs for enhanced functionality. Security posture is adequate with HTTPS enforced and basic security headers present, though additional headers and explicit security policies could improve trust. The absence of WHOIS data for the exact domain raises some concerns about domain registration legitimacy, but the professional presentation and company association mitigate this risk. Overall, the platform is a legitimate social gaming site with moderate risk and good compliance practices.

W

Whow Games GmbH

myjackpot.ro

68

Myjackpot.ro is a Romanian localized social casino platform operated by Whow Games GmbH, a German company specializing in free online slot games. The website offers a variety of slot games without real money gambling, targeting adult users aged 18 and above. The platform supports multiple languages and promotes mobile app usage for Android and iOS. Technically, the site uses modern JavaScript libraries, social login integrations, and a robust cookie consent mechanism via OneTrust, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and secure form handling, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies, reflecting GDPR adherence. Overall, the site presents a professional and trustworthy social gaming experience with moderate business credibility due to lack of direct contact details.

W

Whow Games GmbH

myjackpot.pt

68

Myjackpot.pt is a social casino platform operated by Whow Games GmbH, offering free online casino games such as slots and free spins targeted at Portuguese-speaking adult users. The platform emphasizes a free-to-play model with no real money gambling, supported by social login options including Facebook, Google, and Paypal. The website is professionally designed with good navigation and mobile optimization, hosted on a CDN with modern JavaScript technologies and cookie consent mechanisms in place. Security posture is solid with HTTPS enforced and secure forms, though some security headers could be improved. Privacy compliance is strong with clear privacy and cookie policies aligned with GDPR. Overall, the site presents a trustworthy and legitimate business with transparent WHOIS data and consistent branding.

W

Whow Games GmbH

myjackpot.com.br

68

Myjackpot.com.br is a social casino platform operated by Whow Games GmbH, a German company specializing in free-to-play online slot games. The website targets Portuguese-speaking adults, primarily in Brazil, offering a variety of slot games without real money gambling. The platform supports social logins and mobile app access, positioning itself as a niche player in the social casino market. Technically, the site uses modern web technologies, including OneTrust for cookie consent and Facebook SDK for social integration, hosted on AWS infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the domain registration aligns well with the business, indicating legitimacy and trustworthiness.

W

Whow Games GmbH

myjackpot.hu

70

MyJackpot.hu is a Hungarian-language social casino platform operated by Whow Games GmbH, a German company. The site offers free-to-play online slot games and casino entertainment without real money gambling, targeting adult users aged 18 and above. It supports multiple platforms including web, Android, iOS, and Windows, and provides social login options for user convenience. The business operates within the niche social casino market, leveraging a consistent brand presence across multiple country-specific domains. The website is professionally designed with good content quality, clear navigation, and mobile optimization.

W

Whow Games GmbH

mojjackpot.pl

64

Mojjackpot.pl is a Polish-language social casino platform operated by Whow Games GmbH, a German company. The website offers free online slot games and casino entertainment targeted at adults aged 18 and over. It provides a no-deposit, free-to-play model with no real money payouts, positioning itself in the niche social casino market. The platform supports multiple languages and offers mobile app access, social logins, and a variety of slot games. Technically, the site uses modern web technologies, CDN hosting, and integrates cookie consent and privacy compliance tools. Security posture is good with HTTPS, security headers, and secure login forms, though explicit security policies and incident response contacts are not published. Overall, the site is professional and trustworthy but lacks public WHOIS transparency due to privacy protection.

W

Whow Games GmbH

jackpot.it

68

Jackpot.it is a social casino platform operated by Whow Games GmbH, offering free-to-play online slot games targeted primarily at Italian-speaking adults aged 18 and over. The business model focuses on providing a social gaming experience without real money gambling, supported by mobile apps and social login integrations. The website demonstrates a good level of digital maturity with modern technologies, structured data, and compliance with GDPR through cookie consent and privacy policies. Security posture is solid with HTTPS enforcement and standard security headers, though explicit security policies and incident response information are absent. Overall, the platform is trustworthy and professionally presented, catering to a niche market segment in the social casino industry.

