Germany security reports

T

TRG

trg.de

51

TRG (The Reach Group) is a German digital and media agency specializing in data-driven online marketing campaigns, offering full funnel campaign planning, execution, and technology consulting. The company serves a broad business audience seeking performance marketing solutions and has a strong market presence with over 100 clients and recognized certifications such as Google Partner. Their website demonstrates a mature digital infrastructure built on WordPress with Elementor, integrating privacy-compliant analytics (Matomo) and cookie consent management. Security posture is good with HTTPS and no evident vulnerabilities, though some security headers could be improved. Overall, the site is professional, well-branded, and compliant with GDPR requirements, reflecting a trustworthy and credible business.

S

Solute GmbH

billiger.de

10

billiger.de is a well-established German price comparison platform operated by Solute GmbH, offering consumers a comprehensive service to find the best prices and deals across various product categories. The website is professionally designed with a focus on usability, mobile optimization, and accessibility, leveraging modern JavaScript technologies and Cloudflare infrastructure for performance and security. While the site employs standard security best practices such as HTTPS and secure login forms, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. No contact information for security incidents or data protection officers is provided, indicating room for improvement in transparency and compliance. Overall, the website is trustworthy and safe for general audiences, with a strong market position in the German e-commerce sector.

I

idealo internet GmbH

idealo.de

71

idealo.de is Germany's leading price comparison website, offering consumers access to over 350 million offers from more than 50,000 shops. Owned by Axel Springer SE, idealo has established itself as a market leader in the e-commerce price comparison sector since its founding in 2000. The platform provides expert product advice and comprehensive price comparisons, targeting general consumers primarily in Germany and other European countries. The website is professionally designed with excellent user experience, mobile optimization, and clear navigation, supporting its strong market position. Technically, idealo.de leverages modern web technologies including React and Next.js frameworks, hosted on Amazon AWS infrastructure. The site integrates Usercentrics for GDPR-compliant cookie consent management and uses Google Tag Manager for analytics. Performance is fast, and accessibility features are well implemented. The use of SVG logos and fonts enhances branding consistency and load efficiency. From a security perspective, idealo.de enforces HTTPS with strong SSL configuration and implements key security headers such as Content Security Policy and Strict-Transport-Security. No exposed sensitive data or vulnerable libraries were detected in the HTML content. However, the site lacks a dedicated security policy or incident response page, which could enhance transparency and preparedness. The WHOIS data is consistent with the business claims, showing a domain age appropriate for the company's history and no suspicious registration patterns. Overall, idealo.de presents a low-risk profile with strong business credibility, technical maturity, and privacy compliance. Strategic recommendations include publishing a formal security policy, providing incident response contact details, and considering a security.txt file to further improve security posture and trust.

C

Campus Berlin-Buch GmbH

campus-berlin-buch.de

55

Campus Berlin-Buch GmbH operates a specialized biotech and healthcare campus in Berlin, providing laboratory and office spaces, event venues, childcare, and community services. The campus integrates scientific research with cultural and health initiatives, serving approximately 3,000 employees and fostering a vibrant community. The website reflects a professional and well-structured digital presence with good content quality and clear navigation. Technically, the site uses modern frameworks like Bootstrap and jQuery, and employs Matomo analytics for privacy-conscious user tracking. Security posture is solid with HTTPS implied, though security headers and explicit cookie consent mechanisms could be improved. The WHOIS data is limited due to DENIC restrictions but shows consistent domain management. Overall, the site is trustworthy, compliant with GDPR, and well-positioned in its niche.

F

Outlook

fmp-berlin.de

45

The website fmp-berlin.de hosts a Microsoft Outlook Web Access (OWA) login portal, providing email access services to authorized users, likely employees or members of an organization based in Germany. The site is focused on secure email access and does not provide public-facing business information or marketing content. The technical infrastructure is based on Microsoft OWA technology with standard web technologies such as JavaScript, HTML, and CSS. The site shows moderate digital maturity with basic mobile optimization and accessibility features but lacks advanced SEO and modern web frameworks. Security posture is moderate; HTTPS is used, and the login form uses POST with autocomplete disabled, but there is an absence of explicit security headers and privacy policies. No contact or business information is provided on the page, limiting transparency and trust signals. Overall, the site is functional for its purpose but could improve in security best practices and compliance documentation.

M

Max Delbrück Center for Molecular Medicine in the Helmholtz Association

mdc-berlin.de

64

The Max Delbrück Center for Molecular Medicine is a leading biomedical research institute in Germany, focusing on understanding molecular mechanisms of health and disease and translating these findings into clinical applications. It operates under the Helmholtz Association umbrella and offers extensive research, education, and innovation services. The website reflects a mature digital presence with comprehensive content targeting researchers, students, and the scientific community. Technically, the site is built on Drupal 10 with modern web technologies, responsive design, and accessibility features. Security posture is strong with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear policies and GDPR-aligned consent management. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility.

E

Erste Wohnungsgenossenschaft Berlin-Pankow eG

ewg-pankow.de

41

Erste Wohnungsgenossenschaft Berlin-Pankow eG is a medium-sized housing cooperative based in Berlin, Germany, providing residential housing and community services primarily in the northern part of the city. The cooperative offers energetically renovated homes within well-maintained residential complexes and fosters a social environment for its members. The website reflects a local community-focused business model with clear contact channels and membership information. Technically, the site is built on WordPress using Elementor and several plugins for booking and GDPR compliance, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though there is room for improvement in security headers and incident response transparency. Overall, the website is professional, accessible, and compliant with GDPR, supporting a trustworthy online presence for the cooperative.

