Germany security reports

S

Staatliche Ämter für Landwirtschaft und Umwelt Mecklenburg-Vorpommern

stalu-mv.de

61

The website www.stalu-mv.de serves as the official portal for the Staatliche Ämter für Landwirtschaft und Umwelt (State Offices for Agriculture and Environment) in Mecklenburg-Vorpommern, Germany. It provides information on regulatory enforcement, agricultural support, environmental protection, and related public services. The site targets citizens, agricultural businesses, and governmental stakeholders within the region. The business model is that of a public governmental agency delivering regulatory and support services. The website is well-structured, professionally designed, and consistent with government branding, offering good content relevance and navigation clarity. Technically, the site uses standard web technologies including HTML5, CSS, and JavaScript, hosted on official regional servers (mvnet.de). It appears to be built on a custom or proprietary CMS platform. The site is mobile-optimized and accessible, with moderate performance. SEO practices are adequately implemented, though no advanced frameworks or analytics services are detected. From a security perspective, the site uses HTTPS and does not expose sensitive data. However, no explicit security headers or incident response policies are published, and no cookie consent mechanism is present, which are areas for improvement. The WHOIS data aligns well with the website's governmental purpose, indicating a legitimate and consistent domain registration. Overall, the website presents a low-risk profile with a solid business credibility and good content quality. Strategic recommendations include enhancing privacy compliance with cookie consent, publishing security policies, and implementing security headers to strengthen the security posture.

GSA Gesellschaft für Struktur- und Arbeitsmarktentwicklung is a government-affiliated organization based in Mecklenburg-Vorpommern, Germany, focused on labor market development, vocational training, and business consulting. The website provides news updates, service information, and resources primarily for regional businesses, job seekers, and policymakers. The organization offers services such as funding for training, business consulting, and support for startups and workforce transformation. The site is built on TYPO3 CMS with a moderate technical infrastructure and uses standard web technologies including Bootstrap and jQuery. It employs a cookie consent mechanism and disables analytics tracking by default, reflecting a privacy-conscious approach. Security posture is adequate but could be improved by adding security headers and updating legacy libraries. No critical vulnerabilities or suspicious content were detected. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, serving a medium-sized public sector entity.

W

WERK3 Werbeagentur GmbH & Co. KG

werk3.de

54

WERK3 Werbeagentur GmbH & Co. KG is a small, full-service advertising agency based in Rostock, Germany. The company specializes in marketing strategies, corporate design, campaign conception, and website development, positioning itself as a creative and award-winning agency within the regional media sector. The website reflects a professional and consistent brand image, targeting businesses and organizations seeking comprehensive marketing solutions. Technically, the website is built on TYPO3 CMS and leverages a modern technology stack including jQuery, Bootstrap, and various JavaScript libraries for enhanced user experience and interactivity. Analytics and marketing tools such as Matomo, Google Tag Manager, and Facebook Pixel are integrated, with a clear cookie consent mechanism ensuring GDPR compliance. The site demonstrates good mobile optimization and SEO practices, though accessibility could be improved. From a security perspective, the website enforces HTTPS and employs cookie consent but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The domain registration data is consistent with the website's claims, indicating a legitimate and trustworthy online presence. Overall, the website scores well in content quality, technical implementation, privacy compliance, and business credibility, with recommendations to enhance security headers, publish formal security policies, and improve accessibility to further strengthen its security posture and user trust.

Filmmuseum Potsdam is a cultural and educational institution dedicated to film history, exhibitions, and cinema programming. The website serves as a portal for visitors to explore exhibitions, digital content, and research projects related to film culture. The institution targets a general audience interested in film and cultural heritage, operating primarily as a non-profit entity within the media and education sectors in Germany. The website is built on idbase CMS 5.5 and uses a combination of jQuery, Bootstrap, and other JavaScript libraries to deliver a responsive and interactive user experience. Cookiebot is integrated for GDPR-compliant cookie consent management. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, but the use of outdated JavaScript libraries and lack of visible security headers suggest room for improvement. No explicit privacy policy or terms of service pages were found in the provided content, which is a compliance gap. Overall, the website is professional and trustworthy but would benefit from enhanced privacy disclosures and updated technical components.

The website www.filmbildung-brandenburg.de represents a small educational service provider, Stefan Röske, specializing in film and media education workshops and digital literacy. The business targets educators and learners interested in practical media applications such as podcasts, explainer videos, and digital tools. The website is built on WordPress and hosted likely on a German hosting provider, with a moderate performance and good mobile optimization. However, the site lacks critical privacy and cookie policies, and no direct contact emails or phone numbers are provided, only a contact form. Security posture is basic with HTTPS enabled but missing security headers and incident response information. WHOIS data is minimal and lacks registrant transparency, which slightly reduces trustworthiness. Overall, the site is professional and content-rich but would benefit from enhanced privacy compliance and security best practices.

V

VDI Wissensforum GmbH

vdiconference.com

70

VDI Wissensforum GmbH operates a professional website offering international conferences, congresses, and courses targeted at engineers and technical specialists. The company positions itself as a leading provider in continuing education within the engineering sector, primarily serving the German market. The website content is well-structured, professionally designed, and optimized for both desktop and mobile users, reflecting a mature digital presence. Technically, the site is built on TYPO3 CMS and integrates modern marketing and analytics tools such as Google Tag Manager, Cookiebot for consent management, and reCAPTCHA for form security. The security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers could be improved. The absence of publicly available WHOIS data for the domain raises concerns about domain registration legitimacy, which should be further investigated. Overall, the website demonstrates strong privacy compliance and business credibility, with clear contact information and social media engagement.

Voucherbooking.de is an e-commerce platform focused on selling vouchers or gift certificates, primarily targeting a general German-speaking audience. The website is built using Angular 11 and hosted on Hetzner servers, indicating a modern but basic technical infrastructure. The site content is minimal with placeholder legal links and lacks explicit contact or security policy information. Security posture is weak due to missing security headers and absence of cookie consent mechanisms, which also impacts GDPR compliance. No WAF or blocking mechanisms were detected, allowing full content access for analysis.