W

Whow Games GmbH

myjackpot.fr

67

MyJackpot.fr is a French-language free social casino platform operated by Whow Games GmbH, a German company based in Hamburg. The site offers a variety of slot machine games without real money betting, targeting adult users aged 18 and over. It provides a social gaming experience with no deposits or real payouts, positioning itself in the social casino gaming niche. The platform supports multiple languages and offers mobile app access, enhancing user reach and engagement. Technically, the website uses modern web technologies including JavaScript, CSS3, and integrates social login options via Facebook, Google, and Paypal. Cookie consent is managed through OneTrust, indicating GDPR compliance. Security posture is generally good with HTTPS enforced, but lacks explicit security headers and public security policies. WHOIS data is unavailable from the AFNIC server, limiting domain registration trust verification. Overall, the site appears legitimate and professionally maintained but would benefit from enhanced transparency on security and incident response.

W

Whow Games GmbH

myjackpot.es

69

MyJackpot.es is a free-to-play social casino platform operated by Whow Games GmbH, a German company specializing in online gaming. The website offers a variety of slot games accessible without payment, targeting adult Spanish-speaking users. The platform supports multiple languages and provides social login options for user convenience. Technically, the site employs modern web technologies, integrates cookie consent mechanisms, and uses external services such as Facebook SDK and OneTrust for privacy compliance. Security posture is generally good with HTTPS enforced and secure forms, though explicit security headers and policies could be improved. WHOIS data is unavailable due to registry restrictions, limiting domain trust verification. Overall, the site presents a professional and compliant gaming experience with moderate risk due to limited public business contact details and missing explicit security policies.

W

Whow Games GmbH

myjackpot.co.uk

67

MyJackpot.co.uk is a social casino platform operated by Whow Games GmbH, a German company specializing in free online slot games and social casino entertainment. The platform targets adult users aged 18 and over, offering a variety of free-to-play slot games with no real money payouts, positioning itself in the niche social casino market primarily for UK and English-speaking audiences. The business model focuses on engagement through free chips and social gaming rather than real gambling. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates third-party services such as Facebook SDK and OneTrust for cookie consent, ensuring GDPR compliance. The platform supports multiple languages and mobile platforms, including Android and iOS, with a dedicated app available. Security-wise, the site enforces HTTPS and secure login forms, but lacks explicit security policies and incident response information. The WHOIS data for the exact domain is unavailable due to domain naming rules, indicating the domain is likely a subdomain under jackpot.de infrastructure. Overall, the site is professionally maintained with good privacy compliance but could improve transparency on security and contact information.

W

Whow Games GmbH

jackpot.at

68

Jackpot.at is a German-language social casino platform operated by Whow Games GmbH, offering free-to-play slot games with no real money gambling. The platform targets adult users aged 18 and above, providing entertainment through a variety of slot games accessible via web and mobile apps. The business model focuses on engagement and social gaming rather than real money betting, positioning itself in the niche social casino market. Technically, the website employs modern JavaScript frameworks, integrates social login options, and uses cookie consent tools to comply with GDPR. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the platform uses HTTPS and secure forms but lacks visible advanced security headers and published security policies. WHOIS data is privacy protected, which is typical for this industry, but the site shows consistent branding and trust signals. Overall, Jackpot.at presents a professional and compliant social casino offering with moderate technical and security maturity.

W

Whow Games GmbH

myjackpot.com

68

MyJackpot.com is a social casino platform operated by Whow Games GmbH, based in Hamburg, Germany. The site offers free-to-play online slot games targeting adult users aged 18 and above. It positions itself as a portal for free casino games with no real money payouts, leveraging a business model focused on social gaming and user engagement through free chips and spins. The platform supports multiple languages and provides mobile app access, enhancing its reach and user convenience. The company maintains a moderate market position within the niche social casino segment.

2

22bet

22bet.com

62

22bet is an international online gambling and sports betting platform established in 2017, offering a wide range of betting services including sports, casino, live casino, and esports. The website is currently restricted in certain countries such as Germany, displaying a country block message. The platform uses modern web technologies including JavaScript frameworks and integrates multiple third-party tracking and advertising services. However, the site lacks visible privacy and cookie policies, and security headers are not detected, indicating room for improvement in security and compliance. The domain registration is consistent and legitimate, with a long registration period and no privacy protection, appropriate for a commercial gambling business. Overall, the website's content is limited due to access restrictions, impacting user experience and trust.

