Germany security reports

I

IT-Planungsrat

it-planungsrat.de

62

The IT-Planungsrat website represents a central political steering committee for the digitalization of public administration in Germany. It serves as a coordination and governance body for federal, state, and municipal digital initiatives, targeting government entities, institutions, businesses, and society at large. The website provides comprehensive information about its mission, organizational structure, projects, and current news, reflecting a well-established government entity with a clear mandate. Technically, the website is built on TYPO3 CMS, a robust open-source content management system widely used in government and enterprise environments. It employs modern web technologies including JavaScript and CSS, and integrates Matomo analytics hosted on its own server, ensuring privacy-conscious data collection. The site is mobile-optimized, accessible, and SEO-friendly, with clear navigation and consistent branding. From a security perspective, the site enforces HTTPS, uses session cookies securely, and implements a cookie consent mechanism compliant with GDPR. However, it lacks explicit security policy documentation and incident response contact details. No vulnerabilities or exposed sensitive data were detected in the content. The domain registration data aligns with the website's governmental purpose, indicating legitimacy and trustworthiness. Overall, the IT-Planungsrat website demonstrates a strong digital presence with good security and privacy practices appropriate for a government institution. Strategic improvements could include publishing dedicated security policies and incident response contacts to enhance transparency and trust.

I

Initiative D21

initiatived21.de

54

Initiative D21 is a well-established German non-profit network focused on advancing the digital society and accompanying the digital transformation for over 25 years. The organization provides research, events, and working groups targeting government, industry, and the public to foster digital competencies and digital governance. Their website reflects a professional and consistent brand with comprehensive content relevant to their mission. Technically, the website uses modern web technologies including JavaScript ES modules, SVG icons, and Matomo analytics configured to disable cookies, indicating a privacy-conscious approach. The site is mobile-optimized, fast-loading, and accessible, though no explicit CMS or framework is identified. Hosting is likely via a professional provider associated with domaincontrol.com. Security posture is solid with HTTPS enforced and privacy-aware analytics, but lacks some advanced security headers and a visible security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good with a comprehensive privacy policy, but no cookie consent mechanism was found. Overall, the website is trustworthy, professional, and well-aligned with the organization's mission. Recommendations include adding cookie consent, security headers, and publishing a security policy to enhance compliance and security posture.

The website digitale-verwaltung.de is an official digital administration portal operated by the Bundesministerium für Digitales und Staatsmodernisierung, Germany's Federal Ministry for Digital and State Modernization. It serves as a central information hub for the Digital Dachmarke initiative, which aims to provide a unified branding system for government digital services across federal, state, and municipal levels. The site targets citizens, government entities, and stakeholders involved in digital public services, offering detailed information, contact points, and resources to support the initiative. Technically, the site is built using the Government Site Builder CMS, employs modern web standards including HTML5, CSS3, and JavaScript, and integrates accessibility tools such as ReadSpeaker. Hosting is provided via a reputable provider with nameservers indicating European hosting. The site demonstrates good mobile optimization, accessibility, and SEO practices, with structured data enhancing search engine understanding. From a security perspective, the site enforces HTTPS and incorporates accessibility and privacy best practices. However, it lacks explicit security policy documentation, incident response contacts, and vulnerability disclosure mechanisms. No security headers were detected in the provided data, and no cookie consent mechanism was observed despite GDPR applicability. The WHOIS data aligns with the official government use, indicating a legitimate and trustworthy domain. Overall, the website presents a professional, trustworthy, and well-maintained digital government service portal with minor gaps in explicit security and privacy disclosures. Strategic improvements in these areas would enhance user trust and compliance posture.

]

]init[ AG

init.de

61

The website www.init.de represents ]init[ AG, a medium-sized German technology company specializing in digital services for government and enterprise sectors. Their business model focuses on consulting, creating, implementing, and operating digital solutions that facilitate societal progress through digitalization. The company holds a C5:2020 certification, demonstrating a high standard of cloud security compliance. The website is professionally designed using Drupal 10, with good mobile optimization and accessibility features. Analytics are implemented via etracker, with moderate user tracking. Security posture is strong with HTTPS and cloud certification, though some security headers and explicit incident response contacts are missing. Privacy compliance is adequate but could be improved with a more explicit cookie consent mechanism. Overall, the site is trustworthy, professional, and well-positioned in its market niche.

B

BMBF Medienverwaltung

bmbf-bilddatenbank.de

61

The website bmbf-bilddatenbank.de serves as a digital asset management platform primarily for the German Federal Ministry of Education and Research (BMBF). It provides authenticated access to media resources such as photos, videos, and audio files, leveraging the open-source ResourceSpace software. The platform targets internal or authorized users, facilitating media management, annotation, and transformation services. The site is professionally branded and consistent with government digital services, though it lacks publicly accessible privacy or cookie policies on the login page. Technically, the site employs a modern JavaScript stack including jQuery, CKEditor, and various plugins for enhanced media handling and UI features. It is served over HTTPS, ensuring encrypted communications, but lacks visible security headers such as CSP or HSTS, which could improve its security posture. The site is moderately optimized for performance and mobile use, with basic accessibility features. From a security perspective, the platform demonstrates good practices like CSRF token usage in forms and no exposed sensitive data in the HTML. However, the absence of explicit privacy, cookie consent mechanisms, and security policies reduces compliance with GDPR and best practices. No WAF or blocking mechanisms are detected, and the domain appears legitimate though WHOIS data is limited. No contact information or incident response channels are publicly available. Overall, the site is a secure and professional government media management portal with room for improvement in privacy compliance and security header implementation. Strategic enhancements in these areas would strengthen trust and regulatory adherence.

