Germany security reports

G

Gutenberg-Shop

gutenberg-shop.de

49

The Gutenberg-Shop is an e-commerce platform associated with the Gutenberg Museum in Mainz, Germany, specializing in exclusive gifts related to the art of printing and book painting. The website targets a general audience interested in cultural and artistic merchandise, offering products crafted using traditional techniques. The business operates in the retail sector with a niche focus on cultural and museum-related products. Technically, the site is built on a modern e-commerce platform (likely Shopware), uses HTTPS, and integrates Matomo analytics for privacy-conscious tracking. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security practices include CSRF protection and cookie consent mechanisms, though explicit privacy and terms of service pages are missing. Overall, the site demonstrates a moderate to good security posture with room for improvement in policy transparency and security headers. The domain registration data is minimal but consistent with the business profile, and no suspicious patterns were detected. The site is safe for general audiences with no adult or questionable content.

The website is an official microsite for the Gutenberg-Museum hosted under the city of Mainz's domain, representing a government cultural institution dedicated to the history of printing and Johannes Gutenberg. It offers museum exhibitions, a shop, and educational experiences, targeting a broad audience including tourists and culture enthusiasts. The site is professionally designed with good content quality and consistent branding, supporting both German and English languages. Technically, it uses a Sitepark CMS platform with a mix of legacy and modern JavaScript libraries, and is mobile optimized with accessibility features. Security posture is adequate with HTTPS and consent-based Matomo analytics, but lacks explicit privacy, cookie, and security policies on this page. WHOIS data confirms legitimacy and consistency with the official city domain. Overall, the site is trustworthy and well-positioned as a government cultural resource, though it could improve privacy disclosures and security headers.

B

Body Attack Sports Nutrition

body-attack.de

66

Body Attack Sports Nutrition operates a professional e-commerce platform specializing in fitness and sports nutrition products, targeting German-speaking fitness enthusiasts and athletes. The company leverages a mature digital infrastructure based on the Shopware platform, enhanced with modern performance optimizations such as lazy loading and integration with Google Tag Manager and Mollie payment services. The website demonstrates consistent branding and a clear market position as a trusted German fitness nutrition provider with over 30 years of experience. Security posture is solid with HTTPS and Cloudflare DNS/CDN usage, though explicit security headers and policies are not fully visible. Privacy compliance is limited due to missing visible privacy and cookie policies. Overall, the site is well-designed, user-friendly, and trustworthy for its target audience.

D

Das Bauhaus-Archiv / Museum für Gestaltung

bauhaus.de

49

Das Bauhaus-Archiv / Museum für Gestaltung is a prominent cultural institution in Germany dedicated to preserving and showcasing the Bauhaus legacy, the most influential school of architecture, design, and art of the 20th century. The website serves as a comprehensive portal for visitors, researchers, and enthusiasts, offering information on exhibitions, research projects, educational outreach, and a dedicated shop for Bauhaus-related products. The institution holds a leading market position in the cultural and educational sector related to Bauhaus history. Technically, the website is built on WordPress CMS with modern frontend technologies such as Vue.js, providing a smooth and responsive user experience. The site employs performance optimization tools like WP Rocket and integrates a consent management platform to comply with privacy regulations. Hosting is managed professionally via dns-hotel.net, ensuring reliable uptime and security. From a security perspective, the website enforces HTTPS and uses privacy-conscious cookie consent mechanisms. While no explicit security policy or incident response contacts are published, the site shows no signs of vulnerabilities or exposed sensitive data. The absence of common security headers is noted as an area for improvement. Overall, the security posture is solid for a cultural institution website. The risk assessment is low, with no detected malicious or suspicious activity. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a security.txt file to improve transparency and vulnerability management. The website demonstrates high professionalism, trustworthiness, and compliance with GDPR requirements.

N

Nubassa Gewürzwerk GmbH

nubassa.de

51

Nubassa Gewürzwerk GmbH is a well-established German B2B company specializing in the supply of spices, marinades, and food technology solutions with a history spanning over 90 years. The company targets food manufacturers and retailers, offering high-quality products and customer service to facilitate consistent production standards. Their website reflects a professional and consistent brand image, supporting their market position as a reliable partner in the food manufacturing sector. Technically, the website is built on TYPO3 CMS, leveraging modern frontend technologies such as Bootstrap and Font Awesome, and is hosted on German infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms, but lacks some explicit security headers and published security policies. No critical vulnerabilities or suspicious content were detected, and the domain WHOIS data aligns with the company's German business identity, supporting legitimacy. Overall, the website demonstrates a solid digital presence with room for improvement in privacy and security transparency.

H

HAUS DES LEBENS e.V.

haus-des-lebens.de

55

Haus des Lebens e.V. is a small German non-profit organization dedicated to supporting social-missionary projects primarily in Indonesia, Romania, and Israel. The organization focuses on community building, education, and social services in these regions, engaging donors and volunteers through its website and social media presence. The website is professionally designed with clear navigation and content relevant to its mission, targeting donors and supporters interested in social causes. Technically, the website is built on WordPress with modern plugins enhancing user experience and compliance with GDPR through privacy and cookie policies. The site is mobile-optimized and accessible, with moderate performance. Security posture is good with HTTPS enabled and cookie consent implemented, though security headers are not detected, and no explicit incident response or vulnerability disclosure policies are present. The WHOIS data is unavailable due to a malformed query response, limiting domain trust analysis. However, the website's transparency in contact information and privacy compliance supports its legitimacy. Overall, the site presents a trustworthy and professional front for a small non-profit organization with room for improvement in security best practices and domain registration transparency.

