Germany security reports

C

Contabo

contabo.com

65

Contabo GmbH is a Germany-based cloud and dedicated server hosting provider established in 2003, offering affordable VPS and bare metal servers across multiple global regions. The company positions itself as a cost-effective hosting solution with a strong uptime record and award-winning customer support. The website reflects a mature digital presence with good content quality and consistent branding. Technically, the site employs modern JavaScript libraries and tracking tools, including Google Tag Manager, LinkedIn Insight, and Bing Ads, supported by a cookie consent mechanism. Security posture is adequate with HTTPS enabled and domain transfer protection, though DNSSEC is not enabled and security headers are not evident in the provided data. The WHOIS data aligns well with the business claims, indicating legitimacy and stable domain ownership. However, the absence of explicit privacy and terms of service policies in the analyzed content suggests room for improvement in privacy compliance. Overall, the website is professional, trustworthy, and serves its target audience effectively.

W

WOIZZER AG

quinbook.com

62

QuinBook, powered by WOIZZER AG, is a specialized SaaS platform offering comprehensive booking and management solutions tailored for the escape room industry. With over eight years of industry-specific expertise and two decades of IT experience, QuinBook positions itself as a leading solution for escape room operators worldwide. The platform provides features including escape game management, ticketing, staff coordination, and integrated payment processing, targeting small to medium-sized businesses primarily in Germany and internationally. The business model is subscription-based with flexible monthly billing and no long-term contracts, appealing to operators seeking scalable and professional management tools. Technically, the website employs a custom-built infrastructure leveraging established front-end libraries such as Bootstrap, FontAwesome, and jQuery, alongside modern UI components like Slider Revolution and hCaptcha for security. While the site is mobile-optimized and presents a professional user experience, some technical debt is evident with the use of an outdated jQuery version and lack of explicit security headers. Hosting is claimed to be German-based, supporting data sovereignty and compliance. From a security perspective, the site enforces HTTPS, uses encrypted communication, and integrates hCaptcha to mitigate spam on contact forms. Payment transactions are handled via external trusted providers, enhancing transactional security. However, the absence of explicit security headers and a cookie consent mechanism indicates areas for improvement in compliance and defense-in-depth. No incident response or vulnerability disclosure information is publicly available, which could be enhanced to build trust. Overall, QuinBook demonstrates a solid business and technical foundation with a high trustworthiness level. Strategic improvements in security headers, privacy compliance, and modernization of libraries would elevate its security posture and regulatory adherence, further strengthening its market position and customer confidence.

V

Verein Deutscher Ingenieure e.V.

vdi.de

67

Verein Deutscher Ingenieure e.V. (VDI) is the largest technical-scientific association in Europe, serving approximately 130,000 engineers and technical professionals. The organization provides membership services, technical publications, career advice, and hosts events and conferences, targeting engineers primarily in Germany and Europe. The website is professionally designed, consistent in branding, and offers comprehensive content relevant to its audience. Technically, the site is built on TYPO3 CMS with modern libraries and integrates Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is strong with HTTPS, security headers, and GDPR-compliant cookie consent mechanisms, although explicit security policies and incident response information are not published. Overall, the site demonstrates a mature digital presence with good privacy and security practices, supporting the organization's credibility and trustworthiness.

The DRK-Blutspendedienste website serves as a comprehensive platform for blood donation appointment scheduling and information dissemination in Germany. It is operated under the Deutsches Rotes Kreuz (DRK) umbrella, a well-established non-profit organization. The site targets potential and existing blood donors, providing educational content, campaign information, and access to donor services. The platform enjoys a strong market position as a key coordinator of blood donation services in Germany, supported by official branding and partnerships with regional blood donation organizations. Technically, the website employs a modern tech stack including Ruby on Rails, Matomo analytics, and Cookiefirst for consent management. It is hosted on reputable providers and demonstrates good mobile optimization and SEO practices. The site uses HTTPS with strong SSL configuration and includes CSRF protection in forms, indicating a solid security foundation. However, some security headers are missing, and no explicit security policy or incident response contacts are published. From a security perspective, the site maintains a good posture with encrypted communications and privacy compliance, including GDPR-aligned cookie consent. No vulnerabilities or exposed sensitive data were detected. The absence of a vulnerability disclosure policy and security.txt file is noted as an area for improvement. Overall, the site is trustworthy, professional, and safe for general audiences. Strategically, the website could enhance its security transparency by publishing incident response contacts and security policies. Adding security headers and a vulnerability disclosure mechanism would further strengthen its security maturity. The business credibility is high, supported by consistent branding, partner links, and clear contact channels.

The website www.drk-haemotherapie.de serves as a specialized digital magazine dedicated to transfusion medicine, targeting medical professionals and users of blood products. It is affiliated with the German Red Cross Blood Donation Services (DRK-Blutspendedienste), providing authoritative and up-to-date scientific content, regulatory updates, and practical guidance. The platform offers digital subscriptions and hosts a variety of articles authored by experts in the field, reinforcing its position as a trusted resource within the healthcare sector. Technically, the site employs modern web technologies including Ruby on Rails, Bootstrap, and Hotwired frameworks, ensuring a responsive and accessible user experience across devices. Privacy and cookie compliance are well implemented with a consent management system, and the site uses Matomo for analytics, reflecting a moderate level of user tracking with respect to privacy. Security posture is strong with HTTPS enforced and CSRF protections in place, although explicit security headers and incident response policies are not publicly documented. Overall, the domain and website content align with a reputable healthcare entity, with no signs of malicious activity or content blocking. Strategic recommendations include publishing a terms of service, security policy, and incident response contacts to enhance transparency and trust.