D

Datenwerkbank

datenwerkbank.de

54

Datenwerkbank is a small, specialized web service provider based in Stuttgart, Germany, founded in 2024 by Manuel Deutsch, a freelance web developer with over 10 years of experience. The company focuses on website maintenance, support, and optimization services primarily for WordPress and Kirby CMS platforms, targeting agencies and medium-sized businesses. Their offerings include regular updates, backups, SEO optimization, hosting with green energy, and personalized support, delivered through clear service packages with transparent pricing. The website reflects a professional and trustworthy brand with strong customer references and a clean, responsive design. Technically, the website employs modern web standards including responsive images, SVG graphics, and privacy-conscious analytics via Matomo with cookies disabled. Hosting is provided by netcup, a reputable German provider, and the site uses HTTPS with canonical URLs for SEO. While the site lacks explicit security headers and a cookie consent mechanism, it demonstrates good privacy practices and GDPR compliance through its privacy policy and minimal tracking. From a security perspective, the site shows good practices such as regular backups and CMS updates included in service packages, but could improve by implementing security headers and publishing a security policy or incident response contact. No vulnerabilities or suspicious WHOIS patterns were detected, and the domain registration aligns with the business founding date, supporting legitimacy. Overall, Datenwerkbank presents a secure, professional, and privacy-aware web presence suitable for its target market. Strategic improvements in security headers and cookie consent would enhance compliance and trust further.

D

Deutsches Rotes Kreuz

drk-guestrow.de

48

The website www.drk-guestrow.de represents the Kreisverband Güstrow e.V. branch of the Deutsches Rotes Kreuz (German Red Cross), a well-established non-profit humanitarian organization. The site provides comprehensive information about their social services, community engagement, courses, and donation opportunities, targeting the general public, volunteers, and donors. The content is professionally presented with consistent branding and clear navigation, supporting a positive user experience. Technically, the site is built on TYPO3 CMS, employs modern web standards, and shows good mobile optimization and accessibility. Security posture is adequate with HTTPS assumed and cookie consent mechanisms in place, though explicit security headers and incident response policies are not published. WHOIS data confirms domain legitimacy and consistency with the organization's identity. Overall, the site is trustworthy, compliant with GDPR, and serves as an effective digital presence for the local DRK branch.

D

DRK Kreisverband Rostock e.V.

drk-rostock.de

56

DRK Kreisverband Rostock e.V. is a regional branch of the German Red Cross, providing humanitarian aid, social services, and community support in Rostock and surrounding areas. The organization focuses on emergency rescue, care for seniors, support for people with disabilities, and volunteer engagement. The website reflects a mature digital presence with a professional design, clear navigation, and compliance with GDPR and cookie consent regulations. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and integrates Google Analytics via Google Tag Manager. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though formal security policies and incident response information are absent. WHOIS data confirms domain legitimacy and consistency with the organization's identity. Overall, the site is trustworthy, well-maintained, and serves its target audience effectively.

A

Arbeiterwohlfahrt Rostock

awo-rostock.de

49

Arbeiterwohlfahrt Rostock is a well-established non-profit social welfare organization based in Germany, providing a wide range of social services including care for the elderly, child and youth support, social psychiatry, migration assistance, and volunteer opportunities. The organization operates with a clear mission to promote social justice and community support in the Rostock region. Their website reflects a professional and consistent brand presence, with comprehensive information about their services and career opportunities. Technically, the site is built on WordPress with modern plugins for SEO, cookie consent, and interactive content, demonstrating a mature digital infrastructure. Security-wise, the site uses HTTPS and cookie consent management, but lacks a formal published security policy or vulnerability disclosure, which could be improved. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements, making it a reliable source for users seeking social services or employment with AWO Rostock.

L

Landkreis Mecklenburgische Seenplatte

lk-mecklenburgische-seenplatte.de

57

The website for Landkreis Mecklenburgische Seenplatte serves as the official digital portal for the regional government of the Mecklenburgische Seenplatte district in Germany. It provides comprehensive information on local government services, news, events, and citizen resources. The site targets residents and stakeholders within the district, offering access to administrative offices, public announcements, and online forms. The business model is that of a government service provider with a medium-sized organizational footprint. The website maintains consistent branding and trust indicators such as official contact details and privacy compliance mechanisms. Technically, the site uses a legacy technology stack centered around jQuery 1.12.3 and related JavaScript libraries, integrated with IKISS CMS components. While the site is functional and moderately optimized for mobile and accessibility, there is room for modernization and performance improvements. The presence of a cookie consent banner and privacy policy indicates good privacy compliance, with Matomo analytics used for user tracking at a moderate level. From a security perspective, the site lacks visible security headers and uses outdated JavaScript libraries that may expose it to vulnerabilities. No incident response or security policies are published, and no advanced security frameworks are evident. However, no critical security issues or WAF blocks were detected, and the domain registration data aligns well with the official government entity, supporting legitimacy. Overall, the website is a trustworthy and professional government portal with good content quality and business credibility. Strategic improvements in security posture, technical modernization, and enhanced privacy transparency would further strengthen its digital maturity and risk profile.