A

AMS Technologies AG

ams.de

45

AMS Technologies AG is a well-established European technology company specializing in optical technologies, thermal management, and electronics solutions. With over 40 years of industry expertise and a broad customer base across high-tech sectors, the company positions itself as a trusted advisor and one-stop-shop for custom solutions and expert consulting. Their website reflects a professional and consistent brand image targeting high-tech companies and research institutions. Technically, the site is built on WordPress with modern JavaScript libraries and integrates Google Analytics for user tracking. The site is mobile-optimized and offers a multi-step contact form for detailed customer inquiries. Security-wise, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and visible security headers. Privacy compliance is partially addressed with a privacy policy and terms of service available on the shop subdomain, though no cookie consent mechanism is evident. Overall, the website demonstrates a solid business credibility and technical foundation with room for security and privacy improvements.

W

webQ GmbH

webq.de

52

webQ GmbH is a well-established full-service advertising agency based in Weinheim, Germany, with 25 years of experience. The company offers a broad range of creative and digital marketing services including web design, graphic design, video production, 3D animation, print, domain registration, hosting, SEO, and consulting. Their target audience includes both public and private sector clients across various industries. The website reflects a professional and consistent brand image with clear contact information and a portfolio of clients, indicating a strong local market presence. Technically, the website is built with modern web standards using HTML5, CSS3, and JavaScript, featuring a strict Content-Security-Policy header and HTTPS usage, which demonstrates a good security posture. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. However, there is a lack of explicit privacy and cookie policies, which is a compliance gap that should be addressed. Security-wise, the site benefits from HTTPS and CSP headers but lacks other common security headers and incident response contact information. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is limited due to DENIC privacy restrictions but shows no suspicious patterns, and the domain age aligns with the company's claimed history. Overall, webQ GmbH presents a trustworthy and professional online presence with room for improvement in privacy compliance and security transparency. Strategic recommendations include adding comprehensive privacy and cookie policies, implementing security.txt for vulnerability disclosure, and enhancing security headers to further strengthen the security posture.

INSURNINJA GmbH is a small German marketing and PR agency that previously focused on insurance products for gamers. The website is currently in maintenance mode with a notice that the domain and content are for sale, indicating a possible business wind-down or transition. The company is registered in Hannover, Germany, with clear contact information provided. Technically, the website runs on WordPress with a maintenance mode plugin and uses jQuery. The site is accessible without WAF or security challenges but lacks advanced security headers and DNSSEC. No privacy or cookie policies are present, which impacts compliance posture. Overall, the security posture is basic with room for improvement in DNS security and HTTP headers. The website content is minimal and business-focused, with no adult or explicit content detected, making it safe for general audiences.

K

KW automotive GmbH

kwautomotive.de

55

KW automotive GmbH is a well-established German company specializing in chassis optimization for racing and street vehicles, with over 30 years of industry experience. The company operates an informative and professionally designed website built on WordPress with Elementor, targeting automotive professionals and enthusiasts. The site supports multilingual content and integrates modern web technologies and analytics tools. Security posture is solid with HTTPS and reCAPTCHA, though explicit security policies and headers could be improved. Privacy compliance is basic, with cookie consent implemented but no visible privacy or terms of service pages. Overall, the website reflects a credible and mature business with room for enhanced transparency and security documentation.

C

CCC Druck und Medien GmbH

muensterdruckt.de

47

CCC Druck und Medien GmbH operates an online and local print and media service shop based in Münster, Germany. The website offers a broad range of printing products and services targeting both business and private customers, including flyers, posters, thesis printing, and various print media. The company positions itself as a local trusted provider with personal consultation available on-site. Technically, the website uses a Bootstrap-based responsive design with jQuery and other JavaScript libraries, hosted on servers indicated by creolineserver.com nameservers. The site is moderately optimized for performance and mobile devices but lacks some advanced accessibility features. Security posture is moderate with HTTPS implied but no visible security headers and no published security or incident response policies. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Business credibility is supported by clear contact information and consistent WHOIS data. Overall, the website is functional and professional but could improve in security and privacy compliance.

W

Westfälischer Turnerbund e.V.

nrw-landesturnfest.de

45

The website www.nrw-landesturnfest.de serves as the official online presence for the 5th NRW Landesturnfest 2026, a major gymnastics and sports event organized by the Westfälischer Turnerbund e.V. The site provides comprehensive event information, registration details, volunteer opportunities, and program highlights targeting sports enthusiasts and participants in the NRW region of Germany. The business model focuses on event organization and community engagement within the sports sector, positioning itself as a key regional event organizer. Technically, the website is built on the TYPO3 CMS platform, leveraging modern frontend technologies such as Alpine.js and Swiper.js for interactive elements. The site is mobile-optimized, well-structured, and employs a reputable cookie consent manager (CCM19) to ensure compliance with privacy regulations. Hosting appears to be managed via German-based nameservers, supporting regional data sovereignty. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is strong with a clear privacy policy and cookie consent, though terms of service and vulnerability disclosure mechanisms are absent. Overall, the website demonstrates a good level of professionalism, technical maturity, and compliance suitable for its purpose. Recommendations include enhancing security headers, publishing security and incident response policies, and adding terms of service to improve trust and compliance further.

