Germany security reports

I

Info Networking GmbH

inet-mainz.de

42

INFO Networking GmbH is a German IT service provider specializing in web services, app development, domain hosting, and print product design. Established in 1996, the company serves primarily business clients, with a strong focus on customized software solutions and specialized offerings for the tourism sector. Their website reflects a professional and consistent brand image with clear service descriptions and accessible contact information. Technically, the site is built on WordPress using a custom theme and standard plugins, hosted likely via Deutsche Telekom infrastructure. The site is mobile-optimized and performs moderately well. From a security perspective, the website employs HTTPS and secure contact forms but lacks visible security headers and explicit incident response or vulnerability disclosure policies. Privacy compliance is partially addressed with a privacy policy and terms of service pages, though no cookie consent mechanism is evident. The WHOIS data is minimal but domain age aligns with the company's claimed history, supporting legitimacy. Overall, the website presents a trustworthy and professional digital presence with room for improvement in security best practices and privacy transparency. There are no indications of malicious content or blocking mechanisms, enabling full content accessibility and analysis.

A

Arbeitsgemeinschaft der Wissenschaftlichen Medizinischen Fachgesellschaften e. V.

awmf.org

55

The Arbeitsgemeinschaft der Wissenschaftlichen Medizinischen Fachgesellschaften e. V. (AWMF) is a prominent non-profit network of scientific medical societies in Germany. It focuses on the development, publication, and coordination of high-quality medical guidelines, serving as a central hub for medical professionals and scientific societies. The website reflects a professional and well-structured platform that supports its mission through guideline registers, events, and publications. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies with good mobile optimization and SEO practices. Security posture is moderate, with HTTPS usage but lacking explicit security headers and privacy policies. The absence of visible contact information and WHOIS data limits full verification but does not detract from the site's credibility given its professional content and external affiliations. Overall, the site is trustworthy, well-positioned in the healthcare sector, and serves a specialized audience effectively.

Bethesda.net is a well-established digital platform operated by Bethesda, a major player in the gaming industry and subsidiary of ZeniMax Media. The website serves as a hub for game distribution, community engagement, mod hosting, news, and support primarily targeting German-speaking gamers. The platform leverages modern web technologies including React and Contentful CMS, hosted on AWS infrastructure, and integrates Google Analytics and OneTrust for analytics and privacy compliance. Security posture is solid with HTTPS enforced and domain registration consistent with corporate standards, though DNSSEC is not enabled and security headers are not explicitly detected. The site demonstrates good privacy compliance with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-structured, with no indications of adult or unsafe content.

W

Weimarhalle

weimarhalle.de

58

Weimarhalle is a medium-sized event venue and congress center located in Weimar, Germany, offering versatile and individual event hosting services including conferences, cultural events, and celebrations. The website is built on the Liferay CMS platform with modern web technologies such as React and YUI, and includes interactive features like 360-degree virtual tours. The site is HTTPS secured and uses Matomo for analytics, indicating a moderate level of digital maturity. However, the absence of explicit privacy and cookie policies, as well as limited visible contact information, suggests room for improvement in privacy compliance and user trust. Security posture is adequate but could benefit from enhanced security headers and published security policies. Overall, the website presents a professional and user-friendly experience suitable for its target audience of event organizers and visitors.

I

Indie Game Fest

indiegamefest.de

42

Indie Game Fest is a niche event organizer focused on celebrating indie games in Cologne, Germany. The website serves as an information hub for event details, ticketing, and community engagement. The business targets indie game developers, gamers, and industry professionals primarily in Europe. The event is positioned as a creative and collaborative platform within the indie gaming community. Technically, the website is built on WordPress with Elementor and uses modern web technologies including Bootstrap and Google services. It demonstrates good SEO and mobile optimization. Security posture is strong with HTTPS, security headers, and GDPR-compliant cookie consent, though lacks explicit security policies or incident response information. Overall, the site is professional, trustworthy, and compliant with privacy regulations, supporting a positive user experience and business credibility.

G

gamesweekberlin

qvconf.com

43

gamesweekberlin is a prominent European event platform dedicated to the gaming industry, combining multiple events over a week to foster communication, networking, and cultural exchange among game developers, publishers, investors, media professionals, and enthusiasts. The website reflects a professional and consistent brand presence with a focus on event promotion and industry engagement. Technically, the site is built on WordPress with a modern tech stack including popular plugins and a premium theme, offering good mobile optimization and SEO practices. Security posture is moderate with HTTPS usage but lacks explicit security headers and published privacy or terms policies. The absence of WHOIS registration data raises concerns about domain legitimacy, though the site content and social media presence indicate a credible business. Overall, the site is well-designed and functional but would benefit from enhanced transparency and security practices.