The Deutsche Stammzellspenderdatei (DSSD) website serves as an informational and engagement platform for a German non-profit initiative focused on stem cell and bone marrow donation. Affiliated with the German Red Cross blood donation services, it targets potential donors, patients' families, and medical professionals. The site provides educational content, donation registration pathways, event organization support, and fundraising opportunities. Technically, the website employs common web technologies including jQuery, Bootstrap, and Matomo analytics, with a cookie consent mechanism ensuring GDPR compliance. The site is mobile-optimized with good navigation and content quality. Security posture is solid with HTTPS and CSRF protections, though it lacks explicit security policies and some security headers. Overall, the domain and website present a trustworthy and professional image consistent with a healthcare non-profit organization.

T

talentsconnect

talentsconnect.com

63

talentsconnect is a German-based HR software and consulting company specializing in recruiting and employee retention solutions for medium to large enterprises. Their offerings include innovative products such as JobShop, Conversational AI, and Internal JobShop, designed to optimize the talent acquisition and retention lifecycle. The company has a strong market presence with over 600 corporate clients and is recognized on independent review platforms like OMR Reviews. Technically, the website is built on Webflow CMS, uses modern web technologies, and integrates privacy-respecting analytics via Matomo. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though explicit security policies and incident response information are not publicly available. The WHOIS data is unavailable, which limits domain trust verification, but the professional website content and business indicators suggest legitimacy. Overall, talentsconnect demonstrates a mature digital presence with good compliance and security practices.

A

ALBIXON a.s.

albixon.de

54

ALBIXON a.s. is a well-established European manufacturer specializing in swimming pools, pool enclosures, bioclimatic pergolas, and related pool technology and accessories. Founded in 1985 by the Smetana brothers, the company has grown to become a leading player in the European market with a strong export footprint in over 70 countries. Their business model leverages both direct manufacturing and a network of partners in Germany, Austria, and Switzerland to provide comprehensive customer support from planning to maintenance. The website reflects a mature digital presence with multilingual support, a B2B portal, and extensive product and reference information. Technically, the website employs modern web technologies including Bootstrap, lazy loading images, and JavaScript libraries for enhanced user experience and performance. The site is mobile-optimized and SEO-friendly, with structured data enhancing search visibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, although explicit security policies and incident response contacts are not publicly disclosed. Analytics and marketing tools such as Google Analytics, Smartlook, and Facebook Pixel are used with appropriate consent mechanisms. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR requirements. The WHOIS data aligns with the business claims, showing consistent domain registration and no privacy protection, supporting legitimacy. No blocking or WAF interference was detected, allowing full content access and analysis.

W

Westdeutsche SpenderZentrale

wsze.de

57

Westdeutsche SpenderZentrale is a German non-profit organization dedicated to registering stem cell donors and supporting blood cancer patients. The website provides comprehensive information about stem cell donation, patient and donor stories, and facilitates ordering free typing kits for potential donors. It also supports organizing typing campaigns in various community settings. The organization positions itself as a regional key player in healthcare focused on life-saving stem cell donations. Technically, the website is built with Angular 15 and uses Scully for static site generation, ensuring fast performance and good mobile optimization. The site uses modern web technologies and lazy loading for images but lacks some advanced SEO and accessibility features. No major analytics or tracking tools are detected, indicating a privacy-conscious approach. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks important security headers and does not provide a public security policy or incident response contacts. No cookie consent mechanism is present, which is a GDPR compliance gap. WHOIS data is consistent and indicates a legitimate domain registration aligned with the organization's purpose. Overall, the website is professional, trustworthy, and well-suited for its audience, but it could improve privacy compliance and security posture by adding cookie consent, security headers, and explicit security policies.

D

DRK-Blutspendedienst West gGmbH

bsdwest.de

64

DRK-Blutspendedienst West gGmbH is a large non-profit healthcare organization operating in Germany, specializing in blood donation services and transfusion medicine across the regions of Nordrhein-Westfalen, Rheinland-Pfalz, and Saarland. The organization plays a critical role in supplying hospitals and medical practices with essential blood products, organizing thousands of blood donation events annually, and providing expert medical consultation. Their digital presence includes a well-structured website built on Drupal 10, complemented by a digital blood donor service accessible via web and mobile apps, and active engagement on major social media platforms. Technically, the website employs modern web technologies including Bootstrap, FontAwesome, and JavaScript libraries for enhanced user experience and accessibility. The site is mobile-optimized, GDPR compliant with a robust cookie consent mechanism, and uses Matomo analytics configured to respect user privacy (Do Not Track). While HTTPS is enforced, and no critical security vulnerabilities are evident, the site lacks publicly available security policies and incident response contacts, which are recommended for improved transparency and trust. Overall, the security posture is solid with good privacy compliance, but could be enhanced by adding explicit security documentation and security.txt files. The business credibility is high, supported by consistent branding, professional content, and clear contact channels. No suspicious or malicious content was detected, and the site is safe for general audiences.

S

SIKO

siko-bad.de

71

SIKO is a medium-sized retail company specializing in bathroom and kitchen products, operating primarily in Germany with a strong online presence supported by SAP Commerce Cloud and Angular frameworks. The website demonstrates a mature digital infrastructure with integrations for marketing, analytics, and user consent management, reflecting a modern e-commerce platform. Security posture is solid with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response details are not publicly disclosed. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, making it a reliable platform for customers.

K

KRAFTJUNGS

kraftjungs.de

60

KRAFTJUNGS is a small, regionally focused 360° advertising agency based in Karlsruhe and Baden-Baden, Germany. The company offers a range of marketing and advertising services targeting businesses seeking comprehensive branding and digital marketing solutions. The website is professionally designed using WordPress and modern web technologies, including WPBakery Page Builder, jQuery, and Font Awesome. It integrates GDPR-compliant cookie consent management via Usercentrics and employs analytics tools such as Matomo, Google Tag Manager, and HubSpot for marketing and user tracking purposes. The technical infrastructure reflects a moderate level of digital maturity with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and cookie consent implemented; however, the absence of explicit privacy policy and security headers indicates room for improvement. WHOIS data is minimal but consistent with a legitimate small business domain. Overall, the website presents a trustworthy and professional front for the agency, though enhancing transparency around privacy and security policies would strengthen compliance and user trust.