OpenTable Germany operates as a leading online restaurant reservation platform, enabling users to discover and book tables at top restaurants across Germany. The website is well localized for the German market, featuring comprehensive restaurant listings, reservation management, and marketing solutions for restaurateurs. The platform targets general consumers seeking convenient dining experiences and restaurants looking to optimize bookings and customer engagement. Technically, the site leverages modern web technologies including React, Apollo GraphQL, and integrates analytics and consent management tools such as Mixpanel and OneTrust. Hosting and CDN services are provided by Akamai, ensuring robust performance and security. Security posture is strong with HTTPS enforcement, security headers, and CSRF protections, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site demonstrates high professionalism, excellent content quality, and good privacy compliance, positioning it as a trustworthy and mature digital service in the hospitality sector.

I

Information und Technik Nordrhein-Westfalen

statistik.nrw

63

Statistik.NRW is the official statistical office for North Rhine-Westphalia, Germany's most populous state. It provides comprehensive social and economic data, serving government bodies, researchers, businesses, and the public. The website is professionally designed, well-structured, and offers extensive statistical content and services including databases, publications, and regional profiles. The parent organization is the Landesbetrieb IT.NRW, ensuring strong institutional backing. Technically, the site is built on Drupal CMS with modern JavaScript libraries and privacy-conscious analytics (Matomo). It is mobile-optimized and accessible, with a clear cookie consent mechanism. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though some security headers could be improved. WHOIS data confirms legitimacy and consistency with the official entity. Overall, the site demonstrates a mature digital infrastructure and strong compliance with privacy regulations. It is trustworthy and reliable for users seeking official statistical information about NRW. Recommendations include enabling DNSSEC, publishing explicit security policies, and adding a vulnerability disclosure channel to further enhance security transparency.

D

Droptop GmbH

linevast.de

41

Linevast Hosting, operated by Droptop GmbH since 2013, is a German-based web hosting provider offering a range of services including web hosting, managed servers, domain registration, and various add-ons such as Redis and Elasticsearch. The company emphasizes quality, reliability, and personalized customer service, supported by an ISO 27001 certified data center. Their market position is that of a trusted, small-sized technology provider focused on the German market. Technically, the website uses modern web technologies including Bootstrap, jQuery, and FontAwesome, with Cloudflare DNS services. The site is mobile-optimized and well-structured, though it lacks a CMS and advanced analytics tools. Security posture is strong with ISO certification and HTTPS, but could be improved by adding security headers and a vulnerability disclosure policy. Privacy compliance is good, with clear privacy and cookie policies and GDPR adherence. Overall, the website is professional, trustworthy, and well-aligned with its business goals.

F

FUNKE Works GmbH

trainee-gefluester.de

70

Trainee-Gefluester.de is a German online platform operated by FUNKE Works GmbH, specializing in trainee job listings and career advice for graduates and young professionals. The website offers a comprehensive range of services including job search, career tips, application templates, podcasts, and a career check tool, positioning itself as a niche job portal in the education sector. The platform targets job seekers in Germany looking for trainee programs and related career resources. Technically, the website employs modern web technologies such as Tailwind CSS, StimulusJS, Turbo, and uses CDNs like Amazon CloudFront and Imgix for performance optimization. It integrates Google Tag Manager, Plausible Analytics, and a consent management platform to ensure GDPR compliance. Security-wise, the site enforces HTTPS and uses a consent mechanism for cookies, but lacks explicit security headers and published incident response policies. Overall, the site is professional, secure, and trustworthy with good privacy compliance, but could improve by publishing security policies and contact information for security incidents.

F

FUNKE Works GmbH

praktikum.info

71

Praktikum.info is a German internship marketplace operated by FUNKE Works GmbH, targeting students, pupils, and career entrants seeking internships in Germany and abroad. The platform offers a large selection of internship listings, career check tools, application tips, templates, and a podcast for career advice. The website is well-positioned in the education sector with a medium-sized market presence and a professional, user-friendly design. Technically, the site uses modern frameworks such as Turbo (Hotwire), Tailwind CSS, and is hosted on Amazon Cloudfront CDN, ensuring fast performance and mobile optimization. Privacy compliance is strong, with GDPR-compliant cookie consent and a comprehensive privacy policy. Security posture is good with HTTPS enforced and use of security best practices, though explicit security headers could be verified further. WHOIS data is privacy protected, which is justified for this business type. Overall, the site is trustworthy, professional, and well-maintained.

F

FUNKE Works GmbH

azubi.de

70

Azubi.de is a leading German online platform specializing in apprenticeship and dual study program listings, operated by FUNKE Works GmbH. The website targets students and young adults seeking vocational training opportunities in Germany, offering comprehensive job listings, employer profiles, and career advice. The platform enjoys a strong market position supported by partnerships with prominent companies and a professional, user-friendly design. Technically, the site leverages modern frameworks and CDNs, ensuring fast performance and mobile optimization. Security posture is robust with HTTPS enforcement, GDPR-compliant cookie consent, and secure form handling, although explicit security headers could be further verified. No critical vulnerabilities or suspicious content were detected. Overall, Azubi.de demonstrates a mature digital presence with good privacy compliance and business credibility.