W

weimar GmbH Gesellschaft für Wirtschaftsförderung, Kongress- und Tourismusservice

weimar-gmbh.com

55

The weimar GmbH is the official marketing and tourism service company for the city of Weimar, Germany. It operates key city assets such as the congress centrum weimarhalle and the Tourist Information Weimar. The company focuses on tourism promotion, city marketing, and event management, targeting tourists, local businesses, and residents interested in cultural and economic activities. The website reflects a professional and consistent brand presence with good content quality and clear navigation. Technically, the website is built on TYPO3 CMS and leverages modern JavaScript libraries including jQuery, Bootstrap, and accessibility tools like eyeAble. The site is mobile-optimized and includes SEO best practices. Performance is moderate, with asynchronous loading of scripts and responsive images enhancing user experience. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR. However, no explicit security policies or incident response information are published, and no security headers were detected in the HTML. The absence of WHOIS registration data for the domain is a notable concern, impacting the overall trustworthiness assessment. Overall, the website is safe, professional, and compliant with privacy regulations but would benefit from enhanced transparency regarding domain registration and security policies to improve trust and security posture.

B

Braun

braunhousehold.com

71

Braun Household Appliances presents itself as a premium German brand specializing in electrical household devices, emphasizing design, innovation, and customer satisfaction. The website is professionally designed with good content quality and consistent branding, targeting a general consumer audience interested in high-quality household appliances. The technical infrastructure leverages modern web technologies including Google Tag Manager for analytics, Gigya for identity management, and TrustArc for cookie consent, indicating a mature digital presence. Security posture is adequate with HTTPS enforced and consent mechanisms in place, but lacks visible security headers and explicit security policies, which could be improved. The absence of WHOIS registration data is a notable anomaly that may indicate privacy protection or data unavailability, requiring further verification to confirm domain legitimacy. Overall, the website is functional and trustworthy from a user perspective but could enhance transparency and security documentation.

H

Harman International Industries, Incorporated

harmanaudio.com

61

Harman Audio operates a localized German e-commerce website offering a wide range of audio products under well-known brands such as JBL, Harman Kardon, AKG, and InfinityLab. The site targets consumers and professionals in the European market, providing product sales, customer support, and personalization services. The website is built on Salesforce Commerce Cloud with integrations for analytics, marketing, and payment processing, reflecting a mature digital infrastructure. Security measures include HTTPS, bot protection, and fraud prevention services, although explicit security headers could be further verified. Privacy compliance is robust with clear cookie consent mechanisms and GDPR-aligned policies. Overall, the site presents a professional, trustworthy, and user-friendly experience consistent with a large enterprise retail operation.

A

Allianz ELIANT

eliant.eu

47

Allianz ELIANT is a European non-profit alliance focused on promoting and preserving anthroposophical cultural initiatives across the EU. Founded in 2006 and active as an NGO in Brussels since 2012, it advocates for cultural diversity, education, and integrative medicine. The website is built on WordPress with modern plugins and multilingual support, providing rich content and event information. Security posture is good with HTTPS and cookie consent, but lacks published privacy and security policies. Social media presence is strong, supporting community engagement.

W

Wolf Waagen GmbH & Co. KG

wolf-waagen.de

48

Wolf Waagen GmbH & Co. KG operates a specialized website focused on manufacturing and selling precise beehive scales, related software, and accessories to support modern beekeeping practices. The company targets beekeepers and agricultural professionals seeking digital monitoring solutions for their bee colonies. The website demonstrates a niche market position with a clear business model centered on hardware and software integration for beekeeping. Technically, the website is built on WordPress using popular plugins such as WPBakery Page Builder, Slider Revolution, Yoast SEO, and WPML for multilingual support. Hosting is provided by 1&1 IONOS as inferred from the nameservers. The site shows good mobile optimization, moderate performance, and solid SEO practices, indicating a mature digital infrastructure. From a security perspective, the site uses HTTPS and a cookie consent mechanism compliant with GDPR. While explicit security headers are not fully confirmed, no critical vulnerabilities or exposed sensitive data were detected. The absence of a public security policy or incident response contact is noted but not uncommon for small businesses. Overall, the website is professional, trustworthy, and compliant with privacy regulations. It effectively supports the company's business goals and provides a positive user experience. Strategic improvements in security headers and incident response transparency could further enhance trust and resilience.

A

Ardevar Ltd

emirbet.co

10

EmirBet is an online gambling platform launched in 2021, offering a variety of betting services including sports betting, casino games, live casino, virtual sports, and esports. The platform targets German-speaking users and provides localized content with a focus on the European market. The business operates under Ardevar Ltd, which is referenced in the website footer and branding. The website is professionally designed with good navigation and mobile optimization, providing a positive user experience for its target adult audience. The business model centers on online gambling and betting services, with revenue generated through betting activities and casino games.

The website 'PlayIO' hosted at playio465768.com is a newly created domain (April 2024) with minimal content and no visible business or contact information. The site appears to be a gaming-related platform based on the title but lacks any descriptive or service-related content. The technical infrastructure shows use of Cloudflare DNS and Google Fonts but no CMS or advanced frameworks are detected. Security posture is weak with no HTTPS or security headers evident, and no privacy or cookie policies are present. The domain WHOIS data is minimal and does not provide registrant details, which reduces trust. Overall, the site is low maturity and low trust, with significant gaps in compliance and security.