3

321 MED GmbH

321med14.com

50

321 MED GmbH is a German healthcare technology company specializing in digital reception and practice management software for medical facilities such as clinics, medical practices, and pharmacies. Their flagship product, the Online-Rezeption, offers a comprehensive suite of features including patient management, appointment scheduling, AI-powered telephone assistance, and workflow automation. The company has established a strong market presence with over 3,500 healthcare providers and 5 million patients served, emphasizing significant time savings and improved patient communication. The website reflects a mature, professional business with consistent branding and extensive media coverage. Technically, the website employs modern web technologies including jQuery, Usercentrics for GDPR-compliant consent management, Google Tag Manager, and Facebook Pixel for analytics and marketing. Hosting and DNS services leverage Cloudflare, although DNSSEC is not enabled. The site is mobile-optimized, accessible, and SEO-friendly, with fast loading times and rich multimedia content enhancing user engagement. From a security perspective, the site enforces HTTPS with a strong SSL configuration and integrates GDPR-compliant cookie consent. However, it lacks visible HTTP security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business claims, showing a domain age appropriate for the company's history and no privacy protection, which supports transparency. Overall, the website demonstrates a high level of professionalism, security, and compliance suitable for a healthcare software provider. Strategic improvements include enabling DNSSEC, publishing security policies, and adding incident response contacts to further enhance trust and security posture.

O

OpenPandora GmbH

dragonbox.de

62

DragonBox Shop, operated by OpenPandora GmbH, is a specialized e-commerce retailer based in Germany focusing on retro gaming products, accessories, and mini-PCs. The company targets retro gaming enthusiasts and technology hobbyists, offering a curated selection of products including game controllers, adapters, and repair services. The website demonstrates a consistent brand presence with clear business information and trust signals such as Trusted Shops certification and GDPR-compliant privacy and cookie policies. Technically, the site is built on the PrestaShop 1.7 platform, leveraging modern web technologies including jQuery, Matomo Analytics, and layered sliders for enhanced user experience. The site is mobile-optimized and provides good SEO and accessibility features, although some accessibility aspects could be improved. Performance is moderate, with a well-structured navigation system supporting a positive user experience. From a security perspective, the website enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security policy documentation and incident response contact details. Security headers are not fully evident, suggesting room for improvement in hardening the site against common web threats. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, DragonBox Shop presents a trustworthy and professional online presence with a solid privacy compliance posture and a niche market focus. Strategic enhancements in security policies and technical security headers would further strengthen its security posture and customer trust.

The website www.saint-gobain-sekurit.com is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) challenge page that blocks direct access to content. This challenge page includes a Turnstile captcha and a message indicating browser verification is in progress. Due to this, no actual website content, metadata, or business information is accessible for analysis. The WHOIS query for the domain returned no match, indicating the domain may not be registered or WHOIS data is unavailable, which raises concerns about domain legitimacy. The site uses Google Tag Manager and Google Analytics 4 for tracking, and multiple related domains under the saint-gobain brand are referenced in the analytics configuration. Overall, the digital presence appears to be protected behind strong security measures, but the lack of accessible content and WHOIS data limits the ability to assess the business or security posture comprehensively.

L

Landesstelle für Museen Baden-Württemberg

landesstelle.de

51

The Landesstelle für Museen Baden-Württemberg is a government advisory body dedicated to supporting museums within the Baden-Württemberg region. Their primary focus is on fostering well-structured, audience-oriented, and sustainable museum landscapes through consulting, funding, and educational programs. The website reflects a professional and regionally focused institution with clear contact information and relevant content tailored to museums and cultural stakeholders. Technically, the website is built on TYPO3 CMS with Bootstrap components for responsive design and uses Matomo analytics configured to disable cookies, indicating a privacy-conscious approach. The site is accessible, mobile-optimized, and well-structured, though it lacks some advanced security headers and explicit cookie consent mechanisms. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it could improve by implementing security headers, publishing security policies, and establishing a vulnerability disclosure process. The WHOIS data shows no privacy protection but uses agency name servers, which is typical for professional hosting. Overall, the domain and website appear legitimate and consistent with a government advisory entity. The overall risk is low, with recommendations focusing on enhancing security posture and privacy compliance to further strengthen trust and resilience.

D

Deutsche Postcode Lotterie GmbH & Co. KG

postcode-lotterie.de

70

The Deutsche Postcode Lotterie GmbH & Co. KG operates a socially responsible lottery platform in Germany, allowing participants to win prizes based on their postal codes while supporting charitable projects. The website is professionally designed, highly accessible, and optimized for mobile devices, reflecting a mature digital presence. Key services include monthly and daily lottery draws, with a significant portion of proceeds dedicated to social causes. The platform holds reputable certifications such as TÜV Saarland and Trusted Shops, enhancing its credibility. Technically, the website leverages modern frameworks including Next.js and Storyblok CMS, hosted on Vercel and AWS infrastructure. It employs best practices in security, including HTTPS enforcement, security headers, and content security policies. Analytics and marketing tools like Google Tag Manager and Usercentrics CMP are used with GDPR-compliant consent mechanisms. Security posture is strong with no evident vulnerabilities or exposed sensitive data. However, explicit security policy and incident response contact details could be more visible. Privacy compliance is robust, with comprehensive privacy and cookie policies in place. The domain registration data aligns well with the website content, supporting legitimacy and trustworthiness. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing security policy transparency and incident response visibility to further strengthen user trust and compliance.

S

SSI SCHÄFER Gruppe

ssi-schaefer.com

10

SSI SCHÄFER Gruppe is a globally operating enterprise specializing in modular warehouse and logistics systems, software solutions, and comprehensive intralogistics services. The company positions itself as a worldwide leader in intralogistics, offering innovative technologies and software to enhance efficiency and sustainability in warehousing, order picking, and transport processes. Their business model focuses on B2B engagements across multiple industries, providing tailored solutions for various market segments. The website reflects a mature digital presence with professional design, multilingual support, and extensive content covering products, services, corporate philosophy, and sustainability initiatives. Technically, the website employs modern JavaScript frameworks, Google Tag Manager for analytics, and Usercentrics for cookie consent management, ensuring compliance with privacy regulations. The site is mobile-optimized, accessible, and SEO-friendly, with embedded multimedia content enhancing user engagement. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved and an incident response contact is absent. Overall, the website demonstrates a strong security and compliance stance suitable for an enterprise of its scale, with clear business credibility and trust indicators. The absence of WHOIS data suggests privacy protection, which is reasonable for a large corporation. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and providing explicit incident response contacts to further strengthen trust and security transparency.