D

DRK-Blutspendedienst Nord-Ost gemeinnützige Gesellschaft mit beschränkter Haftung

blutspende-nordost.de

60

DRK-Blutspendedienst Nord-Ost is a reputable non-profit organization dedicated to blood donation services across several German federal states. The website serves as a comprehensive portal for donors, medical professionals, and volunteers, offering appointment scheduling, educational content, and community engagement. The organization maintains a strong regional presence with consistent branding and trusted partnerships. Technically, the website is built on Drupal 10, leveraging modern web technologies and privacy-conscious analytics via Matomo. It is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. The hosting appears stable with EPAG nameservers. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, but lacks explicit security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is minimal but consistent with the organization's profile, supporting legitimacy. Overall, the site presents a low-risk profile with strong business credibility and good privacy compliance. Strategic improvements could focus on enhancing security headers and publishing formal security and incident response policies.

D

DRK-Blutspendedienst NSTOB

blutspende-leben.de

60

The website www.blutspende-leben.de serves as the official portal for the DRK-Blutspendedienst NSTOB, a regional blood donation service under the German Red Cross. It provides comprehensive information and services related to blood donation, including appointment booking, donor services, educational content, and resources for medical professionals. The site targets blood donors and healthcare stakeholders in Germany, emphasizing community health and non-profit service. Technically, the site is built on Drupal 10 with modern libraries such as Bootstrap and FontAwesome, and integrates Matomo for analytics and Cookiefirst for cookie consent management. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Security-wise, HTTPS is enforced and privacy compliance is well implemented with clear privacy and cookie policies. However, some security headers are missing and no explicit incident response or vulnerability disclosure information is provided. Overall, the site demonstrates a strong security posture with room for improvement in header security and incident transparency. The domain WHOIS data aligns well with the website's claims, showing legitimacy and consistency. The site is trustworthy, professional, and safe for general audiences.

B

Blutspendedienst des Bayerischen Roten Kreuzes gemeinnützige GmbH

blutspendedienst.com

67

Blutspendedienst des Bayerischen Roten Kreuzes gemeinnützige GmbH operates a comprehensive blood donation service platform primarily serving the Bavarian region in Germany. The organization is a non-profit entity affiliated with the Bavarian Red Cross, providing blood donation appointment scheduling, donor education, digital donor services via a mobile app, and health checks. The website is professionally designed with clear navigation and extensive content tailored to blood donors and healthcare partners. Technically, the site uses modern web technologies including Bootstrap, Matomo analytics, and cookie consent management, ensuring a good user experience and privacy compliance. Security posture is strong with HTTPS enforced and CSRF protections, though some security headers could be improved. The WHOIS data is unavailable, which is unusual but the website's legitimacy is supported by its branding and external references. Overall, the site scores highly on content quality, technical implementation, security, privacy compliance, and business credibility.

D

DRK-Blutspendedienst West gGmbH

blutspendedienst-west.de

65

The DRK-Blutspendedienst West gGmbH operates as a large non-profit healthcare organization focused on blood donation services in western Germany. The website serves as an information and service portal for blood donors, medical professionals, and volunteers, offering appointment scheduling, educational content, and digital donor services. The organization holds a strong regional market position with a comprehensive service offering and active social media engagement. Technically, the website is built on Drupal 10 with modern frontend libraries and is well-optimized for mobile devices. It employs a self-hosted Matomo analytics platform with privacy-conscious configurations and a robust cookie consent mechanism. The site demonstrates good SEO, accessibility, and user experience standards. From a security perspective, the site enforces HTTPS and uses cookie consent management but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or suspicious content were detected. WHOIS data is minimal but consistent with the organization's profile. Overall, the website is professional, trustworthy, and compliant with GDPR, providing a safe and informative user experience. Strategic improvements could focus on enhancing security headers and publishing formal security and incident response policies.

D

DRK-Blutspendedienst Baden-Württemberg – Hessen gemeinnützige Gesellschaft mit beschränkter Haftung

blutspende.de

62

The website www.blutspende.de represents the DRK-Blutspendedienst Baden-Württemberg – Hessen, a key regional entity within the German Red Cross responsible for coordinating blood donation services across Germany. The site serves as a nationwide distribution portal linking users to regional blood donation services, offering approximately 38,000 blood donation appointments annually. The target audience is the general German public interested in donating blood. The business operates as a non-profit healthcare service, playing a critical role in the national blood supply chain. Technically, the website is built on Drupal 10 CMS, leveraging modern web technologies and integrating Matomo analytics with a consent management platform (CookieFirst) to ensure privacy compliance. The site is hosted on German infrastructure with nameservers pointing to nats.de, indicating a stable and localized hosting environment. The website demonstrates good mobile optimization, accessibility, and SEO practices, with consistent branding and professional design. From a security perspective, the site enforces HTTPS, implements standard security headers, and uses a cookie consent mechanism. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit privacy policy and terms of service pages, as well as lack of incident response contacts and data protection officer information, represent areas for improvement in compliance and transparency. Overall, the website is trustworthy, professionally maintained, and fulfills its mission effectively. Strategic recommendations include publishing comprehensive privacy and terms documents, establishing vulnerability disclosure channels, and enhancing transparency around data protection roles to strengthen user trust and regulatory compliance.

