Germany security reports

G

GREEN IT Das Systemhaus GmbH

greenit.systems

72

GREEN IT Das Systemhaus GmbH is a small German IT system house specializing in sustainable IT solutions, based in Dortmund. The company positions itself as a provider that combines ecological and economic aspects to address current and future IT challenges. The website is professionally designed, well-structured, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, the site is built on WordPress with Elementor and integrates advanced cookie consent management, multiple analytics, and marketing tools, indicating a modern and compliant infrastructure. Security posture is strong with HTTPS, Wordfence protection, and consent-based data collection, though some security headers could be improved. WHOIS data is unavailable, but the website's professional appearance and consistent branding support legitimacy. Overall, the site demonstrates a solid business and technical foundation with good privacy and security practices.

P

Pastoral am Puls. e.V.

pastoral-am-puls.de

56

Pastoral am Puls. e.V. is a small non-profit organization based in Germany focused on pastoral care, spiritual guidance, and church development. The website serves as an informational and community platform offering educational content, newsletters, and resources for religious communities and pastoral workers. The organization positions itself as a niche player within the religious non-profit sector, emphasizing spiritual process leadership and cultural change within church contexts. Technically, the website is built on WordPress with modern plugins for SEO, analytics, and security, hosted via DomainControl.com. The site is well-structured, mobile-optimized, and includes GDPR-compliant privacy and cookie policies with user consent mechanisms. Security posture is solid with HTTPS enforced and captcha protection on contact forms, though it lacks explicit security policy documentation and security headers. Overall, the site is professional, trustworthy, and safe for general audiences.

B

Bistum Mainz

bistummainz.de

62

Bistum Mainz is a large non-profit Catholic diocese based in Germany, providing a wide range of religious, social, educational, and community services. The website serves as a comprehensive portal for parishioners and the general public, offering news, event information, pastoral resources, and social initiatives. It targets members of the Catholic community and residents within the diocese's region. Technically, the site is built on the Alkacon Mercury CMS platform, with a modern tech stack including responsive design, accessibility features, and privacy-conscious analytics via Matomo. The site is well-structured, professionally designed, and optimized for mobile and accessibility standards. Security posture is good with HTTPS enforced and cookie consent implemented, though security headers and explicit security policies are not visibly present. WHOIS data and domain registration details align well with the organization's identity, supporting legitimacy and trustworthiness. Overall, the site demonstrates a mature digital presence suitable for a large religious non-profit organization.

kath.de is a well-established independent Catholic news portal based in Germany, operating since 1995. It provides news, commentary, and links related to Catholicism, targeting German-speaking audiences interested in religious and spiritual content. The site is supported by donations and partners with several Catholic organizations, reinforcing its position as a trusted media source within its niche. Technically, the website is built on Ruby on Rails with modern web technologies, including Turbolinks and Google Analytics integration. It demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Security-wise, the site enforces HTTPS, uses CSRF tokens, and includes some security headers, but lacks visible cookie consent mechanisms and explicit security policies. Overall, the domain registration data aligns well with the website's content and business model, indicating high legitimacy and trustworthiness.

R

rigma Musikverlag

rigma-shop.de

50

rigma Musikverlag operates an e-commerce platform specializing in Christian music, songbooks, sheet music, and educational materials targeted at families, schools, kindergartens, and church communities primarily in Germany. The website is built on a modern WordPress and WooCommerce stack, leveraging various plugins for enhanced functionality including GDPR-compliant cookie management and product search capabilities. The site demonstrates good content quality, clear navigation, and mobile optimization, supporting a positive user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response policies are not published. Overall, the domain and hosting appear legitimate with no blocking or WAF interference detected, and the site maintains compliance with GDPR regulations. The business maintains a niche market position with a consistent brand presence and trustworthy user engagement features.

S

sensum · Graphikbüro

sensum.de

52

sensum · Graphikbüro is a small German-based graphic and web design service provider offering print design, web development, and educational seminars. The company targets nonprofit and other clients seeking creative design solutions and training. Their market position is niche with a focus on quality and client collaboration. The website is built on WordPress using the Divi theme, enhanced with SEO and privacy plugins, reflecting a moderate to good level of digital maturity. The technical infrastructure is modern and mobile-optimized, with good SEO practices and basic accessibility features. Security posture is solid with HTTPS and privacy compliance, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

S

Schoenstatt

schoenstatt.com

60

Schoenstatt.com is the official website of the International Schoenstatt Movement, a Catholic non-profit organization founded in 1914 and active internationally across five continents. The website serves as a central platform for community engagement, spiritual education, and dissemination of news and resources related to the movement. It targets members and followers of the movement, providing multilingual content and multimedia resources to support its mission. Technically, the website is built on WordPress with Elementor and Yoast SEO Premium, hosted by IONOS SE. It uses modern web technologies including HTTPS, Google Tag Manager, and reCAPTCHA for security and analytics. The site demonstrates good mobile optimization and SEO practices, although performance is moderate and accessibility is basic. From a security perspective, the site enforces HTTPS and uses domain locking to prevent unauthorized changes. However, DNSSEC is not enabled, and some recommended security headers are missing. Privacy compliance is weak due to the absence of explicit privacy and cookie policies and consent mechanisms. Contact information is limited to a contact form without direct emails or phone numbers. Overall, the website is professional, trustworthy, and content-rich, supporting the organization's mission effectively. Strategic improvements in privacy compliance, DNS security, and security headers would enhance its security posture and regulatory adherence.