Akademie der Gesundheit Berlin/Brandenburg e.V. operates a professional educational website focused on health sector vocational training and education. The website positions itself as a regional leader in health education within Berlin and Brandenburg, targeting students and professionals seeking career development in healthcare. The business model is that of a non-profit educational institution offering structured courses and training programs. The site content is well-organized, professionally designed, and consistent with the brand identity. Technically, the website is built on WordPress 6.7.4 using the Avada theme and integrates several modern plugins including Yoast SEO for search optimization, Real Cookie Banner Pro for GDPR-compliant cookie management, and Google Tag Manager for analytics and marketing tags. The site demonstrates good mobile optimization and moderate performance. Hosting is managed via domaincontrol.com name servers, indicating a standard commercial hosting environment. From a security perspective, the site enforces HTTPS and employs a comprehensive cookie consent mechanism with granular user controls. While explicit security headers like Content-Security-Policy or X-Frame-Options are not clearly detected, no critical vulnerabilities or exposed sensitive data were found. The privacy policy is comprehensive and GDPR compliant, and contact information is clearly provided. However, the site lacks publicly available incident response or security policies, which could be improved. Overall, the website presents a low-risk profile with good privacy compliance and a solid technical foundation. Strategic recommendations include enhancing security headers, publishing incident response policies, and continuous monitoring of third-party scripts to maintain security posture.

T

Testzentrale

testzentrale.de

61

Testzentrale is a specialized platform offering psychological test procedures, books, journals, and educational services primarily targeting psychologists, researchers, and healthcare professionals. It operates under the Hogrefe Verlagsgruppe umbrella, a reputable publisher in the psychology domain, which strengthens its market position and trustworthiness. The website provides a comprehensive catalog of products and services including eTesting platforms, seminars, webinars, and consulting, catering to a professional audience in Germany and internationally. Technically, the site is built on TYPO3 CMS with modern styling frameworks like Tailwind CSS and integrates Google Tag Manager for analytics. Privacy and cookie policies are well implemented with consent management, reflecting good GDPR compliance. Security posture is strong with HTTPS enforcement, secure login forms, and standard security headers, although explicit incident response and vulnerability disclosure mechanisms are not publicly detailed. Overall, the site demonstrates a mature digital presence with good usability, security, and compliance practices.

G

Golding Capital Partners GmbH

goldingcapital.com

57

Golding Capital Partners GmbH is a German-based investment firm specializing in alternative investments such as private equity, private credit, infrastructure, secondaries, and impact investing. The company targets institutional investors seeking sustainable and impactful investment opportunities. The website reflects a mature digital presence built on Drupal 9, integrating modern consent management via Cookiebot and analytics through Matomo, indicating a commitment to privacy and compliance. The site is professionally designed, mobile-optimized, and provides comprehensive content relevant to its audience. Security posture is strong with HTTPS and security headers, though the absence of a public security policy and incident response contacts suggests room for improvement. The lack of WHOIS registration data is a notable concern for transparency and trustworthiness, warranting further verification. Overall, the website presents a credible and professional front for the business with moderate risk due to domain registration opacity.

E

ETHENEA Independent Investors S.A.

ethenea.com

66

ETHENEA Independent Investors S.A. operates as an independent asset management company specializing in multi-asset investment funds, targeting investors with various risk profiles. The company offers a range of funds including Ethna Funds, HESPER FUND, and other third-party funds, positioning itself as a strong and independent partner in the finance sector primarily serving the German market. The website content is professionally presented in German, with clear navigation and relevant investment information. Technically, the site uses modern JavaScript libraries, Umbraco CMS, and integrates cookie consent mechanisms compliant with GDPR. Security posture is moderate with HTTPS implied but lacks visible security headers and explicit incident response contacts. WHOIS data is unavailable, which raises some legitimacy concerns, but the website branding and content quality suggest a professional operation. Overall, the site is well-structured, privacy compliant, and trustworthy from a user perspective, though domain registration transparency is lacking.

S

SAUREN Financial Group

sauren.de

48

SAUREN Financial Group is a well-established German investment firm specializing in qualitative fund analysis and asset management with over 30 years of experience. The company focuses on investing in fund managers rather than funds themselves, offering a range of Dachfonds including multi-asset, absolute return, and responsible investment funds. Their market position is strong within Germany, supported by multiple industry awards and a clear business model targeting both private investors and distribution partners in approved jurisdictions. The website reflects a professional and trustworthy brand with comprehensive legal and compliance disclosures.

N

Netlantic GmbH

youtv.de

65

YouTV, operated by Netlantic GmbH, is a well-established German online TV recording and streaming service founded in 2005. It offers users a cloud-based personal video recorder for German TV programs with features such as HD streaming, subtitles, and audio description. The service is accessible worldwide on multiple platforms including mobile devices, smart TVs, and streaming boxes. The company holds a strong market position as a test winner and partners with major telecom providers like Deutsche Telekom and Vodafone. Technically, the website employs modern frameworks and integrates social login and payment SDKs securely, hosted on Amazon AWS infrastructure. Privacy and cookie compliance are well implemented with explicit consent mechanisms and comprehensive policies. Security posture is strong with HTTPS, CSRF protection, and no visible vulnerabilities, though some security headers could be explicitly confirmed. Overall, the website is professional, user-friendly, and trustworthy, with no signs of malicious or adult content.

