Germany security reports

N

Netzbegruenung - Verein fuer gruene Netzkultur e.V.

gruene.social

66

gruene.social is a Mastodon social networking instance operated by Netzbegruenung - Verein fuer gruene Netzkultur e.V., a German non-profit organization aligned with the Green Party. The platform serves a niche audience interested in green politics and federated social media, providing a community-focused environment without commercial advertising or intrusive tracking. The website uses Mastodon version 4.4.2 with a modern React-based frontend, indicating a contemporary technical infrastructure with good mobile optimization and moderate performance. Security posture is adequate with HTTPS usage and no exposed sensitive data, but lacks advanced security headers and explicit incident response policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or terms of service published. Overall, the site is trustworthy and professionally maintained, suitable for its target audience and business model.

H

der markus dahemm.

hammelblog.de

50

The website www.hammelblog.de is a personal and local blog focused on the community of Hammelburg, Germany. It provides content related to local events, civic participation, sustainable mobility, and community issues. The site targets residents and community members interested in local news and engagement. It operates as a small-scale blog without commercial intent or transactional services. Technically, the site is built using the Hugo static site generator and incorporates JavaScript libraries such as jQuery (version 1.12.4), Bigfoot.js, GLightbox, and Tinylytics for analytics. The site demonstrates moderate performance and good mobile optimization but lacks advanced accessibility features and comprehensive SEO optimization. Security-wise, the site uses HTTPS but lacks security headers and employs an outdated jQuery version with known vulnerabilities. There are no visible forms or sensitive data exposure. Privacy and cookie policies are absent, and no contact or business information is provided, limiting compliance and trust signals. Overall, the site is safe for general audiences and does not contain adult or questionable content.

C

Covetrus DE GmbH

covetrus.de

60

Covetrus DE GmbH is a medium-sized business operating in the veterinary product distribution sector in Germany. The company has ceased direct sales operations as of April 2023 but maintains product availability through partner marketplaces. The website serves primarily as an informational portal with minimal content and no direct sales or contact forms. Technically, the site is built on WordPress using the Enfold theme, with SEO optimization via Yoast and user tracking through Matomo analytics. Cookie consent is managed by CookieFirst, indicating a reasonable level of privacy compliance. Security posture is moderate with no visible advanced security headers or incident response information. The domain WHOIS data is minimal but consistent with the business branding and parent company Covetrus Inc. Overall, the website is functional but basic, with room for improvement in contact transparency and security practices.

N

Ninlay Casino

ninlay-casino.de

52

Ninlay Casino is a newly established (2024) German-focused online gambling platform offering a wide range of casino games including slots, live dealer games, and sports betting options. The website is professionally designed with excellent content quality and clear navigation, targeting adult German-speaking users interested in online gambling. Technically, the site uses modern technologies such as Matomo analytics and Cloudflare DNS, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS usage and no visible vulnerabilities, though the absence of explicit security headers and cookie consent mechanisms indicates room for improvement in compliance and security best practices. Overall, the domain registration aligns with the business launch date, supporting legitimacy, but lack of detailed WHOIS registrant data and direct contact information slightly reduce trust. Strategic recommendations include enhancing privacy compliance, adding security headers, and providing clear contact and incident response information to strengthen user trust and regulatory adherence.

S

Spreadshirt

spreadshirt.net

65

Spreadshirt is a well-established international e-commerce platform specializing in customizable clothing and accessories. It offers users the ability to create personalized products and sell designs through its marketplace, positioning itself as a leader in the print-on-demand and custom apparel industry. The website demonstrates a mature digital presence with multiple regional domains supporting localized experiences. Technically, the site employs modern JavaScript frameworks, responsive design, and robust cookie consent mechanisms, reflecting a good level of digital maturity. Security-wise, the site enforces HTTPS, implements security headers, and manages user consent effectively, though explicit security policies and incident response information are not publicly available. Overall, the site presents a low-risk profile with strong business credibility but would benefit from enhanced transparency in security and privacy governance.

T

Trustlocal

trustlocal.de

68

Trustlocal is a German online platform that connects customers with local service providers by offering a comprehensive comparison of companies based on reviews and prices. It operates under the parent company Trustoo and positions itself as a market leader in transparent local service provider listings in Germany. The platform covers a wide range of services including legal, financial, home improvement, and creative professions. Technically, the website is built on a modern stack using Next.js and Sanity CMS, hosted on AWS infrastructure, and integrates various marketing and analytics tools such as Google Tag Manager and Cookiebot for cookie consent management. Security-wise, the site enforces HTTPS, employs standard security headers, and shows no signs of vulnerabilities or exposed sensitive data. However, explicit privacy policies and terms of service documents are not clearly found in the provided content, which is a compliance gap. Overall, the site offers a professional user experience with strong trust indicators like Trustpilot reviews and social media presence.