V

Volksbank Alzey-Worms eG

vb-alzey-worms.de

62

Volksbank Alzey-Worms eG is a regional cooperative bank in Germany serving local customers primarily in the Alzey-Worms area. The website presents banking services and financial products with a focus on local presence and customer support. The business model is cooperative banking with a medium-sized regional footprint. The website uses modern web technologies including Angular Material and Dynatrace monitoring, indicating a moderate level of digital maturity. The site is mobile optimized and provides a professional user experience with clear navigation and relevant content. Security posture is good with HTTPS enabled and no visible vulnerabilities, but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Overall, the domain registration data aligns well with the business identity, supporting legitimacy and trustworthiness. Strategic improvements in privacy compliance and security transparency are recommended to enhance user trust and regulatory adherence.

N

Netxp GmbH

netxp-verein.de

62

Netxp GmbH operates the website www.netxp-verein.de, providing specialized online software solutions for clubs and associations to manage memberships, finances, and communications efficiently. The company positions itself as a trusted provider with a focus on ease of use, multi-user access, and comprehensive club management features. The website is professionally designed, well-structured, and targets German-speaking clubs and associations. Technically, the site uses modern web technologies including jQuery, Bootstrap, and tracking tools such as Google Analytics and Facebook Pixel, hosted on Schlund Technologies infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit security policies are absent. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact information and social media presence.

A

Autohaus Heydasch GmbH

nissan-heydasch-worms.de

49

Autohaus Heydasch GmbH is an established automobile dealership located in Worms, Germany, serving as an official Nissan partner. The company offers a wide range of services including new and used car sales, vehicle trade-ins, service bookings, and maintenance. Their market position is that of a trusted local Nissan dealership catering to private and commercial customers. The website reflects a professional business model focused on automotive sales and services with clear contact channels and customer engagement features. Technically, the site is built on modern frameworks such as React and Next.js, ensuring a responsive and user-friendly experience. Privacy compliance is well addressed with GDPR-aligned policies and a visible data protection officer contact. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response information are absent. Overall, the website is trustworthy, well-structured, and suitable for its target audience.

P

Pedalo®

pedalo.de

49

Pedalo® is a well-established German company specializing in innovative products and concepts for movement, play, sport, and therapy. Founded in 1963, it targets a broad demographic from children to seniors, emphasizing quality, sustainability, and health promotion. The company operates an e-commerce platform powered by Shopware, integrating modern payment methods such as PayPal and Amazon Pay, and employs Google Tag Manager and analytics for marketing and user behavior tracking. The website is professionally designed, mobile-optimized, and provides clear navigation and customer support channels including phone and email contact. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response information are not publicly available. Overall, the site reflects a credible and trustworthy business with a solid digital presence.

LOTTO Rheinland-Pfalz operates as the official state lottery provider for the Rheinland-Pfalz region in Germany, offering a variety of lottery games including LOTTO 6aus49, Eurojackpot, Rubbellose, GlücksSpirale, BINGO!, KENO, and TOTO. The website facilitates online ticket purchases, account registration, and subscription services such as Dauerschein and Jackpot-Jäger. The business is positioned as a trusted regional government entity with a focus on secure and regulated gambling services for adults. The website content is professionally presented, consistent with the brand, and targets adult users interested in lottery gaming. Technically, the website employs modern web technologies including jQuery, SVG icons, and a custom JavaScript framework by MULTA MEDIO AG. It supports progressive web app features and is mobile optimized with responsive design. Analytics are implemented via etracker, and a chat widget from moin.ai is integrated for user support. While the site uses HTTPS and secure login forms, it lacks some security headers and explicit cookie consent mechanisms, which are areas for improvement. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and responsible disclosure availability, but could enhance its posture by adding security headers and publishing incident response contacts. No vulnerabilities or exposed sensitive data were detected. The domain WHOIS data is limited but does not raise concerns, and the overall legitimacy is supported by consistent branding and government affiliation. Overall, the website is a reliable and professional platform for online lottery services with moderate technical maturity and a solid security baseline. Enhancements in privacy compliance and security headers would further strengthen trust and regulatory adherence.

Ö

Ökumenewerk der Nordkirche

nordkirche-weltweit.de

54

The Ökumenewerk der Nordkirche is a non-profit organization affiliated with the Evangelisch-Lutherische Kirche in Norddeutschland, focusing on fostering ecumenical relationships and social justice initiatives globally. Their website serves as an informational and engagement platform for church members, partners, and volunteers, highlighting international partnerships and advocacy work. The organization maintains a moderate digital maturity with a WordPress-based infrastructure, leveraging caching and security plugins such as Google reCAPTCHA and Borlabs Cookie for consent management. While the site is well-structured and professionally designed with good navigation and mobile optimization, it lacks explicit privacy and terms of service documentation, which are critical for compliance and user trust. Security posture is adequate with HTTPS and some security best practices, but could be improved by adding security headers and incident response information. Overall, the website is safe, trustworthy, and serves its target audience effectively, though it would benefit from enhanced privacy compliance and transparency.