B

BKV – Interessengemeinschaft Betriebliche Krankenversicherung e. V.

bkk-kampagne-2019.de

42

The website 'bkk-kampagne-2019.de' represents a health awareness campaign by the BKV – Interessengemeinschaft Betriebliche Krankenversicherung e. V., focusing on promoting healthy sleep habits. It provides educational content, tips, and resources related to sleep health, targeting the general German-speaking public. The campaign is positioned as a niche, non-profit initiative within the healthcare sector, with a clear and consistent branding approach. The website content is well-structured, professionally designed, and offers multilingual support (German and English). Technically, the site is built on WordPress, leveraging caching and minification plugins to optimize performance. It uses HTTPS with a good SSL configuration, but lacks some security headers and cookie consent mechanisms, which are recommended for enhanced compliance and security. No forms or data collection mechanisms are visible on the homepage, reducing privacy risks. Contact information is clearly provided, including a verified organizational email and physical address in Berlin. No suspicious or malicious indicators were found, and the domain appears legitimate and appropriate for the campaign's history and purpose.

Baltic Earth is an international scientific research initiative focused on understanding the Earth system of the Baltic Sea region to support sustainable management against climate and environmental challenges. The website serves as an archive of content until January 2020, directing users to a new site for updated information. The initiative collaborates with reputable institutions such as Helmholtz-Zentrum Geesthacht and HELCOM, publishing scientific assessments and organizing events. Technically, the website is built with legacy HTML and CSS, lacks modern CMS or frameworks, and shows limited mobile optimization and accessibility. Security posture is basic with no visible HTTPS confirmation or security headers, and no cookie consent mechanism is present, indicating room for improvement in privacy compliance. Overall, the site is trustworthy and safe, but somewhat outdated and lacking in modern web practices.

K

Kurz-URLs & QR-Codes - sicher & datenschutzfreundlich

kurzelinks.de

60

Kurzelinks.de is a German-based URL shortening and QR code generation service emphasizing privacy and security. The platform offers a variety of features including multilinks, email links, password protection, link expiration, and deactivation capabilities. It operates with a focus on data protection, malware and phishing scanning, and user control over shortened URLs. The website is primarily in German and targets a general audience seeking secure and privacy-friendly link management solutions. Technically, the site uses a traditional jQuery-based stack with custom JavaScript and CSS, delivering moderate performance and basic mobile optimization. Security posture is solid with HTTPS enforcement and privacy features like referrer removal, though it lacks some advanced security headers and explicit security policies. Contact is primarily via a contact form and an abuse email address, with no direct phone numbers or social media links evident. Overall, the site is trustworthy, professional, and well-aligned with GDPR requirements, though it could improve cookie consent and security header implementation.

D

DE-CIX Management GmbH

de-cix.net

75

DE-CIX Management GmbH operates a globally recognized network of neutral Internet Exchanges, providing premium interconnection services across multiple continents including Europe, the Middle East, Africa, Asia, and the Americas. The company targets enterprises, network operators, cloud providers, and ISPs, offering a broad portfolio of services such as peering, private interconnects, cloud connectivity, and infrastructure solutions. DE-CIX holds a leading market position as a large-scale telecommunications provider with a strong brand and extensive international presence. Technically, the website is built on the Neos CMS platform using the Flow PHP framework, enhanced with modern JavaScript libraries and Google Tag Manager for analytics and tracking. The site demonstrates excellent performance, mobile optimization, and accessibility, reflecting a mature digital infrastructure. Security is robust with HTTPS enforced, comprehensive security headers, and cookie consent mechanisms, although explicit security policies and incident response details are not publicly disclosed. The security posture is strong with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well implemented with clear privacy and cookie policies, GDPR consent mechanisms, and transparent data collection practices. Business credibility is high, supported by professional content, consistent branding, and trust indicators such as customer logos and social media presence. Overall, DE-CIX presents a trustworthy and professional online presence aligned with its role as a critical telecommunications infrastructure provider. Strategic recommendations include publishing explicit security and incident response policies, adding vulnerability disclosure information, and enhancing direct contact details to further strengthen trust and compliance.

B

BCIX

bcix.de

58

BCIX is a regional Internet Exchange Point based in Germany, providing essential peering and interconnection services to network operators, data centers, and enterprises. Their offerings include direct peering, bandwidth sharing via SubPeers, secure direct connections (pVLAN), private network interconnects (PNI), and connectivity to the major DE-CIX Frankfurt exchange. The company positions itself as an accessible and open peering platform, targeting a broad range of network participants. Technically, the website is built on modern frameworks such as Next.js and React, with good mobile optimization and performance. Security posture is strong with HTTPS enforcement and standard security headers, though there is room for improvement in publishing explicit security policies and incident response contacts. Privacy compliance is well addressed with clear privacy and cookie policies aligned with GDPR. Overall, BCIX demonstrates a mature digital presence suitable for its telecommunications sector role.

3

3x7.de ✂ datenschutzfreundliche Kurz-URLs & QR-Codes

3x7.de

10

3x7.de is a German-based privacy-friendly URL shortening and QR code generation service. It offers users the ability to shorten long URLs, create multi-link lists, email links, and generate QR codes, with additional features such as password protection, malware and phishing checks, and optional link deactivation. The service is accessible 7 days a week and emphasizes data protection and user privacy, operating from Germany with a focus on GDPR compliance. The website is primarily in German and targets users seeking secure and privacy-conscious link shortening solutions. Technically, the website employs a modern JavaScript stack including jQuery and jQuery UI, with custom scripts for interaction and QR code generation. Hosting is inferred to be with netcup, a German hosting provider, based on DNS nameservers. The site uses HTTPS and includes CSRF tokens in forms, indicating attention to security. However, some security headers are missing, and cookie consent mechanisms are not present, which could be improved for full GDPR compliance. Mobile optimization and accessibility are basic but functional. From a security perspective, the site enforces HTTPS, offers malware and phishing protection on shortened URLs, and provides options to remove referrer information and password-protect links. There is an abuse reporting page, but no explicit security policy or vulnerability disclosure program is published. No critical vulnerabilities or exposed sensitive data were detected in the analysis. Overall, 3x7.de presents a trustworthy and privacy-conscious service with a solid technical foundation and good business credibility. Strategic improvements in security headers, cookie consent, and published security policies would enhance its compliance and security posture further.