B

Betonstunter

betonoptik.de

64

Betonstunter operates a specialized e-commerce platform focused on selling Beton Cire, Mikrozement, and related decorative concrete coatings primarily targeting the German and Dutch markets. The company positions itself as a leading webshop in this niche, offering a wide range of colors and products with competitive pricing. The website is built on Shopify, leveraging modern e-commerce technologies and third-party marketing and analytics tools to optimize user engagement and sales. The technical infrastructure is solid, with good mobile optimization and performance, although some improvements in accessibility and security headers could enhance the overall experience. Security posture is generally strong with HTTPS and consent management implemented, but lacks formal security policies and incident response information. Privacy compliance is partial, with cookie consent mechanisms in place but no visible privacy or terms of service pages. Overall, the site is professional, trustworthy, and well-positioned in its market niche.

M

MoreSleep GmbH & Co. KG

moresleep.net

58

MoreSleep GmbH & Co. KG operates as a creative agency specializing in innovative branding and design services across art, architecture, hospitality, and real estate sectors. The company emphasizes sustainable design and cutting-edge technology integration to redefine industry standards and inspire cultural expression globally. Their website showcases a professional portfolio and multimedia content targeting businesses seeking transformative branding solutions. Technically, the site is built on WordPress with modern SEO and analytics tools, demonstrating moderate to good performance and mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit cookie consent mechanisms. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and contact information appear credible. Strategic recommendations include improving security headers, implementing cookie consent, and clarifying domain registration status to enhance trust and compliance.

A

Application Systems Heidelberg

ashshop.biz

49

Application Systems Heidelberg operates an e-commerce platform specializing in software applications and games for multiple operating systems including Mac, Windows, Linux, and Atari. The company targets consumers and professionals seeking digital software downloads, positioning itself as a niche retailer with a focus on quality software offerings. The website is professionally designed with clear navigation and multilingual support, primarily in German. The business model centers on digital sales and customer support, with a small company size and a founding year around 2014. Technically, the website is built on the Shopware CMS platform, utilizing modern web technologies such as HTML5, CSS3, and JavaScript. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate, with room for improvement in loading speed and security header implementation. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, but lacks several recommended security headers like Content-Security-Policy and Strict-Transport-Security. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with comprehensive privacy and cookie policies aligned with GDPR requirements. Contact information is clear, though no direct company emails are listed, only a contact form and a phone number. Overall, the website presents a low-risk profile with a good security posture for a small e-commerce business. Recommendations include enhancing security headers, improving accessibility, and maintaining regular security audits to ensure ongoing protection and compliance.

A

A-Z Grillservice

azgrillservice.de

59

A-Z Grillservice is a German-based catering company specializing in BBQ event services, offering full catering solutions including delivery and dishwashing for groups ranging from 4 to 5000 people. Established in 2022, the company positions itself as Germany's leading grill service. The website is built on the Magento e-commerce platform and integrates modern marketing and analytics tools such as Google Tag Manager, Google Analytics 4, and eTrusted review widgets. The site is well-designed, mobile-optimized, and provides a good user experience with clear navigation and detailed product offerings. However, it lacks explicit privacy and terms of service pages, which are important for compliance and user trust.

G

German UPA

germanupa.shop

10

German UPA operates an e-commerce platform specializing in UX-related merchandise such as clothing, mugs, stickers, and games, targeting UX professionals and enthusiasts primarily in Germany. The website is built on the Shopify platform, leveraging modern e-commerce technologies and integrations such as Printful for product customization and fulfillment. The site demonstrates good digital maturity with responsive design, SEO optimization, and structured data implementation. Security posture is solid with HTTPS enforcement and domain transfer locks, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Privacy compliance is addressed with GDPR-aligned privacy and cookie policies and consent mechanisms. Overall, the business presents a professional and trustworthy online presence with moderate tracking and analytics usage.

A

Application Systems Heidelberg

application-systems.eu

46

Application Systems Heidelberg is a French-language software and video game distributor primarily focused on the Macintosh platform, serving the francophone market. The company offers over 300 products and positions itself as a major partner in European software distribution alongside its UK counterpart. The website provides product catalogs, news updates, and support information in French, targeting gamers and software users seeking Mac-compatible applications. Technically, the site is built with basic HTML, CSS, and JavaScript without modern frameworks or CMS, and shows moderate performance and basic mobile optimization. Security posture is limited with no visible HTTPS enforcement or security headers, and privacy compliance is minimal with no cookie consent mechanism. Contact information is available via a contact form but lacks direct emails or phone numbers on the main page. Overall, the site is functional and moderately professional but would benefit from enhanced security and privacy features.

A

Application Systems Heidelberg Software GmbH

application-systems.de

46

Application Systems Heidelberg Software GmbH is a small, established German company specializing in the distribution, publishing, and development of computer games and application software across multiple platforms including Mac, Windows, Linux, iOS, and Android. Founded in 1985, the company offers localized German versions of software products and provides technical support to its customers. Their business model centers on software distribution and online retail, supported by a niche market presence and a long operational history. The website reflects this with detailed product listings and a clear navigation structure.