V

VIDEO.TAXI

video.taxi

70

VIDEO.TAXI is a German-based technology company specializing in AI-powered live translation, subtitling, transcription, and accessible streaming services. Founded in 2019 and operating under the parent company TV1 GmbH, it targets event organizers, media houses, public sector entities, and businesses seeking multilingual and barrier-free communication solutions. The company offers a comprehensive suite of services including live translation in 116 languages, live captioning, meeting bots, and voice AI agents, positioning itself as an innovative leader in real-time communication technology. The website reflects a mature digital presence with professional design, clear navigation, and strong branding consistency. Technically, it leverages WordPress with Elementor, integrates advanced analytics and marketing tools, and maintains GDPR compliance with cookie consent mechanisms. Security posture is robust, supported by ISO 27001 certification and HTTPS enforcement, though some security headers could be enhanced. Overall, the domain and website content align well, indicating a legitimate and trustworthy business with a strong focus on privacy and accessibility.

A

Aktionsbündnis gegen Gewalt, Rechtsextremismus und Fremdenfeindlichkeit

aktionsbuendnis-brandenburg.de

36

Aktionsbündnis Brandenburg is a small non-profit coalition based in Germany focused on combating violence, right-wing extremism, and racism. The organization provides educational materials, political impulses, and support for civil society initiatives, targeting a broad audience including political youth organizations and activists. The website is built on WordPress with a moderate technical infrastructure including WooCommerce and various plugins for events and podcasting. Security posture is adequate with HTTPS enabled but lacks published security policies and vulnerability disclosures. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy with a clear mission but could improve transparency and compliance.

M

Mobile Beratung gegen Rechtsextremismus Berlin (MBR)

mbr-berlin.de

47

Mobile Beratung gegen Rechtsextremismus Berlin (MBR) is a well-established non-profit organization founded in 2001, dedicated to providing consultation and support to individuals and groups in Berlin facing right-wing extremism, racism, and anti-Semitism. The organization offers on-site support, educational publications, and media analysis to empower its target audience, primarily Berlin residents affected by these issues. The website reflects a focused mission with clear contact channels and trust signals such as funding acknowledgments and a PGP key for secure communication. Technically, the site is built on WordPress with modern plugins and responsive design, ensuring good usability and moderate performance. Security posture is solid with HTTPS and secure communication options, though it lacks explicit security headers and cookie consent mechanisms. Overall, the site is professional, trustworthy, and serves a critical social function.

F

Flüchtlingsrat RLP e.V.

fluechtlingsrat-rlp.de

68

Flüchtlingsrat RLP e.V. is a well-established non-profit human rights organization based in Germany, specifically serving the Rheinland-Pfalz region. The organization advocates for refugee and migrant rights, providing political representation, advice, and community support. With over 30 years of experience, it holds a strong regional presence and partnerships with governmental and non-governmental entities. The website reflects a professional and consistent brand image, targeting refugees, migrants, and supporting civil society groups. Technically, the site is built on WordPress with common plugins, offering good mobile optimization and accessibility. Security posture is solid with HTTPS and no visible vulnerabilities, though it lacks some advanced security headers and explicit incident response policies. Privacy compliance is good with a comprehensive GDPR privacy policy, but cookie consent mechanisms are missing. Overall, the site is trustworthy and serves its mission effectively.

P

PRO ASYL

proasyl.de

63

PRO ASYL is a well-established German non-profit organization dedicated to advocating for the rights of refugees and migrants in Germany and Europe. The website serves as a comprehensive platform offering news, thematic information, advisory services, and fundraising opportunities. It targets refugees, migrants, supporters, NGOs, and the general public interested in human rights and asylum issues. The organization maintains a strong market position within the non-profit sector focused on refugee protection and advocacy. Technically, the website is built on WordPress with WooCommerce for material distribution, enhanced by modern web technologies including jQuery and Google Tag Manager. The site is multilingual, mobile-optimized, and incorporates cookie consent mechanisms, reflecting a mature digital infrastructure. Performance is moderate with good SEO and accessibility features. From a security perspective, the site enforces HTTPS and employs cookie consent tools, but lacks explicit advanced security headers and published security policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is strong with comprehensive privacy and cookie policies aligned with GDPR requirements. Overall, the website presents a low-risk profile with high trustworthiness, professional content, and solid privacy practices. Strategic improvements could focus on enhancing security headers, publishing incident response and vulnerability disclosure policies, and adding clear contact phone numbers to improve user trust and support.

W

Westend Verlag

westendverlag.de

59

Westend Verlag is a German publishing company specializing in academic, political, and cultural literature. Their website offers a range of books, eBooks, and media content such as videos and podcasts, targeting readers interested in critical discourse and scholarly works. The business operates primarily through online sales and media distribution, positioning itself as a niche publisher with a focus on quality content and intellectual engagement. Technically, the website is built on a modern e-commerce platform likely Shopware, utilizing Google reCAPTCHA v3 for bot protection and Google Tag Manager for analytics. The site is hosted on German servers with HTTPS enabled, providing a secure browsing experience. The design is professional, mobile-optimized, and offers clear navigation, although some SEO and accessibility features could be enhanced. From a security perspective, the site implements basic best practices such as HTTPS and IP anonymization in analytics but lacks explicit security headers and published security policies. No vulnerability disclosure or incident response contacts are provided, which could be improved to enhance trust and compliance. Privacy compliance is partial, with cookie consent mechanisms active but no dedicated privacy or cookie policy pages detected. Overall, the website is functional, professional, and safe for general audiences, with room for improvement in privacy transparency and security documentation. The domain registration data aligns well with the business profile, indicating legitimacy and consistency.