D

DRK-Blutspendedienste

spenderservice.net

68

The website www.spenderservice.net is the official digital service portal for blood donors affiliated with the Deutsches Rotes Kreuz (German Red Cross). It provides a comprehensive platform for blood donors in Germany to manage their donation appointments, view donation history, participate in forums, and access a dedicated mobile app. The service is positioned as a trusted non-profit healthcare platform with a strong focus on user engagement and convenience. Technically, the website employs modern web technologies including JavaScript, CSS, and Bootstrap framework, with backend indications of Ruby on Rails. It integrates cookie consent management via CookieFirst and uses Piwik/Matomo for analytics, reflecting a mature digital infrastructure. The site is mobile-optimized and provides seamless navigation and user experience. From a security perspective, the site enforces HTTPS, uses CSRF tokens in forms, and implements cookie consent mechanisms. However, it lacks explicit security headers and published security policies or incident response contacts, which are areas for improvement. The absence of WHOIS data reduces transparency but does not significantly detract from the site's legitimacy given the strong branding and professional presentation. Overall, the site scores well on content quality, technical implementation, and privacy compliance, with minor penalties for missing WHOIS data and security policy disclosures. Strategic recommendations include enhancing security headers, publishing a security policy, and improving WHOIS transparency to bolster trust and compliance.

D

Deutscher Verband Technisch-Wissenschaftlicher Vereine e. V.

dvt-net.de

58

The Deutscher Verband Technisch-Wissenschaftlicher Vereine e. V. (DVT) is a non-profit organization representing German engineering and technical sciences interests both nationally and internationally. It actively participates in European engineering associations and advocates for the recognition of technical professional qualifications. The website targets engineers, technical professionals, and related organizations within Germany, providing information about its mission, goals, and organizational structure. Technically, the website is built on the TYPO3 CMS platform, utilizing modern web technologies including jQuery, Bootstrap, and various JavaScript libraries for enhanced user experience. It employs Cookiebot for GDPR-compliant cookie consent management and integrates Google Tag Manager for analytics and tracking. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses recognized consent management tools, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. The domain registration data is consistent with the organization's profile, indicating legitimacy and trustworthiness. Overall, the website presents a professional and trustworthy digital presence suitable for its non-profit and technical audience. Strategic improvements could include publishing detailed security policies, implementing additional security headers, and providing clearer contact information for security incidents.

D

Deutsches Rotes Kreuz

drk-intern.de

58

The website www.drk-intern.de serves as an internal portal for the Deutsches Rotes Kreuz (German Red Cross), a large non-profit humanitarian organization in Germany. It provides access to various internal services such as knowledge databases, user management, service databases, and other organizational resources. The platform targets employees and members of the DRK, facilitating operational efficiency and information sharing within the organization. The site is well-branded with consistent use of official logos and links to subsidiary and partner domains, reinforcing its legitimacy and trustworthiness. Technically, the site is built on TYPO3 CMS and employs modern frontend libraries including jQuery, Foundation, and LightGallery. Hosting appears stable with dedicated nameservers, and the site uses HTTPS with a cookie consent mechanism powered by CCM19, indicating compliance with privacy regulations. Performance and mobile optimization are moderate to good, though accessibility and SEO could be improved further. From a security perspective, the site enforces HTTPS and uses secure login portals for internal services. However, explicit security headers and published security policies or incident response information are absent. No vulnerabilities or exposed sensitive data were detected in the content. The domain WHOIS data aligns well with the organization, supporting a high legitimacy score. Overall, the website is professional, secure, and compliant with GDPR, serving its internal audience effectively. Recommendations include enhancing security headers, publishing security and incident response policies, improving accessibility, and expanding SEO metadata to further strengthen the platform's security posture and user experience.

The website kurse-pflege.de is an online platform focused on providing nursing and caregiving courses primarily in the German language. It targets individuals seeking professional education and certification in healthcare and emergency care. The platform offers various training modules and educational content tailored to caregivers and healthcare professionals. The market position is that of a niche healthcare education provider serving the German-speaking community. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and video playback libraries such as Video.js. The site shows moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. Security posture is basic with no evident security headers or advanced configurations, and no HTTPS status was explicitly found in the provided data. Privacy compliance is weak as no privacy or cookie policies were detected, and no GDPR compliance indicators are present. Business credibility is moderate but limited by the lack of explicit contact information and trust signals. Overall, the site is accessible and safe for general audiences but requires improvements in privacy, security, and business transparency to enhance trust and compliance.

The website www.drk-blutspende.de serves as the official platform for the DRK-Blutspendedienste, the blood donation services under the German Red Cross. It provides comprehensive information about blood donation, appointment scheduling, and donor services, targeting the general public in Germany. The site is well-branded, consistent, and professionally designed, reflecting its position as a leading non-profit healthcare service provider. Technically, the site employs modern JavaScript libraries such as Swiper.js and AOS for UI enhancements, uses Matomo for analytics, and integrates a consent management platform to comply with GDPR requirements. The presence of CSRF tokens and HTTPS indicates a good security posture, although some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the site demonstrates a mature digital infrastructure suitable for its healthcare and non-profit mission.

Caritas international is a large German non-profit humanitarian aid organization operating under the Deutscher Caritasverband e.V. umbrella. The website serves as an information and donation platform supporting vulnerable populations worldwide in crises, conflicts, and natural disasters. It emphasizes transparency, trust, and social justice, supported by certifications such as the DZI Spendensiegel. The target audience includes donors, partners, and beneficiaries. Technically, the site uses a modern stack including AngularJS, jQuery, and slick carousel, hosted on freinet.zone with CDN support. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security headers and vulnerability disclosure policies are absent. Overall, the site is professional, trustworthy, and compliant with GDPR, with moderate user tracking via Google Tag Manager and Facebook Pixel.

