High-risk security reports

Raumagentur is a German-based company specializing in modern workspace consulting, planning, construction, furnishing, and rental services. With over 25 years of experience, it serves a medium-sized market segment, targeting businesses seeking efficient and flexible office environments. The website is professionally designed, featuring comprehensive service descriptions, client testimonials, and a consistent brand image. Technically, the site is built on WordPress with modern SEO and analytics tools integrated, including Google Tag Manager and LinkedIn Insight Tag. Security posture is strong with HTTPS, security headers, and GDPR-compliant cookie consent mechanisms in place. No critical vulnerabilities or suspicious content were detected, and the domain registration data aligns well with the business claims, indicating legitimacy.

PRIMUS developments is a German real estate development company specializing in sustainable construction using wood as a primary building material. Their projects focus on environmental sustainability by storing CO2 in buildings and promoting renewable resources. The website showcases various projects primarily located in Germany, targeting environmentally conscious investors and public sector clients. Technically, the website is built on WordPress with modern frontend frameworks such as UIkit and jQuery, and it employs performance optimizations like lazy loading. Security posture is moderate with HTTPS enabled and Wordfence security plugin usage, but lacks advanced security headers and visible incident response policies. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

Michel Bau is a German family-owned construction company specializing in high-rise, civil engineering, and environmental construction projects. The company positions itself as a specialist with experience, engagement, and modern technology, targeting clients across Germany. The website reflects a medium-sized business with a professional online presence, showcasing project stories and career opportunities. Technically, the site is built on WordPress using Elementor and Yoast SEO, with a cookie consent mechanism implemented via Borlabs Cookie and Google Tag Manager integration. Security posture is good with HTTPS enforced, but lacks some advanced security headers and explicit security policies. Privacy compliance is partial due to missing privacy and terms of service pages. Overall, the site is professional, trustworthy, and safe for general audiences.

INGENUM is a German-based company positioning itself as a partner for innovative and sustainable solutions with a focus on environmental and social responsibility. The website is built on WordPress using modern tools such as Elementor and Yoast SEO, indicating a moderate level of digital maturity. The site is well-structured, mobile-optimized, and provides a professional user experience, although it lacks explicit privacy and terms of service documentation. Security posture is adequate with HTTPS enabled and cookie consent implemented, but the absence of security headers and incident response information suggests room for improvement. Overall, the website is safe and business-oriented with no adult or questionable content detected.

Hülskens Wasserbau GmbH & Co. KG is a well-established German company specializing in constructive water engineering with over 100 years of experience. The company offers a broad range of services including engineering water construction, sheet piling, dredging, sediment management, and specialized techniques. It operates nationwide in Germany and is part of the larger Hülskens Firmenverband group. The website targets B2B clients in infrastructure and waterway sectors as well as young professionals seeking apprenticeships. Technically, the site is built on the Contao CMS platform, uses common JavaScript libraries for UI enhancements, and is hosted on agenturserver infrastructure. The website is well-structured, mobile-optimized, and includes a cookie consent mechanism compliant with GDPR. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Contact information is clearly presented, and social media presence is active across major platforms. No terms of service or explicit security policy pages were found, which could be areas for improvement.

GlobalFlow GmbH is a German-based small business specializing in strategic waste and resource management consulting for industry, commerce, and waste disposal service providers. The company positions itself as a partner for sustainable, efficient, and future-proof waste management solutions, offering modular services including coaching, training, and network memberships. The website is professionally designed with good content quality and uses modern marketing and analytics technologies such as Google Tag Manager, ConvertKit, and Stripe, hosted on Alfahosting infrastructure. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacking explicit security policies or incident response information. Contact is primarily via web forms and booking links, with no direct emails or phone numbers published. Overall, the website is trustworthy and safe, with no suspicious content or blocking mechanisms detected.

BB IN-HOUSE is a German digital media publication providing biweekly curated legal and economic news targeted at corporate executives and decision makers. The website is professionally designed using WordPress with a child theme and integrates GDPR-compliant cookie consent via Usercentrics. The technical infrastructure includes modern JavaScript libraries, Google Tag Manager for analytics, and Adition for advertising. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. The domain registration data is consistent and transparent, supporting legitimacy. Overall, the site presents a trustworthy and professional media platform serving a niche market.

Felix Höltken GmbH is a medium-sized German company specializing in Baustoffrecycling and Baustoffgroßhandel, operating since 1990 and part of the EPH-Konzern. The company provides high-quality recycled construction materials primarily for the construction and infrastructure sectors, positioning itself as a sustainable alternative to natural stone resources. The website reflects a professional and consistent brand image, targeting business clients in the construction industry. Technically, the site is built on TYPO3 CMS, uses Matomo for privacy-conscious analytics, and implements a cookie consent mechanism via Klaro, indicating a mature digital infrastructure. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers could be improved. Overall, the website is well-structured, accessible, and compliant with GDPR requirements, with clear contact information and no blocking mechanisms detected.