G

German UPA

germanupa.de

50

German UPA is a professional association dedicated to User Experience and Usability professionals in Germany. It offers a broad range of services including events, conferences, working groups, regional chapters, and educational resources to support UX professionals. The organization maintains a strong market position as a leading UX association in Germany, with active community engagement and sponsorship from reputable companies. The website reflects a mature digital presence with comprehensive content and clear navigation tailored to its professional audience. Technically, the site is built on Drupal 10, hosted on Strato servers, and integrates modern analytics tools with privacy-conscious configurations. Security posture is solid with HTTPS, security headers, and secure forms, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is professional, trustworthy, and compliant with GDPR, making it a reliable resource for its target audience.

P

PPC Land

ppc.land

63

PPC Land is a specialized digital marketing news platform established in 2014 and based in Germany. It provides timely updates and in-depth analysis on advertising technology, programmatic trends, and policy changes from major industry players such as Google, Meta, Amazon, and The Trade Desk. The website targets digital marketing professionals and advertisers seeking authoritative insights. Technically, PPC Land leverages the Ghost CMS platform, integrates modern search and analytics tools, and is hosted via Cloudflare, ensuring fast and secure delivery. The site demonstrates excellent design quality, mobile optimization, and SEO practices. Security posture is strong with HTTPS enforcement, security headers, and consent management, though DNSSEC is not enabled. Privacy compliance is robust with clear policies and user consent mechanisms. Overall, PPC Land presents a trustworthy, professional, and content-rich platform with a high AI-assessed quality score.

A

aketo GmbH

ifun.de

57

ifun.de is a well-established German online media portal focused on Apple-related news and lifestyle products, operating since 2001. Owned by aketo GmbH, it serves a dedicated audience of Apple enthusiasts with daily news, editor's picks, and a mobile app offering push notifications. The website leverages WordPress CMS with modern plugins for SEO, caching, and cookie consent management, hosted by SysEleven and using Cloudflare DNS services. The content is professionally curated, with a consistent brand presence and active social media engagement on Facebook, Twitter, and Mastodon. Security measures include HTTPS enforced via client-side redirect, Google reCAPTCHA for forms, and cookie consent mechanisms compliant with GDPR. However, some security headers could be improved, and no explicit security or incident response policies are published. Overall, the site demonstrates a good balance of content quality, technical implementation, and privacy compliance, making it a trustworthy source for Apple news in the German market.

M

MOHAB Studio

mohab.de

60

MOHAB Studio is a small German company specializing in the design and creation of minimal, versatile, and sustainable modular spaces for living and working. Their market position is niche, focusing on sustainable architecture using local and recyclable materials. The website is built on WordPress with standard SEO and analytics tools, showing moderate technical maturity and good mobile optimization. Security posture is adequate with HTTPS and cookie consent, but lacks explicit security policies and incident response contacts. Overall, the site is professional and trustworthy with clear contact information and privacy compliance. Recommendations include enhancing security headers and publishing a security policy to improve trust and compliance.

A

Amruth Pillai

amruthpillai.com

62

Amruth Pillai's website is a well-crafted personal portfolio that highlights his multifaceted skills as a designer, developer, photographer, and writer. The site serves as a comprehensive showcase of his professional journey, projects, certifications, and creative works, targeting potential employers and collaborators primarily in the technology sector. The website leverages modern web technologies such as Next.js, React, and Tailwind CSS, hosted on Vercel, ensuring fast performance and mobile responsiveness. The content is rich, professionally presented, and well-organized, reflecting a high level of digital maturity. Security posture is strong with HTTPS and appropriate security headers, though privacy compliance could be improved by adding explicit policies and consent mechanisms. Overall, the site projects a trustworthy and professional image with transparent domain registration and consistent business information.

A

aketo GmbH

iphone-ticker.de

57

iphone-ticker.de is a well-established German online media publication specializing in iPhone and Apple-related news since 2007. Operated by aketo GmbH, it serves a German-speaking audience of Apple enthusiasts and consumers with news articles, product reviews, and app recommendations. The website maintains a strong market position as a leading source for iPhone news in Germany, supported by a professional design, consistent branding, and active social media engagement. Technically, the site runs on WordPress with modern plugins such as Yoast SEO and Borlabs Cookie for privacy compliance. It uses Cloudflare DNS and enforces HTTPS via client-side redirect, although server-side security headers could be improved. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust, featuring a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. Contact is primarily via a web form, with no direct emails or phone numbers publicly listed. Overall, the site demonstrates good digital maturity, professional content quality, and trustworthy business practices.

J

Error

jonasfriedrich.co

50

The domain jonasfriedrich.co is registered since 2019 with privacy protection and hosted on Wix platform. Currently, the website content is an error page indicating the domain is not connected to an active Wix website. The site uses outdated AngularJS 1.2.28 and jQuery 2.0.3 libraries and lacks any business or contact information. No privacy, cookie, or terms of service policies are present, and no security headers or DNSSEC are enabled, reflecting a basic security posture. The domain registration is legitimate but the lack of active content and policies reduces trustworthiness and business credibility. Overall, the website is non-functional and provides no business or security assurances.