M

Mission EineWelt

mission-einewelt.de

46

Mission EineWelt is a non-profit international partnership center affiliated with the Evangelical Lutheran Church in Bavaria. It focuses on fostering dialogue and cooperation with partner churches worldwide, promoting peace, justice, tolerance, and sustainability. The organization offers volunteer programs, educational campaigns, publishing, and fundraising activities, positioning itself as an important regional entity with international reach. The website reflects a mature digital presence built on WordPress with Elementor, integrating privacy-conscious analytics and consent management tools. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though incident response contact details could be improved. Overall, the site is professional, trustworthy, and well-aligned with the organization's mission.

M

Misereor

misereor.de

66

Misereor is a well-established German Catholic non-profit organization dedicated to global development and social justice. The website serves as a comprehensive platform for informing the public, facilitating donations, and promoting advocacy campaigns. It targets donors, partners, and socially conscious individuals, offering detailed project information and engagement opportunities. The organization maintains a strong market position within the German and international development NGO sector, emphasizing transparency and partnership. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies including Bootstrap and FontAwesome Pro for styling and icons. It employs Usercentrics for cookie consent management, ensuring GDPR compliance. Hosting is inferred to be with NetCologne, a reputable German provider. The site demonstrates good performance, excellent mobile optimization, and solid SEO practices. From a security perspective, the site enforces HTTPS and integrates consent management for privacy compliance. While explicit security headers are not fully confirmed, no vulnerabilities or exposed sensitive data were detected. The absence of a published security policy or incident response contact is noted as an area for improvement. Overall, the security posture is strong for a non-profit organization. The website content is safe for general audiences, focusing on charitable activities without any adult or questionable material. The domain WHOIS data aligns with the organization's profile, supporting legitimacy and trustworthiness. No WAF or blocking mechanisms interfere with content accessibility, allowing full analysis. Strategic recommendations include enhancing security header implementation, publishing a formal security policy and vulnerability disclosure process, and continuing to maintain transparency and user trust through clear contact and privacy information.

F

Forschungsstätte der Evangelischen Studiengemeinschaft e.V.

fest-heidelberg.de

62

The Forschungsstätte der Evangelischen Studiengemeinschaft e.V. (FEST) is a well-established non-profit interdisciplinary research institute based in Heidelberg, Germany, founded in 1958. It is primarily funded by member organizations within the Evangelical Church community and conducts research, consulting, and publishes academic content. The website reflects a professional and consistent brand image targeting academic and church audiences. Technically, the site uses Edith CMS, jQuery, Bootstrap, and Matomo analytics, indicating a mature but somewhat traditional technology stack. Security posture is good with HTTPS and cookie consent mechanisms, though it lacks explicit security headers and published privacy policies. WHOIS data confirms domain legitimacy and consistency with the organization's history. Overall, the site is trustworthy and professionally maintained but could improve transparency on privacy and security policies.

I

ImmoScout24

immobilienscout24.de

60

ImmoScout24 is Germany's leading online real estate marketplace, offering a comprehensive platform for property seekers and owners to buy, rent, and sell residential and commercial real estate. The platform serves both private individuals and professional real estate agents, providing extensive listings and additional services such as mortgage financing and agent search. The website demonstrates a mature digital infrastructure leveraging modern web technologies like React and Next.js, hosted on AWS, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforcement and security headers, although explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is robust with clear GDPR-aligned policies and cookie consent mechanisms. Overall, ImmoScout24 presents a trustworthy, professional, and well-maintained online presence with high business credibility and technical maturity.

S

Sporteo

sporteo.cc

53

Sporteo is a German-based small business specializing in international sports management, focusing on holistic sport management and brand enhancement, particularly in football. The website presents a professional and consistent brand image with good SEO optimization and structured data, indicating a mature digital presence. Technically, the site is built on WordPress with modern scripts like jQuery and lazy loading for performance, though some technical improvements are possible. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response information. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is legitimate and trustworthy but would benefit from enhanced security and compliance measures.

G

GEDLICH Racing

gt3-all-stars.com

44

Winter Series by GEDLICH Racing is a specialized motorsport event organizer focusing on winter racing series across Europe, primarily in Portugal and Spain. The company offers multiple racing series including GT Winter Series, GT4 Winter Series, Prototype Winter Series, PTWS Sports Prototypes, Formula Winter Series, and the 6h of Portimão endurance race. Their target audience includes professional and amateur racing drivers, motorsport teams, and fans. The business is relatively new, founded in 2023, and positions itself as a niche leader in European winter motorsport racing. Technically, the website is built on WordPress with modern JavaScript libraries such as jQuery and Swiper.js for UI components. SEO is enhanced using the Yoast SEO plugin, and the site is hosted by IONOS SE. Performance is moderate with good mobile optimization and basic accessibility features. The website is well-structured with comprehensive content and clear navigation. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protection enabled. However, it lacks DNSSEC and explicit security headers, which are recommended for enhanced security. No cookie consent mechanism was detected, which may affect GDPR compliance. No incident response or security policy information is published. Overall, the website is professional, trustworthy, and well-aligned with the business goals. Strategic improvements include implementing DNSSEC, adding security headers, and introducing a cookie consent mechanism to improve privacy compliance and security posture.