0

Kurzlinks & QR-Codes erstellen

0cn.de

62

0cn.de is a German-based URL shortening and QR code generation service focused on privacy and security. It offers features such as malware and phishing link checks, password protection, link expiration, and deactivation links. The service targets general users seeking secure and privacy-friendly short URLs. The website is professionally designed with clear navigation and good content relevance. Technically, it uses a custom platform with jQuery and JavaScript libraries, delivering moderate performance and basic mobile optimization. Security posture is strong with HTTPS enforcement and link safety features, though some security headers and explicit policies are missing. Privacy compliance is good with a comprehensive privacy policy but lacks a cookie consent mechanism. Business credibility is supported by consistent WHOIS data and transparent service offerings.

O

Kurzlinks mit Phishing- & Malware-Schutz

ogy.de

62

ogy.de is a German-based URL shortening service focused on providing secure, privacy-friendly short links with integrated phishing and malware protection. The service offers a variety of features including multi-link lists, email links, QR code generation, and enterprise solutions. The website is well-structured, primarily in German, and targets general internet users and businesses seeking safe link shortening solutions. Technically, the site uses a modern JavaScript stack with jQuery and related libraries, but does not rely on a CMS. Security is well considered with HTTPS, CSRF tokens, and malware checks, though some security headers are missing. Privacy compliance is strong with a comprehensive privacy policy, but lacks a cookie consent mechanism. Contact is available via a contact form and an abuse reporting page. Overall, the site is professional, trustworthy, and well-positioned in its niche.

K

Kurzlinks.de

kurzlinks.de

10

Kurzlinks.de is a German-based URL shortening service focused on privacy and security. It offers users the ability to shorten long URLs with added features such as malware and phishing protection, optional password protection, and dereferrer functionality to enhance user privacy. The service also provides additional utilities including multi-link lists, email links, QR code generation, and enterprise solutions. The website is well-positioned in the niche market of privacy-conscious URL shorteners, targeting general internet users who value data protection and security. Technically, the site employs modern JavaScript libraries like jQuery and jQuery UI, with a custom or unknown CMS. The site is moderately optimized for performance and mobile use, with good SEO practices and basic accessibility features. Security-wise, the site enforces HTTPS, uses CSRF tokens in forms, and offers several security features for links, but lacks explicit security headers and a published security policy. Privacy compliance is strong with a comprehensive privacy policy and GDPR adherence, though no cookie consent mechanism is present. Contact is primarily via a contact form and an abuse reporting email. Overall, the site is trustworthy, secure, and professional, with room for improvement in security headers, cookie consent, and direct contact information visibility.

J

j0b.de

j0b.de

10

j0b.de operates as a specialized URL shortening service primarily targeting job-related content such as job offers and company profiles. The service emphasizes privacy and security by incorporating malware and phishing checks, referrer removal, and optional password protection for shortened links. The platform offers additional features including multilink creation, email links, QR code generation, and API access, positioning itself as a niche player in the URL shortener market with a focus on secure and privacy-friendly link management. The website is hosted and operated from Germany, aligning with GDPR compliance and data protection standards. Technically, the website employs modern JavaScript libraries including jQuery and jQuery UI, with a clean HTML5 structure and CSS styling. While no CMS or major frameworks are detected, the site demonstrates moderate performance and basic mobile optimization. SEO practices are adequately implemented with proper meta tags and descriptive content. However, accessibility features are basic and could be improved. Security-wise, the site enforces HTTPS, uses CSRF tokens in forms, and offers security features like password protection and malware scanning. Nonetheless, it lacks explicit security headers and a formal security policy or vulnerability disclosure program. The security posture is solid but could be enhanced by implementing additional HTTP security headers and providing clearer incident response contacts. Privacy compliance is good with a comprehensive privacy policy and terms of service, but the absence of a cookie consent mechanism is a notable gap. No direct contact emails or phone numbers are visible on the main page, which may affect user trust and support accessibility. No advertising or tracking scripts are detected, indicating a privacy-conscious approach. Overall, j0b.de presents a trustworthy and professional service with a clear business focus and good technical foundation. Strategic improvements in security headers, privacy consent mechanisms, and contact transparency would further strengthen its security and compliance posture.

B

Babsi

bab.si

58

Babsi operates a privacy-focused URL shortening service based in Germany, offering secure short links with phishing and malware protection. The service includes features such as multi-link lists, email links, QR code generation, and enterprise solutions. The website is well-structured, primarily in German, targeting general users seeking safe and privacy-friendly URL shortening. Technically, the site uses a modern JavaScript stack with jQuery and related libraries, hosted by OVH, a reputable provider. Security practices include HTTPS enforcement, CSRF protection, and link safety checks, though some security headers and cookie consent mechanisms are missing. The domain registration is consistent and appropriate for the business age, enhancing trustworthiness. Overall, Babsi presents a reliable and professional service with room for improvement in privacy compliance and security transparency.

S

Stadt Ahlen

ahlen.de

10

The website www.ahlen.de serves as the official digital portal for the city of Ahlen, Germany, providing comprehensive information and services related to municipal administration, social services, economic development, tourism, and community events. It targets residents, visitors, and local businesses, positioning itself as a trusted government resource with a broad range of citizen-centric offerings. The site is built on TYPO3 CMS, leveraging modern web technologies such as Font Awesome and Leaflet.js, and employs Matomo for privacy-conscious analytics. The presence of a detailed cookie consent mechanism and a comprehensive privacy policy demonstrates adherence to GDPR requirements. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. Contact information is clearly presented, enhancing business credibility. Overall, the site reflects a mature digital infrastructure suitable for a municipal government entity.