T

TiQuest Management

tiquest-management.de

46

TiQuest Management is a small, Germany-based artist and influencer management agency specializing in representing social media stars with millions of followers. The company focuses on building sustainable careers for talented artists through personalized management and influencer marketing services. The website is professionally designed, mobile-optimized, and compliant with GDPR and cookie regulations, reflecting a mature digital presence. Technically, the site runs on WordPress with modern plugins and themes, hosted on kasserver.com, and employs HTTPS for secure communications. Security posture is good but could be improved by adding security headers and explicit incident response policies. Overall, the domain registration and hosting details align well with the business claims, supporting legitimacy and trustworthiness.

S

Silicon Allee

siliconallee.com

61

Silicon Allee is a Berlin-based innovation network focused on supporting deep tech and AI startups through acceleration programs, community events, and investor engagement. Established in 2011, it collaborates closely with Fraunhofer Heinrich Hertz Institute to foster the growth of technology startups in Germany. The website reflects a professional and consistent brand presence with active community outreach via Slack, newsletters, and events. Technically, the site is built on WordPress with modern plugins and integrates Google Analytics for user insights. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response information are absent. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces domain trustworthiness but does not detract significantly from the overall legitimacy. The site is safe for general audiences and does not contain any adult or questionable content.

M

MOHAB Group

mohab.group

58

MOHAB Group is a Germany-based organization focused on creating minimal, versatile, and sustainable living and working spaces through its two divisions: MOHAB Studio and MOHAB Foundation. The company emphasizes sustainability-driven research and design, targeting residents, students, and businesses interested in eco-friendly environments. Their partnerships with architectural and timber construction firms enhance their market position in sustainable real estate solutions. Technically, the website is built on WordPress with Yoast SEO and uses Google Analytics with IP anonymization, reflecting a moderate level of digital maturity. The site is mobile-optimized and provides clear navigation and professional content. Security-wise, the site enforces HTTPS and cookie consent but lacks advanced security headers and explicit incident response policies. Overall, the website presents a trustworthy and professional image with room for security enhancements and more transparent compliance disclosures.

F

FORMEL SKIN Derma GmbH

formelskin.de

57

FORMEL SKIN Derma GmbH operates a professional dermatological skincare platform focused on personalized medical skin treatments developed by dermatologists and delivered directly to customers in Germany. The company positions itself as a leading provider with over one million successful treatments and offers ongoing medical support via chat. The website is well-designed, mobile-optimized, and uses modern technologies such as Next.js, React, and Storyblok CMS, hosted on AWS infrastructure. Security posture is strong with HTTPS enforced and consent management implemented, though explicit security policies and terms of service are not published. The business demonstrates high credibility through verified testimonials and medical professional involvement. Overall, the site is trustworthy, compliant with GDPR in terms of cookie consent, but could improve transparency by publishing privacy and security policies.

M

Minimal Gallery

minimal.gallery

37

Minimal Gallery is a curated web design inspiration platform operated by Piet Terheyden since 2013, targeting designers, developers, agencies, and entrepreneurs globally. The site offers a gallery of hand-picked websites, templates, tools, and a newsletter subscription, positioning itself as a leading resource in the web design community. The business model includes sponsorship opportunities and affiliate marketing through template sales. Technically, the site runs on WordPress with advanced custom fields and integrates modern tools like Plausible Analytics and Mailerlite for marketing and analytics. The infrastructure is stable, hosted under a reputable registrar with secure HTTPS configuration. Security posture is solid with no visible vulnerabilities, though lacking some security headers and formal policies. Privacy compliance is limited due to absence of explicit privacy and cookie policies. Overall, the website is professional, trustworthy, and well-maintained, with room for improvement in formal compliance documentation and security best practices.

D

DomRobot UG (haftungsbeschraenkt)

muhh.lol

44

The website muhh.lol is a personal blog and notes repository maintained by Markus Heurung, a family man based in Hammelburg, Germany. It serves as a personal happy place on the internet with content focused on personal journaling, notes, and links to related social and personal projects. The site is small-scale and niche, targeting a general audience interested in personal blogs and technology notes. The domain is relatively new, registered in 2022, and hosted likely on a personal or small-scale server infrastructure.

Piet Terheyden is a Berlin-based designer and founder operating a small but impactful product studio and several digital platforms including Literal and Minimal Gallery. The business focuses on simplifying complex design problems and launching innovative ventures, targeting designers, startups, and book enthusiasts. The website demonstrates a mature technical infrastructure built on modern frameworks like Next.js and Firebase, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS and security headers properly implemented, though privacy compliance could be improved by adding explicit policies. Overall, the site is professional, trustworthy, and content-rich, supporting the business's credibility and market position.