G

GEDLICH Racing

formula-winter-series.com

45

GEDLICH Racing operates the Formula Winter Series, a winter motorsport racing series focused on junior single seater drivers competing in Tatuus F4 cars. The series is positioned as a premier winter racing event in Southern Europe, targeting aspiring young drivers and motorsport enthusiasts. The website provides comprehensive event calendars, registration information, media coverage, and partner details, reflecting a professional and growing motorsport brand. Technically, the website is built on WordPress using a modern theme and includes popular libraries such as jQuery and Swiper.js. Hosting is provided by IONOS SE, a reputable provider. The site is mobile optimized and SEO friendly, with structured data and Open Graph tags enhancing search engine visibility and social media sharing. From a security perspective, the site uses HTTPS and has domain transfer protections in place. However, it lacks DNSSEC and some security headers, and does not provide explicit security policies or incident response contacts. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is trustworthy and professional with a solid business foundation. Strategic improvements in security hardening and privacy compliance would enhance its posture and user trust.

G

GEDLICH Racing

prototype-winter-series.com

44

GEDLICH Racing operates the Prototype Winter Series, a specialized motorsport championship focused on LMP3 prototype race cars competing on premier Southern European tracks during the winter months. The series is officially approved by the ACO, positioning it as a reputable and recognized event in the motorsport community. The website reflects a professional and well-branded presence, targeting racing teams, drivers, and enthusiasts with detailed event calendars, registration options, and media coverage. Technically, the site is built on WordPress with modern JavaScript libraries and SEO optimizations, delivering a good user experience across devices. Security posture is adequate with HTTPS and domain transfer protections, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is partially addressed with a privacy policy but lacks cookie consent mechanisms. Overall, the site demonstrates a strong business credibility and digital maturity suitable for its niche audience.

G

GEDLICH Racing

gt4-winter-series.com

44

GEDLICH Racing operates the GT4 Winter Series, a specialized motorsport racing series held in Southern Europe during winter months. The website presents a professional and well-structured platform for event information, registration, media, and partner engagement. The business targets motorsport teams, drivers, and enthusiasts, positioning itself as a premier winter racing series with SRO licensing and strong industry partnerships. Technically, the site is built on WordPress with modern libraries like jQuery and Swiper.js, offering good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and does not implement cookie consent mechanisms, indicating room for compliance improvements. Overall, the domain registration is transparent and consistent with the business timeline, supporting legitimacy. Strategic recommendations include enhancing security headers, enabling DNSSEC, and implementing privacy compliance features to strengthen trust and regulatory adherence.

G

GEDLICH Racing

gt-winter-series.com

45

GEDLICH Racing operates the GT Winter Series, a premier motorsport racing series held in Southern Europe, focusing on GT cars competing across multiple events annually. The website presents a professional and comprehensive platform for event information, registration, media, and partner engagement. The business targets motorsport teams, drivers, and enthusiasts, positioning itself as a key player in European winter racing events with strong partnerships and a clear class structure. Technically, the site is built on WordPress with modern libraries like jQuery and Swiper.js, offering good mobile optimization and SEO practices. Security posture is adequate with HTTPS and domain transfer protections, but lacks DNSSEC and advanced security headers. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, supporting a medium-sized business in the transportation sector.

G

GEDLICH Racing

summer-series.org

44

GEDLICH Racing operates the Summer Series 2026, a new GT racing series in Europe targeting professional and amateur racers with GT3, GT4, TCR, and single-make cars. The website is well-structured, content-rich, and professionally designed, reflecting a focused business model on motorsport event organization. The technical infrastructure is based on WordPress with modern JavaScript libraries and SEO optimizations, hosted by IONOS SE. Security posture is moderate with HTTPS enabled but lacking DNSSEC and security headers, and no visible cookie consent or privacy compliance mechanisms. The domain registration is recent but consistent with the business launch timeline, indicating legitimacy. Overall, the site presents a credible and professional front for the racing series with room for improvement in security and privacy compliance.

G

GEDLICH Racing

winter-series.com

45

Winter Series by GEDLICH Racing is a specialized motorsport event organizer focusing on winter racing series across Europe, primarily in Portugal and Spain. The company offers multiple racing series including GT Winter Series, GT4 Winter Series, Prototype Winter Series, and Formula Winter Series, targeting professional and amateur racing drivers as well as motorsport enthusiasts. The business is relatively new, founded in 2023, and positions itself as a niche leader in winter motorsport racing events. The website is professionally designed, content-rich, and provides comprehensive information about events, registration, media, and logistics.