The website 'Dragonia' hosted on dragonia2.com is accessible and primarily serves German-speaking users. The site appears to be related to gaming or entertainment, as inferred from the title and font usage, but lacks explicit business descriptions or contact information. The technical infrastructure leverages Cloudflare for DNS and hosting, and Google Fonts for typography, indicating a modern but basic setup. However, the absence of privacy, cookie, and terms of service policies, as well as contact details, limits its professionalism and compliance posture. Security-wise, HTTPS is enabled, but no advanced security headers or DNSSEC are implemented, which could be improved to enhance protection. The WHOIS data is inconsistent, showing a domain creation date in the future, which raises concerns about legitimacy and domain age appropriateness. Overall, the website scores moderately on technical and security aspects but falls short on privacy compliance and business credibility.

The website pistolo1.com/de/ appears to be a newly created site with minimal content and limited business information. The domain was registered in January 2025, consistent with the website's build date in October 2025. The site uses Cloudflare DNS and Google Fonts but lacks common business trust indicators such as privacy policies, contact information, or social media presence. The technical infrastructure is basic with no detected CMS or frameworks. Security posture is limited, with no security headers or advanced configurations detected, and no GDPR compliance indicators present. Overall, the site appears to be in an early development or placeholder stage, with low business credibility and limited content quality.

R

rioplay Casino – Beste Online-Casino-Spiele und -Boni

rioplay.com

54

Rioplay.com is an established online gambling platform, primarily targeting German-speaking users with a broad offering of casino games, live casino, sports betting, and promotional events. The platform leverages modern web technologies such as ReactJS and integrates multiple marketing and tracking tools including Google Tag Manager, Facebook Pixel, and Hotjar. The domain is well aged, registered since 2005 with GoDaddy, and uses Cloudflare DNS services, indicating a stable and legitimate online presence. Security posture is adequate with HTTPS enabled and domain status protections, but lacks DNSSEC and visible security headers, which are recommended for enhanced security. Privacy compliance is weak due to the absence of explicit privacy and cookie policies or consent mechanisms. Contact information is not readily available in the HTML content, which may impact user trust and regulatory compliance. Overall, the website is professional and functional but would benefit from improved privacy and security practices.

W

weimar GmbH Gesellschaft für Wirtschaftsförderung, Kongress- und Tourismusservice

weimar.de

52

The website www.weimar.de serves as the official digital portal for the city of Weimar, Germany, managed by weimar GmbH Gesellschaft für Wirtschaftsförderung, Kongress- und Tourismusservice. It provides extensive information on cultural events, tourism, city administration, and economic activities, targeting residents, tourists, and local businesses. The site is well-positioned as a trusted source for city-related services and cultural promotion, leveraging a public service business model focused on tourism and community engagement. Technically, the site is built on TYPO3 CMS with a modern frontend stack including jQuery and Bootstrap, delivering a responsive and accessible user experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though it lacks some advanced security headers and explicit incident response policies. Overall, the site demonstrates a high level of professionalism, compliance with GDPR, and effective use of analytics while maintaining user privacy. Strategic improvements could focus on enhancing security headers, publishing security policies, and providing clearer direct contact information to further strengthen trust and compliance.

M

MUSIKFONDS E.V.

musikfonds.de

50

Musikfonds e.V. is a German non-profit organization dedicated to supporting contemporary music projects through funding programs, events, and networking. The website reflects a well-established cultural institution with governmental backing, targeting musicians, composers, and cultural organizations within Germany. The business model focuses on grant-making and fostering the contemporary music scene. Technically, the site is built on Drupal 10, leveraging modern libraries such as jQuery and UIkit, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements could be made by adding security headers and a cookie consent mechanism. Overall, the site is professional, trustworthy, and content-rich, with clear contact information and social media presence. No adult or questionable content is present, making it safe for general audiences.

H

Hochschule für Musik FRANZ LISZT Weimar

hfm-weimar.de

56

The Hochschule für Musik FRANZ LISZT Weimar is a specialized higher education institution focused on music education, research, and cultural events. It serves students, faculty, researchers, and the broader community interested in music and related disciplines. The institution offers a variety of academic programs, research projects, and cultural activities, positioning itself as a reputable music university in Germany with a tradition dating back to 1872. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies such as Bootstrap, jQuery, and Matomo for analytics. The site demonstrates good mobile optimization and a structured navigation system, providing a positive user experience. Hosting appears to be managed by university-related infrastructure, ensuring alignment with the institution's academic nature. From a security perspective, the website employs HTTPS and asynchronous script loading, contributing to a secure and performant environment. However, explicit security headers are not detected, and no visible privacy or cookie policies are present in the analyzed content, indicating areas for improvement in compliance and security best practices. Overall, the website is trustworthy and professional, with a strong business credibility score. The absence of explicit privacy and cookie policies and contact information slightly lowers the privacy compliance and content quality scores. There are no indications of adult or unsafe content, and no WAF or blocking mechanisms interfere with content accessibility.