A

Ad Alliance GmbH

winario.de

61

winario.de is an official online sweepstakes platform affiliated with major German TV channels RTL and VOX, operated by Ad Alliance GmbH. It offers users free participation in TV-related contests and votings, providing chances to win cash prizes, trips, and electronics. The platform targets a general German-speaking audience interested in TV sweepstakes and interactive contests. Technically, the site employs modern JavaScript libraries including jQuery and Swiper.js, integrates Google Tag Manager for analytics, and uses Sourcepoint for GDPR-compliant consent management. Hosting is managed via EuroDNS nameservers, indicating a professional infrastructure. Security posture is solid with HTTPS enforced and consent mechanisms in place, though explicit security headers and incident response information are not clearly presented. Privacy compliance is strong with dedicated privacy and cookie policies accessible. Business credibility is high due to official affiliations and consistent branding. Overall, the website is well-designed, user-friendly, and trustworthy, with no signs of blocking or malicious content.

Studierendenwerk Dortmund AöR is a regional non-profit organization providing essential student services including financial aid (BAföG), housing, food services (Mensa), and counseling for seven universities in and around Dortmund, Germany. The website reflects a well-established institution with a clear focus on supporting students' academic and social needs. The presence of multiple university logos and social media channels reinforces its credibility and community engagement. Technically, the site is built on TYPO3 CMS, employs privacy-conscious Matomo analytics, and demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS and privacy-respecting tracking, though it lacks explicit security policies and headers. Overall, the site is professional, trustworthy, and compliant with GDPR and cookie regulations.

F

FUNKE Services GmbH

funkemediasales.de

56

FUNKE MediaSales operates as the primary media sales arm of the FUNKE Mediengruppe, offering comprehensive crossmedia advertising solutions across digital, print, and audio channels. The company targets businesses and marketing professionals seeking regional and national advertising reach. The website demonstrates a mature digital infrastructure built on WordPress with modern frameworks and includes advanced cookie consent management and tracking technologies. Security posture is solid with HTTPS and consent-based loading of tracking scripts, though some security headers and policies could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

K

kitconcept GmbH

kitconcept.com

65

kitconcept GmbH is a specialized service provider focused on delivering high-quality open source web and intranet solutions, primarily leveraging the Plone CMS platform. Their market position is that of a niche expert and active contributor to the Plone community, serving research institutions, universities, government agencies, and public organizations. The company offers services including website development, intranet solutions, open source contributions, and consulting. Founded in 2014 and based in Germany, kitconcept GmbH maintains a professional and content-rich website that reflects their expertise and client base. Technically, the website is built on modern technologies including Plone 6 and React-based Volto frontend, hosted by Hetzner Online GmbH with DNS managed via Cloudflare. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. Security posture is solid with HTTPS enforced and no exposed sensitive data, but could be improved by enabling DNSSEC and adding explicit security headers. Privacy compliance is generally good with a comprehensive privacy policy, but lacks a cookie consent mechanism. Overall, the security posture is mature with no critical vulnerabilities detected. The website shows strong business credibility through client logos, testimonials, and detailed project case studies. Recommendations include enhancing DNS security, implementing security headers, and adding cookie consent to improve GDPR compliance. The site is safe for general audiences with no adult or questionable content detected.

A

atalanda

atalanda.com

66

atalanda.com is a well-established German e-commerce platform founded in 2012, offering a broad range of over 2 million products across categories such as fashion, beauty, toys, electronics, books, home and garden, pets, sports, food, and baby products. The platform targets general consumers in Germany and positions itself as one of the leading online retailers with over 150,000 satisfied customers and strong ratings on Idealo and Google. The business model aggregates products from multiple retailers, providing a marketplace experience. Technically, the website employs modern technologies including Vue.js, Stripe for payments, Google reCAPTCHA for bot protection, and Amazon Cloudfront CDN for content delivery. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, although DNSSEC is not enabled and no explicit security.txt or incident response contacts are found. Privacy and cookie policies are comprehensive and GDPR compliant, with a clear consent mechanism. No adult or questionable content is present, making the site safe for general audiences. Overall, the website is professional, trustworthy, and technically mature, with room for minor security enhancements.

M

Max-Planck-Gesellschaft zur Förderung der Wissenschaften

max-planck.de

62

The Max-Planck-Gesellschaft website represents a leading German non-profit research organization focused on fundamental scientific research across 84 institutes. The site targets researchers, academics, students, and the general public interested in science. It offers extensive information on research, career opportunities, publications, and innovation initiatives. Technically, the website employs modern JavaScript frameworks, a modular AMD architecture, and a professional CMS (JustRelate CX Cloud). It is hosted on infrastructure consistent with the organization's domain and uses HTTPS with cookie consent managed by Usercentrics. Security posture is strong with no critical vulnerabilities detected, though some security headers could be improved. Privacy compliance is moderate due to the absence of explicit privacy and terms of service pages in the provided content, but cookie consent mechanisms are in place. Overall, the website is professional, trustworthy, and well-structured, reflecting the organization's high credibility and market position.