Euroment is a well-established supplier of certified pulverized coal fly ash and limestone powders primarily serving the Benelux region. The company emphasizes sustainability and innovation, particularly in reducing CO2 emissions in cement-bound systems. Their website is professionally designed using TYPO3 CMS, featuring good mobile optimization, clear navigation, and comprehensive content about their products and services. The technical infrastructure includes modern technologies such as Matomo for analytics and Klaro for cookie consent management, reflecting a mature digital presence. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although security headers could be improved. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which slightly impacts overall trust. Contact information is primarily via a contact page without explicit emails or phone numbers visible on the site. Overall, Euroment presents a credible and professional business front with minor areas for improvement in transparency and security best practices.

MINERALplus GmbH is a German company specializing in industrial waste disposal and the production of construction and mine packing materials from waste. Founded in 2000 through a merger, it operates as a subsidiary of EP Power Minerals GmbH under the EPH Group umbrella. The company serves industrial and construction sectors with certified waste treatment, recycling, and landfill services. The website is built on TYPO3 CMS, uses Matomo for analytics, and Klaro for cookie consent management, reflecting a modern and privacy-conscious technical infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the website is professional, well-structured, and trustworthy, with no signs of malicious content or blocking mechanisms.

YouthWatch is a Slovak non-profit organization dedicated to enhancing the quality of youth work and youth policy through trend monitoring, innovation, and development programs. Their services include educational workshops, lectures, and consulting aimed at youth workers, educators, and policymakers. The website is professionally designed using WordPress and Elementor, with a focus on accessibility and mobile optimization. The technical infrastructure is modern and hosted on Websupport with DNSSEC and HTTPS enabled, ensuring a secure browsing experience. However, the site lacks explicit privacy and cookie policies, incident response contacts, and security headers, which are areas for improvement. Overall, the domain registration and website content are consistent and legitimate, reflecting a stable and trustworthy organization.

CETT (Centrum environmentálních technik a technologií) operates as a specialized hospitality and educational center located in the Czech Republic, offering conference facilities, accommodation, and environmental education programs. The business targets corporate clients, institutions, schools, and individual guests, emphasizing quality service and environmental awareness. The website reflects a professional and consistent brand image with clear service offerings and positive trust indicators such as certifications and guest ratings. Technically, the site employs modern frontend technologies including Bootstrap and Google Analytics, providing a responsive and user-friendly experience. However, some areas such as explicit cookie consent and security policies could be improved. Security posture is moderate with HTTPS usage but lacks visible security headers and incident response information. Overall, the site is trustworthy and well-positioned in its niche but would benefit from enhanced privacy and security transparency.

Filip Kňažek operates a personal coaching and facilitation business focused on nature-based self-development and emotional well-being. The website presents a professional and consistent brand image with clear service offerings including workshops, coaching walks, and group facilitation. The technical infrastructure is based on WordPress with Elementor and Yoast SEO, indicating a modern and maintainable platform. Security posture is adequate with HTTPS enabled, but lacks some security headers and formal privacy/cookie policies. The absence of WHOIS data is due to privacy protection, which is typical for small personal businesses. Overall, the site is trustworthy and well-positioned for its niche audience.

IPčko.sk is a well-established Slovak non-profit organization providing anonymous, free, and 24/7 crisis psychological support through multiple channels including phone, chat, email, and personal visits. The website reflects a mature digital presence with a clear focus on accessibility and user support. The organization has a strong market position in Slovakia as a trusted crisis helpline service. Technically, the site is built on WordPress with modern plugins and frameworks, hosted on a reputable provider with DNSSEC and HTTPS enabled, ensuring good security and performance. Security posture is strong with best practices observed, though some improvements in privacy compliance and explicit security policies are recommended. Overall, the site is professional, trustworthy, and user-friendly, serving a critical social function.

NaZemi is a well-established Czech non-profit organization founded in 2005, focusing on sustainability, transformative education, and community engagement. Their website reflects a mature digital presence with clear navigation, multilingual support, and a professional design. They offer educational programs, facilitation services, community spaces, and an e-commerce platform for publications. Technically, the site is built on WordPress with WooCommerce and uses modern frameworks like Bootstrap, supported by privacy-conscious analytics such as Matomo and Google Tag Manager with consent management. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. Contact information and privacy policies are clearly presented, supporting trust and compliance. Overall, the site is credible, secure, and user-friendly, serving a niche audience interested in sustainability and education.

PDCS is a Slovak non-governmental organization specializing in conflict resolution, civic participation, and social dialogue. The organization offers educational courses, facilitation, consulting, and project support primarily targeting individuals, groups, and organizations interested in societal development and democratic processes. The website reflects a professional and consistent brand image with clear communication of services and contact information. Technically, the site uses modern web technologies including Vue.js and Bootstrap, and integrates privacy-respecting analytics via Plausible. Security posture is strong with HTTPS and security headers implemented, though there is room for improvement in privacy compliance with the absence of a cookie consent mechanism and a dedicated privacy policy page. Overall, PDCS demonstrates a credible and trustworthy online presence aligned with its non-profit mission.