A

ACHAVA Festspiele Thüringen

achava-festspiele.de

37

ACHAVA Festspiele Thüringen is a regional cultural festival organizing concerts and dialogues primarily in the German state of Thuringia. The website presents event highlights for 2025 and showcases awards such as the Margot-Friedländer-Preis 2025, indicating recognition in the cultural sector. The organization operates as a non-profit entity focused on media and cultural events, targeting a general audience interested in arts and culture. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and integrates third-party libraries such as Flickity for carousels and the Facebook SDK for social media integration. Hosting is provided by a known German hosting provider (kasserver.com). The site is moderately optimized for mobile devices and has basic SEO and accessibility features. From a security perspective, the site uses HTTPS and includes no visible exposed sensitive data. However, it lacks explicit security headers and does not provide visible security or incident response policies. Privacy compliance is partial, with a privacy policy page present but no cookie consent mechanism detected. Contact information is not directly visible on the main page, which may impact user trust and support accessibility. Overall, the website is functional, professionally designed, and trustworthy for its cultural event purpose. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance its security posture and user trust.

S

Sparkassen-Kulturstiftung Hessen-Thüringen

sparkassen-kulturstiftung.de

63

The Sparkassen-Kulturstiftung Hessen-Thüringen is a well-established non-profit foundation focused on promoting arts, culture, and education in the German regions of Hessen and Thüringen. It operates under the umbrella of the Sparkassen-Finanzgruppe and has a strong market position as a major cultural funder. The website reflects a professional and consistent brand image with comprehensive information about its projects, goals, and engagement activities. Technically, the site uses Concrete CMS, modern JavaScript libraries, and integrates accessibility and cookie consent tools, indicating a mature digital infrastructure. Security posture is good with HTTPS and no visible vulnerabilities, though some security headers and policies could be improved. Privacy compliance is moderate due to the absence of an explicit privacy policy page, despite the presence of cookie consent mechanisms. Overall, the site is trustworthy, well-designed, and serves its target audience effectively.

A

amo/Debus Group

amo-debus.de

47

The amo/Debus Group is a well-established family-owned company founded in 1946, specializing in the supply and logistics of building materials such as asphalt, natural stone, slate, and recycling services. Operating primarily in Northern Bavaria, Thuringia, and Saxony, the company maintains over 20 locations, positioning itself as a significant regional player in the construction materials sector. The website reflects a professional and consistent brand image, targeting construction industry professionals and regional customers. Technically, the site is built on the TYPO3 CMS platform, incorporating modern web technologies and consent management tools to comply with GDPR requirements. Security posture is moderate, with HTTPS implied and consent mechanisms in place, though explicit security headers and incident response policies are absent. Overall, the site is accessible, well-structured, and trustworthy, with clear contact information and compliance with privacy regulations.

S

Stadt Neustadt bei Coburg

neustadt-bei-coburg.de

57

The website www.neustadt-bei-coburg.de serves as the official municipal portal for the city of Neustadt bei Coburg in Germany. It provides comprehensive information about local government services, community life, cultural events, economic development, and citizen resources. The site targets residents, visitors, and local businesses, offering structured navigation and relevant content to support civic engagement and municipal transparency. The business model is that of a government entity focused on public service delivery. Technically, the website is built on TYPO3 CMS, leveraging modern frontend technologies such as Bootstrap, FontAwesome, and OpenLayers for maps. It is hosted by netcup GmbH, as inferred from the nameservers. The site demonstrates good mobile optimization, accessibility features, and moderate performance. SEO practices are basic but functional. Analytics are handled via Matomo with a clear cookie consent mechanism, reflecting a commitment to privacy compliance. From a security perspective, the site enforces HTTPS and includes cookie consent banners, but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The WHOIS data is consistent and legitimate, supporting the trustworthiness of the domain. No WAF or blocking mechanisms interfere with content access. Overall, the website presents a professional, trustworthy, and privacy-conscious municipal portal with room for improvement in security headers and incident response transparency. The risk profile is low, with no critical issues identified.

H

HCS-Content GmbH

insuedthueringen.de

65

inSüdthüringen is a regional news portal serving the Südthüringen area in Germany, aggregating content from local newspapers such as Freies Wort, Südthüringer Zeitung, and FW Meininger Tageblatt. The website targets residents and readers interested in regional news and information. It operates a digital news media platform with a business model centered on content publishing and advertising revenue. The company behind the site, HCS-Content GmbH, has a history dating back to 1952, indicating established market presence.

P

Age Gate - Privatbrauerei Gessner

privatbrauerei-gessner.de

57

The website privatbrauerei-gessner.de represents a private brewery business based in Germany, focusing on alcoholic beverages. The content is minimal and lacks essential pages such as privacy policy, cookie policy, terms of service, and contact information, which limits the ability to fully assess the business model, market position, and services. The website uses WordPress as its CMS and includes Font Awesome Pro icons loaded from external CDNs. Technical infrastructure appears basic with no advanced frameworks or analytics detected. Security posture is weak due to the absence of HTTPS and security headers, and no incident response or security policies are visible. Overall, the website presents a low level of digital maturity and limited compliance with privacy regulations. Strategic improvements are needed to enhance security, privacy compliance, and user trust.

O

Orthopädiehaus Blaschke GmbH & Co.KG

orthopaediehaus.de

58

Orthopädiehaus Blaschke GmbH & Co.KG is a regional healthcare provider specializing in medical technology, rehabilitation technology, technical orthopedics, and homecare services, primarily serving the Sonneberg and Neuhaus a.R. areas in Germany. The website is professionally designed using the Wix platform, featuring relevant business information and a cookie consent mechanism, but lacks explicit privacy and terms of service policies. Technically, the site uses modern web technologies and polyfills to ensure compatibility and moderate performance, with good mobile optimization. Security posture is adequate with HTTPS and some security hardening scripts, but lacks explicit security headers and incident response information. Overall, the site is trustworthy and safe for general audiences, with no adult or questionable content detected.