4

4P.de

4players.de

72

4P.de is a well-established German online media portal specializing in gaming news, reviews, previews, and hardware coverage for PC and consoles including PS5, Xbox, Switch, and VR. The site targets gaming enthusiasts primarily in the German-speaking market and operates under the FUNKE Mediengruppe umbrella, a reputable media conglomerate. The business model is based on advertising revenue complemented by subscription options for ad-free experiences. The website demonstrates a high level of professionalism with consistent branding, excellent content quality, and active engagement through social media channels.

FeWo-Touristik GmbH operates a specialized online platform for vacation rental listings, focusing on Ferienwohnungen and Ferienhäuser primarily in Germany and Europe. The company manages over 10,000 listings and offers niche portals targeting dog owners and regional markets such as Sylt. The business model emphasizes direct control for property owners without commission fees, positioning the company as a trusted intermediary in the hospitality sector. Technically, the website is built with standard HTML5 and CSS3, is mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms, which are recommended for compliance and protection. WHOIS data confirms domain legitimacy with consistent registration details and no privacy protection, aligning with the company's transparency. Overall, the website is professional, trustworthy, and well-positioned in its niche market.

F

FUNKE Mediengruppe GmbH & Co. KGaA

funke.fun

51

FUNKE FUN is a German media portal operated by FUNKE Mediengruppe GmbH & Co. KGaA, offering daily free sweepstakes, browser games, and discount vouchers from trusted brands. The website targets a broad general audience interested in entertainment and savings. It leverages partnerships with well-known brands such as HÖRZU and Tchibo to provide engaging content and promotional offers. Technically, the site uses modern JavaScript frameworks including Alpine.js and Livewire, integrates consent management tools, and employs Google Tag Manager for analytics. The site is mobile optimized and presents a professional user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS, uses security headers, and manages cookie consent effectively, though it lacks explicit security policy or incident response contact details. Overall, the website demonstrates a mature digital presence with good privacy compliance and trustworthy business information, though improvements could be made in providing direct contact channels and terms of service documentation.

FUNKE Wärmeaustauscher Apparatebau GmbH is a German-based specialist company focused on the development and production of industrial heat exchangers. The website presents a professional and consistent brand image targeting industrial clients and businesses requiring heat exchanger solutions. The company positions itself as a specialist in manufacturing within the industrial sector. Technically, the website is built on TYPO3 CMS and includes JavaScript tracking from sst.hydac.com, hosted on EuroDNS nameservers. The site demonstrates moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS implied but no visible security headers or explicit security policies. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Contact information and incident response details are not found, limiting direct communication channels. Overall, the website is safe for general audiences and professionally designed but would benefit from enhanced security and privacy transparency.

I

InWIS – Institut für Wohnungswesen, Immobilienwirtschaft, Stadt- und Regionalentwicklung GmbH

inwis.de

65

InWIS GmbH is a German-based institute specializing in housing, real estate economics, and urban and regional development. The organization combines scientific research with practical consulting services, targeting housing companies, developers, municipalities, and other stakeholders in the real estate sector. Their offerings include market analyses, surveys, sustainability consulting, digital tools, and corporate advisory services. The website reflects a professional and well-established entity with a clear market position and strategic partnerships. Technically, the site is built on TYPO3 CMS, uses modern front-end technologies, and demonstrates good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and privacy compliance including cookie consent mechanisms. However, explicit security policies and incident response information are not publicly available. Overall, the site is trustworthy, well-branded, and compliant with GDPR requirements.

D

Deutsches Institut für Urbane Transformation

diut.de

41

The Deutsches Institut für Urbane Transformation (DIUT) is an independent research and think tank affiliated with the EBZ Business School, focusing on urban transformation and innovative neighborhood development primarily in the Ruhr region and North Rhine-Westphalia, Germany. The institute serves as a collaborative platform connecting academia, municipalities, businesses, and policymakers to address social, economic, and ecological challenges in urban areas. The website presents professional content with a clear focus on its mission and services but lacks explicit privacy and security policies. Technically, the site is built on WordPress with modern plugins and analytics tools, offering good performance and mobile optimization. Security posture is adequate with HTTPS and cookie consent but could be improved by publishing formal security and incident response policies.

The Europäisches Bildungszentrum der Wohnungs- und Immobilienwirtschaft (EBZ) is a well-established educational institution in Germany specializing in training, further education, and research for the housing and real estate industry. The website reflects a professional and comprehensive digital presence, offering a wide range of educational services including vocational training, business school programs, personal development, and research consultancy. The institution targets professionals and students in the real estate sector, positioning itself as a leading educational provider in this niche. Technically, the website is built on TYPO3 CMS with modern web technologies such as Bootstrap and integrates privacy-conscious analytics (Matomo) and bot protection (FriendlyCaptcha). The site is mobile-optimized and includes accessibility features, demonstrating a mature digital infrastructure. The hosting is managed by a reputable provider with multiple nameservers, ensuring reliability. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, explicit security headers are not detected, and no public security or incident response policies are published, indicating room for improvement in transparency and security posture. No vulnerabilities or suspicious content were found. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. Strategic recommendations include enhancing security headers, publishing security policies, and adding a vulnerability disclosure mechanism to further strengthen trust and security readiness.