CariNet operates as a digital service platform primarily serving the Caritas non-profit organization network in Germany. The website offers a range of services including a content management system (CMS 3.0), job and internship boards, data pool utilization, and online social consultation. It emphasizes accessibility and digital inclusion, aligning with upcoming legal requirements. The platform targets Caritas affiliates and social service providers, positioning itself as a niche service provider within the non-profit sector. Technically, the site uses modern JavaScript frameworks such as AngularJS and jQuery, integrates a cookie consent manager (Klaro), and employs a trusted SSL certificate from Sectigo, ensuring secure communications. The website is mobile-optimized, accessible, and SEO-friendly, with good content quality and consistent branding. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit security policies are absent. No critical vulnerabilities or exposed sensitive data were detected. Overall, CariNet presents a trustworthy and professional digital platform supporting the Caritas network's digital transformation and service delivery.

R

rbb Rundfunk Berlin-Brandenburg

rbb-online.de

54

rbb24 is a well-established multimedia news portal serving the Berlin and Brandenburg regions, operated by the public broadcaster Rundfunk Berlin-Brandenburg (rbb). The website offers comprehensive news coverage including politics, economy, culture, sports, and panorama, supported by video and audio content. It maintains a strong digital presence with official social media channels and uses modern web technologies and a professional CMS platform, ensuring a high-quality user experience. The site is well-branded and trusted within its regional market.

Z

Zentralrat der Juden in Deutschland K.d.ö.R.

juedische-allgemeine.de

53

Jüdische Allgemeine is a well-established German weekly newspaper focusing on politics, culture, religion, and Jewish life. It operates under the Zentralrat der Juden in Deutschland K.d.ö.R., serving primarily the German-speaking Jewish community and interested audiences. The website offers rich content including news, opinion pieces, and cultural commentary, supported by subscription models for print and digital editions. The brand maintains consistent and professional presentation with strong social media engagement.

Z

Zentralwohlfahrtsstelle der Juden in Deutschland e.V.

zwst-difd.de

40

The Deutsch-Israelischer Freiwilligendienst (DIFD) is a non-profit volunteer exchange program operated by the Zentralwohlfahrtsstelle der Juden in Deutschland e.V., established in 2015. It facilitates 6 to 18 month volunteer placements for young adults aged 18-26 between Germany and Israel, focusing on social and educational institutions. The website is professionally designed using WordPress with the Avada theme and Fusion Builder, supporting multilingual content in German, English, and Hebrew. It demonstrates good digital maturity with SEO optimization and mobile responsiveness. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response information are absent. WHOIS data confirms domain legitimacy and consistency with the organization's identity. Overall, the site effectively supports its mission with clear content and trustworthy presentation.

K

Kompetenzzentrum für antisemitismuskritische Bildung und Forschung

zwst-kompetenzzentrum.de

57

The Kompetenzzentrum für antisemitismuskritische Bildung und Forschung is a specialized non-profit educational and research center based in Germany, focusing on antisemitism-critical education and research. It offers a range of services including educational programs, research studies, publications, and events targeted at educators, researchers, and civil society. The website is professionally designed using WordPress with Elementor and Astra theme, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and safe practices, though it lacks some advanced security headers and explicit security policies. Privacy compliance is good with a comprehensive privacy policy but missing a cookie consent mechanism. Overall, the domain and website content are consistent and trustworthy, affiliated with the Zentralwohlfahrtsstelle der Juden in Deutschland (ZWST).

M

MitzveNow

mitzvenow.de

57

MitzveNow is a specialized e-commerce platform based in Germany, offering a curated selection of Jewish religious and cultural products such as Schabbat sets, Judaica, kosher wines, and prayer books. The website targets the Jewish community and individuals interested in Jewish traditions, providing both one-time purchases and subscription services. The business operates in a niche retail market with a clear focus on cultural and religious needs. Technically, the site is built on WordPress with WooCommerce and several extensions tailored for the German market, including WooCommerce Germanized and subscription management plugins. The site demonstrates good digital maturity with SEO optimization, mobile responsiveness, and accessibility considerations. Security posture is strong with HTTPS enforced and multiple security headers present, although there is room for improvement in publishing explicit security policies and incident response information. Privacy compliance is generally good, with a comprehensive privacy policy available, but lacks a cookie consent mechanism which is important for EU regulations. Overall, the website is professional, trustworthy, and well-positioned within its market niche.

B

Brunnen Verlag GmbH

brunnen-verlag.de

60

Brunnen Verlag GmbH operates as a German publishing company specializing in books, gifts, cards, and calendars with a focus on spiritual and religious content. Their e-commerce platform is built on Magento, offering a range of products to German-speaking customers. The website demonstrates a moderate level of digital maturity with a modern tech stack including RequireJS, jQuery, KnockoutJS, and Matomo analytics. Social media integration and a Trusted Shops widget enhance customer trust. Security posture is adequate with HTTPS and CAPTCHA protections, but lacks security headers and published privacy or cookie policies, indicating room for improvement in compliance and security transparency. Overall, the site is functional, safe, and professionally presented but would benefit from enhanced privacy and security disclosures.

I

ICF München

icf-muenchen.de

49

ICF München is a non-profit, interdenominational free church based in Munich, Germany, focused on providing dynamic, contemporary church experiences. The website reflects a small to medium-sized community organization with a clear religious mission and outreach through services and events. The site is professionally designed with consistent branding and good content relevance, targeting a general audience interested in church activities and community engagement. Technically, the website is built on WordPress using popular themes and includes modern tracking tools such as Google Analytics and Facebook Pixel, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks explicit security policies, vulnerability disclosures, and incident response information, which are recommended for improved trust and compliance. Overall, the website is safe, trustworthy, and functional, but could benefit from enhanced privacy and security transparency.