C

CandyKeys

candykeys.com

59

CandyKeys is an established small e-commerce retailer specializing in mechanical keyboards, keycaps, switches, and related components, primarily serving customers in Germany and the EU with worldwide shipping since 2016. The website demonstrates a modern technical infrastructure using Nuxt.js, Tailwind CSS, Font Awesome, and integrates Google Analytics and Tag Manager for marketing and analytics purposes. DNS is managed via Cloudflare, and the domain is registered with IONOS SE, indicating a stable and legitimate online presence. Security posture is generally good with HTTPS enabled and domain transfer protection, but lacks published privacy, cookie, and security policies, which are critical for GDPR compliance and user trust. No contact information or incident response details are found, limiting transparency. Overall, the site is professional and functional but would benefit from enhanced privacy compliance and security disclosures.

The website konferenz-verpackungsrecycling.de represents a professional conference focused on packaging recycling and circular economy topics, held under the patronage of the German Federal Ministry for Environment. It targets industry professionals, policymakers, and stakeholders in the recycling and environmental sectors. The business model centers on event organization and knowledge exchange through keynotes and networking. The site demonstrates a consistent and professional brand image with clear contact points and a well-structured program. Technically, the site is built on WordPress using the Elementor page builder, incorporating common JavaScript libraries such as jQuery and SmartMenus. The site is mobile-optimized and performs moderately well, though some improvements in accessibility and security headers could enhance its technical maturity. The SSL configuration is excellent, ensuring secure communications. From a security perspective, the site enforces HTTPS and includes secure form handling with explicit user consent for data processing. However, it lacks security headers and published security or incident response policies, which are recommended for improved security posture. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good with a clear privacy policy and GDPR-aligned consent in forms, but no cookie consent mechanism is present. Overall, the website is trustworthy and professionally managed, with a strong focus on its niche audience. Strategic improvements in security headers, cookie consent, and incident response transparency would further strengthen its security and compliance stance.

B

bvse-Entsorgergemeinschaft e.V.

bvse-entsorgergemeinschaft.de

54

The bvse-Entsorgergemeinschaft e.V. is a well-established German association representing certified waste disposal and recycling companies. It offers certification services, consulting, and training to its members, emphasizing quality, ecology, and customer proximity. The website is professionally designed using Joomla CMS and modern web technologies, providing good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Contact information is clearly presented, supporting business credibility. No signs of tracking or intrusive analytics enhance privacy compliance. Overall, the site reflects a trustworthy and professional organization within the recycling sector.

K

Koordinierungsstelle für Hospiz- u. Palliativversorgung in Deutschland

koordinierung-hospiz-palliativ.de

48

The website www.koordinierung-hospiz-palliativ.de serves as the official coordination center for hospice and palliative care services in Germany. It provides informational resources, including multilingual explanatory videos, targeting patients, relatives, healthcare institutions, and care providers. The site positions itself as a national non-profit entity focused on improving access and awareness of hospice and palliative care. Technically, the site is built on the Contao CMS platform, utilizing jQuery and jQuery UI for interactive elements. The infrastructure supports HTTPS with good SSL configuration, but lacks advanced security headers and cookie consent mechanisms. The content is well-structured, professionally presented, and accessible, though mobile optimization and accessibility could be improved. Security posture is solid with no visible vulnerabilities or exposed sensitive data, but the absence of a security policy and incident response contacts is noted. Overall, the site is trustworthy and credible, with clear contact information and consistent branding.

1

123map GmbH & Co. KG

123map.de

8

123map GmbH & Co. KG is a specialized company providing services, consulting, and software development in the field of geographic information systems (GIS) for over 20 years. Their offerings include online maps, geocoding, vector maps for graphic programs, and related software solutions targeting businesses and professionals requiring geospatial data and tools. The company operates primarily in Germany and maintains a small business profile with a focused niche market position. Technically, the website is built with standard HTML5, CSS3, and JavaScript, hosted under a reputable registrar (Key-Systems GmbH). The site is accessible, uses HTTPS, but lacks advanced security headers and DNSSEC, indicating moderate digital maturity. The website design and content are basic but consistent with the business focus, with limited mobile optimization and SEO features. From a security perspective, the site employs HTTPS and domain transfer protection but does not implement DNSSEC or security headers, which are recommended for enhanced protection. No forms or contact details are present on the main page, and no privacy cookie consent mechanism is implemented, which may impact GDPR compliance. No signs of tracking or advertising technologies were found, suggesting minimal user data collection. Overall, the website presents a moderate risk profile with no critical security issues detected. Strategic improvements in security headers, DNSSEC, and privacy compliance would enhance trust and protection. The domain's long registration history and consistency with business claims support legitimacy and credibility.