N

netzfactor GmbH

by.nf

47

netzfactor GmbH is a German technology company specializing in customized hardware and software solutions, including web development, mobile applications, media design, network services, consulting, and research projects. The company positions itself as a partner for businesses seeking innovative and tailored IT solutions, leveraging experience and creativity to deliver efficient results. Their market presence is regional with active engagement in research collaborations and community events. Technically, the website is built on TYPO3 CMS with additional JavaScript libraries such as MooTools and uses Matomo for privacy-conscious analytics. The site is mobile optimized, well-structured, and includes a comprehensive cookie consent mechanism. Hosting details are not explicitly stated but the domain uses custom nameservers. Performance is moderate with good SEO and basic accessibility features. From a security perspective, the site enforces HTTPS and employs privacy-friendly analytics with cookie disabling. However, it lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a detailed privacy policy and cookie consent banner. Business credibility is supported by clear company information, social media presence, and professional content. Overall, the website is trustworthy, professional, and compliant with GDPR. Strategic improvements include adding security headers, publishing security policies, and enhancing accessibility. The risk level is low with no critical issues detected.

W

WirtschaftsEntwicklungsGesellschaft Bochum mbH

parken-in-bochum.de

45

The website 'Parken in Bochum' is operated by the WirtschaftsEntwicklungsGesellschaft Bochum mbH and serves as an informational portal for parking facilities and services in the city of Bochum, Germany. It provides real-time parking availability, details on parking lots, parking ticket machines, and smart parking registration. The site targets residents and visitors seeking convenient parking solutions in Bochum. The business model is focused on public service and parking management, positioning itself as a key local resource for transportation-related information. Technically, the website is built on TYPO3 CMS and leverages modern JavaScript libraries such as jQuery, Swiper, Popper.js, and Tippy.js, along with Google Maps API integration for interactive maps. The site is mobile-optimized, accessible, and includes SEO best practices. It employs Matomo analytics with a cookie consent mechanism, reflecting a commitment to privacy compliance. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent. However, it lacks explicit security headers and does not publish a security policy or incident response contact details. No vulnerabilities or exposed sensitive data were detected. The domain registration data is consistent and legitimate, supporting trustworthiness. Overall, the website is professional, trustworthy, and provides valuable services to its audience. Strategic improvements include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to strengthen security posture and user trust.

W

Wirtschaftsförderung Bochum WiFö GmbH

bochum-startup.de

47

Bochum Startup is a regional economic development initiative operated by Wirtschaftsförderung Bochum WiFö GmbH, focused on supporting startup founders and entrepreneurs in Bochum, Germany. The website offers comprehensive services including consulting, workshops, community events, and growth programs such as the WERK X incubator. The organization positions itself as a trusted partner throughout the startup journey, emphasizing competence, community, and regional focus. Technically, the website is built on TYPO3 CMS and leverages modern JavaScript libraries such as jQuery, Swiper, and Featherlight for interactive features. It employs Matomo analytics for privacy-conscious user tracking and integrates Google reCAPTCHA for form security. The site is mobile-optimized, accessible, and performs moderately well, with a consistent and professional design. From a security perspective, the site uses HTTPS with excellent SSL configuration and implements cookie consent mechanisms. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the website's business claims, indicating a legitimate and trustworthy domain. Overall, Bochum Startup presents a professional, secure, and privacy-conscious online presence suitable for its public sector economic development role. Strategic improvements could include adding formal security policies and enhancing security headers to further strengthen its security posture.

D

DP Wired

dp-wired.de

56

DP Wired is a small digital agency based in Germany specializing in web development, e-commerce solutions, and online branding. The company leverages modern technologies such as TYPO3 CMS, Laravel, Shopware, and Shopify to deliver tailored digital experiences. Their service portfolio includes web design, responsive development, SEO/SEA, plugin development, web hosting, and social media marketing, targeting businesses primarily in the Thüringen region. The website demonstrates a high level of professionalism with comprehensive service descriptions, active blog content, and consistent branding across social media platforms. Technically, the site is built on TYPO3 CMS with integrations of Google Tag Manager and Analytics, ensuring good SEO and performance optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. Overall, the domain registration data aligns well with the website content, indicating legitimacy and trustworthiness.

B

B im Beckmannshof

b-im-beckmannshof.de

44

B im Beckmannshof is a small hospitality business operating a restaurant and event venue in Germany, specializing in regional and reinterpreted German cuisine. The website is professionally designed using WordPress and Elementor, featuring a modern and responsive layout with clear navigation. The business targets local and regional customers seeking dining and event rental services. Technically, the site uses a standard WordPress stack with popular plugins and libraries such as JetEngine, Swiper.js, and Matomo for analytics, reflecting a moderate level of digital maturity. Security-wise, the site enforces HTTPS and uses Cookiebot for GDPR-compliant cookie consent management, but lacks explicit security headers and published security policies. No contact emails or phone numbers were found in the provided content, which may impact user trust and business credibility. Overall, the website is functional and professional but could improve in privacy transparency and security best practices.