T

TIVENTS

tivents.app

45

TIVENTS operates a German-language platform focused on connecting users with a wide network of local partners including cultural institutions, sports clubs, restaurants, and event organizers. The website serves as a partner selection portal with extensive listings and links to partner microsites, supporting event promotion and ticketing services. The platform targets local businesses and customers interested in cultural and leisure activities within Germany. Technically, the site employs modern frontend technologies such as Bootstrap, Livewire, and FontAwesome, ensuring a responsive and user-friendly experience. However, some areas such as security headers and cookie consent mechanisms could be improved to enhance compliance and security posture. The security evaluation shows good SSL implementation but lacks explicit security policies or incident response contacts. Overall, the site is legitimate, professionally designed, and maintains a moderate trust level with room for security and privacy enhancements.

B

BIKE&CO Germany

matrix-bikeparts.de

51

Matrix-BikeParts is a German bicycle parts and accessories brand operating under the BIKE&CO umbrella. The website presents a professional and modern digital presence, highlighting a broad product range and partnerships with well-known bicycle brands. The technical infrastructure is based on the Neos CMS and Flow PHP framework, with integration of Google Tag Manager and Cookiefirst for consent management, indicating a mature digital marketing and compliance approach. Security posture is solid with HTTPS and cookie consent, though some security headers and explicit policies could be improved. Overall, the site is trustworthy, well-branded, and targets the German bicycle retail market effectively.

V

Vii Bikes Germany

vii-bikes.de

55

Vii Bikes Germany is a specialized retailer offering high-quality children's bicycles designed by passionate parents and developed in Germany. The brand targets families with children aged 2 to 10 years, emphasizing safety, lightweight construction, and appealing designs featuring friendly characters. The company operates through a broad network of BIKE&CO affiliated bicycle dealers, positioning itself as a trusted niche player in the children's bike market. Technically, the website is built on the Neos CMS platform using PHP and modern JavaScript libraries, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is well addressed with accessible and comprehensive privacy and cookie policies. Overall, the website presents a professional, trustworthy, and user-friendly experience with strong branding consistency and social media engagement.

M

Morrison Bikes Germany

morrison-bikes.de

53

Morrison Bikes Germany is a medium-sized company specializing in the design and engineering of sport and utility bicycles, including e-bikes, based in Germany. The company operates a professional website built on the Neos CMS platform, showcasing a broad product range and leveraging partnerships with local dealers and online marketplaces such as Bikes.de. The website demonstrates a solid digital presence with good content quality, clear navigation, and consistent branding aimed at cycling enthusiasts and customers seeking quality German bicycles. Technically, the site uses modern frameworks and libraries, including PHP Flow and jQuery, and integrates Google Tag Manager and Cookiefirst for analytics and cookie consent management. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and explicit security policies are absent. Privacy compliance is strong with a comprehensive privacy policy and cookie management in place. Overall, the domain and website present a trustworthy and professional image with active social media engagement.

I

IXGO Germany

ixgo.bike

56

IXGO Germany operates as a sportive bicycle brand focused on delivering quality bikes through a specialized dealer network (BIKE&CO). The website presents a professional and consistent brand image targeting bike enthusiasts seeking sportive and reliable bicycles. Technically, the site is built on the Neos CMS platform using PHP and jQuery, with modern consent management and analytics integration. Security posture is good with HTTPS and cookie consent, though explicit security headers and incident response information are lacking. WHOIS data is incomplete due to TLD support limitations, slightly impacting trust. Overall, the site is well-designed, user-friendly, and compliant with privacy regulations, supporting a positive business credibility profile.

F

FALTER Bikes Germany

falter-bikes.de

53

FALTER Bikes Germany is a traditional German bicycle manufacturer and retailer established in 1927, offering a wide range of bicycles including city bikes, e-bikes, urban, classic, and children's bikes. The company operates a professional website built on the Neos CMS platform, leveraging modern web technologies such as PHP, jQuery, and Google Tag Manager for analytics and marketing. The website demonstrates good design quality, clear navigation, and mobile optimization, targeting consumers interested in quality bicycles and e-bikes. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy and cookie management. No critical vulnerabilities or suspicious indicators were found. Overall, the website reflects a reputable and established business with a strong digital presence.

B

Bikes.de: E-Bike & Fahrrad online finden ▷ vor Ort reservieren

bikes.de

59

Bikes.de is a German e-commerce platform specializing in the sale and local reservation of bicycles and e-bikes. The website offers a broad range of bike categories including E-Bikes, traditional bicycles, and accessories, targeting consumers in Germany interested in cycling products. The platform integrates local dealer availability and provides additional content such as a magazine and bike advice, positioning itself as a comprehensive marketplace for bike enthusiasts. Technically, the website employs modern JavaScript frameworks, integrates Google Tag Manager and Doofinder for search, and uses CookieFirst for consent management. Hosting appears to be managed via Gandi.net DNS services. Security posture is moderate with HTTPS implied and cookie consent implemented, but lacks visible security headers and explicit privacy or terms of service documents. No blocking or WAF mechanisms were detected, allowing full content access. Overall, the site demonstrates good design, navigation, and content relevance but would benefit from enhanced transparency and security documentation.