G

Gemeinsamer Bundesausschuss

g-ba.de

58

The Gemeinsamer Bundesausschuss (G-BA) is a central German government institution responsible for regulating healthcare services and ensuring quality in the healthcare system. The website serves as the official portal for disseminating information about the G-BA's work, including guidelines, decisions, public meetings, and innovations in healthcare. It targets healthcare professionals, policymakers, patients, and the general public interested in healthcare regulation in Germany. The site is well-branded, professionally designed, and provides comprehensive content relevant to its mission. Technically, the website employs modern web technologies including Matomo for privacy-conscious analytics, deferred JavaScript loading, and SVG graphics for branding. The site is mobile-optimized and accessible, with good SEO practices evident in meta tags and structured navigation. Hosting appears stable and professional, with no signs of blocking or WAF interference. From a security perspective, the site uses HTTPS with strong SSL configuration and respects user privacy by disabling cookies in analytics and honoring Do Not Track signals. However, it lacks explicit security headers and does not publicly disclose security policies or incident response procedures. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong regarding the privacy policy, but cookie consent mechanisms are absent. Overall, the G-BA website is a trustworthy, authoritative source with high content quality and professional presentation. It demonstrates a solid security posture with room for improvement in transparency and security header implementation. The domain registration data aligns well with the website's purpose, reinforcing legitimacy. Strategic recommendations include enhancing security headers, adding cookie consent, and publishing security and vulnerability disclosure policies.

M

Martinushaus Aschaffenburg

martinushaus.de

52

Martinushaus Aschaffenburg is a non-profit community and educational center located in the heart of Aschaffenburg, Germany. It operates under the Diocese of Würzburg and offers a variety of services including community meeting spaces, educational programs, and event venue rentals. The website reflects a well-established regional institution with a clear mission to provide open doors and hearts to visitors. The business model focuses on community engagement and educational offerings supported by the church diocese. Technically, the website is built on Joomla CMS with a Yootheme template and leverages modern frameworks such as UIkit and jQuery. It integrates Matomo analytics for user tracking and Usercentrics for GDPR-compliant cookie consent management. The site is mobile-optimized, accessible, and performs moderately well. Hosting appears to be via GoDaddy, indicated by the domain's nameservers. From a security perspective, the site enforces HTTPS and includes CSRF tokens in scripts, indicating good security hygiene. However, it lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is strong with clear privacy and cookie policies. Overall, the website is professional, trustworthy, and well-aligned with its non-profit mission. Recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen security posture and trust.

J

Jugendhaus St. Kilian

jugendhaus-st-kilian.de

49

Jugendhaus St. Kilian is a non-profit youth and educational center located in Miltenberg, Germany, affiliated with the Diocese of Würzburg. The organization provides accommodation, conference facilities, catering, and educational programs primarily targeting school classes, families, and youth groups. The website is professionally designed using Joomla CMS with modern frameworks such as Bootstrap and UIkit, and integrates privacy-compliant tools like Usercentrics for consent management and Matomo for analytics. Contact information and legal disclosures are clearly presented, enhancing trust and transparency. The domain registration and DNS setup are consistent with the organization's regional and operational profile, indicating legitimacy and stability. Technically, the website employs a modern tech stack and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent mechanism in place. No incident response or security policy pages were found, suggesting an area for improvement. Overall, the website presents a trustworthy and professional digital presence for a regional non-profit organization focused on youth services and education. The risk profile is low, with no indications of malicious activity or content safety concerns.

H

Haus Volkersberg - KdÖR Diözese Würzburg

volkersberg.de

51

Haus Volkersberg is a well-established educational and hospitality institution located in Germany, offering youth education, adult learning, and conference facilities. It operates under the Diocese of Würzburg and serves a broad audience including youth groups, adults, and families. The website reflects a mature organization with comprehensive content, clear navigation, and professional design. Technically, it is built on Joomla CMS with modern UI frameworks and privacy-conscious analytics. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. WHOIS data is limited but consistent with the institution's profile. Overall, the site is trustworthy and compliant with GDPR requirements.

S

Schmerlenbach

schmerlenbach.de

52

Schmerlenbach is a well-established conference and hospitality center operated under the Bistum Würzburg, offering modern meeting facilities, accommodation, and catering services in a natural setting in Germany. The website reflects a professional and comprehensive digital presence, targeting business travelers, event organizers, families, and groups. It is positioned as a top-tier conference hotel with recognized certifications and awards. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance, mobile optimization, and SEO. Security posture is solid with HTTPS and cookie consent management, though some security headers could be improved. Overall, the site demonstrates strong business credibility and compliance with GDPR. No blocking or WAF interference was detected, allowing full content access and analysis.

B

Burkardushaus Würzburg

burkardushaus.de

51

Burkardushaus Würzburg is a well-established, church-affiliated conference and event center located in the historic city center of Würzburg, Germany. The website presents a professional and comprehensive overview of their services, including conference rooms, guest accommodations, and event hosting. The business targets educational providers, companies, and church institutions, emphasizing hospitality, service, and sustainability. The site is built on Joomla CMS with modern UIkit framework and integrates privacy-conscious analytics and consent management tools.