A

Akademisches Förderungswerk, A. ö. R.

q-we.st

47

Q-West Bochum is a campus gastronomy service operated by the Akademisches Förderungswerk, serving students and staff at Ruhr-Universität Bochum. The website presents a clear business model focused on providing lunch, dinner, coffee, and snacks with special pricing for students and apprentices. The business is positioned as a medium-sized hospitality service embedded within an educational environment, emphasizing quality, variety, and convenience. Technically, the site uses WordPress CMS with jQuery and Matomo analytics, providing a moderate performance and good mobile optimization. The presence of an OpenTable reservation widget enhances user experience. Security posture is adequate with HTTPS and privacy-conscious analytics, but lacks advanced security headers and formal security policies. Privacy compliance is good with a GDPR-compliant privacy policy but lacks a cookie consent mechanism. Overall, the site is professional, trustworthy, and well-aligned with its target audience and business goals.

B

BAföG Digital

bafoeg-digital.de

66

BAföG Digital is the official German government platform enabling students and trainees to apply online for BAföG educational funding. It is a joint offering by the federal government and the German states, providing a secure, accessible, and user-friendly digital service. The platform supports application submission, status tracking, and offers additional services such as a BAföG calculator and a dedicated mobile app. The website is well-branded with official logos and consistent messaging, targeting students and their families in Germany.

L

Landesbetrieb Information und Technik Nordrhein-Westfalen (IT.NRW)

it.nrw

53

Landesbetrieb Information und Technik Nordrhein-Westfalen (IT.NRW) is the official IT service provider and statistical office for the German state of Nordrhein-Westfalen. The organization offers IT infrastructure, digital administration support, and statistical data services to government agencies and the public. The website reflects a mature digital presence with a focus on transparency, accessibility, and user engagement through multiple digital channels and social media. Technically, the site is built on Drupal CMS, uses Matomo for privacy-respecting analytics, and implements modern web standards including responsive design and cookie consent mechanisms. Security posture is strong with HTTPS enforced and privacy compliance evident, though some security headers could be improved. Overall, IT.NRW demonstrates a high level of professionalism and trustworthiness appropriate for a government entity.

P

prettysocial media GmbH

prettysocialmedia.com

48

Prettysocial media GmbH is a European branded content distribution company founded in 2013, operating across multiple countries including Germany, Netherlands, Denmark, and the UK. The company leverages a large network of over 1500 premium publishers to optimize and distribute branded content across social media channels, aiming to boost social media reach and social commerce success for its clients. Their business model focuses on combining creative storytelling with global media distribution to connect brands with consumers effectively. Technically, the website is built on WordPress using modern frameworks like Bootstrap and integrates multiple analytics and marketing tools such as HubSpot, Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The site is mobile-optimized and provides a professional user experience with clear navigation and multi-language support. Security-wise, the site enforces HTTPS, uses captcha on forms, and employs cookie consent mechanisms, but lacks some advanced security headers and explicit security policies. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

W

WinLocal

winlocal.de

58

WinLocal is a German-based B2B digital marketing service provider specializing in online visibility, online reviews, online advertising, and an integrated online control center powered by AI. The company targets businesses seeking to improve their online presence and customer acquisition through measurable and efficient digital marketing solutions. The website is built on the HubSpot CMS platform, leveraging modern marketing and analytics tools such as Google Analytics 4 and Google Tag Manager. Hosting is provided by a reputable German hosting provider, ensuring reliable infrastructure. Security posture is solid with HTTPS enabled and no exposed sensitive data, though the absence of explicit security headers and policies suggests room for improvement. Privacy compliance is basic, with no visible privacy or cookie policies in the provided content. Overall, the website presents a professional and trustworthy image with good content quality and business credibility.

J

joblocal GmbH

joblocal.de

67

joblocal GmbH operates joblocal.de, a German job marketplace platform leveraging AI-powered talent matching technology (Talent-KI) to connect employers with suitable candidates. The platform offers regional labor market insights and a user-friendly job search interface, targeting employers and job seekers primarily within Germany. The website demonstrates a modern technical infrastructure built on Next.js and React, integrating Google Maps API for enhanced location-based services and ConsentManager for GDPR-compliant cookie management. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the platform presents a professional and trustworthy digital presence with good privacy compliance and user experience.

F

FUNKE Digital

mediapartisans.com

51

FUNKE Digital is a digital media powerhouse and a 100% subsidiary of the FUNKE Mediengruppe, specializing in news websites, content verticals, and digital investments. The company positions itself as the digital motor of its parent group, leveraging modern technologies and agile teams to innovate and expand its digital offerings. The website reflects a professional and consistent brand image, targeting digital media consumers, advertisers, and investors primarily in Germany. Technically, the site is built on WordPress with modern plugins for SEO and interactive content, showing moderate performance and good mobile optimization. Security posture is strong with HTTPS and consent management in place, though some security headers and policies could be improved. Privacy compliance is robust, with clear GDPR-aligned cookie consent mechanisms. Overall, the site is trustworthy, well-maintained, and aligned with its business objectives.