H

HESCOM-Software GbR

hescom.de

57

HESCOM-Software GbR is a small German software company specializing in software solutions for antiquarian bookshops, collectors, galleries, and publishers. Their offerings include proprietary software products such as Antiquar-PC, Exlibris-PC, and an integrated webshop solution, targeting niche markets with tailored IT consulting and web design services. The company has a consistent market presence since 2006 and maintains a professional website with clear navigation and relevant content. Technically, the website uses a proprietary web framework with standard web technologies including jQuery and Slick Carousel, and employs Piwik/Matomo for analytics. Mobile optimization and SEO are adequately addressed, though accessibility is basic. Security posture is moderate with HTTPS implied but lacking explicit security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the website is functional and professional but could improve in security and privacy compliance aspects.

H

HESCOM-Software GbR

hescomshop.de

57

HESCOM-Software GbR is a specialized software provider based in Germany, focusing on solutions for antiquarian bookshops, publishers, galleries, libraries, and collectors. Their core offerings include software products like Antiquar-PC and Exlibris-PC, complemented by a flexible and powerful webshop solution tailored for presenting and selling antiquarian books and graphics online. The company also provides web design and hosting services, targeting a niche market with professional and comprehensive solutions. The website reflects a consistent brand image and professional content aimed at their target audience. Technically, the website employs a custom HESCOM Web Framework along with common JavaScript libraries such as jQuery, Slick Carousel, and SimpleLightbox for UI enhancements. Analytics are handled via a self-hosted Piwik/Matomo instance, indicating a privacy-conscious approach. The site is mobile-optimized with good SEO and accessibility basics, though some improvements in accessibility and security headers could be made. Hosting appears stable with dedicated nameservers and no blocking or WAF interference. From a security perspective, the site uses encrypted data transmission for orders and does not expose sensitive information in the HTML. However, explicit security policies, incident response contacts, and cookie consent mechanisms are absent, which could be improved to enhance compliance and user trust. The WHOIS data aligns well with the website claims, showing consistent domain registration and no privacy protection, supporting legitimacy. Overall, the website is professional, secure, and compliant with GDPR, serving a specialized market effectively. Strategic improvements in security headers, cookie consent, and incident response transparency would further strengthen their security posture and compliance standing.

H

HESCOM-Software GbR

hescomshop.com

57

HESCOM-Software GbR is a specialized software provider based in Germany, focusing on solutions for antiquarian bookshops, collectors, publishers, galleries, and libraries. Their core offerings include the Antiquar-PC and Exlibris-PC software systems, complemented by a flexible and powerful webshop solution tailored for antiquarian inventory presentation and eCommerce. The company positions itself as a niche player with a strong focus on the antiquarian and collector market segments, providing integrated software and web design services with hosting options. The website content is professionally presented, with clear navigation and multilingual support, targeting German and English-speaking customers in the antiquarian book and collector community.

K

karenina illustration

karenina-illustration.de

56

Karenina Illustration is a small independent artist based in Hamburg, Germany, specializing in mixed media illustrations combining vector art with found materials. The website serves as a portfolio and client showcase, targeting art enthusiasts and potential clients interested in unique illustration styles. The business operates primarily as a creative service provider with a niche market position. Technically, the site is built on the Jimdo Creator platform, utilizing jQuery and legacy Flash content, which poses compatibility and security concerns. The site is moderately optimized for performance and mobile use but lacks advanced accessibility features. Security posture is adequate with HTTPS and cookie consent mechanisms in place, but the absence of security headers and presence of Flash content reduce the overall security maturity. Privacy compliance is good with a visible privacy policy and cookie controls, though no terms of service or incident response policies are published. Overall, the site is professional and trustworthy for its scope but would benefit from modernization and enhanced security practices.

B

Bibliotheksgesellschaft Celle

lese-experten.de

45

The website www.lese-experten.de represents a regional educational initiative managed by the Bibliotheksgesellschaft Celle, aimed at promoting reading skills among 5th and 6th grade students in the Celle area of Germany. The project collaborates with local public libraries, schools, and sponsors to provide curated book selections, quizzes, and events to encourage children's engagement with reading. The website content is well-structured, informative, and targeted primarily at students, educators, and parents within the region. Technically, the site is built on TYPO3 CMS with Bootstrap, ensuring responsive design and moderate performance. Security posture is adequate with HTTPS enforced and cookie consent implemented, though additional security headers and explicit policies could enhance protection. WHOIS data aligns with the website's regional and organizational claims, indicating legitimacy and transparency.

LiteraTour Nord is a cultural non-profit initiative managed by Literaturhaus Hannover e.V., organizing annual literary tours featuring contemporary German-speaking authors. The website serves as an information portal for event schedules, author profiles, and archival content, targeting literature enthusiasts and academic audiences in northern Germany. The business model relies on sponsorships, notably from the VGH Stiftung, and collaboration with local literature houses and universities. The site is professionally designed and consistently branded, reflecting a well-established regional cultural presence. Technically, the website is built on TYPO3 CMS, utilizing common front-end libraries such as jQuery, Bootstrap, and Font Awesome. It employs Matomo analytics with Do Not Track enabled, indicating some privacy awareness. The site is mobile optimized and SEO friendly, though accessibility features are basic. Hosting is managed via domaincontrol.com name servers, a reputable provider. Performance is moderate with room for optimization. From a security perspective, the site uses HTTPS and has implemented Do Not Track in analytics, but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance. No incident response or security policy information is published. The absence of contact emails and phone numbers on the main page limits direct communication channels. Overall, the security posture is adequate but could be improved with standard best practices. The overall risk is low given the non-profit cultural nature and absence of suspicious content. Strategic recommendations include implementing cookie consent, adding security headers, publishing security policies, and enhancing contact information visibility to improve trust and compliance.