G

Garuda Linux

garudalinux.org

45

Garuda Linux is a technology company focused on providing an opinionated Arch Linux-based distribution that emphasizes ease of use and powerful features. The website presents a professional and modern design, targeting Linux users who want a user-friendly yet powerful operating system. The company operates primarily in Germany and has been active since 2020, with a small but dedicated community and ecosystem including forums and donation support. Technically, the website uses modern Angular framework and PrimeNG components, hosted via Cloudflare, ensuring good performance and mobile optimization. Security posture is adequate with HTTPS and domain transfer protection, but lacks advanced security headers and published security policies. Privacy compliance is minimal as no privacy or cookie policies are found. Overall, the website is trustworthy and professional but could improve in privacy and security transparency.

L

lipu tenpo

liputenpo.org

56

lipu tenpo is a registered association based in Germany that provides a cultural and educational platform primarily in the Toki Pona language. The website hosts a collection of articles and multimedia content licensed under CC BY-SA 4.0, targeting a general audience interested in this niche language and culture. The organization engages its community through Discord, Patreon, and Linktree, indicating active outreach and support mechanisms. The domain was registered in 2021, consistent with the association's founding timeline. Technically, the website is built with standard HTML5 and CSS3, utilizing Google Fonts and GoatCounter for lightweight, privacy-conscious analytics. The hosting is managed via Name.com, with no CMS or major frameworks detected, suggesting a custom or static site approach. The site is mobile-optimized with good navigation and SEO practices, though accessibility features are basic. Performance is moderate, with no blocking or WAF detected. From a security perspective, the site uses HTTPS and has domain transfer protections enabled, but lacks DNSSEC and security headers such as Content-Security-Policy or X-Frame-Options. There is no visible privacy or cookie policy, nor incident response or vulnerability disclosure information, which are areas for improvement. No sensitive data exposure or vulnerabilities were detected in the content. Overall, the security posture is moderate but could be enhanced with standard best practices. The overall risk assessment is low to moderate, with no critical issues found. Strategic recommendations include implementing DNSSEC, adding security headers, publishing privacy and cookie policies, and providing incident response contacts to improve compliance and trust. The site is trustworthy for its intended educational and cultural purpose but would benefit from enhanced security and privacy transparency.

J

Jan's Website

jan-osing.de

57

Jan's website is a personal portfolio and social presence site for a young developer from Germany. It focuses on personal interests such as gaming, anime, open source software, and Linux distributions. The site is simple, well-structured, and provides links to various social and community platforms. The technical infrastructure is basic, relying on static HTML and CSS with Cloudflare DNS services. There is no evidence of advanced frameworks or CMS usage. Security posture is minimal with no visible security headers or policies, but no critical vulnerabilities or malicious content were detected. Privacy compliance is lacking as no privacy or cookie policies are present. Overall, the site is low risk but would benefit from improved security and compliance documentation.

Exact Audio Copy is a specialized software provider focused on accurate audio CD extraction using standard CD/DVD-ROM drives. The website targets audio enthusiasts and users requiring precise audio ripping solutions. It operates on a freeware business model for non-commercial use and maintains a niche market position. The site is built on WordPress 4.3.1 with integrated Google AdSense advertising and basic GDPR-compliant privacy and cookie policies. Technical infrastructure is moderate with room for modernization and security improvements. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit incident response policies. Overall, the website is safe, professional, and trustworthy with no adult or questionable content detected.

F

Fuck off Google! - Let's kick Google and co. out of our Lives and Spaces!

fuckoffgoogle.de

44

The website fuckoffgoogle.de is an activist platform dedicated to opposing Google and similar corporations' influence on data privacy, taxation, and urban development. It serves as a decentralized network promoting resistance, knowledge sharing through a wiki, community organizing via meetups, newsletters, and chat. The site targets privacy advocates, local communities, and activists concerned about corporate overreach. Technically, the site is built using the Hugo static site generator with Bootstrap and FontAwesome for styling and icons. The site is moderately optimized for mobile and performance but lacks advanced SEO and accessibility features. Security posture is weak, with no detected HTTPS enforcement or security headers, and no privacy or cookie policies, indicating compliance gaps. No analytics or tracking scripts are present, reflecting a privacy-conscious approach. WHOIS data is minimal, showing only nameservers unrelated to the site content, which reduces trustworthiness. Overall, the site is functional and content-rich but requires improvements in security, privacy compliance, and business transparency.