The website login.webspaceconfig.de serves as a customer login portal for managing hosting projects, targeting customers who use hosting services. The platform appears to be a small-scale technology service focused on project management within the hosting sector, primarily serving a German-speaking audience. The site uses modern web technologies including JavaScript ES modules, React framework, and Font Awesome icons, indicating a contemporary technical infrastructure. Hosting is provided by agenturserver as inferred from the nameservers. The website performance is moderate with basic mobile optimization and accessibility features. Security posture is adequate with HTTPS enforced and password fields properly masked; however, the absence of explicit security headers and privacy policies indicates room for improvement. Analytics are implemented via etracker, reflecting moderate user tracking but lacking clear privacy compliance mechanisms. Overall, the site is functional but lacks comprehensive privacy, security, and contact disclosures, which impacts trust and compliance. Strategic improvements in security headers, privacy policies, and contact transparency are recommended to enhance the security posture and user trust.

I

Internetagentur dd-media.de

kalirevier.net

50

kalirevier.net is a regional online portal dedicated to promoting local businesses, shops, and services within the Kalirevier mining region in central Germany. The platform offers categorized listings including delivery and pickup services, online shops, and regional information, targeting residents and visitors interested in local commerce. The site is operated and sponsored by Internetagentur dd-media.de, a local internet agency, indicating a small but focused business model with a community-centric approach. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and Owl Carousel, with Matomo analytics and Usercentrics consent management ensuring GDPR compliance. The site is served over HTTPS, providing a secure browsing experience. However, the WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration legitimacy and longevity. No direct company contact emails or phone numbers are published, though a contact form is available. Security policies and incident response information are not publicly disclosed, which could be improved to enhance trust. Overall, the website is professionally designed with good content quality and user experience, but the lack of WHOIS transparency and limited contact details slightly reduce business credibility.

I

Internetagentur dd-media.de

werratal-wetter.de

50

The website www.werratal-wetter.de serves as a regional weather data and information portal focused on the Kalirevier area in Germany. It provides current and historical weather data, local event information, and regional news links. The site is operated by Internetagentur dd-media.de, a small agency specializing in regional digital services. The business model centers on providing free weather data and regional content to residents and visitors, supported by related regional sites and a marketplace. Technically, the site uses a modern technology stack including Bootstrap, jQuery, and Matomo analytics, with good mobile optimization and basic accessibility features. Security posture is solid with HTTPS and cookie consent management, though it lacks advanced security headers and explicit incident response information. Privacy compliance is well addressed with GDPR-aligned policies and a Usercentrics consent mechanism. Overall, the site is professional, trustworthy, and well-branded for its niche regional audience.

I

Internetagentur dd-media.de

werratal-news.de

47

werratal-news.de is a regional news portal operated by Internetagentur dd-media.de, serving the Mittleres Werratal and Waldhessen regions in Germany. The site provides local news, event calendars, weather updates, and cultural information, positioning itself as a trusted source for residents and regional stakeholders. The business model focuses on digital regional news dissemination and community engagement through a well-structured website with categorized content and social media integration. Technically, the website employs a moderate technology stack including jQuery, Bootstrap, FontAwesome, and Matomo analytics, combined with a cookie consent manager compliant with GDPR. The site is mobile-optimized with good navigation and SEO practices, although some outdated libraries like jQuery 1.11.2 present potential security risks. Hosting details are not explicitly identified, but HTTPS is enforced with a good SSL configuration. From a security perspective, the site demonstrates good practices such as HTTPS, privacy-respecting analytics, and cookie consent mechanisms. However, it lacks advanced security headers like Content-Security-Policy and does not provide a security policy or vulnerability disclosure page. No critical vulnerabilities or exposed sensitive data were detected, but updating outdated libraries and enhancing security headers is recommended. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its regional audience effectively. Strategic improvements in security posture and transparency would further enhance its credibility and resilience.

D

Deutscher Fachverlag GmbH

dfv.de

57

Deutscher Fachverlag GmbH operates the dfv Mediengruppe, one of Europe's largest independent business media companies. The company publishes over 100 specialist media titles across 17 industries, including print, digital, and live events. Their offerings include specialist magazines, newspapers, digital content, specialist books, and over 140 annual events. The website reflects a mature digital presence with modern technologies such as Next.js, React, and integrated privacy management tools. Security posture is strong with HTTPS and security headers in place, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

B

Betriebs-Berater

betriebs-berater.com

50

Betriebs-Berater is a German professional publication specializing in tax, business law, accounting, and labor law content targeted at tax advisors, accountants, and legal professionals. The website offers newsletters, articles, and event information, operating under a subscription-based model. It is likely owned or affiliated with Rudolf Müller Verlag GmbH, as indicated by multiple links to ruw.de, a known publishing group. The site is well-branded and consistent, with a professional design and good content quality.