The website www.baumesse-wietmarschen.de serves as a regional event promotion platform for the Baumesse trade fair focused on building, living, and gardening in Wietmarschen-Lohne, Germany. It is managed by Wirtschaft Innovation Nordwest and features detailed event information, exhibitor listings, and partner organizations. The site is built on the Jimdo Creator CMS platform, leveraging third-party services such as Google Analytics and POWr.io widgets for enhanced functionality. The website is well-structured, mobile-optimized, and provides clear navigation and contact information, although no contact forms or email addresses are directly provided. From a technical standpoint, the site uses HTTPS with a good SSL configuration and includes a comprehensive cookie consent mechanism compliant with GDPR. However, it lacks advanced security headers and explicit security or incident response policies. No vulnerabilities or suspicious content were detected, and the domain registration data aligns with the hosting platform, indicating legitimacy. The site does not display terms of service or certifications, which could be areas for improvement. Overall, the security posture is moderate with room for enhancement in security headers and incident response transparency. Privacy compliance is good due to the presence of a privacy policy and cookie consent. The business credibility is supported by clear contact details and partner affiliations. The website is safe for general audiences and does not contain any adult or questionable content. Strategic recommendations include implementing additional security headers, publishing incident response contacts, and adding terms of service to improve trust and compliance. Regular audits of third-party scripts and continued adherence to privacy regulations will further strengthen the site's security and user trust.

K

Kiel Institute for the World Economy

kielinstitut.de

58

The Kiel Institute for the World Economy is a prominent German research institute specializing in globalization and global economic affairs. It serves as a leading academic and policy-impact institution in Europe, offering extensive research, datasets, expert analysis, and public events. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content targeting researchers, policymakers, and the public interested in economic globalization. Technically, the site is built on TYPO3 CMS with Bootstrap framework and uses Matomo for analytics, indicating a privacy-conscious approach. Security posture is adequate with HTTPS and consent mechanisms but lacks explicit security policies and headers. Overall, the site is trustworthy and authoritative in its domain.

G

German Real Estate Index (GREIX)

greix.de

45

GREIX is a German publicly funded research project providing comprehensive real estate price indices based on notarized sales data from local Gutachterausschüsse. It offers free access to scientifically processed data and visualizations for German cities and districts, targeting researchers, policymakers, and real estate professionals. The project is backed by reputable institutions such as the Kiel Institute for the World Economy and the ECONtribute cluster, with funding from the European Research Council. Technically, the website is modern, built with React, hosted on AWS, and uses privacy-conscious Matomo analytics. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the website is professional, trustworthy, and well-optimized for performance and accessibility.

S

Spektrum Gesundheit

rauszeit-im-kopf.de

46

Spektrum Gesundheit is a German interdisciplinary health platform that integrates mental, physical, and ecological health topics. It targets health professionals, urban planners, environmental scientists, educators, and decision-makers, providing scientifically grounded and practical health knowledge. The platform evolved from a mental health focus to a broader holistic health approach, emphasizing the interconnectedness of human, animal, environmental, and societal health. Technically, the website is built on the Contao Open Source CMS, uses jQuery, and is hosted on kasserver.com. It features modern web standards, responsive design, and SEO best practices. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the website is professional, trustworthy, and compliant with GDPR, with minimal user tracking via Matomo analytics.

H

Helmholtz Zentrum München - Deutsches Forschungszentrum für Gesundheit und Umwelt (GmbH)

allergieinformationsdienst.de

54

The Allergieinformationsdienst website is a scientifically oriented information portal operated by Helmholtz Zentrum München, a reputable German research institution focused on health and environmental research. The site provides comprehensive, up-to-date, and scientifically validated information on allergies, including diagnosis, therapy, prevention, and research news. It targets the general public, patients, and healthcare professionals seeking reliable allergy-related knowledge. The business model is non-profit, emphasizing education and research dissemination, supported by government funding and institutional partnerships. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies and structured data (JSON-LD) for SEO and accessibility. The site demonstrates good performance, mobile optimization, and accessibility features. It uses Matomo for analytics, ensuring privacy-conscious user tracking. The design is professional, with clear navigation and consistent branding aligned with Helmholtz Munich's identity. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a cookie consent mechanism and a publicly available security or incident response policy are areas for improvement. The WHOIS data and DNS configuration confirm the domain's legitimacy and institutional affiliation. Overall, the website presents a low-risk profile with strong credibility and professionalism. Strategic recommendations include implementing GDPR-compliant cookie consent, publishing security policies, and considering a vulnerability disclosure framework to enhance transparency and trust.

I

Internationale Bodensee-Konferenz

bodenseekonferenz.org

62

The Internationale Bodensee-Konferenz (IBK) is a regional political cooperation organization focused on cross-border collaboration in the Bodensee region. The website serves as an information and communication platform for stakeholders, partners, and the public, providing news, events, project information, and resources related to regional cooperation. The organization operates as a non-profit entity with strong ties to governmental bodies and European Union programs, positioning itself as a key facilitator of regional development and cooperation. Technically, the website employs a mix of legacy and modern web technologies including AngularJS, jQuery, and Matomo analytics, hosted on a secure HTTPS platform. The site demonstrates good mobile optimization, accessibility features, and privacy-conscious tracking practices. However, some JavaScript libraries are outdated, which could pose security risks if not regularly updated. From a security perspective, the website enforces HTTPS and includes cookie consent mechanisms aligned with GDPR requirements. While no explicit security policies or incident response contacts are published, the site avoids exposing sensitive data and disables cookies in analytics tracking to enhance privacy. The absence of WHOIS data limits domain registration transparency but does not detract from the apparent legitimacy of the organization based on content and external references. Overall, the IBK website presents a professional, trustworthy, and well-maintained digital presence suitable for its governmental and non-profit audience. Strategic improvements in security headers, updated libraries, and enhanced transparency around security policies would further strengthen its posture.