J

Julius-Club

julius-club.de

57

Julius-Club is a German youth-focused educational and cultural initiative promoting reading, writing, and creative activities during summer holidays. The website serves as an information portal for the club's events, book selections, and registration. It targets young audiences and their families, offering a variety of engaging activities such as readings, excursions, gaming, and creative workshops. The platform is positioned as a niche non-profit educational program within Germany. Technically, the website is built on WordPress with modern plugins like Yoast SEO and Elementor, ensuring good SEO and user experience. The site is mobile-optimized and uses HTTPS for secure communication. Security posture is adequate with cookie consent implemented, but lacks explicit privacy policies, terms of service, and security headers. No incident response or vulnerability disclosure information is provided. Overall, the site is professional, trustworthy, and safe for general audiences.

F

Festival aufm Platz

festival-aufmplatz.de

45

Festival aufm Platz is a well-established cultural festival in Niedersachsen, Germany, offering free open-air literary and musical events supported by reputable foundations such as the VGH Stiftung and Niedersächsische Sparkassenstiftung. The website reflects a professional and accessible platform with good SEO and accessibility features, built on WordPress with modern plugins and frameworks. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or suspicious elements were detected. The site lacks explicit contact emails or phone numbers on the homepage, and no terms of service or security policies are published, which could be enhanced for transparency. Overall, the site is trustworthy, well-branded, and serves a general audience with safe content.

B

BIKE&CO Germany

bikeundco.de

63

BIKE&CO Germany operates a large national bicycle dealer network with over 900 qualified members across Germany, offering bicycles, e-bikes, and related services. The website serves as a platform to connect consumers with local bicycle dealers and provides a marketplace experience through partnerships such as Bikes.de. The company targets bicycle consumers and retailers, emphasizing personalized consultation and top service. Technically, the website is built on the Neos CMS platform using PHP and jQuery, with modern consent management and analytics tools integrated. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security and incident response policies are not publicly available. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

B

Biker's Point Fuchs Uslar

bikerspoint-fuchs.de

49

Biker's Point Fuchs Uslar is a specialized motorcycle dealership based in Germany, focusing on Honda and KTM motorcycles with a particular emphasis on Goldwing and Trikes, positioning itself as a leading European provider in this niche. The website is built on WordPress using the Divi theme, indicating a modern and flexible technical infrastructure. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. Security posture is strong with HTTPS enabled and appropriate security headers, but lacks explicit security and privacy policies on the site. Contact information is not clearly presented, which may affect user trust and compliance. Overall, the site is professional and functional but would benefit from enhanced transparency and compliance documentation.

G

Gebrauchtrad24 GmbH

gebrauchtrad24.de

49

Gebrauchtrad24 GmbH operates a professional e-commerce and retail platform specializing in used and new bicycles, e-bikes, and S-Pedelecs, primarily targeting consumers in Germany. With over 30 years of experience in the two-wheeler industry, the company offers a comprehensive range of products including leasing options, rentals, and workshop services. The website is well-branded, consistent, and provides clear contact information and social media presence, enhancing customer trust. Technically, the website is built on a modern WordPress CMS with WooCommerce for e-commerce functionality and Elementor for design. It uses several plugins for enhanced search and payment processing. The site is mobile-optimized and includes SEO best practices. Cookie consent management is implemented via CookieYes, ensuring GDPR compliance. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms but lacks explicit security headers and publicly available security policies or incident response contacts. No vulnerabilities or suspicious content were detected. The WHOIS data aligns with the business claims, showing consistent registration and no privacy protection, which supports legitimacy. Overall, the website presents a low-risk profile with good privacy compliance and business credibility. Strategic improvements in security headers and incident response transparency could further enhance trust and security posture.

T

Typoakademie.de | Seminare für Designer, Werbe- und Medienprofis

typoakademie.de

63

Typoakademie.de is a specialized educational platform offering professional typography seminars and inhouse training primarily targeting design, advertising, and media professionals in Germany and Austria. The website presents a well-structured schedule of upcoming seminars across multiple cities, with clear registration links and detailed event information. The business operates as a small entity with a niche focus on typography education, leveraging the expertise of Wolfgang Beinert. The platform maintains a professional online presence with consistent branding and quality content, supported by structured data for SEO. Technically, the website is built on WordPress using the Uncode theme and Yoast SEO plugin, incorporating modern web technologies such as jQuery and FontAwesome. Hosting is managed via UI-DNS nameservers, and the site enforces HTTPS with a good SSL configuration. Performance is moderate with good mobile optimization and basic accessibility features. SEO practices are solid, with proper meta tags and structured data enhancing search visibility. From a security perspective, the site benefits from HTTPS and absence of exposed sensitive data or vulnerable libraries. However, it lacks security headers and a formal security policy or incident response information. No cookie consent mechanism was detected, which may impact GDPR compliance. The WHOIS data aligns well with the website content, showing consistent domain registration and business history dating back to 2003, supporting legitimacy. Overall, Typoakademie.de demonstrates a strong business credibility and technical foundation with minor gaps in privacy compliance and security best practices. Strategic improvements in cookie consent, security headers, and incident response transparency would enhance trust and compliance.