P

Proxmox Server Solutions GmbH

proxmox.com

69

Proxmox Server Solutions GmbH is a well-established German technology company founded in 2004, specializing in open-source server solutions including virtualization, backup, and email security platforms. Their market position is strong within the enterprise and IT professional segments, offering both free open-source software and paid enterprise support, training, and consulting services. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to their target audience. Technically, the website is built on Joomla CMS with modern frameworks like Bootstrap 5 and uses Matomo for privacy-conscious analytics. The site is mobile-optimized, accessible, and SEO-friendly, indicating a high level of digital maturity. Security practices include HTTPS enforcement and a robust cookie consent mechanism, though some advanced security headers and explicit security policies are not present. The security posture is solid with no visible vulnerabilities or exposed sensitive data. The domain WHOIS data aligns well with the business claims, showing a long-standing registration and no privacy protection, which supports legitimacy. However, the absence of a published security policy or incident response contact is a minor gap. Overall, Proxmox demonstrates a trustworthy, professional, and secure online presence suitable for enterprise customers. Strategic improvements in security transparency and DNSSEC implementation could further enhance their posture.

The website veronoi.cc is a personal site representing an individual named Vero, a 17-year-old from Mecklenburg-Vorpommern, Germany. The site serves as a personal branding and social hub, showcasing interests such as programming, gaming, and mountain biking, and listing connections to other personal developer sites. There is no commercial business model or transactional services offered. The site is built using modern web technologies including Astro framework and Partytown for script management, hosted behind Cloudflare with HTTPS and Cloudflare Insights analytics. Security posture is adequate with HTTPS and CDN protection, but lacks explicit security headers and formal privacy or cookie policies. No forms or data collection mechanisms are present, reducing privacy risks but also limiting user engagement features. Overall, the site is safe, well-designed for its purpose, and trustworthy as a personal site, though it would benefit from adding privacy and security best practices to improve compliance and trust.

T

TBZ-PARIV GmbH

tbz-pariv.de

59

TBZ-PARIV GmbH is a specialized software and system house based in Germany, providing turnkey full-service solutions in document archiving, printing, scanning, and workflow management primarily for the energy sector. With over 30 years of experience and a client base including more than 70 companies from the utilities industry, TBZ-PARIV offers a suite of products such as CAPS, MODARCH, MODWORK, and MODPORTAL. Their business model focuses on B2B services, leveraging modern technologies including artificial intelligence and open source libraries to deliver cost-effective and stable solutions. The company maintains strong partnerships within the Thüga group and other regional energy providers.

G

Giebel.IT

giebel.it

60

Giebel.IT is a small, Germany-based IT service provider specializing in IT consulting, system administration, and cloud hosting services. The company offers managed Nextcloud solutions branded as Next365, targeting schools, municipalities, associations, companies, and families primarily in the Cologne and Bonn region. Their business model focuses on providing reliable, open-source, and privacy-respecting IT services with a strong emphasis on long-term project performance and customer support. Technically, the website is built on WordPress with a modern tech stack including jQuery and Matomo analytics configured to disable cookies, reflecting a moderate level of digital maturity and privacy awareness. The site is mobile-optimized with good SEO practices and clear navigation, although some accessibility features are basic. Performance is moderate, and the hosting provider is not explicitly identified. From a security perspective, the site uses HTTPS with excellent SSL configuration but lacks important security headers such as Content-Security-Policy and X-Frame-Options. There is no visible cookie consent mechanism or published security and incident response policies, which are areas for improvement. The use of Matomo analytics with cookies disabled is a positive privacy practice. No vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional and trustworthy image with a solid business foundation and consistent branding. The main risks relate to missing security headers and incomplete privacy compliance mechanisms. Strategic improvements in these areas would enhance the security posture and regulatory compliance, strengthening customer trust and business resilience.

Schlossplatz 1 is a premium event venue located in the heart of Berlin, serving as the campus for ESMT Berlin. The website presents a professional and comprehensive overview of the venue's offerings, including multiple event spaces equipped with modern hybrid technology and extensive event services. The business targets event organizers and corporate clients seeking a prestigious location with historical significance and excellent accessibility. Technically, the site is built on Drupal 10, uses modern JavaScript libraries, and integrates Matomo analytics with GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and privacy-respecting analytics, though some security headers and DNSSEC could be improved. Overall, the site is trustworthy, well-branded, and compliant with European privacy regulations.

L

Labiotech UG

labiotech.eu

59

Labiotech UG operates Labiotech.eu, a leading European biotech news website delivering comprehensive coverage of the global biotech industry. The platform targets biotech professionals, researchers, investors, and enthusiasts, offering news, podcasts, reports, and various biotech trackers. The website is well-positioned as a trusted media source in the healthcare and technology sectors, supported by a strong parent company, Inpart. Technically, the site leverages WordPress CMS with modern JavaScript libraries and integrates Google Tag Manager and CookieYes for analytics and consent management. Security posture is robust with HTTPS, reCAPTCHA protection on forms, and script integrity checks, though explicit security policies and vulnerability disclosure mechanisms are absent. Overall, the site demonstrates a mature digital presence with good privacy compliance and transparent advertising practices.