S

Stadtwerke Sonneberg GmbH

stadtwerke-son.de

56

Stadtwerke Sonneberg GmbH operates as a municipal service provider in Sonneberg, Germany, focusing on culture, sports, and tourism services such as Sonnebad, Gesellschaftshaus, and tourism information. The website is built on the Wix platform, indicating a moderate level of digital maturity with standard Wix hosting and JavaScript technologies. While the site includes basic content and some operational monitoring via Sentry, it lacks critical privacy and cookie policies, as well as explicit contact information, which impacts its privacy compliance and user trust. Security posture is moderate with HTTPS implied but missing explicit security headers and incident response contacts. Overall, the website serves its informational purpose but requires improvements in privacy, security, and contact transparency to enhance trust and compliance.

Jazzmeile Thüringen is a regional cultural festival organization dedicated to promoting jazz music throughout the German state of Thüringen. It operates under the patronage of the Thüringer Staatskanzlei and organizes events year-round, including seasonal jazz festivals and workshops. The website serves as an information portal for upcoming events and partners with various cultural and governmental institutions. Technically, the site is built on the Contao CMS platform, utilizing common JavaScript libraries such as jQuery and Colorbox. The site is moderately optimized for mobile devices and provides a good user experience with clear navigation and relevant content. Security posture is moderate; HTTPS is assumed but no explicit security headers were detected, and no incident response or security policies are publicly available. Privacy compliance is basic, with a privacy policy present but no visible cookie consent mechanism. WHOIS data is incomplete, limiting trust from a domain registration perspective. Overall, the site is trustworthy and professional but could improve security and privacy transparency.

I

Ilm-Kreis

ilm-kreis.de

59

Ilm-Kreis operates an official government website serving the district of Ilm-Kreis in Germany. The site provides comprehensive information about local government departments, citizen services, news, and events. It targets residents, businesses, and visitors seeking official administrative resources. The website is well-structured with clear navigation and consistent branding, reflecting a professional government portal. Technically, the site uses a mix of legacy and modern JavaScript libraries, including jQuery 1.10.2, FontAwesome 5, and Highslide, hosted on Advantic Systemhaus GmbH infrastructure. Analytics are handled via Piwik (Matomo) with GDPR-compliant cookie consent mechanisms in place. Security posture is generally good with HTTPS enforced, but the use of outdated jQuery presents a potential vulnerability. No WAF or blocking mechanisms were detected, and the site is fully accessible. Contact information is complete with multiple physical addresses, phone numbers, email, and a contact form. Privacy policies and cookie consent are implemented in German, consistent with GDPR requirements.

S

Sparkasse Arnstadt-Ilmenau

spk-arnstadt-ilmenau.de

70

Sparkasse Arnstadt-Ilmenau is a regional financial institution in Germany offering a broad range of banking and financial services to private and corporate customers. The website reflects a mature digital presence with comprehensive service information, secure online banking access, and clear customer support channels. The bank emphasizes security and privacy compliance, including GDPR adherence and cookie consent mechanisms. The technical infrastructure is modern, likely based on Adobe Experience Manager, with good mobile optimization and accessibility features. Security posture is strong with HTTPS enforced and secure forms, though some security headers could be improved. Overall, the website is professional, trustworthy, and well-aligned with the bank's business model and market position.

T

Ticket Shop Thüringen

ticketshop-thueringen.de

61

Ticket Shop Thüringen operates as a regional e-commerce platform specializing in ticket sales for cultural, sports, and entertainment events within the German state of Thuringia. The website offers a broad range of event tickets, including concerts, theater performances, and sports matches, targeting residents and visitors interested in local events. The platform is branded consistently and appears to be associated with the Funke Mediengruppe, a notable media company in Germany, enhancing its market credibility. Technically, the website is built on WordPress with modern integrations such as React, Yoast SEO, and Slider Revolution, indicating a mature digital infrastructure. It employs Google Tag Manager and Consent Manager for analytics and privacy compliance, respectively. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be improved. From a security perspective, the site enforces HTTPS and includes a comprehensive cookie consent mechanism aligned with GDPR requirements. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not present, suggesting areas for enhancement. No critical vulnerabilities or suspicious activities were detected in the content or WHOIS data. Overall, the website presents a professional, trustworthy, and compliant online presence suitable for its business model. Strategic improvements in security transparency and accessibility could further strengthen its posture.

The website euroshare.eu is a German-language financial content portal focused on investment topics such as returns, dividends, portfolios, stocks, and the stock market. It provides educational content, product recommendations, and affiliate links to financial books and guides. The site prominently offers the domain for sale, indicating a possible transition or discontinuation of the current project. Technically, the site uses modern frontend technologies like Tailwind CSS and htmx.js, with a clean and responsive design. However, it lacks privacy and cookie policies, security headers, and structured metadata, which limits its compliance and SEO effectiveness. The WHOIS data is unavailable, suggesting privacy protection or registry restrictions, which slightly reduces trust. Overall, the site is functional and informative but requires improvements in privacy, security, and transparency to enhance trust and compliance.