Ö

Ökumenische Arbeitsgemeinschaft für Bibellesen (ÖAB)

oeab.de

42

The Ökumenische Arbeitsgemeinschaft für Bibellesen (ÖAB) is a small non-profit organization based in Germany focused on providing ecumenical Bible reading resources such as monthly and yearly Bible verses, reading plans, and related publications. Their website serves as an informational hub for their community, offering downloadable graphics, flyers, and links to related religious content. Technically, the site is built on TYPO3 CMS with Bootstrap styling and uses Matomo analytics configured to respect user privacy by disabling cookies. The site is accessible, mobile-optimized, and well-structured, though it lacks some modern security headers and cookie consent mechanisms. Security posture is moderate with room for improvement in published policies and headers. Overall, the domain and website appear legitimate and trustworthy for their niche audience.

B

bibletunes.de – Die Bibel im Ohr!

bibletunes.de

50

bibletunes.de is a German-language media platform specializing in daily Bible podcasts and audio books, targeting Christian listeners interested in spiritual growth and Bible study. The platform offers a wide range of audio content from both the Old and New Testament, including special topic podcasts and news. The business model is primarily content publishing supported by donations, facilitated through an integrated Stripe payment gateway. The website is built on WordPress with modern web technologies and provides a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. No privacy policy or terms of service pages were detected, which is a compliance gap. Overall, the site is trustworthy, professional, and safe for general audiences.

B

Bibellesebund Deutschland

bibellesebund.de

57

Bibellesebund Deutschland is a medium-sized non-profit religious organization focused on encouraging people of all ages to engage with the Bible through various educational and spiritual resources. Their offerings include printed and digital Bible reading materials, events, seminars, youth and family retreats, and a podcast. The organization is part of the international Scripture Union movement and maintains a professional web presence with clear branding and consistent messaging. Technically, the website is built on the Contao CMS platform with modern JavaScript libraries and provides a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS, CSRF protection, and cookie consent mechanisms, though some security headers and explicit policies could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie management. Overall, the site is trustworthy, well-maintained, and serves its target audience effectively.

V

visiomedia Studios

visiomedia.org

59

visiomedia Studios is a German-based videomarketing agency specializing in creative storytelling through various video formats including 2D and 3D animations, product visualizations, VFX, and motion graphics. The company targets businesses and individuals seeking professional video marketing solutions to effectively communicate their stories and products. Their market position is that of a niche creative agency with a strong portfolio showcasing diverse video projects. Technically, the website is built on WordPress using Fusion Builder and includes GDPR-compliant cookie consent mechanisms via the Complianz plugin. Hosting is provided by one.com, a common provider for small businesses. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and incident response information. Privacy compliance is partial due to the absence of a dedicated privacy policy page. Overall, the website is professional, well-designed, and user-friendly, with good mobile optimization and SEO practices. No suspicious or malicious content was detected, and the site is fully accessible without WAF or blocking mechanisms.

D

Der Bibel vertrauen | Karl-Heinz Vanheiden

derbibelvertrauen.de

64

Der Bibel vertrauen | Karl-Heinz Vanheiden is a German-language religious and theological website focused on Bible study, theological questions, and Christian education. The site offers blog articles, book reviews, and resources related to biblical topics, targeting German-speaking Christian readers interested in deepening their understanding of the Bible and theology. The business model centers on content publishing and educational outreach within a niche religious market. Technically, the website is built on Joomla CMS with modern frontend technologies including Bootstrap, jQuery, and Usercentrics for cookie consent management. The site demonstrates good mobile optimization and SEO practices, with structured data implemented for enhanced search engine understanding. Performance is moderate, and accessibility is basic but functional. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. The domain registration data is consistent and trustworthy, with no privacy protection or suspicious patterns noted. Overall, the website is professional, trustworthy, and well-structured, with good content quality and user experience. The absence of direct contact information and formal security policies suggests room for improvement in transparency and security posture. The site is safe for general audiences and does not contain any adult or explicit content.

K

Katholisches Bibelwerk e. V.

bibelwerk.de

48

Das Bibelwerk is a German non-profit organization focused on providing serious and lively biblical interpretation and education. It operates through two main entities: the Katholisches Bibelwerk e. V. and the Verlag Katholisches Bibelwerk GmbH, offering publishing and retail services via its online shop. The website serves as a portal linking to these entities and related services, targeting religious communities and individuals interested in biblical studies. Technically, the site is built on TYPO3 CMS with moderate performance and good mobile optimization, using Umami Analytics for minimal user tracking. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit privacy or cookie policies. No contact information or forms are present on the analyzed page, limiting direct user engagement. WHOIS data aligns with the website's claims, showing consistent domain registration without privacy protection, supporting legitimacy. Overall, the site is professional and trustworthy but could improve privacy compliance and security practices.

S

SCM Verlagsgruppe

scm-verlag.de

66

SCM-Shop.de is a professional e-commerce website operated by the SCM Verlagsgruppe, specializing in Christian books, music, gifts, and related products. The site targets Christian readers and customers in Germany, offering a broad catalog with convenient features such as free shipping over a threshold and a customer service hotline. The business model is retail-focused with an established market presence in the religious publishing sector. The website demonstrates consistent branding and good content quality, supporting a trustworthy user experience. Technically, the site is built on Magento, a robust e-commerce platform, enhanced with modern JavaScript libraries like jQuery and integrated search via Doofinder. Analytics are implemented using Google Analytics and Matomo, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, though hosting provider details are not explicitly disclosed. From a security perspective, the website enforces HTTPS and includes cookie consent mechanisms aligned with GDPR requirements. While some security headers are not explicitly detected, the site uses secure login forms with CSRF tokens and avoids exposing sensitive data. No vulnerabilities or security incidents are evident. However, publishing a dedicated security policy and security.txt file would enhance transparency and incident response readiness. Overall, SCM-Shop.de presents a low-risk profile with strong business credibility and compliance posture. Strategic recommendations include enhancing security headers, formalizing incident response documentation, and maintaining up-to-date third-party components to sustain security and trust.