RUW Fachkonferenzen operates as a German-language platform organizing professional conferences. The website serves as an informational hub for event attendees and professionals interested in specialized conferences. The business model focuses on event organization and dissemination of conference-related information, targeting a niche audience within Germany. The website is built on WordPress and incorporates standard web technologies including JavaScript and Facebook Pixel for marketing and tracking purposes. While the site is accessible and mobile-optimized, it lacks comprehensive privacy and security disclosures, which impacts its overall trustworthiness. Security posture is moderate with no detected WAF or blocking mechanisms, but absence of security headers and explicit policies suggests room for improvement. The domain WHOIS data is minimal but does not raise immediate concerns about legitimacy. Strategic recommendations include enhancing privacy transparency, implementing security best practices, and providing clear contact and incident response information to improve compliance and user trust.

SendCockpit is a German-based email marketing software provider operated by Clever Elements GmbH, established in 2008. The company offers a SaaS platform enabling tens of thousands of customers to send email campaigns daily, with a strong emphasis on abuse prevention and compliance. The website analyzed is an abuse desk page dedicated to reporting and managing email abuse incidents, reflecting a mature approach to user identity verification and spam monitoring integrated with major ISPs. The business targets email marketers and companies requiring compliant email marketing solutions.

W

WBS GRUPPE

wbs-gruppe.de

56

WBS GRUPPE is a leading German education provider specializing in online and offline training and further education services. The company operates under six strong brands, targeting individuals seeking professional development and vocational training. Their market position is strong within Germany and internationally, focusing on digital education solutions. The website is built on TYPO3 CMS and integrates modern consent management tools such as Cookiebot, reflecting a mature digital infrastructure. The site demonstrates good SEO, accessibility, and mobile optimization, supporting a positive user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected. Overall, the website reflects a professional and trustworthy educational institution with strong GDPR compliance and transparent cookie policies.

C

chemmedia AG

knowledgeworker.com

65

chemmedia AG operates the Knowledgeworker platform, a comprehensive E-Learning software suite designed for corporate clients. Their offerings include an AI-integrated authoring tool, a learning management system, a scenario-based digital coach, and a microlearning app. The company emphasizes GDPR compliance, data privacy, and high-quality, modular learning solutions. The website is professionally designed, mobile-optimized, and integrates modern analytics and marketing tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS and consent management, though some security headers could be enhanced. The absence of WHOIS data is notable but does not detract from the overall legitimacy given the professional presentation and client references. Strategic recommendations include enhancing security headers and publishing explicit security policies.

U

unimess GmbH

anwaltskanzlei-marketing.de

42

The website represents unimess GmbH, a specialized marketing agency focused on legal professionals such as lawyers and tax advisors in Germany. Their services include internet presence creation, marketing consulting, print media, and office equipment for law firms. The company positions itself as an experienced niche player with a nationwide clientele. Technically, the website uses a modern frontend stack including Bootstrap, jQuery, and Matomo analytics configured for privacy by disabling cookies. The site is responsive and well-structured, providing a professional user experience. Security posture is moderate; while HTTPS is assumed, no explicit security headers or policies are visible, and no cookie consent mechanism is implemented despite analytics usage. WHOIS data aligns with the company branding, indicating legitimacy. Overall, the site is professional and trustworthy but could improve in security and privacy compliance aspects.

The website www.werbeagentur-juwelier.de represents unimess GmbH, a small specialized advertising agency focused on jewelers and jewelry manufacturers. The company offers services including internet agency solutions, marketing, and advertising tailored to this niche market. The website content is professional and consistent with the business focus, targeting German-speaking jewelers and related manufacturers. The technical infrastructure employs modern front-end libraries such as jQuery, Bootstrap, and Font Awesome, with Matomo analytics integrated for user tracking without cookies. The site is mobile optimized and provides a good user experience with clear navigation and design consistency. However, contact information is not explicitly visible on the main page, and no forms or social media links are present in the analyzed content.

U

unimess GmbH

jobs-ueberall.de

41

Jobs-ueberall.de is a German job listing portal operated by unimess GmbH, providing job offers from various clients across Germany. The site targets a broad audience seeking employment opportunities in multiple sectors. The platform offers a job finder search form and links to employer websites for detailed job information. The business model centers on aggregating and displaying client job offers to job seekers. Technically, the site uses a modern frontend stack including Bootstrap, jQuery, and Slick Carousel, with Matomo analytics configured to disable cookies, reflecting some privacy awareness. However, no cookie consent mechanism is present. Security posture is moderate with no detected security headers and unknown SSL configuration from provided data. WHOIS data aligns with the company branding and domain ownership, supporting legitimacy. Overall, the site is functional, professionally designed, and mobile optimized but could improve in privacy compliance and security best practices.

M

Matthias Buhl Vermögensberatung

matthiasbuhl.de

54

Matthias Buhl Vermögensberatung is a small, professional financial advisory service based in Gießen, Germany, specializing in personalized financial planning, asset management, insurance, and real estate financing. The website is well-structured, uses modern WordPress technologies including the Avada theme and Slider Revolution, and is optimized for SEO with Yoast. The business presents strong trust indicators such as client testimonials and professional certifications. Security posture is good with HTTPS enabled and no obvious vulnerabilities, though improvements like security headers and incident response contacts could enhance it further. Privacy compliance is basic with a privacy policy present but no explicit cookie consent mechanism. Overall, the website is professional, trustworthy, and serves its target audience effectively.