B

Bubustoffe

bubustoffe.de

47

Bubustoffe.de is a small retail business specializing in fabrics, ribbons, and haberdashery products, targeting primarily German-speaking customers. The website presents a colorful and well-structured e-commerce platform with good design quality and mobile optimization. The technical infrastructure leverages modern frameworks such as Bootstrap 4 and integrates multiple marketing and analytics tools including Google Analytics, Hotjar, and SalesManago, indicating a mature digital marketing approach. Security posture is adequate with HTTPS enabled and some security best practices observed, though there is room for improvement in implementing security headers and publishing security policies. The absence of a privacy policy and terms of service reduces compliance maturity. WHOIS data is minimal and domain status is unusual, which slightly impacts trustworthiness. Overall, the website is functional and professional but would benefit from enhanced privacy and security transparency.

D

Dab Pumps Spa

dabpumps.de

10

Dab Pumps Spa is a well-established company specializing in water technology solutions, with nearly 50 years of experience. The company focuses on manufacturing pumps and providing technological solutions to optimize water management and energy consumption across residential, commercial, industrial, and agricultural sectors. Their market position is strong, supported by a comprehensive product portfolio and service offerings including DService and DTraining. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content for its target audience. Technically, the site is built on Drupal 9 with modern libraries and frameworks, ensuring a stable and maintainable infrastructure. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit policies could be improved. Overall, the website reflects a credible and trustworthy business with good privacy compliance and user engagement through social media and contact channels.

The website www.dfb-fanshop.de serves as the official e-commerce platform for the German Football Association's fan merchandise, primarily focusing on authentic Germany national football team jerseys and fanwear. It targets football fans and supporters globally, offering official products with worldwide shipping. The site demonstrates consistent branding and a professional design tailored to its audience. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with fonts loaded in WOFF2 format and content delivery via Akamai CDN, ensuring reliable performance and global reach. The site is mobile-optimized and SEO-friendly, although some accessibility features appear basic. Google Analytics is used for user tracking, indicating moderate data collection practices. From a security perspective, the site enforces HTTPS with a strong SSL configuration and uses Akamai's infrastructure. However, explicit security headers are not evident in the provided content, and privacy and cookie policies are missing or not detected, which impacts compliance posture. No vulnerabilities or exposed sensitive data were found, and no WAF or blocking mechanisms interfere with access. Overall, the website presents a trustworthy and professional front for official sports merchandise sales but would benefit from enhanced privacy compliance and security header implementation to improve user trust and regulatory adherence.

D

DFB GmbH & Co. KG

dfb-efootball.de

62

The website www.dfb-efootball.de serves as the official portal for the German Football Association's esports activities, including the DFB-ePokal tournament powered by ERGO and the German eNationalmannschaft. It targets esports enthusiasts and the football community, providing tournament information, news, and community engagement. The platform is professionally branded and positioned as a key player in the esports media sector in Germany. Technically, the site is built as an Angular single-page application hosted on AWS infrastructure, integrating modern marketing and analytics tools such as Google Tag Manager, TikTok Pixel, and Usercentrics for consent management. Accessibility is enhanced with Eye-Able tools, and the site is mobile-optimized with good SEO practices. Security posture is strong with HTTPS enforced and use of security headers implied, although explicit security policies and vulnerability disclosures are absent. Privacy compliance is well addressed with clear privacy and cookie policies linked to official DFB domains. Overall, the site demonstrates a mature digital presence with extensive user tracking balanced by consent mechanisms. No critical security issues or content safety concerns were detected.

F

fittkau metallgestaltung gmbh

fittkau-metallbau.de

54

Fittkau Metallgestaltung GmbH is a German small-sized manufacturing company specializing in metalworking, forge, and artistic metal structures. The company presents a professional website built on Joomla! CMS, showcasing a portfolio of projects and providing essential contact information. The website targets architects, construction firms, and clients seeking specialized metal fabrication services. The business holds a reputable market position with recent award recognition, indicating industry credibility. Technically, the website employs legacy JavaScript libraries such as jQuery and MooTools, with moderate performance and basic mobile optimization. The absence of advanced analytics and tracking tools suggests a privacy-conscious approach. However, the lack of visible security headers and outdated libraries indicate areas for technical improvement. From a security perspective, the site uses HTTPS (assumed from base URL), includes a cookie consent mechanism, and provides a privacy policy compliant with GDPR. No incident response or security policy pages are found, and no phone contact is provided, which could limit user trust. No critical vulnerabilities or blocking mechanisms are detected, but updating security practices and technical stack is recommended. Overall, the website is professional and trustworthy with good business credibility but could benefit from technical modernization and enhanced security measures to improve resilience and compliance.

WGBG Wirtschafts-Genossenschaft Berliner Grundbesitzer eG is a specialized real estate management cooperative based in Berlin, offering comprehensive property management, technical support, and advisory services tailored to property owners in Berlin and Brandenburg. The cooperative business model emphasizes owner interests without investor or shareholder influence, positioning WGBG as a trusted niche player in the local real estate market. Technically, the website is built on WordPress with modern plugins and themes, ensuring good SEO and mobile responsiveness. Security posture is adequate with HTTPS and cookie consent, but lacks published privacy policies and incident response information, indicating room for compliance and security maturity improvements. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security transparency to strengthen user trust and regulatory compliance.