Allianz Trade Deutschland operates as a leading provider of trade credit insurance, sureties, guarantees, and fraud protection services, targeting businesses of all sizes including multinational corporations. The company is positioned as a worldwide market leader, formerly known as Euler Hermes, and is part of the Allianz Group. The website reflects a professional and consistent brand presence with clear service offerings and a focus on protecting business cash flow and growth. Technically, the site is built on Adobe Experience Manager, leveraging modern analytics and consent management tools, with good mobile optimization and SEO practices. Security posture is strong with HTTPS and cookie consent, though explicit security policies and headers could be enhanced. Overall, the domain registration and WHOIS data align well with the brand, indicating legitimacy and trustworthiness.

L

loadbee GmbH

loadbee.com

71

loadbee GmbH operates a sophisticated B2B e-commerce platform specializing in premium content syndication between brand manufacturers and online retailers. The company has established a significant global presence with thousands of retailers and hundreds of brands, offering automated, high-quality product content delivery to enhance online sales and customer experience. The website reflects a mature digital infrastructure with modern technologies, comprehensive privacy compliance, and strong marketing integrations. Security posture is robust with HTTPS, GDPR compliance, and cookie consent mechanisms, though explicit security policies and vulnerability disclosures are absent. The absence of WHOIS registration data is a notable concern but is mitigated by the professional presentation and transparent contact information. Overall, loadbee presents as a credible and technically advanced player in the e-commerce content syndication market.

D

Develey Senf & Feinkost GmbH

develey.com

50

Develey Senf & Feinkost GmbH is a long-established family-owned company based in Germany, specializing in the manufacturing and distribution of mustard, sauces, dressings, and fine foods. With a history dating back to 1845, the company operates internationally with a strong brand portfolio including Develey, Löwensenf, Bautz’ner, and others. The website reflects a mature digital presence with comprehensive content about careers, sustainability, and product offerings. Technically, the site uses modern web technologies such as Google Tag Manager and YouTube APIs, and is built likely on the Pimcore CMS platform. Security posture is good with HTTPS enforced and a robust cookie consent mechanism, though explicit security headers are not detected in the HTML source. The absence of WHOIS registration data is a notable anomaly but does not detract significantly from the overall trustworthiness given the professional site content and branding. Overall, Develey presents a credible and professional online presence consistent with its market position.

K

KOSTAL Solar Electric GmbH

kostal-solar-electric.com

67

KOSTAL Solar Electric GmbH is a medium-sized German company specializing in the manufacture and sale of photovoltaic inverters, battery storage solutions, and wallbox charging stations. The company positions itself as a leading innovator in the solar energy sector with a strong emphasis on German engineering quality and sustainability. Their product portfolio targets private homeowners, commercial enterprises, and professional installers, offering integrated energy management systems and smart charging solutions. The website reflects a mature digital presence built on TYPO3 CMS with modern front-end technologies and a comprehensive multi-language structure. Security posture is solid with HTTPS and consent management in place, though some improvements in security headers and incident response transparency are recommended. The absence of WHOIS registration data for the domain is a notable inconsistency that slightly impacts trustworthiness from a domain registration perspective. Overall, the site is professional, content-rich, and well-structured, supporting KOSTAL's market position as a reputable energy technology provider.

K

Kantmeister

kantmeister.de

52

Kantmeister is a specialized German manufacturer focusing on precision metal profiles such as wall coverings, facades, connection products, and accessories. The company emphasizes quality and customization using advanced CNC technology, targeting construction professionals and related industries. Their digital presence includes a WordPress-based website with WooCommerce and Elementor, offering tools like a sheet metal configurator and a quick inquiry upload feature. The website is professionally designed, mobile-optimized, and includes essential privacy and cookie consent mechanisms. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and explicit security policies. Overall, the site is trustworthy and business-focused with clear contact information and social media presence.

M

MOGAT

mogat-werke.de

54

MOGAT is a German company specializing in innovative and sustainable roofing and building waterproofing systems, targeting construction professionals and building owners. The website presents a professional image with a focus on quality and service, emphasizing 'Made in Germany' products. The digital infrastructure is based on WordPress with WooCommerce, enhanced by SEO and cookie consent plugins, and integrated with Google Analytics and Tag Manager for marketing and analytics purposes. The site is well-optimized for mobile and SEO, providing a good user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the website reflects a medium-sized manufacturing business with a strong market position in its sector.