Die-Bibel.de is the official online portal of the Deutsche Bibelgesellschaft, a German non-profit organization dedicated to translating, distributing, and educating about the Bible. The website offers a wide range of Bible translations, scholarly resources, reading plans, and educational content aimed at both the general public and theological professionals. It also supports global Bible distribution projects through its World Bible Aid initiative. The organization holds a strong market position as a leading Bible society in Germany with a clear mission and trusted brand presence. Technically, the website is built on a modern Angular framework with robust integrations including Google reCAPTCHA, Google Tag Manager, and various analytics and marketing tools. It is hosted on reliable cloud infrastructure, optimized for performance, mobile responsiveness, and accessibility. The site employs security best practices such as HTTPS and Content Security Policy, though there is room for improvement in additional security headers and incident response transparency. From a security perspective, the site demonstrates a mature posture with no critical vulnerabilities detected. Privacy compliance is well addressed with comprehensive privacy and cookie policies aligned with GDPR requirements. Contact information is clearly provided, enhancing business credibility and user trust. Overall, Die-Bibel.de is a professionally managed, secure, and user-friendly platform that effectively serves its mission and audience. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and improving incident response contact visibility to further strengthen trust and resilience.

M

midi - Evangelische Arbeitsstelle für missionarische Dienste und Innovation in der Diakonie

mi-di.de

57

midi is a non-profit organization serving as a future workshop for church and diaconal innovation in Germany. It provides research, publications, workshops, and networking opportunities targeted at church and diaconal actors. The organization is affiliated with the Evangelisches Werk für Diakonie und Entwicklung e.V. and partners with major church bodies such as EKD and Diakonie. The website is professionally designed, content-rich, and regularly updated, reflecting a strong market position within its niche. Technically, the website uses modern web standards with HTML5, CSS3, and JavaScript, and integrates Matomo for analytics. Hosting is managed via INWX nameservers. The site is mobile-optimized and performs moderately well, though accessibility features are basic. SEO practices are good with proper meta tags and Open Graph data. Security posture is solid with HTTPS enforced and secure form handling, but lacks some advanced security headers and a cookie consent mechanism. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good with a comprehensive privacy policy and GDPR consent on forms, but cookie policy and terms of service are missing. Overall, midi presents a trustworthy and professional online presence with minor areas for improvement in privacy and security transparency. Strategic enhancements in cookie consent and security headers would further strengthen compliance and user trust.

D

Deutscher Bundestag

deutscher-bundestag.de

63

The Deutscher Bundestag website serves as the official online presence of the German Parliament, providing comprehensive information about parliamentary activities, members, agendas, and live streams. It targets the general public and stakeholders interested in governmental affairs. The site is positioned as a key governmental information portal in Germany, offering essential services related to legislative transparency and public engagement. Technically, the website employs standard web technologies including HTML5, CSS, and JavaScript, with custom styling and scripts. It uses HTTPS for secure communication and integrates Matomo analytics for user tracking. The site appears to be well-structured with good mobile optimization and SEO practices, although no common CMS or hosting provider details are evident from the data. From a security perspective, the site benefits from HTTPS and Google site verification, indicating legitimacy and basic security hygiene. However, the absence of explicit security headers, privacy and cookie policies, and incident response contacts suggests room for improvement in security posture and compliance. No WAF or blocking mechanisms were detected, and the content is fully accessible. Overall, the website is a credible and authoritative source of governmental information with good content quality and business credibility. Strategic enhancements in privacy compliance, security headers, and incident response transparency would further strengthen its security and trustworthiness.

Z

Zentralwohlfahrtsstelle der Juden in Deutschland e.V.

zwst.org

52

The Zentralwohlfahrtsstelle der Juden in Deutschland e.V. (ZWST) is a well-established non-profit organization serving as the social umbrella for Jewish welfare in Germany since 1917. The website reflects a mature and professional digital presence, offering comprehensive information about their social welfare services, youth programs, inclusion initiatives, humanitarian aid, and professional training. Their market position is strong within the German social welfare sector, supported by memberships and certifications that enhance trust and credibility. The target audience includes Jewish communities, volunteers, social workers, and the general public interested in Jewish social welfare.

W

Wohnraumkarte GmbH

wohnraumkarte.de

48

Wohnraumkarte GmbH is a German software company specializing in providing software solutions for the real estate industry, primarily through widgets and mapping tools integrated with OpenStreetMap and Mapbox. The website serves as a platform for property listings with filtering and mapping capabilities, targeting real estate professionals and clients in Germany. The business model is focused on Software as a Service (SaaS) offerings tailored to the real estate sector. Technically, the website employs modern JavaScript libraries such as Leaflet.js and Mapbox GL JS for interactive mapping, alongside jQuery and other UI libraries like Slick Carousel and PhotoSwipe. Hosting is managed via Amazon AWS infrastructure, as indicated by the DNS nameservers. The site demonstrates moderate performance and basic mobile optimization, with room for improvement in accessibility and SEO practices. From a security perspective, the site uses HTTPS and avoids exposing sensitive data in the HTML. However, it lacks visible security headers, privacy and cookie policies, and contact information for incident response, which are important for compliance and trust. No WAF or blocking mechanisms were detected, and no vulnerabilities were apparent in the provided content. Overall, the website is professionally designed and functional but would benefit from enhanced privacy compliance, security hardening, and clearer contact channels to improve trust and regulatory adherence.