A

Atelier Wolfgang Beinert | Berlin

wolfgang-beinert.de

57

Atelier Wolfgang Beinert is a well-established communication design studio based in Berlin, specializing in graphic design, typography, and photography. Founded in 1989, the studio serves a diverse clientele including international companies and institutions such as Vogue, BMW, Mercedes-Benz, Leica, Chanel, and the Goethe-Institut. The website showcases a professional portfolio, detailed service offerings, and educational initiatives, positioning the studio as a reputable and experienced player in the media and design industry. The business model focuses on bespoke design solutions, consulting, and training services, targeting companies and institutions seeking high-quality visual communication.

Halle-Crowd is a localized crowdfunding platform focused on supporting projects in culture, art, social initiatives, education, environment, and sports within the Halle (Saale) region in Germany. The platform leverages Colligent Crowdfunding Technology and integrates accessibility tools to enhance user experience. The website is primarily in German and targets local residents and project initiators seeking funding. Technical infrastructure includes modern JavaScript libraries, Google Analytics with IP anonymization, and cookie consent management, reflecting a moderate level of digital maturity. Security posture is adequate with privacy compliance measures in place, though there is room for improvement in security headers and published policies. Overall, the platform presents a trustworthy and functional service for its niche audience.

S

Stadtwerke Halle GmbH

energieinitiative-halle.de

57

The Energie-Initiative Halle (Saale) website represents a regional energy and climate protection initiative operated by Stadtwerke Halle GmbH. It serves as an information hub for local citizens, businesses, and partners interested in sustainable energy projects, climate policies, and transformation initiatives in Halle (Saale). The site reflects a medium-sized municipal energy provider with a strong local presence and a network of subsidiaries and partners. Technically, the website uses a traditional but stable tech stack including jQuery, jQuery UI, and Matomo analytics, with a CMS identified as SixCMS. The site is mobile optimized and includes modern privacy compliance tools such as Usercentrics for cookie consent. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some improvements like updated libraries and enhanced security headers are recommended. Overall, the site is professional, trustworthy, and compliant with GDPR, but lacks explicit published security policies and incident response contacts.

W

W+H Wasser- und Haustechnik GmbH

wuh-halle.de

60

W+H Wasser- und Haustechnik GmbH is a regional service provider specializing in water and sanitary technology services in Halle (Saale), Germany. The company offers comprehensive solutions including water meter testing, standpipe rental for water extraction, and sanitary installations. It operates as part of the larger Stadtwerke Halle GmbH (SWH) group, which encompasses multiple subsidiaries in energy, water, transportation, and related sectors. The website reflects a professional and consistent brand image aligned with its parent group, targeting local businesses and residents requiring water and heating services. Technically, the website is built on a CMS platform (likely SixCMS) and employs common JavaScript libraries such as jQuery and Modernizr, along with the Slick carousel for UI elements. It integrates Usercentrics for cookie consent management and Matomo for analytics, indicating a moderate level of digital maturity and privacy awareness. The site is mobile-optimized and uses HTTPS, but lacks some advanced security headers and explicit security policies. From a security perspective, the site demonstrates good baseline practices including HTTPS enforcement and consent management. However, it does not publish a security.txt file or detailed security policies, and security headers are not explicitly detected. No vulnerabilities or exposed sensitive data were found in the HTML content. The WHOIS data is consistent with the website's branding and hosting, reinforcing legitimacy. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR requirements. Strategic recommendations include enhancing security headers, publishing explicit security policies, and considering a vulnerability disclosure policy to improve security posture and stakeholder trust.

M

Maya mare

mayamare.de

52

Maya mare is a medium-sized hospitality business based in Germany, operating a unique themed water park, sauna, wellness, and fitness club. The website reflects a well-established brand with a clear market position as the first fully themed experience bath in Germany. The business targets general audiences including families and fitness enthusiasts, offering a broad range of leisure services. Technically, the site is built on WordPress with the Divi theme and uses modern plugins for SEO, cookie management, and analytics. The hosting provider is EVH, a reputable German hosting service. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities were detected. Privacy compliance is strong with comprehensive policies and GDPR-aligned cookie management. Overall, the website is professional, trustworthy, and user-friendly, supporting the business's credibility and customer engagement.

S

SWH. Bäder Halle GmbH

baden-in-halle.de

54

SWH. Bäder Halle GmbH operates a network of public bathing and sauna facilities in Halle, Germany, including indoor pools, outdoor pools, and camping sites. The company is part of the larger SWH group, which encompasses various regional utility and service providers. The website serves local residents and visitors seeking leisure and wellness services. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and SVG graphics, with a focus on accessibility and mobile responsiveness. Cookie consent is managed through Usercentrics, indicating GDPR awareness, though explicit privacy and terms of service pages were not found in the analyzed content. Security measures include HTTPS and bot protection via FriendlyCaptcha, but lack visible security headers and a published security policy. Overall, the site is professional and trustworthy, with room for improvement in privacy disclosures and security hardening.