E

entwickeln+gestalten

entwickelnundgestalten.de

47

entwickeln+gestalten is a small, specialized digital agency focused on supporting civil society organizations in Germany with digital transformation, political communication, and process optimization. Their key services include website development, consulting, Nextcloud integration, and CiviCRM solutions. The company positions itself as a trusted partner for progressive actors aiming for social development and justice. Technically, the website is built on Drupal 7 with common JavaScript libraries for UI enhancements, hosted on agenturserver infrastructure. The site is mobile-optimized and provides good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers are missing and the CMS version is outdated, which poses some risk. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or terms of service. Contact information is clearly provided, enhancing business credibility. Overall, the website is trustworthy and professional, serving a niche non-profit sector audience effectively.

J

JUNE - Online Marketing Cloud

juneapp.com

68

JUNE - Online Marketing Cloud is a German-based SaaS company founded in 2016, providing comprehensive online marketing solutions including email marketing, landing pages, workflow automation, and WhatsApp communication. The company targets businesses and marketers seeking flexible, no-code marketing tools. With over 1000 users and ISO 27001 certification, JUNE holds a reputable market position supported by strong branding and client trust signals. The website is professionally designed, mobile-optimized, and integrates multiple marketing and analytics tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, domain transfer protection, and certification, although DNSSEC is not enabled and explicit privacy and terms pages are missing. Overall, the site demonstrates a high level of business credibility and technical competence.

B

BIPEM GmbH & Co. KG

baerchen.de

58

Bärchen.de is a well-established German brand operated by BIPEM GmbH & Co. KG, specializing in child-friendly food products such as Bärchen-Wurst and fruit spreads. The website serves families with children by providing product information, recipes, nutrition advice, and creative activities. The brand has a strong market presence with over 27 years of history and maintains consistent branding and trust indicators including privacy policies and social media engagement. Technically, the site is built on WordPress with a moderate tech stack including jQuery, Matomo Analytics, Facebook Pixel, and Pinterest Tag. Hosting appears to be with Deutsche Telekom, supporting good performance and mobile optimization. Security posture is solid with HTTPS enforced and consent management implemented, though security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

Klima-Kollekte gGmbH is a German non-profit organization focused on facilitating climate protection through voluntary contributions to certified climate projects, primarily in the Global South. The organization offers services including emission accounting, financing of climate projects, consulting, and educational resources. Their business model emphasizes transparency, compliance with the Paris Agreement, and fostering global climate justice. The website targets environmentally conscious companies, organizations, and individuals seeking to offset their carbon footprint responsibly. Technically, the website is built on TYPO3 CMS with modern web technologies such as jQuery, Slick Carousel, and Featherlight Lightbox. It integrates consent management via Consentmanager.net and uses Google Tag Manager and Matomo (Piwik) for analytics. Hosting is managed through DomainControl nameservers, indicating professional domain management. The site is mobile-optimized with good SEO and accessibility basics. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent mechanisms. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not visibly configured, and no formal security policy or incident response contacts are published. No vulnerabilities or exposed sensitive data were detected. The site demonstrates good privacy compliance with GDPR-aligned policies. Overall, Klima-Kollekte presents a trustworthy and professional online presence with strong business credibility and transparency. The security posture is solid but could be enhanced by adding explicit security headers and formalizing security policies. The website is safe, free from adult or questionable content, and well-suited for its target audience.

R

Roundtable Human Rights in Tourism

humanrights-in-tourism.net

48

The Roundtable Human Rights in Tourism is a well-established non-profit association based in Germany, focused on promoting human rights within the tourism industry. It serves as a multi-stakeholder platform offering networking, training, impact assessments, and knowledge sharing to tourism companies and related stakeholders. The organization is recognized for its credibility and international reach, supporting companies in implementing human rights due diligence aligned with UN guidelines. Technically, the website is built on Drupal 10, uses Matomo for analytics, and incorporates modern front-end libraries, providing a good user experience with mobile optimization and accessibility. Security posture is solid with HTTPS enforced, though some security headers are missing and privacy compliance could be improved by adding explicit policies and consent mechanisms. The domain WHOIS data is missing or inaccessible, which is unusual and slightly reduces trust, but the professional content and clear contact information support legitimacy. Overall, the website is professional, content-rich, and trustworthy, serving an important role in the human rights and tourism sector.

V

Verein ehemaliger Schüler und Freunde der Sebastian-Kneipp-Schule Bad Wörishofen e.V.

ves-kneippschule.de

50

VES Kneippschule is a non-profit association based in Germany focused on providing continuing education and training in physiotherapy. The organization targets physiotherapists, masseurs, and other medical auxiliary professionals, including former students and friends of the Sebastian-Kneipp-Schule. Their offerings include specialized courses, symposia, and membership services. The website reflects a niche regional educational provider with a clear business model centered on professional development in healthcare. Technically, the website is built on TYPO3 CMS, utilizing modern web technologies such as Google Tag Manager and Google Analytics for tracking. The site is mobile-optimized with good navigation and SEO practices. Hosting appears to be managed via your-server.de, with no detected WAF or blocking mechanisms. Performance is moderate with good accessibility features. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, indicating awareness of privacy compliance. However, explicit security headers like CSP and X-Frame-Options are not detected, and no formal security policy or incident response information is published. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. The risk profile is low, with recommendations to enhance security headers and publish security policies to improve transparency and resilience.