O

otris software AG

otris.software

62

otris software AG operates a professional customer portal at otris.software, providing access to software product documentation, update information, and product news primarily targeting their German-speaking customer base. The portal is built on a WordPress CMS with modern web technologies including jQuery, Google reCAPTCHA v3 for security, and WPBakery Page Builder for content management. The website demonstrates a good level of digital maturity with secure HTTPS implementation and user authentication mechanisms. Security posture is solid with no visible vulnerabilities or exposed sensitive data, although additional security headers and a formal vulnerability disclosure policy could enhance the security framework. Privacy compliance is generally good with a clear privacy policy and GDPR adherence, but the absence of a cookie consent mechanism is a minor compliance gap. Overall, the domain and website present a trustworthy and professional image consistent with a medium-sized technology company in Germany.

B

BerlinerLuft. Technik GmbH

berlinerluft.at

50

BerlinerLuft. Technik GmbH is a German-based manufacturer specializing in ventilation, climate technology, and related industrial systems. The company offers a broad portfolio of products including fans, ventilation components, climate control devices, sound insulation systems, and process air technology. Their website reflects a mature B2B business model targeting technical building equipment professionals and industrial clients. The company maintains a consistent brand presence with multilingual support and international partner sites. Technically, the website is built on TYPO3 CMS, integrates Google Analytics and Tag Manager, and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit incident response policies are absent. Overall, the domain registration aligns with the business identity, supporting legitimacy and trustworthiness.

B

BerlinerLuft.

berlinerluft.com

47

BerlinerLuft.com is a professional website representing a medium-sized manufacturing company specializing in ventilation and air conditioning technology. The company offers a broad portfolio of products including industrial fans, ventilation components, air handling units, noise protection solutions, and process air systems. The website is well-designed, mobile-optimized, and provides comprehensive product and company information targeted at industrial and technical building services clients. Technically, the site is built on TYPO3 CMS and integrates Google Analytics and Tag Manager for tracking and marketing purposes. Security posture is generally good with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit incident response or vulnerability disclosure information is found. The WHOIS data for the domain is missing or indicates the domain is not registered, which is inconsistent with the active and professional website presence, suggesting a need for verification. Overall, the site scores well on content quality and technical implementation but has moderate business credibility due to the WHOIS inconsistency.

S

SZB Schulungszentrum Bietigheim GmbH

szb-schulung.de

50

SZB Schulungszentrum Bietigheim GmbH operates as a specialized training center in Germany, focusing on certified operator training for forklifts, aerial work platforms, cranes, and telehandlers. Their offerings comply with DGUV and IPAF standards, targeting companies and individuals requiring safety and operational certifications. The company maintains multiple physical locations and provides both in-person and online training options. Technically, the website is built on WordPress with modern plugins for SEO and GDPR compliance, hosted on GoDaddy infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the site is professional, compliant, and trustworthy, serving a niche educational market effectively.

K

KORTS Immobilien GmbH

korts-immobilien.de

50

KORTS Immobilien GmbH is a Hamburg-based, owner-managed real estate consultancy specializing in commercial office properties with over 19 years of market experience. The company offers comprehensive brokerage and advisory services tailored to tenants and property owners in the Hamburg metropolitan area. Their business model focuses on personalized service, leveraging a broad network of market participants to provide exclusive access to properties and expert negotiation support. Technically, the website is built on WordPress with Elementor and Yoast SEO, hosted by Timme Hosting, and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and explicit security policies could enhance protection. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, making it a reliable digital presence for the business.

P

Praxis für Logopädie Jennifer Groß

logo-gross.de

52

Praxis für Logopädie Jennifer Groß is a small healthcare provider specializing in speech therapy services located in Püttlingen, Germany. The website presents a professional image with clear information about their services, team, and contact details. Their market position is local and focused on patients requiring speech and language therapy, including both adults and children. The business model is service-oriented healthcare with a focus on personalized patient care. Technically, the website is built on the cm4all CMS platform hosted by Strato, using standard web technologies such as HTML5, CSS3, JavaScript, and jQuery. The site is moderately performant and mobile-optimized with basic accessibility features. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit security or incident response policies are published. Overall, the website is trustworthy and compliant with GDPR, providing sufficient contact and privacy information for users.

D

DRK-Kreisverband Ludwigsburg e. V.

drk-ludwigsburg.de

58

DRK-Kreisverband Ludwigsburg e. V. is a local branch of the German Red Cross, providing a broad range of humanitarian, social, and emergency services to the community in Ludwigsburg, Germany. The organization focuses on emergency call services, first aid training, rescue operations, social support, and voluntary engagement. The website reflects a professional and consistent brand presence aligned with the national DRK identity. The target audience includes the general public and local residents seeking social and emergency assistance. Technically, the website is built on TYPO3 CMS, a robust and widely used content management system, with additional JavaScript libraries for UI elements such as sliders. The site employs Matomo analytics with a clear cookie consent mechanism, demonstrating a commitment to privacy and GDPR compliance. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. From a security perspective, the site uses HTTPS and implements a comprehensive cookie consent banner with opt-in for analytics and preference cookies. However, it lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website presents a trustworthy and professional digital presence for a non-profit humanitarian organization. Strategic improvements could include enhancing HTTP security headers, publishing security and incident response policies, and adding a vulnerability disclosure mechanism to further strengthen security posture and trust.