W

Wienerberger GmbH

creaton.de

65

Wienerberger GmbH operates the website creaton.de, positioning itself as an expert in steep roofs offering high-quality clay roof tiles and economical concrete roof tiles with extensive original and system accessories. The website targets both business customers and end consumers in the roofing and construction sectors, providing product information, tools, and e-commerce capabilities including PayPal payment integration. Technically, the site is built on the Neos CMS platform using the Flow PHP framework, with modern JavaScript integrations such as Google Tag Manager and Cookiebot for analytics and consent management. The site is well-optimized for mobile and SEO, with good accessibility features and a professional design. Security posture is strong with HTTPS enforced and multiple security headers present, though explicit security policies and incident response contacts are not publicly visible. Privacy compliance is robust, featuring a comprehensive privacy and cookie policy with GDPR adherence and user consent mechanisms. Overall, the website demonstrates a mature digital presence suitable for a large enterprise in the energy and construction sector.

V

VARTA AG

varta.energy

64

VARTA.energy is a digital portal operated by VARTA AG, a well-known energy storage solutions provider. The portal offers customers and certified partners access to monitor energy storage data, manage settings, and register warranties. The website is professionally designed, mobile-optimized, and provides comprehensive product information and user guidance. Technically, the site uses TYPO3 CMS, integrates Google Tag Manager and Analytics, and employs a modern cookie consent manager (Klaro) ensuring GDPR compliance. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. WHOIS data is unavailable due to malformed responses or privacy protection, which slightly impacts domain trust but the website content and branding strongly indicate legitimacy. Overall, the site is safe, professional, and well-suited for its target audience in the energy sector.

B

Birgit Dreist

skulpturix.de

35

The website skulpturix.de represents a small artisan business specializing in handmade sculptures by Birgit Dreist, located in Germany. The site serves primarily as an informational and promotional platform showcasing unique art pieces. The business operates locally with a focus on handcrafted art, targeting general audiences interested in sculptures and unique artistic objects. The market position is that of a local artisan with a simple business model centered on direct sales or commissions. Technically, the website is built with basic HTML, CSS, and JavaScript without the use of modern CMS or frameworks. Hosting is provided by a German hosting provider (kasserver.com). The site shows basic mobile optimization and accessibility but lacks advanced SEO and performance optimizations. No analytics or tracking technologies are detected, indicating minimal digital maturity. From a security perspective, the website lacks HTTPS confirmation in the provided data, security headers, privacy policies, and incident response contacts. No forms or data collection mechanisms are present, reducing attack surface but also limiting user engagement features. The absence of privacy and cookie policies indicates non-compliance with GDPR best practices. The overall security posture is basic and requires improvements to protect user data and enhance trust. Overall, the website is functional for its purpose but scores moderately low on technical and security aspects. Strategic improvements in HTTPS implementation, security headers, privacy compliance, and mobile optimization are recommended to enhance trustworthiness and user experience.

The Hermann Hesse Schule Aalen is a specialized educational institution in Germany focusing on special education needs, particularly in learning and emotional-social development. The website serves as an informational portal for students, parents, and educators, detailing the school's services including inclusive education and early childhood support. The institution appears to be a small-sized regional school with a clear educational mission but limited digital sophistication. Technically, the website uses basic HTML, CSS, and JavaScript with legacy libraries such as jQuery. There is no evidence of a modern CMS or advanced frameworks. Mobile optimization and accessibility are minimal, and SEO practices are basic. The site lacks structured data and social media integration, indicating a low level of digital maturity. From a security perspective, the site does not demonstrate strong security posture. There is no visible HTTPS confirmation in the provided data, no security headers, and no privacy or cookie policies, which are critical for GDPR compliance in Germany. Contact information is limited to a physical address, with no emails or phone numbers clearly provided. No incident response or data protection officer contacts are found, indicating gaps in security and compliance readiness. Overall, the website is functional for its educational purpose but requires significant improvements in security, privacy compliance, and technical modernization to enhance trustworthiness and user experience.

The website www.go-therapie.de represents the Interdisziplinäre Praxisgemeinschaft Opferkuch-Gentner, a small healthcare provider specializing in Ergotherapie (occupational therapy), Logopädie (speech therapy), and Physiotherapie (physical therapy) located in Aalen, Germany. The practice has a long-standing history since 1994 and offers a comprehensive range of therapy services targeting patients of all ages. The site provides detailed descriptions of therapy offerings, treatment focuses, and introduces the leadership and team members, reflecting a well-established local presence. Technically, the website is built using standard HTML, CSS, and JavaScript with jQuery, without a detected CMS or advanced frameworks. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. No analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the site lacks visible security headers and privacy or cookie policies, which are important for GDPR compliance and user trust. The domain WHOIS data is consistent with the business claims, showing no privacy protection and a legitimate registration with German nameservers. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the website is professional and trustworthy but would benefit from enhanced security practices, privacy compliance improvements, and technical modernization to improve user trust and regulatory adherence.