B

BUWOG Immobilien Treuhand GmbH

buwog-immobilientreuhand.de

44

BUWOG Immobilien Treuhand GmbH operates in the real estate sector, providing property management and related services to tenants, property owners, and investors. The company positions itself as an important player within the German real estate market, with a professional online presence that targets a broad audience including tenants and investors. The website content is well-structured and professionally designed, reflecting a medium-sized enterprise with consistent branding and clear business focus. Technically, the website is hosted on Microsoft Azure infrastructure, utilizing Azure DNS and Cookiebot for cookie consent management. The site employs modern web technologies including JavaScript and CSS, and demonstrates good mobile optimization and SEO practices. However, some advanced security headers and explicit privacy policy documentation are missing, which could be improved to enhance compliance and security posture. From a security perspective, the website benefits from HTTPS encryption and a robust cookie consent mechanism, indicating awareness of GDPR and privacy requirements. No critical vulnerabilities or suspicious patterns were detected in the WHOIS data or website content. Nonetheless, the absence of explicit privacy policies, terms of service, and incident response contacts suggests room for improvement in transparency and user trust. Overall, the website presents a trustworthy and professional image with moderate technical maturity and compliance. Strategic enhancements in privacy documentation, security headers, and contact transparency would further strengthen its security posture and regulatory compliance.

V

Vonovia SE

hand-aufs-werk.de

70

Vonovia SE is a leading real estate company based in Germany, specializing in property management and housing services. The analyzed page 'Hand aufs Werk' is part of their career section, targeting individuals interested in hands-on roles within the company. The website demonstrates a professional and consistent brand presence with a focus on user experience and compliance with cookie consent regulations. Technically, the site uses modern web technologies including JavaScript frameworks and Cookiebot for privacy management. Analytics tools such as Econda and Google services are employed to monitor user interactions. Security posture is moderate with cookie consent implemented but lacks visible security headers and incident response contacts. WHOIS data is missing or inaccessible, which raises some concerns about domain registration transparency but does not detract from the apparent legitimacy of the business. Overall, the website is well-structured, secure, and compliant with privacy norms, serving a large enterprise audience in the real estate sector.

E

ecowo GmbH

ecowo.de

69

ecowo GmbH is a medium-sized real estate management company based in Germany, affiliated with the large real estate group Vonovia SE. The company specializes in property management services including condominium and rental property administration, positioning itself as a leading expert in the German real estate market. The website content is professional, primarily in German, and targets property owners and tenants within Germany. Technically, the website is hosted on Microsoft Azure infrastructure, uses modern web standards, and integrates Cookiebot for GDPR-compliant cookie consent management. The site demonstrates good mobile optimization and SEO practices but lacks explicit privacy policy and terms of service pages in the analyzed content. Security posture is moderate with HTTPS enforced and cookie consent implemented, but missing explicit security headers and incident response information. Overall, the domain registration and DNS setup are consistent with the business claims, indicating a legitimate and trustworthy entity.

V

Vonovia SE

hier-ist-zuhause.de

57

Vonovia SE operates the website hier-ist-zuhause.de, which promotes a contest themed around reasons to love home. As a leading real estate company in Germany, Vonovia provides property management and housing services targeting residents and tenants. The website reflects a professional corporate identity with consistent branding and a focus on tenant engagement. Technically, the site uses modern infrastructure including Azure DNS and Cookiebot for cookie consent management, ensuring GDPR compliance and user privacy. Security posture is strong with HTTPS and no visible vulnerabilities, though explicit security and incident response policies are not published. Overall, the site is well-structured, mobile-optimized, and trustworthy, serving an enterprise-level audience in the real estate sector.

F

Fidelity International

fidelity.de

69

Fidelity International operates a comprehensive German website offering global investment and asset management solutions. The company targets institutional and private investors, providing a wide range of financial products including funds, ETFs, and robo-advisory services. The website demonstrates a mature digital presence with modern technologies and good user experience. Security posture is strong with HTTPS and data protection policies, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site reflects a reputable financial institution with consistent branding and compliance with GDPR.

K

KiKA

kikaninchen.de

48

KiKANiNCHEN is a well-established multimedia preschool platform operated under the KiKA brand, a joint venture of German public broadcasters ARD and ZDF. The website offers a rich variety of children's TV series videos, online games, craft ideas, and songs tailored for toddlers and preschool children, positioning itself as a trusted educational and entertainment resource in the German media landscape. The platform targets young children and their parents, providing a safe and ad-free environment for early online experiences. Technically, the site employs modern web standards including HTML5, CSS, JavaScript, and structured data (JSON-LD) to enhance SEO and accessibility, though mobile optimization and accessibility features are basic and could be improved. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks visible security headers and formal security policies, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of explicit privacy and cookie policies, which is a critical area for improvement given GDPR requirements. Overall, the website demonstrates high business credibility and content quality but should strengthen its privacy and security posture to align with best practices.

Dresden 360 Grad Stadtrundgang is a specialized virtual tourism platform offering immersive 360° city tours of Dresden and its surrounding Elbland region. The website targets tourists and visitors interested in exploring Dresden's cultural and historical highlights through virtual reality experiences. The business operates a small but focused model promoting tourism and event venues with dedicated subdomains for different tour categories. Technically, the site is built on WordPress using the Divi theme, enhanced with Yoast SEO and Borlabs Cookie for GDPR compliance. The infrastructure is modern and mobile-optimized, providing a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though improvements like enabling DNSSEC and adding security headers are recommended. No critical vulnerabilities or suspicious content were detected, and privacy compliance is well addressed with a comprehensive privacy policy and cookie management. Overall, the site presents a trustworthy and professional digital presence in the hospitality and tourism sector.