M

Muthesius Kunsthochschule

muthesius-kunsthochschule.de

54

Muthesius Kunsthochschule is a medium-sized, specialized educational institution in Germany focused on art and design education. It offers a range of Bachelor and Master programs in fields such as Kommunikationsdesign, Industriedesign, Freie Kunst, and Raumstrategien. The institution maintains a strong market position as the only art university in Schleswig-Holstein with international reach and interdisciplinary offerings. The website is built on WordPress with a modern tech stack including jQuery, Events Manager, and accessibility plugins, hosted by planet-ocean-hosting. It features comprehensive content, good mobile optimization, and accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The site demonstrates good privacy compliance with GDPR-aligned policies and active user consent management. Overall, the website is professional, trustworthy, and well-maintained, supporting the institution's educational mission effectively.

Incom GmbH operates a specialized communication and collaboration platform tailored for higher education institutions, particularly targeting design and art universities in Germany. The platform facilitates modern teaching concepts, enabling seamless interaction between educators and students, and extends the scope of academic courses both temporally and spatially. The business model is based on a cost-effective SaaS offering with included support and consulting services, positioning Incom as a niche player in the educational technology sector. The company has been established since 2005, reflecting a mature presence in its market segment. Technically, the website employs a modern yet straightforward technology stack including Bootstrap, jQuery, Font Awesome, and Matomo for privacy-conscious analytics. The platform is custom-built without reliance on common CMS solutions, hosted under a reputable registrar with stable DNS configurations. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be enhanced. Performance is moderate, suitable for the target audience. From a security perspective, the website enforces HTTPS with AES 256-bit encryption, avoids third-party advertising and tracking services like Google Analytics, and respects user privacy by not profiling visitors. However, it lacks DNSSEC and important security headers such as Content-Security-Policy and HSTS, which are recommended to strengthen its security posture. No incident response or security policy information is published, which could be improved to enhance trust. Overall, the website is professional, trustworthy, and safe for general audiences, with no adult or questionable content. The domain registration data aligns well with the business claims, showing consistency and legitimacy. Strategic recommendations include implementing DNSSEC, adding security headers, publishing security policies, and introducing cookie consent mechanisms to improve GDPR compliance and security maturity.

W

WIN Nordwest

wirtschaft-innovation-nordwest.de

64

WIN Nordwest is a small regional marketing and consulting agency based in Wietmarschen, Germany, specializing in event organization, media design, and publishing for municipalities and local businesses. The company organizes regional trade fairs and produces print media such as brochures and business cards. Their market position is focused on regional clients with a comprehensive service offering in marketing, PR, and project support. Technically, the website is built on the Jimdo CMS platform, leveraging standard web technologies including jQuery, Google Analytics, and POWr widgets. The site is mobile-optimized with moderate performance and basic SEO and accessibility features. Security posture is adequate with HTTPS enforced and cookie consent implemented, though lacking advanced security headers and explicit incident response policies. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, but could benefit from enhanced security practices and more detailed policy disclosures.

V

VisionConnect GmbH

vision-connect.de

65

VisionConnect GmbH is a well-established digital agency based in Hannover, Germany, with over 25 years of experience since its founding in 1995. The company specializes in web development, design, SEO, and digital marketing services, leveraging platforms such as TYPO3 CMS and Wordpress. Their market position is strong, supported by long-term client relationships and a comprehensive service offering that includes strategy, design, technology, and communication solutions. The website reflects a professional and trustworthy digital presence with excellent content quality and user experience. Technically, the website is built on a modern stack with TYPO3 CMS, uses Matomo for privacy-conscious analytics, and implements GDPR-compliant cookie consent mechanisms. The site is mobile-optimized, accessible, and SEO-friendly, although some security headers could be improved. The SSL configuration is excellent, ensuring secure communications. However, there is no publicly available security policy or incident response information, which could be enhanced to improve transparency and trust. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and privacy-respecting analytics settings. No vulnerabilities or suspicious content were detected. The WHOIS data aligns with the business claims, showing a domain age consistent with the company's history and no privacy protection that would obscure legitimacy. Overall, the security posture is solid but could benefit from additional security headers and published policies. The overall risk assessment is low, with the website presenting a professional, secure, and compliant digital presence. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, and considering a vulnerability disclosure mechanism to further strengthen trust and security culture.

T

Kurz URLs mit Malware Schutz & Dereferrer Funktion

t1p.de

62

t1p.de is a German-based URL shortening service that emphasizes security and privacy by integrating malware and phishing protection, password protection for links, and dereferrer functionality. The service offers multiple domain options for short URLs, a browser extension, mobile app, and API access, targeting users who require safe and privacy-conscious link management. The website is well-structured, professionally designed, and provides comprehensive information about its services, including terms and privacy policies. Technically, the site uses modern JavaScript libraries such as jQuery and jQuery UI, with HTTPS enabled and CSRF protection in forms, indicating a solid technical foundation. However, some security best practices like security headers and cookie consent mechanisms are missing or not visible. The WHOIS data aligns with the website's German origin and service claims, supporting legitimacy. Overall, the site presents a trustworthy and professional service with room for improvement in privacy compliance and security hardening.

C

CopeCart

copecart.com

70

CopeCart is a technology company founded in 2017, providing an all-in-one online sales platform targeted at digital entrepreneurs primarily in Germany. The website is professionally designed using WordPress and the Divi theme, with good SEO and mobile optimization. The technical infrastructure includes modern marketing and analytics tools such as Google Tag Manager, Hotjar, and Cookiebot for cookie consent management. Security posture is solid with HTTPS enforced and domain protections in place, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy policy or terms of service found. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the business.

W

wvnderlab

wvnderlab.com

52

wvnderlab is a Hamburg-based digital agency specializing in web design, SEO, online marketing, and e-commerce solutions. The company positions itself as a full-service provider offering tailored digital marketing strategies and professional website development to help businesses grow their online presence. Their website reflects a mature digital infrastructure with modern technologies such as WordPress, Yoast SEO, and cookie consent management, indicating a high level of digital maturity. Security measures include HTTPS enforcement and anti-spam protections, though there is room for improvement in HTTP security headers and formal security policies. Overall, the website is professional, well-structured, and GDPR compliant, supporting a trustworthy business image.