B

Bundesverband Solarwirtschaft e.V.

solarwirtschaft.de

50

The Bundesverband Solarwirtschaft e.V. is a prominent German industry association dedicated to the solar and energy storage sector. The organization serves as a network hub for solar industry professionals, offering membership benefits, advocacy, educational resources, and event organization. The website reflects a well-established entity with a clear focus on supporting its members and promoting solar energy adoption in Germany. The target audience includes industry stakeholders, members, and consumers interested in solar technologies. Technically, the website is built on WordPress 6.8.3, utilizing common plugins such as Borlabs Cookie for consent management, Formidable Forms for data collection, and Newsletter2Go for marketing communications. The site is hosted behind Cloudflare DNS, ensuring reliable domain management and security. The design is responsive and user-friendly, with good SEO and accessibility practices, although some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security policies, vulnerability disclosure, and comprehensive security headers. No critical vulnerabilities or suspicious content were detected. Privacy compliance is partial, with no visible privacy policy or terms of service on the homepage, which should be addressed to improve GDPR adherence. Overall, the website presents a professional and trustworthy front for the Bundesverband Solarwirtschaft e.V., with solid business credibility and technical implementation. Strategic improvements in privacy documentation and security transparency would further enhance its posture and user trust.

G

GoDaddy Operating Company, LLC

bazar.to

71

The website is a professionally designed domain sales landing page operated by GoDaddy Operating Company, LLC, a leading domain registrar and hosting provider. It offers the premium domain bazar.to for sale with options to buy immediately or make an offer. The site targets businesses and individuals seeking premium domain names to establish or enhance their online presence. The business model is focused on domain aftermarket sales and brokerage services, leveraging GoDaddy's trusted brand and infrastructure. Technically, the site is built using modern web technologies including React and Next.js, hosted on GoDaddy's platform. It demonstrates good performance, mobile optimization, and accessibility features. The presence of comprehensive privacy and cookie policies indicates compliance with GDPR and other privacy regulations. The site integrates secure payment methods and displays trust signals such as verified domain badges and a high Trustpilot rating. From a security perspective, the site enforces HTTPS with strong security headers and does not expose sensitive data. However, it lacks a dedicated security policy or incident response contact information, which could be improved. No vulnerabilities or suspicious patterns were detected in the content or technical setup. The WHOIS data for the subdomain is unavailable, which is expected as it is a GoDaddy-controlled subdomain rather than a registered domain. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include publishing explicit security and incident response policies to enhance transparency and trust further.

B

BTL

btlaesthetics.de

54

BTL Aesthetics is a global provider of innovative non-invasive aesthetic medical devices and treatments, including flagship products like EMSCULPT NEO and EMFACE. The company targets both professional providers such as doctors, physiotherapists, and beauticians, as well as patients seeking aesthetic treatments. Their market position is strong within the healthcare aesthetics sector, offering a broad portfolio of body shaping and skin rejuvenation solutions. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive GDPR compliance mechanisms including cookie consent management. Technically, the site leverages modern web technologies such as Google Tag Manager, YouTube API, and Ruby on Rails frameworks, hosted on WEDOS infrastructure. Security posture is good with HTTPS enforced and CSRF protections in place, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations.

B

BTL

btlaesthetics.com

54

BTL Aesthetics operates as a global provider of innovative non-invasive aesthetic medical solutions, including flagship products like EMSCULPT NEO and EMFACE. The website targets both professional providers such as doctors and beauticians, and patients seeking aesthetic treatments. The business model is primarily B2B and B2C, focusing on body shaping and skin rejuvenation technologies. The company maintains a strong market position as an innovator in the healthcare aesthetics sector, with a consistent brand presence and comprehensive product offerings.