E

ESMT European School of Management and Technology GmbH

esmt.berlin

74

ESMT Berlin is a leading international business school based in Germany, offering a range of degree programs including MBA, Master, and PhD, as well as executive education tailored for individuals and organizations. The institution is triple crown accredited, positioning it as a prestigious player in the education sector. The website reflects a mature digital presence built on Drupal 10, with integrated analytics and a robust cookie consent mechanism ensuring GDPR compliance. Security posture is strong with HTTPS enforced and domain registration consistent with the business claims. However, there is room for improvement in publishing explicit security policies and enabling DNSSEC. Overall, the site provides a professional, trustworthy, and user-friendly experience suitable for its target audience of students and executives.

D

Daniel Gultsch

gultsch.social

59

The website gultsch.social is an independent Mastodon instance operated by Daniel Gultsch, a recognized figure in the open source and XMPP communities. The platform emphasizes ethical design, decentralization, and user data ownership, catering to users interested in federated social networking. The business model is community-driven without advertising, focusing on technology enthusiasts and privacy-conscious users. The domain registration and website content are consistent, reflecting a small but credible operation. Technically, the site runs Mastodon 4.4.0 with modern web technologies including Ruby on Rails and React. The infrastructure appears well-maintained with HTTPS enforced and a moderate performance profile. Mobile optimization and accessibility are adequate, though some SEO and security header enhancements could improve the overall technical posture. Security-wise, the site benefits from HTTPS and domain transfer protections but lacks DNSSEC and explicit security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a basic privacy policy but no cookie consent mechanism. No incident response or vulnerability disclosure information is published. Overall, the site presents a low-risk profile with strong business credibility and technical maturity for its scale. Strategic improvements in security headers, privacy compliance, and incident response transparency would enhance trust and resilience.

A

adminForge.de

kanoa.de

66

kanoa.de operates as an independent German-language Mastodon instance providing a social networking platform within the fediverse. It is administered by adminForge.de and targets users interested in decentralized social media to meet new people and engage in community activities. The platform leverages Mastodon version 4.4.2, built on Ruby on Rails and React, indicating a modern and actively maintained technical infrastructure. Hosting is managed via INWX nameservers, consistent with the domain registration data. Security posture is solid with HTTPS enforced and no exposed sensitive data, though the absence of security headers and cookie consent mechanisms suggests room for improvement in compliance and defense-in-depth. The website content is accessible without WAF or blocking, and the user experience is generally positive with good design and navigation. However, explicit contact information and formal privacy compliance features are limited, which may affect trust and regulatory adherence. Overall, kano.de presents as a legitimate, community-focused social platform with moderate technical maturity and security readiness.

D

dominion

adminforge.de

68

adminForge is a small, Germany-based technology service operated by an individual named dominion since 2014. It provides a wide array of free, self-hosted open source services focused on privacy, data minimalism, and alternatives to mainstream platforms. The website is professionally designed with excellent content quality and clear navigation, targeting privacy-conscious users and open source enthusiasts. Technically, it runs on WordPress with modern optimizations and privacy-respecting Matomo analytics. Security posture is good with HTTPS and no visible vulnerabilities, but lacks published privacy and cookie policies, security headers, and incident response documentation. Overall, adminForge demonstrates a strong commitment to privacy and open source principles, with a trustworthy domain registration and consistent branding.

L

Lilly Schramm

eps-dev.de

49

EPS-DEV is a personal portfolio website of Lilly Schramm, a young German full-stack developer showcasing her projects including Booklify, TwitterDB, and a Tor relay service. The site targets developers and tech enthusiasts interested in open source and free internet initiatives. The business model is primarily personal branding and project demonstration with open source contributions. Technically, the site is built with Angular 16.2.0, uses modern CSS frameworks like Tailwind, and is hosted with Cloudflare DNS. The site is performant, mobile optimized, and uses minimal tracking via Umami analytics. Security posture is good with HTTPS enforced and no exposed sensitive data, but lacks security headers and formal policies. Overall, the site is trustworthy and professional but would benefit from adding privacy, cookie, and security policies to improve compliance and user trust.

L

Lonaasan

lona.moe

53

Lona.moe is a personal website belonging to Lonaasan, a 22-year-old software engineer from Germany. The site serves as a portfolio and community hub featuring programming projects, blog content, photography, and social links. It targets a general audience interested in cats, blahaj, and programming. The website is small scale, with a niche market position focused on personal branding and community engagement. Technically, the site uses standard web technologies including HTML5, CSS3, and JavaScript, with Cloudflare DNS hosting. The site is mobile optimized and accessible, with good SEO practices. However, DNSSEC is not enabled, and no advanced security headers are detected. The site uses a minimal tracking script (umami) for analytics, indicating a low level of user tracking. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks DNSSEC and security headers. There is a potential XSS vulnerability in the citation block due to unsanitized HTML content. No privacy or cookie policies are present, which impacts compliance. The domain registration is privacy protected but consistent with the personal nature of the site. Overall, the security posture is moderate but could be improved with standard best practices. The overall risk is low given the personal and non-commercial nature of the site, but improvements in security headers, privacy policies, and content sanitization are recommended to enhance trust and compliance.