H

HELENA HARFST

helenaharfst.de

58

HELENA HARFST is a small German-based sustainable fashion brand specializing in durable, timeless clothing designed and produced in Germany. The company emphasizes regional craftsmanship, zero-waste production, and offers a curated e-commerce platform with unisex and limited edition collections. The website is professionally designed using WordPress and WooCommerce with modern marketing integrations such as Google Analytics, Facebook Pixel, and Mailchimp. Security posture is strong with HTTPS enforced and standard security headers, though improvements like Content-Security-Policy and incident response information could enhance trust. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the website presents a trustworthy, professional retail platform with a clear brand identity and good user experience.

G

GINKGO - natürlich bauen

ginkgo-ing.de

61

GINKGO - natürlich bauen is a small German company specializing in natural and sustainable architectural building services. Their website presents a professional image with a focus on private and international clients interested in natural building and architectural design. The company leverages WordPress CMS with the Avada theme and integrates SEO and analytics tools such as Yoast SEO and Google Analytics, indicating a moderate level of digital maturity. Hosting is provided via Microsoft Online, ensuring reliable infrastructure. Security posture is solid with HTTPS enforcement, standard security headers, and GDPR-compliant cookie consent mechanisms. However, the site lacks explicit security policies and incident response information, which could be improved to enhance trust and compliance. Overall, the website is well-designed, mobile-optimized, and trustworthy, with no signs of malicious content or vulnerabilities.

I

Industrie- und Handelskammer Bonn/Rhein-Sieg

ihk-bonn.de

50

The Industrie- und Handelskammer Bonn/Rhein-Sieg (IHK Bonn/Rhein-Sieg) is a regional chamber of commerce serving the Bonn and Rhein-Sieg economic region in Germany. It acts as a key institution supporting local businesses through consultation, training, certification, and advocacy services. The website reflects a well-established organization with a clear focus on business development, vocational training, and regional economic growth. The target audience includes companies, apprentices, founders, and members of the chamber. The business model is that of a public law institution representing commercial interests in the region.

C

cronn GmbH

cronn.de

58

cronn GmbH is a medium-sized German technology company specializing in custom software development, test automation, UI/UX design, IT consulting, and AI development. Operating from Bonn, Hamburg, and Białystok, it serves business clients with agile and modern technology solutions. The company maintains a strong market position with notable clients such as Telekom, Adobe, and Deutsche Post DHL, supported by certifications like ISO 9001 and ISO 27001, and positive employer ratings on Kununu. Technically, the website is well-built with modern Java and open-source technologies, fast performance, and good mobile optimization. Analytics are implemented with privacy-conscious tools like Fathom, supplemented by a tracking pixel from SalesViewer. Security posture is solid with HTTPS and secure forms, though improvements are recommended in security headers and published policies. Overall, the site is professional, trustworthy, and compliant with GDPR, though cookie consent and incident response disclosures could be enhanced.

C

Circle – Hub für Urban Mining

circle-hub.de

52

Circle Hub is a German-based platform and network dedicated to promoting circular economy and urban mining practices within the construction and environmental sectors. The website showcases a broad partner ecosystem including construction companies, environmental labs, consulting firms, and recycling specialists, emphasizing sustainable building and resource efficiency. The business model revolves around facilitating collaboration and knowledge exchange among stakeholders to advance circular economy initiatives. Technically, the site is built on Silverstripe CMS 5.4 with modern frontend technologies like Bootstrap and Swiper.js, offering good mobile responsiveness and user experience. Security posture is moderate with HTTPS implied but lacking explicit security headers and formal security policies. Privacy compliance is strong with a clear cookie consent mechanism and GDPR-aligned cookie policy. Overall, the website is professional, trustworthy, and well-positioned in its niche market.

D

DGNB GmbH

dgnb.de

57

DGNB GmbH is a well-established non-profit organization founded in 2007, recognized as Europe's largest network for sustainable building and the second largest worldwide. The organization offers a comprehensive certification system (DGNB Zertifizierung), educational programs through the DGNB Akademie, and a digital networking platform (myDGNB). Their market position is strong within the sustainability and construction sectors, supported by over 2,800 member organizations and more than 11,000 certified projects globally. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support.