V

visuellverstehen GmbH

visuellverstehen.de

53

visuellverstehen GmbH is a German-based digital agency specializing in app and software development, website creation, branding, and SEO services with a strong emphasis on sustainability and the common good economy. The company positions itself as a niche player focusing on innovative digital solutions that combine technical expertise with creativity and strategic insight. Their market presence is supported by multiple certifications and memberships that reinforce their commitment to quality and sustainability. Technically, the website is built on the TYPO3 CMS platform, utilizing modern web technologies including JavaScript and CSS, and integrates privacy-friendly analytics via Plausible. The site demonstrates good mobile optimization, accessibility, and SEO practices, although there is room for improvement in security headers and cookie consent mechanisms. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and does not provide visible incident response or vulnerability disclosure information. The WHOIS data is consistent with the website's claims, showing no privacy protection or suspicious patterns, indicating a legitimate and trustworthy domain registration. Overall, the website is professional, trustworthy, and well-structured, with minor gaps in privacy compliance and security best practices. Strategic improvements in these areas would enhance the site's security posture and regulatory adherence.

V

von Dorsch

vondorsch.de

52

von Dorsch is a small German creative media company specializing in film and content production with a strong emphasis on sustainability and green production. Their services include creative content development, film production, postproduction, animation, audio, and consulting for reach and specialized formats. The company positions itself as a creative partner for brands seeking high-quality, emotionally engaging visual storytelling. Technically, the website is built with modern web technologies including Vue.js and Statamic CMS, featuring embedded Vimeo videos and responsive design. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response policies are absent. Privacy compliance is supported by comprehensive privacy and cookie policies, though no active consent mechanism is detected. Overall, the website is professional, trustworthy, and well-structured, reflecting a mature digital presence for a small creative agency.

M

MAC

mac-its.com

36

MAC is a German-based company specializing in e-commerce and omnichannel retail solutions, leveraging over 20 years of experience. Their website, powered by TYPO3 CMS, presents a professional and well-structured digital presence targeting business clients seeking tailored e-commerce services. The technical infrastructure is modern with good mobile optimization and SEO practices, though hosting and performance details remain unspecified. Security posture is moderate; HTTPS is implied but lacks visible security headers and explicit security policies. Privacy compliance is partial, with a cookie consent mechanism present but no clear privacy or terms of service pages detected. The absence of WHOIS domain registration data raises concerns about domain legitimacy, impacting overall trust. Strategic improvements in security headers, privacy documentation, and domain registration transparency are recommended.

N

Naymspace

naymspace.de

58

Naymspace is a German-based small technology company specializing in custom software development with a focus on agile methodologies and tailored solutions for businesses of all sizes and industries. Their market position is that of an innovative and customer-centric software development partner, delivering high-quality progressive web apps and data visualization tools. The company demonstrates a strong technical infrastructure leveraging a diverse and modern technology stack including Elixir/Phoenix, React, PHP/Laravel, and cloud platforms such as AWS, Azure, and DigitalOcean. The website is well-designed, mobile-optimized, and provides clear navigation and professional content. Security posture is good with HTTPS and CSRF protections, though some security headers are missing and no explicit security or incident response policies are published. Privacy compliance is strong with a comprehensive privacy policy and minimal user tracking via privacy-focused analytics. Overall, Naymspace presents a trustworthy and professional digital presence aligned with their business goals.

E

Eberspächer Gruppe GmbH & Co. KG

eberspaecher-karriere.de

66

Eberspächer Gruppe GmbH & Co. KG is a well-established international family-owned company in the automotive industry, founded in 1865 and headquartered in Germany. The company operates as a leading system developer and supplier, focusing on innovation and sustainable mobility solutions. Their career website targets a broad audience including students, experienced professionals, and leadership candidates, offering diverse career paths in engineering, IT, sales, production, logistics, and management. The site emphasizes corporate values such as diversity, inclusion, and social engagement, reinforcing their market position and employer brand. Technically, the website is built on TYPO3 CMS with modern web technologies including jQuery, Bootstrap, and Flexslider. It is hosted on Microsoft Azure DNS infrastructure, ensuring reliable performance and scalability. The site is mobile-optimized, accessible, and SEO-friendly, with proper meta tags and structured navigation. Consent management is implemented via Usercentrics, supporting GDPR compliance. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected. However, security headers are not explicitly observed, and no public security policy or incident response contacts are provided. The WHOIS data aligns with the business claims, showing a consistent and transparent domain registration without privacy protection, appropriate for an enterprise entity. Overall, the website demonstrates a strong digital maturity with excellent content quality, good technical implementation, and solid privacy compliance. Strategic improvements could focus on enhancing security headers, publishing security policies, and establishing vulnerability disclosure channels to further strengthen trust and security posture.