Hoffnungstaler Stiftung Lobetal is a German non-profit foundation providing a broad range of social, medical, and educational services primarily in Berlin and Brandenburg. The website presents a professional and accessible digital presence built on Joomla CMS, incorporating modern technologies such as Usercentrics for cookie consent and Matomo for privacy-respecting analytics. The organization targets individuals seeking social support, healthcare, and education, emphasizing inclusion and community engagement. While the site is well-structured and content-rich, explicit privacy policies and terms of service are not found, which could be improved for compliance and transparency. Security posture is solid with HTTPS and consent management, but lacks explicit incident response contacts or vulnerability disclosure mechanisms.

S

Sirius Facilities GmbH

siriusfacilities.com

53

Sirius Facilities GmbH is a prominent German commercial real estate company specializing in flexible leasing of office spaces, storage, production halls, conference centers, and virtual office services. With over 70 locations and a large portfolio, they cater primarily to small and medium-sized enterprises as well as larger firms. Their website demonstrates a mature digital presence with a professional design, comprehensive service offerings, and multiple contact channels. Technically, the site is built on Drupal CMS with modern JavaScript libraries and includes privacy compliance tools such as Usercentrics CMP and analytics via Google Analytics and Matomo. Security posture is strong with HTTPS and secure forms, though some HTTP security headers could be improved. The WHOIS data is unavailable, which slightly impacts trust but the overall business credibility remains high due to consistent branding and transparent contact information.

N

NVL B.V. & Co. KG

luerssen-defence.com

56

NVL B.V. & Co. KG is a well-established, independent group of northern German shipyards specializing in naval and coastguard vessel construction and related maritime services. With over 145 years of experience, NVL serves a global clientele including the German Navy and fleets in more than 50 countries. Their comprehensive service portfolio spans new builds, maintenance, repair, upgrades, and digital transformation, supported by a network of four shipyards and multiple international subsidiaries. The company emphasizes quality, innovation, and customer-centric solutions, positioning itself as a leader in the naval shipbuilding industry. Technically, the NVL website is built on Drupal 10, leveraging modern web technologies including jQuery and FontAwesome, and is hosted on AWS infrastructure. The site is mobile-optimized, accessible, and employs privacy-conscious analytics via Matomo alongside a robust cookie consent mechanism. The digital presence reflects a mature and professional infrastructure with good SEO and user experience. From a security perspective, the site enforces HTTPS and uses cookie consent tools to comply with GDPR. However, explicit security policies and incident response contacts are not prominently published, and security headers are not visibly configured. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the business claims, showing consistent domain registration and DNS setup. Overall, NVL demonstrates a strong business credibility and digital maturity with a secure and privacy-aware web presence. Strategic improvements in publishing security policies and enhancing security headers would further strengthen their security posture.

L

Lürssen

lurssen.com

62

Lürssen is a renowned German company specializing in the design, construction, and refit of luxury yachts. The website reflects a strong brand presence with a focus on high-end maritime transportation solutions, targeting affluent clients and industry professionals. The site offers multilingual support and highlights key services including new builds, refit and services, and a marine foundation. Technically, the website uses modern frameworks such as Nuxt.js and integrates Matomo for analytics alongside Cookiefirst for cookie consent management, indicating a moderate level of digital maturity. Security-wise, while HTTPS is implied, explicit security headers and detailed privacy policies are not evident, suggesting room for improvement in security posture and compliance transparency. Overall, the site is professional and trustworthy but would benefit from enhanced security disclosures and verified domain registration data.

BDA.direkt is a specialized communication platform and mobile app designed for members of the Berufsverband Deutscher Anästhesistinnen und Anästhesisten (BDA), a German professional association for anesthesiologists. The platform provides timely professional and political information, event notifications, and official statements directly to members' smartphones via push notifications. The business model focuses on serving a niche professional audience with free access for members, positioning itself as a trusted communication channel within the healthcare sector in Germany. Technically, the website is built on a modern Ruby on Rails stack utilizing Turbo Rails and Stimulus for interactivity, with a focus on mobile optimization and basic accessibility. Security measures include CSRF protection and secure form handling, but lack visible security headers and cookie consent mechanisms, which are areas for improvement. The WHOIS data is minimal, with generic name servers and no detailed registrant information, slightly reducing trust but not contradicting the website's professional presentation. Overall, the site is functional, professional, and trustworthy for its intended audience, though it would benefit from enhanced security and privacy compliance features.

I

if-kongress management gmbh

if-kongress.de

56

if-kongress management gmbh is a specialized congress and event management company operating primarily in Germany with offices in Munich and Berlin. The company focuses on delivering professional support for congresses, targeting event organizers, participants, sponsors, and exhibitors. Their business model centers on service provision with a strong emphasis on quality, professionalism, and customer-centricity. The website reflects a well-maintained digital presence using TYPO3 CMS, with modern technologies such as Matomo for analytics and Usercentrics for GDPR-compliant cookie consent management. The technical infrastructure is solid, with good mobile optimization and SEO practices, though some improvements in accessibility and security headers could be made. Security posture is strong with HTTPS enforced and no visible vulnerabilities or exposed sensitive data, but lacks explicit security policies or incident response contacts. Overall, the website is trustworthy, professional, and compliant with GDPR requirements, supporting the company's credibility in its niche market.