B

BDE Bundesverband der Deutschen Entsorgungs-, Wasser- und Kreislaufwirtschaft e. V.

bde.de

55

BDE Bundesverband der Deutschen Entsorgungs-, Wasser- und Kreislaufwirtschaft e. V. is a prominent German industry association representing Europe's largest network of private circular economy companies. The organization focuses on advocacy, information dissemination, training, and networking within the waste management, water, and recycling sectors. Their website reflects a professional and consistent brand image, targeting companies and stakeholders in the circular economy sector primarily in Germany and Europe. The business model centers on providing member services, industry representation, and policy influence. Technically, the website is built on a Django-based CMS platform, utilizing modern JavaScript libraries such as jQuery and Slick Carousel for interactive elements. The site is mobile-optimized with good SEO practices and moderate performance. Security measures include HTTPS enforcement and CSRF protection on forms, though additional security headers and explicit security policies are absent. The security posture is solid but could be enhanced by publishing incident response contacts and vulnerability disclosure policies. Privacy compliance is well addressed with a clear privacy policy, cookie consent banner, and GDPR adherence. Contact information is comprehensive, including multiple emails, phone numbers, and physical addresses, enhancing business credibility. Overall, the website is trustworthy, professionally maintained, and serves its target audience effectively. Strategic improvements in security transparency and accessibility could further strengthen its position.

B

bvse-Bundesverband Sekundärrohstoffe und Entsorgung e.V.

bvse.de

54

The bvse-Bundesverband Sekundärrohstoffe und Entsorgung e.V. is a well-established German industry association representing approximately 1,000 medium-sized companies in the secondary raw materials, recycling, and waste disposal sectors. It holds a leading market position as the largest industry association in Germany and Europe for this sector. The organization provides a range of services including market news, seminars, quality seals, and political advocacy to support its members and promote sustainable circular economy practices. The website content is professionally presented in German, targeting industry professionals and stakeholders in the recycling and waste management fields. Technically, the website is built on Joomla CMS with modern frontend technologies such as Bootstrap 5 and jQuery, ensuring good mobile responsiveness and accessibility. The site uses HTTPS with strong SSL configuration and includes a cookie consent mechanism that limits cookie usage to essential session cookies. No major security vulnerabilities or tracking technologies were detected, indicating a privacy-conscious and secure digital infrastructure. From a security perspective, while HTTPS and secure login forms are implemented, the site lacks published security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced trust and compliance. The WHOIS data aligns well with the website's business claims, showing consistent domain registration and no privacy protection, supporting legitimacy. Overall, the site is professional, secure, and compliant with GDPR requirements, serving as a credible resource for the recycling industry. Strategic improvements in security transparency and incident response readiness would further strengthen its posture.

M

Messe München GmbH

bau-muenchen.com

63

BAU München is a globally recognized trade fair organizer specializing in architecture, building materials, and systems. The website serves as a comprehensive platform for event information, exhibitor registration, and industry insights, targeting architects, planners, investors, and craftsmen. The site is professionally designed, mobile-optimized, and uses modern web technologies including web components and elastic search for enhanced user experience. Privacy compliance is robust, leveraging Usercentrics CMP and providing a comprehensive privacy policy in German. Security posture is strong with HTTPS, security headers, and domain transfer protections, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Overall, the website reflects a mature, trustworthy, and well-managed digital presence aligned with Messe München GmbH's brand and business objectives.

V

Vorreiter-Magazin

vorreiter-magazin.de

66

The Vorreiter-Magazin website serves as a regional informational platform focused on fostering cooperation with European neighboring countries, particularly within the context of Niedersachsen, Germany. It appears to be a government or public sector publication promoting Interreg programs and regional collaboration. The website is built on WordPress using the Avada theme and incorporates several plugins such as Borlabs Cookie for cookie consent and Slider Revolution for content presentation. Social media presence is established via Facebook, Instagram, and YouTube channels. Technically, the site is moderately optimized with good mobile responsiveness and basic SEO practices. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit security policies. No privacy policy or terms of service pages were found, which is a compliance gap. Contact information is not explicitly provided on the homepage, limiting direct communication channels. Overall, the site is trustworthy and safe for general audiences, with no adult or questionable content detected.

B

basis-online

basis-online.net

63

basis-online.net is a German-language religious and cultural publication operated by Patris-Verlag, focusing on Christian themes and social commentary. The website offers subscription services, an online shop for magazine issues, and regularly updated editorial content. Technically, the site is built on WordPress with WooCommerce and enhanced by SEO and security plugins, including Yoast SEO and FriendlyCaptcha, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and CAPTCHA on forms, though additional security headers could improve defenses. Privacy compliance is well addressed with clear policies and consent mechanisms. However, the absence of WHOIS registration data raises concerns about domain transparency, slightly impacting trustworthiness. Overall, the site is professional, content-rich, and well-maintained, serving a niche audience effectively.

H

Hoffnungsvoll leben

hoffnungsvoll-leben.de

45

Hoffnungsvoll leben is a small non-profit Christian website dedicated to personal development, psychological well-being, and spiritual growth. It provides a broad range of articles, meditations, and materials authored by professionals and active members of the Schönstatt Movement. The website targets individuals seeking faith-based guidance and psychological support. Technically, the site is built on the SilverStripe CMS platform, uses common JavaScript libraries such as jQuery and Revolution Slider, and is hosted behind Cloudflare for DNS and security. The site is mobile-optimized with a moderate performance profile. Security posture is adequate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms. No direct contact emails or phone numbers are provided, only a contact form. The WHOIS data is consistent with the website's origin and business type, showing no suspicious patterns. Overall, the site is trustworthy and professionally maintained but could improve privacy compliance and security best practices.