This website represents a personal portfolio and contact hub for Patrick, known as Paddyk45, a young developer from Hamburg, Germany. The site serves primarily as a showcase of his interests, projects, and social presence, targeting fellow developers and tech enthusiasts. It includes links to various social platforms and partner sites, emphasizing community and open-source engagement. The business model is personal branding and networking rather than commercial enterprise. Technically, the site is built with modern HTML and CSS, using the new.css framework and custom fonts. It includes minimal JavaScript, notably a script from rybbit.io for analytics. The site is lightweight, fast, and mobile-optimized with good accessibility. Hosting is sponsored by Brutecat, indicating a reliable infrastructure. SEO is basic but sufficient for a personal site. From a security perspective, the site lacks formal security policies, cookie consent, and privacy statements, which are common for personal sites but represent compliance gaps. The presence of a PGP key is a positive trust indicator for secure communication. No forms collect sensitive data, reducing attack surface. However, security headers are missing, and HTTPS status is unknown, suggesting room for improvement. Overall, the site is low risk, safe for general audiences, and professionally presented for its scope. Strategic recommendations include adding privacy and cookie policies, implementing security headers, and publishing a vulnerability disclosure or security policy to enhance trust and compliance.

A

adminForge.de

nope.chat

67

nope.chat is a specialized service providing a free Matrix home server tailored for the Element Messenger ecosystem. It emphasizes privacy, decentralization, and interoperability by supporting Matrix 2.0 and offering bridge bots to integrate popular messaging platforms such as WhatsApp, Signal, Twitter, and more. The service is positioned as a niche player targeting privacy-conscious users and those seeking decentralized communication alternatives. Technically, the site uses modern frameworks like Bootstrap and Mobirise, with multi-platform support including web, mobile, and desktop clients. Security posture is moderate with some gaps such as missing DNSSEC and security headers, but the domain registration and abuse channels indicate responsible management. Overall, nope.chat presents a trustworthy and privacy-focused messaging platform with room for security enhancements.

D

DomRobot UG (haftungsbeschraenkt)

nibi.space

59

The website nibi.space operates as a German-language community wiki dedicated to non-binary and genderqueer topics. It serves as an educational and informational resource, providing definitions, community guides, and cultural content for non-binary individuals and allies. The site is non-commercial and maintained by a small organization, DomRobot UG, based in Germany. The content is well-structured and updated regularly, reflecting a committed community effort. Technically, the site is built on the Dokuwiki CMS platform using PHP and jQuery, hosted by INWX GmbH in Germany. The site uses HTTPS but lacks advanced security headers and DNSSEC, indicating room for improvement in security hardening. Performance and mobile optimization are basic but functional. No tracking or advertising technologies are detected, suggesting a privacy-conscious approach. From a security perspective, the site has a moderate posture with HTTPS enabled and domain transfer protections in place. However, the absence of privacy and cookie policies, security.txt, and incident response contacts highlight compliance and operational gaps. The WHOIS data is transparent and consistent with the website's German focus, supporting legitimacy. Overall, the website is a trustworthy, niche educational resource with moderate technical maturity and some compliance shortcomings. Strategic improvements in privacy compliance, security headers, and vulnerability disclosure would enhance its security posture and user trust.

The website gerzilla.de currently serves as a placeholder page indicating that a new website is under construction. There is no substantive business information, services, or content available to assess the company's market position or offerings. The technical infrastructure appears minimal, with no detected CMS, scripts, or analytics tools. Hosting is likely provided by netcup based on the nameservers. Security posture is weak due to the absence of HTTPS, security headers, and privacy policies. No contact or compliance information is present, limiting trust and credibility. Overall, the site is not yet operational and provides no meaningful data for business or security evaluation.

M

Marvin Witt

nurmarv.in

62

NurMarv.in is the personal website of Marvin Witt, a software engineer based in Germany specializing in web development and open source contributions. The site serves as a portfolio showcasing his projects, skills, and community involvement, particularly related to Discord datamining and software tools. The website is well designed, mobile optimized, and built using modern technologies such as Astro, React, and Fastify. It integrates privacy-conscious analytics and maintains a good security posture with HTTPS and security headers. However, it lacks formal privacy and cookie policies, which are important for GDPR compliance and user trust. Contact information is provided primarily via email and social media channels, with no phone or physical address listed.

A

Ableton

ableton.com

74

Ableton is a globally recognized company specializing in music production software and hardware, serving a diverse community of music makers, producers, and educators. Their flagship product, Live, along with hardware controllers like Push and Move, positions them as a leader in the music technology industry. The website reflects a mature digital presence with comprehensive content, professional design, and clear navigation tailored to their target audience. Technically, the site employs modern JavaScript libraries, analytics tools, and cookie consent mechanisms, ensuring a performant and privacy-conscious user experience. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response details are not publicly disclosed. Overall, the site demonstrates high professionalism and trustworthiness, supporting Ableton's market position.