S

Schwäbischer Turnerbund (STB) e.V.

stb.de

53

The Schwäbischer Turnerbund (STB) e.V. is a well-established non-profit sports federation based in Stuttgart, Germany, serving sports clubs, volunteers, and various age groups including children, youth, and seniors. The organization offers a broad range of services including education, event organization, fitness and health programs, and support for member clubs. Their market position is strong regionally within Baden-Württemberg, supported by a professional and content-rich website. The digital infrastructure is based on TYPO3 CMS with modern technologies and integrations such as Usercentrics for consent management and Matomo for analytics, hosted on a reputable provider (Hetzner).

R

Rheinhessischer Turnerbund e.V.

rhtb.de

45

Rheinhessischer Turnerbund e.V. is a regional non-profit sports association based in Germany, specializing in gymnastics, fitness, health, and educational services for sports clubs and communities in the Rheinhessen region. The website serves as a comprehensive portal for event information, educational programs, and club services, targeting sports enthusiasts, families, and regional sports organizations. The organization maintains a consistent brand presence and partners with several regional sponsors and service providers. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries and third-party services such as SiteSearch360 for search functionality and CookieConsent2 for privacy compliance. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be enhanced. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and publicly available security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a comprehensive privacy policy and cookie banner, aligning with GDPR requirements. Overall, the website presents a professional and trustworthy digital presence for the Rheinhessischer Turnerbund e.V., with recommendations to enhance security headers and incident response transparency to further strengthen its security posture.

W

Westfälischer Turnerbund e.V.

wtb.de

58

Westfälischer Turnerbund e.V. is a regional non-profit sports association based in Hamm, Germany, focused on gymnastics, sports education, and community sports events. The website serves as an information hub for members, athletes, and trainers, offering event details, educational programs, and membership services. It maintains a strong regional presence and partners with several related sports organizations and event platforms. Technically, the site is built on Joomla CMS with Bootstrap and jQuery, providing a responsive and well-structured user experience. Security posture is good with HTTPS and CSRF protections, though some security headers like CSP could be improved. Privacy compliance is strong, with a comprehensive privacy policy, cookie consent mechanism, and a named data protection officer. Overall, the site is professional, trustworthy, and well-maintained, with no signs of malicious or adult content.

R

Rheinischer Turnerbund e.V.

rtb.de

58

Rheinischer Turnerbund e.V. (RTB) is a regional non-profit sports federation based in Germany, focusing on supporting sports clubs and promoting gymnastics and physical education in the Rhineland region. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and hosting services, with moderate performance and good mobile optimization. The site includes basic structured data for business identification but lacks comprehensive privacy, cookie, and terms of service policies, which are critical for GDPR compliance. Security posture is moderate with HTTPS enabled but missing key security headers and incident response information. Overall, the website is functional and professional but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

G

GEDLICH Racing GmbH

gedlich-racing.com

54

GEDLICH Racing GmbH is a specialized motorsport event organizer based in Germany, offering a range of services including trackdays, race tests, Nordschleifentraining, coaching, and business events. The company targets motorsport enthusiasts from beginners to professionals and operates both in Germany and Southern Europe. The website demonstrates a mature digital presence with a professional design, clear navigation, and comprehensive content. Technically, the site is built on WordPress with modern libraries and plugins, hosted by IONOS SE, and employs privacy-conscious analytics tools like Matomo alongside Google Analytics and Meta Pixel. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some HTTP security headers could be improved. The domain registration data aligns well with the business claims, supporting legitimacy. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements.

D

Deutscher Motor Sport Bund e.V.

dmsb.de

54

The Deutscher Motor Sport Bund e.V. (DMSB) is the national governing body for motorsport in Germany, serving as a non-profit federation overseeing various motorsport disciplines. The website reflects a professional and well-structured digital presence, built on the TYPO3 CMS platform, with a focus on accessibility as evidenced by the integrated accessibility tool. The site targets German motorsport participants and enthusiasts, providing regulatory information, licensing, and event support services. Technically, the site employs modern web standards and includes Google Analytics for user tracking, though it lacks explicit cookie consent mechanisms and privacy policy disclosures. Security posture is adequate with HTTPS enforced, but could be improved by adding security headers and formal security policies. Overall, the domain and website appear legitimate and consistent with the organization's mission, though WHOIS data is minimal.

C

CCC Druck und Medien

ccc-ms.de

10

CCC Druck und Medien is a small, local business based in Münster, Germany, specializing in digital printing, repro/CAD printing, advertising technology, and presentation systems. The company targets businesses and individuals in the Münster area seeking professional printing and media services. Their market position is that of a local specialist with a comprehensive service offering and an online presence including an online shop partner site. Technically, the website is built on WordPress using standard and modern libraries such as Bootstrap and jQuery, with moderate performance and good mobile optimization. The site includes a comprehensive cookie consent mechanism compliant with GDPR, indicating a good level of privacy compliance. Security posture is good with HTTPS enabled and no visible vulnerabilities, though some security headers could be improved. Overall, the website is professional, trustworthy, and well-structured, with clear navigation and relevant content. No critical security or compliance issues were detected.