S

Spurensuche

spurensuche.info

64

Spurensuche.info is a German-based non-profit platform dedicated to Christian spirituality, offering a wide range of content including articles, prayers, meditations, and educational materials. The site targets individuals and groups interested in faith reflection and religious education, with multilingual support to reach a broader audience. The business model is primarily informational with some commercial activity through an affiliated shop. The website maintains a consistent brand identity and demonstrates good content quality and user experience.

P

www.pilgerwege-schoenstatt.de | Pilgerwege Schoenstatt - Von Heiligtum zur Heiligtum - Schönstatt Zentren in Deutschland.

pilgerwege-schoenstatt.de

42

The website pilgerwege-schoenstatt.de serves as an informational platform focused on pilgrimage routes associated with the Schönstatt movement and its centers in Germany. It targets pilgrims and religious visitors interested in these routes. The site uses WordPress CMS with the Divi theme and integrates OpenStreetMap for mapping functionalities. The technical infrastructure is moderate, with basic mobile optimization and SEO practices. Security posture is weak due to lack of HTTPS verification in the provided data, absence of security headers, and missing privacy and cookie policies. No contact or incident response information is available, which limits user trust and compliance with data protection regulations. Overall, the site is functional but lacks advanced security and privacy features, which should be addressed to improve trust and compliance.

schoenstattTV is a small non-profit media platform dedicated to streaming and archiving religious events related to the Schoenstatt spirituality and community. It offers multilingual content and live streams, targeting followers and families interested in Schoenstatt. The website is hosted on servers associated with kasserver.com and uses HTTPS with embedded YouTube videos for media delivery. The technical infrastructure is basic but functional, with moderate performance and limited mobile optimization. Security posture is adequate with HTTPS but lacks advanced security headers and visible privacy or cookie policies. No contact information or social media presence is evident, which limits direct user engagement and trust signals. Overall, the site serves a niche religious community with a focus on media content delivery rather than commercial business operations.

P

Pater Kentenich Sekretariat

pater-kentenich.org

41

The Pater Kentenich Sekretariat website serves as an informational and spiritual resource dedicated to Father Joseph Kentenich, founder of the International Schoenstatt Movement. It supports the beatification process by providing prayer inspirations, written materials, and testimonies in multiple languages, targeting a global religious audience. The website is positioned as a niche non-profit entity focused on religious education and spiritual guidance. Technically, the site is built on the concrete5 CMS platform (version 5.6.4.0) and employs common web technologies such as jQuery and Bootstrap. The site is mobile-optimized and offers a multilingual experience, although some technical aspects like security headers are missing. Security posture is moderate with HTTPS enforced but lacking advanced headers and incident response information. The absence of WHOIS data limits domain registration trust verification, but the website content and structure indicate legitimacy. Overall, the site is professionally presented with good content quality and user experience but could improve in privacy compliance and security best practices.

A

AWO Stadtverband Hanau e.V.

awo-hanau.de

64

AWO Stadtverband Hanau e.V. is a well-established non-profit organization based in Hanau, Germany, focused on family education, social projects, and community services. The organization offers a broad range of courses and support services for families, children, and adults, positioning itself as a key regional social service provider with a history dating back to 1962. The website serves as an information hub for their offerings and community engagement initiatives. Technically, the website is built on the Jimdo CMS platform, leveraging standard web technologies including jQuery and third-party widgets from POWr.io. It is hosted by Jimdo GmbH, with a moderate performance profile and good mobile optimization. The site includes cookie consent mechanisms and integrates social media channels for outreach. SEO and accessibility are basic but adequate for the target audience. From a security perspective, the site enforces HTTPS and includes cookie consent, but lacks advanced security headers and anti-CSRF protections in forms. No WAF or blocking mechanisms were detected, and no critical vulnerabilities were found in the visible content. Privacy compliance is good with a clear privacy policy and cookie policy aligned with GDPR requirements. Overall, the website presents a trustworthy and professional digital presence for a regional non-profit. Strategic improvements in security headers and form protections would enhance its security posture. The site is safe for general audiences and effectively supports the organization's mission and community engagement.

A

Agentur Werbezeit

agentur-werbezeit.com

54

Agentur Werbezeit is a small, German-based creative advertising agency specializing in generating ideas to increase brand awareness for companies and products. Founded in 2015, the agency leverages a small but experienced team to deliver marketing and media services. The website is professionally designed using WordPress with modern plugins for SEO and GDPR compliance, reflecting a mature digital presence. The technical infrastructure includes Google Analytics and Tag Manager for marketing insights, and the site is secured with HTTPS. Privacy and cookie policies are comprehensive and GDPR compliant, with a clear consent mechanism. However, no explicit contact emails or phone numbers are published, relying on a contact form for communication. Security posture is good but could be improved by enabling DNSSEC and adding security headers. Overall, the website presents a trustworthy and professional image suitable for its target audience of businesses seeking marketing services.