C

Container Terminal Halle (Saale) GmbH

ct-hs.de

57

Container Terminal Halle (Saale) GmbH operates as a regional logistics and transportation service provider specializing in container terminal operations, rail services, and combined transport solutions. The company is part of the larger Stadtwerke Halle GmbH (SWH) group, which encompasses multiple energy and infrastructure-related subsidiaries. The website reflects a professional business presence targeting logistics customers primarily in Germany, with a focus on the Halle (Saale) region. Technically, the website employs a traditional tech stack including jQuery, jQuery UI, Modernizr, and Slick Carousel, managed via the SixCMS platform. It integrates modern consent management through Usercentrics and uses Matomo for analytics, indicating a moderate level of digital maturity. The site is mobile optimized and provides clear navigation and relevant content, although some libraries are outdated. From a security perspective, the site enforces HTTPS and uses consent management for cookies, but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website content, supporting legitimacy and trustworthiness. Overall, the website presents a solid business and technical foundation with room for improvement in security transparency and modernization. The risk profile is low, with recommendations focusing on enhancing security policies, updating libraries, and improving accessibility.

I

IT-Consult Halle GmbH

itc-halle.de

62

IT-Consult Halle GmbH is a medium-sized IT service provider based in Halle (Saale), Germany, specializing in comprehensive IT solutions for the public sector and medium-sized enterprises. The company operates under the umbrella of Stadtwerke Halle GmbH, offering services including IT consulting, SAP system management, document management systems, GIS solutions, and data center services. Their market position is solid within the regional public and private sectors, supported by certifications such as ISO 27001 and a professional online presence. Technically, the website employs a modern technology stack including jQuery, Modernizr, Slick Carousel, and FontAwesome, alongside a CMS likely based on SixCMS. The site is mobile-optimized, uses HTTPS with strong SSL configuration, and integrates a consent management platform (Usercentrics) and Matomo analytics for privacy-conscious tracking. Performance is moderate with good SEO and basic accessibility features. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, cookie consent, and no visible vulnerabilities or exposed sensitive data. However, it lacks publicly available security policies and incident response contacts, which could be improved to enhance trust and compliance. Privacy compliance is strong with a comprehensive privacy policy and cookie management. Overall, the website is professional, trustworthy, and well-aligned with the company's business objectives. The risk profile is low, with recommendations focusing on enhancing security transparency and accessibility compliance.

H

Hallesche Verkehrs-AG

havag.com

62

Hallesche Verkehrs-AG (HAVAG) is a regional public transportation company serving the Halle (Saale) and Merseburg areas in Germany. It operates under the Mitteldeutscher Verkehrsverbund and is part of the larger SWH group. The website provides comprehensive information about public transport services, ticketing options, customer service, and multimodal transport offers. It targets local residents and commuters seeking reliable public transit information and services. The company maintains a medium-sized regional presence with a clear business model focused on public transportation and customer support. Technically, the website employs a modern technology stack including jQuery, Leaflet for mapping, FontAwesome icons, and Matomo for analytics, complemented by Usercentrics for consent management. The site is hosted by Vautron Rechenzentrum AG and shows good mobile optimization and SEO practices. The infrastructure is stable with HTTPS enforced, though some security headers are not explicitly confirmed. Privacy compliance is well addressed with visible cookie consent and a detailed privacy policy. From a security perspective, the site demonstrates good practices such as HTTPS usage and consent management but lacks explicit incident response contacts and vulnerability disclosure mechanisms. DNSSEC is not enabled, which is a recommended improvement. No critical vulnerabilities or suspicious content were detected. Overall, the site is trustworthy, professional, and compliant with GDPR requirements. The overall risk is low, with recommendations focusing on enhancing DNS security, publishing security.txt, and adding explicit security headers to strengthen the security posture further. The website is suitable for its audience and business purpose, with a strong alignment between domain registration data and business claims.

A

Abfallwirtschaft GmbH Halle-Lochau

aw-halle.de

60

Abfallwirtschaft GmbH Halle-Lochau is a regional waste management company operating in Halle (Saale), Germany. It provides landfill management, recycling, and waste disposal services and is part of the larger SWH group, which includes energy, water, and transportation services. The website reflects a professional and consistent brand presence with clear service offerings and contact information. Technically, the site uses a mix of legacy and modern web technologies, including jQuery, FontAwesome, and a consent management platform, hosted likely by EVH. Security posture is adequate with HTTPS and consent mechanisms but lacks some security headers and uses an outdated jQuery version, which could pose risks. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Overall, the website is trustworthy and well-positioned in its market segment.

H

Hallesche Wasser und Stadtwirtschaft GmbH

hws-halle.de

61

Hallesche Wasser und Stadtwirtschaft GmbH is a regional utility company based in Halle, Germany, providing essential municipal services including water supply, wastewater management, waste disposal, and city cleaning primarily targeting private customers. The company operates as part of the larger SWH Gruppe, which encompasses multiple related entities in energy, transportation, and municipal services. Their website reflects a structured and comprehensive presentation of services, targeting local residents and businesses with clear navigation and service menus. Technically, the website employs modern frontend technologies such as jQuery, FontAwesome, and Slick Carousel, alongside privacy-conscious tools like Usercentrics for consent management and Matomo for analytics. The site is mobile optimized and demonstrates moderate performance and accessibility standards. However, some security headers are not explicitly detected, and there is no visible security policy or incident response information. From a security perspective, the site enforces HTTPS and uses consent management, but lacks published security policies and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were found in the provided content. The WHOIS data aligns well with the website's claims, indicating a legitimate and trustworthy domain registration. Overall, the website presents a professional and trustworthy digital presence for a municipal utility provider, with room for improvement in security policy transparency and enhanced privacy compliance documentation.