B

BBS

bbs.com

63

BBS is a reputable manufacturer specializing in automotive wheels with a strong motorsport heritage. Their website reflects a professional e-commerce platform built on Magento, targeting quality-conscious automotive enthusiasts globally. The technical infrastructure leverages modern JavaScript frameworks and includes tracking and consent management tools, indicating a mature digital presence. Security posture is adequate with HTTPS and cookie consent but lacks visible security headers and explicit privacy policies, which are areas for improvement. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, warranting further verification. Overall, the website is functional, professional, and safe for general audiences.

A

auto-rennsport.de

auto-rennsport.de

45

auto-rennsport.de is a specialized German online media publication focused on national motorsport news, event coverage, and related content. The website targets motorsport enthusiasts primarily in Germany and German-speaking regions, offering news articles, photo galleries, and an online shop. The business operates as a small media outlet with a niche focus, founded around 2020. Technically, the site is built on WordPress with popular plugins such as Yoast SEO and WPBakery Page Builder, hosted on German servers (kasserver.com). The site demonstrates good SEO practices, mobile optimization, and basic accessibility. Security posture is moderate, with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and a formal security policy or vulnerability disclosure. No WAF or blocking mechanisms were detected, and the site content is safe for general audiences with no adult or questionable material. WHOIS data is minimal but consistent with the business profile, showing no suspicious patterns. Overall, the website is professional, trustworthy, and compliant with GDPR, though improvements in security headers and transparency could enhance its posture.

F

FRICKE Transporte GmbH

fricke-transporte.de

47

FRICKE Transporte GmbH is a family-owned logistics and transport company based in Germany, operating in its fourth generation. The company offers a range of services including freight forwarding, vehicle washing, vehicle workshop services, and vehicle inspections. Their market position is that of a trusted local and international logistics provider with a focus on reliable and tailored transport solutions. The website is built on WordPress with Elementor and integrates a modern cookie consent mechanism via Usercentrics, reflecting a moderate level of digital maturity. The technical infrastructure is solid with HTTPS enforced and a clean, professional design that supports good user experience and mobile optimization. Security posture is generally strong with no visible vulnerabilities or exposed sensitive data, although the absence of security headers and a security policy page suggests room for improvement. Overall, the website is trustworthy and compliant with GDPR, with clear contact information and social media presence enhancing credibility.

J

JODEXNIS Versicherungsmakler GmbH

clickvers.de

10

ClickVers.de is an established German online insurance brokerage platform operated by JODEXNIS Versicherungsmakler GmbH, founded in 1952. The company offers a wide range of insurance products including liability, accident, vehicle, household, and specialized insurance categories. The website is professionally designed with clear navigation and good SEO practices, targeting a broad audience seeking insurance solutions in Germany. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Slider Revolution, and employs cookie consent mechanisms to comply with GDPR. Security posture is strong with HTTPS enforced and no critical vulnerabilities detected, though additional security headers could enhance protection. Overall, the site demonstrates a mature digital presence with good privacy compliance and business credibility.

G

Graewe

graewe.de

60

Graewe is a manufacturing company specializing in screws, bolts, and turned parts, positioning itself as a reliable European partner in the industrial sector. The website is built on the Wix platform, indicating a moderate level of digital maturity with standard Wix hosting and scripts. While the site presents professional and relevant content for its target industrial audience, it lacks critical privacy and security disclosures such as privacy policies, cookie consent mechanisms, and incident response contacts. The security posture is basic with HTTPS enabled but missing advanced security headers. Overall, the site is functional and professional but would benefit from enhanced compliance and security measures to improve trust and regulatory adherence.

H

H & R

h-r.com

10

H & R is a German manufacturing company specializing in automotive suspension components, leveraging technology transfer from international motorsport to develop innovative products for series vehicles. The website presents a professional and comprehensive digital presence with detailed product categories, service information, and multilingual support. The technical infrastructure is based on WordPress with modern JavaScript frameworks and SEO optimizations, providing a good user experience and mobile responsiveness. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and policies are not evident. The absence of WHOIS registration data raises concerns about domain legitimacy, but the website content and branding indicate a credible business. Overall, the site is well-structured and trustworthy for its target audience.

C

Crew Knüttel Motorsport GmbH & Co.KG

reifen-knuettel.de

47

Crew Knüttel Motorsport GmbH & Co.KG is a specialized motorsport company based in Germany, established in 1984, providing racing tire services and support for various motorsport disciplines. The company maintains a professional online presence with a well-structured website offering detailed information about their services, team, and contact points. Their market position is that of a traditional, niche service provider in the motorsport sector, targeting racing teams and motorsport enthusiasts. Technically, the website employs modern web technologies including JavaScript libraries like Splide.js and jQuery, and is optimized for mobile devices with responsive design elements. However, there is room for improvement in accessibility and performance optimization. Security-wise, the site uses HTTPS but lacks visible security headers and formal security policies, which could be enhanced to improve trust and compliance. Privacy compliance is partially addressed with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional and trustworthy but could benefit from stronger security and privacy features.