F

FUNKE Works GmbH

funkeworks.de

69

FUNKE Works GmbH operates specialized job portals targeting apprentices, students, and young professionals in Germany. As part of the FUNKE Mediengruppe, it leverages digital matching technologies and mobile recruiting apps to connect job seekers with employers. The company maintains a professional and modern web presence with strong branding and multiple subsidiary platforms. Technically, the website uses modern frameworks such as Tailwind CSS, Hotwired Turbo Rails, and Stimulus JS, with GDPR-compliant cookie consent and analytics via Plausible and Google Tag Manager. Security posture is solid with HTTPS and consent management, though explicit security policies and incident response information are not published. Overall, the website is trustworthy, well-structured, and compliant with privacy regulations.

phpBB.de is a German-language community and support platform dedicated to the phpBB open-source forum software. It provides users with downloads, documentation, support forums, and community engagement tools. The site is hosted by Linevast.de and uses the phpBB software with custom styling and standard web technologies such as jQuery and Font Awesome. The platform targets phpBB users and developers primarily in Germany and offers a comprehensive resource for forum setup and troubleshooting. Technically, the website employs a standard phpBB stack with modern JavaScript libraries and is moderately optimized for performance and mobile use. However, there is room for improvement in security practices, including the implementation of HTTP security headers and enhanced privacy controls. The site uses session IDs in URLs and lacks explicit cookie consent mechanisms, which could be improved for GDPR compliance. From a security perspective, the site shows no signs of blocking or WAF interference and does not expose sensitive data. However, the absence of security headers and vulnerability disclosure mechanisms indicates a moderate security posture. The WHOIS data is partially consistent with the hosting and domain usage, supporting legitimacy but lacking detailed registrant information. Overall, phpBB.de is a trustworthy and well-maintained community resource with good business credibility and content quality. Strategic improvements in security headers, privacy compliance, and contact transparency would enhance its security posture and user trust.

H

High Five GmbH

schuelerrabatte.com

60

Schuelerrabatte.com is an e-commerce platform operated by High Five GmbH, specializing in providing student discounts, vouchers, and promotional offers primarily for the German market. The website offers a wide range of discount codes and giveaways targeting students and young consumers, positioning itself as a trusted source for saving money on popular brands and services. The platform integrates multiple partner services and maintains a user account system to enhance user engagement and personalization. Technically, the website employs modern web technologies including AngularJS for frontend interactivity, Tiny-slider for carousels, and ConsentManager for GDPR-compliant cookie consent management. Analytics are handled via Matomo and Google Tag Manager, ensuring data-driven insights while respecting user privacy. The site is served over HTTPS with a good SSL configuration and uses multiple CDNs for performance optimization. Mobile optimization and SEO practices are well implemented, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and incorporates a comprehensive cookie consent mechanism, demonstrating compliance with GDPR. However, explicit security headers such as Content-Security-Policy and X-Frame-Options are not clearly present, representing an area for improvement. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The absence of WHOIS registration data is a concern but does not currently undermine the site's operational legitimacy. Overall, Schuelerrabatte.com presents a secure, privacy-conscious, and user-friendly platform with a strong market presence in the student discount niche. Continued attention to security header implementation and transparency in domain registration would further enhance trust and compliance.

H

High Five GmbH

studiumfinden.com

64

Studiumfinden.com is an educational platform operated by High Five GmbH, founded in 2022, targeting students and prospective university applicants primarily in German-speaking countries. The website offers comprehensive study program search, university information, student reviews, and guidance content to assist users in finding their ideal study path. The platform positions itself as a niche service within the education sector, leveraging modern web technologies and analytics tools to deliver a user-friendly experience.

The website 'Gib Antikommunismus keine Chance' is a German-language political initiative advocating for a factual discussion about socialism and communism, opposing modern anti-communism. It operates as a non-profit campaign platform providing informational content, public calls to action, and a signature collection mechanism. The site targets politically engaged individuals interested in leftist political discourse. Technically, the site is built on WordPress 5.5.17 with standard plugins and libraries such as jQuery and Font Awesome, hosted on German nameservers consistent with the domain's origin. The website is mobile-optimized with moderate performance and basic SEO and accessibility features. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and explicit privacy compliance mechanisms. No advertising or tracking technologies are present, indicating a privacy-conscious approach. WHOIS data is transparent and consistent with the website's claims, enhancing legitimacy. Overall, the site is functional and trustworthy but would benefit from improved privacy compliance and security hardening.

I

Internationalistische Liste / MLPD

inter-liste.de

47

The Internationalistische Liste / MLPD website serves as the official online presence for a German political alliance and party focused on socialist and environmentalist policies. It provides information about their candidacy in the 2025 Bundestagswahl, their political platform, key figures, and campaign materials. The site targets politically engaged voters and supporters of leftist movements in Germany. Technically, the website is built on WordPress, uses modern web technologies, and is hosted by a reputable German hosting provider. The site is mobile-optimized and presents content in a clear, professional manner. Security-wise, the site uses HTTPS but lacks advanced security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professional but could improve in privacy and security transparency.

W

white label eCommerce

the-white-label.com

61

white label eCommerce is a small German-based company specializing in providing white label ticketing and e-commerce software solutions. Their platform targets businesses and organizations seeking independent and modern ticketing and e-commerce capabilities under their own brand. The website is built on WordPress using modern technologies such as Bootstrap, Font Awesome, and Visual Composer, indicating a moderate level of digital maturity. SEO and marketing tools like Yoast SEO and Google Tag Manager are implemented to enhance visibility and user engagement. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks advanced DNS security and security headers. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy or terms of service pages found. Overall, the website is professional and trustworthy but could improve transparency and security practices.