E

Eberspächer Gruppe GmbH & Co. KG

eberspaecher.com

69

Eberspächer Gruppe GmbH & Co. KG is a well-established German automotive supplier specializing in exhaust technology, climate control systems, and automotive electronics. With a history spanning over 160 years, the company positions itself as a key player in clean and smart mobility solutions for the automotive industry. Their website reflects a professional and comprehensive corporate presence targeting automotive industry professionals and partners worldwide. The business model focuses on manufacturing and supplying components and systems to automotive OEMs and related sectors. Technically, the website is built on the TYPO3 CMS platform, utilizing modern JavaScript libraries such as jQuery and Bootstrap for responsive design and user experience. The site incorporates consent management via Usercentrics and Google Tag Manager for analytics and marketing. Performance and accessibility are good, with mobile optimization and SEO best practices implemented. However, some security headers are missing, and no explicit security policy or incident response information is publicly available. From a security perspective, the site enforces HTTPS and uses consent management, indicating a good baseline for privacy compliance. The absence of WHOIS data transparency is a notable concern, although the website content and branding strongly support legitimacy. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the security posture is solid but could be improved with additional headers and published policies. The overall risk assessment is moderate-low, with recommendations to enhance domain registration transparency, publish security policies, and implement a vulnerability disclosure program. These steps would strengthen trust and compliance, aligning with the company's professional image and industry standards.

M

Mubea E-Mobility Center GmbH

mubea-emobility-store.com

59

Mubea E-Mobility Center GmbH is a small local business based in Attendorn, Germany, specializing in the retail and consultation of e-mobility products, particularly e-bikes. The company targets consumers interested in sustainable transportation solutions and offers professional advice alongside a wide product selection. The website is built on the Wix platform, indicating a moderate level of digital maturity with a professional design and mobile optimization. However, the absence of WHOIS registration data raises concerns about domain legitimacy. Security posture is basic, with no advanced security headers or policies detected, and privacy compliance is lacking due to missing privacy and cookie policies. Overall, the business presents a professional front but should address domain registration transparency and compliance documentation to enhance trust.

M

Muhr und Bender KG

original-mubea.com

66

Muhr und Bender KG, operating under the brand Mubea, is a globally recognized manufacturer specializing in lightweight automotive components and aftermarket services. The company leverages its century-long expertise to serve both the automotive industry and industrial manufacturers with original spare parts and innovative solutions. Their market position as a world leader is supported by a comprehensive product portfolio and a strong commitment to sustainability and compliance. Technically, the website is built on Drupal 11, employing modern JavaScript libraries and analytics tools, ensuring a responsive and accessible user experience. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. The absence of WHOIS data reduces domain registration transparency but does not detract significantly from the overall legitimacy given the professional web presence and trust indicators. Strategic recommendations include enhancing security policies, publishing vulnerability disclosure information, and improving contact transparency to further strengthen trust and compliance.

M

Mubea U-Mobility

mubea-umobility.com

37

Mubea U-Mobility is a German-based company specializing in the manufacture and sale of robust electric cargo bikes targeted at B2B customers such as parcel delivery services, campus logistics, advertising platforms, and service providers. The website presents a professional image with consistent branding and clear business focus on transportation solutions. The technical infrastructure is built on Drupal 10 CMS, utilizing modern web technologies including Google Tag Manager and Cookiebot for analytics and cookie consent management. The site is mobile-optimized and provides a good user experience with relevant content and SEO optimizations. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks visible security headers and explicit privacy and terms of service pages. The WHOIS data is missing or indicates the domain may not be registered, which raises concerns about domain legitimacy despite the professional website presence. Overall, the website scores well on business credibility and content quality but should address privacy compliance and security best practices to improve trust and compliance.

M

META Handelsgesellschaft mbH

ehandwerkshop.de

43

E|Handwerkshop is a German-based e-commerce platform operated by META Handelsgesellschaft mbH, specializing in trade-related products and educational content primarily for the electrical and craft sectors. The website offers a broad catalog of over 300 items including E-Check production, safety equipment, promotional materials, books, and online courses. The platform targets professionals and trainees in the trade industry, positioning itself as a niche market leader in Germany. Technically, the site is built on WordPress with WooCommerce, leveraging modern JavaScript libraries such as React and Moment.js, and hosted by Alfahosting. The site demonstrates moderate performance and good mobile optimization with a consistent branding approach.