N

nVent Electric plc

nvent.com

77

nVent Electric plc is a global leader in electrical connection and protection solutions, serving industrial and commercial sectors with innovative products and services. Their website reflects a mature digital presence with a focus on sustainability and electrification, targeting engineers, contractors, and businesses in the energy and transportation sectors. The company positions itself as a trusted partner offering comprehensive electrical solutions worldwide. Technically, the website is built on Drupal 10 CMS, leveraging modern analytics and A/B testing tools such as Visual Website Optimizer and Google Tag Manager. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Security best practices are observed with HTTPS enforcement and security headers, although explicit security policies and incident response contacts are not publicly disclosed. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms, aligning with GDPR requirements. The absence of WHOIS data reduces domain trust slightly but does not detract significantly from the overall legitimacy given the professional content and branding. Overall, nVent's website presents a professional, secure, and compliant digital front that supports its enterprise business model and global market position.

B

BRIESE SCHIFFAHRT

briese.de

54

BRIESE SCHIFFAHRT is a medium-sized German maritime shipping company managing a fleet of over 130 multipurpose heavylift vessels. The company operates several divisions including chartering, research vessel management, and crew management, serving clients in the shipping and logistics sectors. The website presents a professional and consistent brand image with clear navigation and relevant content targeting maritime industry professionals and potential crew members. Technically, the site uses NeoCMS with jQuery and related libraries, delivering moderate performance and basic mobile optimization. Security posture is moderate with HTTPS implied but lacking explicit security headers and advanced protections on login forms. Privacy compliance is limited, with no cookie consent mechanism detected and only a basic privacy policy present. WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, the website is functional and professional but could improve in security and privacy compliance to enhance trust and regulatory adherence.

C

Carl von Ossietzky Universität Oldenburg

icbm.de

61

The ICBM is an interdisciplinary marine sciences institute under the Carl von Ossietzky Universität Oldenburg, Germany. It operates research and teaching activities in marine chemistry and biology with multiple working groups and research platforms. The website is professionally designed using TYPO3 CMS, with good technical infrastructure and modern web technologies. Security posture is strong with HTTPS and privacy-conscious analytics (Matomo with disabled cookies). Contact information and social media presence enhance trust. No critical vulnerabilities or compliance gaps were detected, though explicit security policies could be improved. Overall, the site reflects a reputable academic institution with a clear focus on marine research and education.

The Leibniz Institute for Baltic Sea Research Warnemünde (IOW) is a reputable non-university research institute focused on interdisciplinary marine research, particularly the Baltic Sea ecosystems. It operates under the Leibniz Association umbrella and offers research, data services, and educational activities. The website reflects a medium-sized academic institution with a clear focus on scientific excellence and community engagement. Technically, the site uses a modern CMS (Contao), Bootstrap for responsive design, and Matomo for privacy-conscious analytics. The site is accessible, well-structured, and mobile-optimized, though some SEO and accessibility features could be enhanced. Security posture is solid with HTTPS and email obfuscation but lacks security headers and a cookie consent mechanism, which are recommended for GDPR compliance. Overall, the domain registration and WHOIS data align well with the institute's identity, supporting legitimacy and trustworthiness.

D

Deutsche Gesellschaft für Gynäkologie und Geburtshilfe e.V.

dggg.de

58

The Deutsche Gesellschaft für Gynäkologie und Geburtshilfe e.V. (DGGG) is a well-established scientific professional society in Germany specializing in gynecology and obstetrics. Founded in 1885, it serves medical professionals by providing guidelines, hosting events, publishing scientific content, and offering membership benefits. The website reflects a mature organization with a clear focus on healthcare professionals and scientific advancement in women's health. Technically, the site is built on TYPO3 CMS, employs modern web technologies, and integrates a GDPR-compliant consent management platform. The use of Matomo analytics indicates a preference for privacy-conscious tracking. Security posture is solid with HTTPS and asset integrity checks, though HTTP security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the site is professional, trustworthy, and compliant with relevant privacy regulations.

B

Bundesverband Deutscher Internisten e.V. (BDI)

bdi.de

56

The Bundesverband Deutscher Internisten e.V. (BDI) is a professional association representing internists in Germany. The website serves as a platform for political advocacy, member services including legal advice, continuing education, and networking opportunities. It targets medical professionals specializing in internal medicine and operates as a medium-sized non-profit organization. The site is built on TYPO3 CMS and uses Matomo for privacy-conscious analytics. The content is well-structured, professionally presented in German, and includes a member login area and extensive event listings. Social media integration is robust, enhancing outreach and engagement. Security posture is solid with HTTPS and secure form handling, though explicit security policies and incident response information are absent. Privacy compliance is good with a clear privacy and cookie policy, but lacks a cookie consent mechanism. WHOIS data confirms domain legitimacy and consistency with the organization's profile.