The Havanna-Initiative website serves as a non-profit advocacy platform focused on ending the blockade against Cuba. It provides news, calls to action, press information, and contact options primarily through a contact form. The organization appears to be small and Germany-based, founded in 2020, with a clear mission targeting activists and supporters of Cuba. The website uses WordPress CMS with common web technologies such as jQuery and Font Awesome, hosted by Cronon GmbH. The technical infrastructure is moderate in performance and basic in mobile optimization and accessibility. Security posture is adequate with HTTPS enabled but lacks DNSSEC and security headers, and no explicit security or incident response policies are published. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or terms of service. Overall, the website is functional but basic in design and content quality, with moderate trustworthiness and no detected adult or explicit content.

F

Freundschaftsgesellschaft BRD-Kuba e.V.

fgbrdkuba.de

64

Freundschaftsgesellschaft BRD-Kuba e.V. is a well-established non-profit solidarity organization founded in 1974, focusing on fostering relations and support for Cuba within Germany. The website serves as an informational platform targeting individuals and groups interested in solidarity activities. Technically, the site is built on WordPress using the Divi theme and enhanced with the Rank Math SEO plugin, hosted likely by 1&1 IONOS. The site is accessible, mobile-optimized, and uses HTTPS with good SSL configuration, though it lacks some security headers and formal privacy and cookie policies. Security posture is moderate with room for improvement in transparency and incident response readiness. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

P

Passion 4 Gästezimmer GmbH

pension.de

67

Pension.de, operated by Passion 4 Gästezimmer GmbH and part of the FUNKE Mediengruppe, is a well-established online platform specializing in affordable vacation accommodations across Germany, Austria, and Switzerland. Founded in 1999, it offers a comprehensive inventory of over 14,000 pension and hotel listings, targeting families and general vacationers seeking budget-friendly lodging options. The website features a professional design, intuitive navigation, and modern UI components, reflecting a mature digital presence. Technically, the site leverages modern JavaScript modules, Shoelace UI components, and AWS hosting, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforced and secure form handling, though some security headers could be improved. Privacy and cookie policies are present and GDPR compliant, supporting user trust. Overall, Pension.de demonstrates a high level of business credibility and technical sophistication, positioning it as a reliable player in the hospitality booking sector.

F

futurezone.de

futurezone.de

64

Futurezone.de is a well-established German technology news portal providing daily updates on technology, digital life, gadgets, startups, science, and gaming. The site targets technology enthusiasts and consumers interested in current tech trends and product information. It operates under a professional media model with sponsored content, product deals, and newsletters, likely under the umbrella of the Funke Mediengruppe. The website demonstrates a mature digital infrastructure using WordPress CMS, Yoast SEO, Google Tag Manager, and advanced ad management tools, ensuring excellent performance, SEO, and mobile optimization. Security posture is strong with HTTPS, consent management, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust with clear privacy and cookie policies and GDPR adherence. WHOIS data aligns with the website's legitimacy and business claims. Overall, Futurezone.de presents a trustworthy, professional, and user-friendly platform in the technology media sector.

M

moin.de

moin.de

63

moin.de is a regional news media website delivering current news and information focused on Hamburg and Northern Germany. It offers a variety of news categories including local news, sports, entertainment, and weather updates. The site targets residents and visitors interested in regional news and lifestyle content. The business operates as an online news publisher with a medium-sized presence in the German media sector. Technically, the website is built on WordPress with modern SEO and advertising technologies integrated, including Yoast SEO Premium, Google Tag Manager, and Spark ad platform. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security-wise, the site uses HTTPS and standard security best practices but could improve by implementing additional security headers and formal security policies. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. No critical vulnerabilities or suspicious indicators were found. Overall, moin.de presents a professional, trustworthy, and content-rich news platform with moderate tracking and advertising typical for media websites.

M

Günstige Unterkünfte für Monteure und Reisende | Monteurzimmer.de

monteurzimmer.de

9

Monteurzimmer.de is a German-based online platform offering affordable accommodations primarily targeted at workers and travelers. The website provides a large inventory of over 20,000 listings with direct contact options and free mediation services. The platform positions itself as a significant player in the hospitality sector for budget-conscious travelers and professionals. Technically, the site leverages modern web technologies including JavaScript, Google Maps API, and Google Tag Manager, hosted on Amazon AWS infrastructure. The site is mobile optimized and offers multi-language support, enhancing accessibility for a diverse user base. Security posture is adequate with HTTPS enabled and basic security practices, though there is room for improvement in security headers and incident response transparency. Privacy compliance is weak due to the absence of visible privacy and cookie policies. Overall, the website is functional and professional but would benefit from enhanced privacy disclosures and contact transparency to improve trust and compliance.

H

High Five GmbH

iamstudent.de

59

iamstudent.de is a German online platform operated by High Five GmbH that provides students with access to exclusive discounts, coupons, and sweepstakes tailored to their needs. The platform is well-positioned in the student discount market in Germany and extends its services to Austria and Switzerland through related domains. The website offers a user-friendly experience with a focus on student engagement and brand partnerships. Technically, the site leverages modern web technologies including AngularJS, consent management platforms, and analytics tools, hosted on Amazon AWS infrastructure. Security posture is solid with HTTPS enforcement and GDPR compliance, though explicit security policies and incident response contacts are not prominently displayed. Overall, the site demonstrates a professional and trustworthy presence with good privacy practices and a clear business focus on education and retail sectors.