Generace Symbiocén is a Czech non-profit educational program targeting young people aged 17-23, focusing on societal and environmental transformation, particularly addressing the climate crisis. The program is operated by NaZemi, a well-established organization in global education and social change. The website is built on WordPress using Elementor and integrates various plugins including Everest Forms and Instagram Feed. It uses Matomo for analytics and embeds YouTube videos for content delivery. The site is professionally designed with good navigation and mobile optimization, providing relevant and engaging content for its target audience. However, it lacks explicit privacy and cookie policies, consent mechanisms, and security headers, which are important for compliance and security posture. WHOIS data confirms the domain is recently registered in 2022, consistent with the program's founding, and is hosted on Czech servers. Overall, the site is trustworthy and credible but could improve in privacy compliance and security best practices.

KulturKirche2025 is a cultural initiative centered on churches in the Chemnitz region, aligned with the European Capital of Culture 2025 program. The website serves as a platform to promote cultural exhibitions, spiritual events, and community projects, targeting visitors, pilgrims, and local cultural participants. The business model is non-profit and community-focused, emphasizing cultural heritage and spiritual engagement. Technically, the site is built on WordPress with modern plugins such as Advanced Custom Fields Pro and WPML for multilingual support. The infrastructure is hosted on rzone.de nameservers, indicating a professional hosting environment. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks explicit security headers and formal policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is accessible, well-structured, and provides relevant cultural content but would benefit from enhanced privacy and security documentation.

ZULEX is a specialized cloud-based software provider focused on digitizing vehicle registration processes in Germany. Positioned as the only independent Zulassungssoftwareanbieter and a member of the Kraftfahrtbundesamt's i-Kfz project, ZULEX offers comprehensive services including new registrations, deregistrations, re-registrations, and address changes. Their platform is accessible 24/7 via browser without installation, targeting Zulassungsbetriebe, car dealerships, fleet operators, and large customers. The website demonstrates a professional and consistent brand presence with strong trust signals such as certifications and customer testimonials. Technically, the website is built on WordPress with Elementor and Yoast SEO, integrating modern tools like HubSpot forms and GDPR-compliant cookie management. The hosting is managed via kasserver.com, and the site uses HTTPS with good SSL configuration. Performance is moderate with good mobile optimization and accessibility features. Analytics and tracking are implemented via Fathom and SalesViewer, with transparent cookie consent mechanisms. From a security perspective, the site enforces HTTPS and uses cookie consent but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website content, indicating a legitimate and consistent domain registration. Overall, ZULEX presents a secure, professional, and compliant digital presence suitable for its business domain. Strategic improvements include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and compliance.

EVS/ESC Galaxy is a niche educational platform dedicated to providing resources, brochures, and international training courses for EVS and ESC coordinators. The website serves a specialized audience involved in European voluntary service coordination, offering curated content and tools to support their activities. The business operates primarily in the education and non-profit sectors, with a small organizational size and a founding date consistent with the domain registration in 2017. The site is hosted by WEDOS Internet, a Czech hosting provider, aligning with the regional focus of the content. Technically, the website is built on WordPress with a modern theme and plugins, including jQuery and Page Builder Framework. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. The absence of advanced security headers and DNSSEC indicates room for improvement in security hardening. No analytics or tracking scripts were detected, suggesting minimal user tracking. From a security perspective, the site uses HTTPS with a valid SSL certificate, but lacks security headers and formal privacy or cookie policies, which are critical for GDPR compliance. No contact or incident response information is provided, limiting transparency and user trust. The domain WHOIS data is consistent and legitimate, with no privacy protection or suspicious patterns. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security best practices, and clearer contact information to improve trust and regulatory adherence.

MarkerCS is a small non-profit organization focused on providing non-formal education training primarily for youth workers and teachers in Slovakia and the Czech Republic. Their website offers detailed information about their training programs, educational principles, and testimonials from past participants, positioning them as a niche educational provider supported by the Erasmus+ program. Technically, the website is built on WordPress using the Astra theme and Elementor page builder, hosted by a Czech registrar and hosting provider. The site is moderately performant, mobile-optimized, and SEO-friendly but lacks some advanced accessibility features. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but the absence of security headers and formal privacy and cookie policies indicates room for improvement. Overall, the website is professional and trustworthy but could enhance compliance and security transparency.

The website 'Šlabikár neformálneho vzdelávania' serves as an educational platform focused on improving the quality of non-formal education for youth workers primarily in Slovakia and the Czech Republic. It offers a methodological guide and an interactive e-learning tool developed through a partnership between YouthWatch, ANEV, and Luducrafts, supported by Erasmus+. The site targets youth educators and non-profit organizations involved in youth work, providing free resources to enhance educational practices. Technically, the site uses modern JavaScript libraries, Google Analytics for tracking, and is served over HTTPS with a valid SSL certificate. However, it lacks visible privacy and cookie policies and does not provide direct contact information, which impacts privacy compliance and user trust. Security posture is moderate with some best practices like CSRF token usage but missing security headers. WHOIS data is unavailable due to EURid privacy policies, but the domain and content appear legitimate and consistent with the stated mission. Overall, the site is professionally designed and functional but could improve transparency and security practices.

YoDel is a small-scale educational conference focused on new approaches to working with young people, primarily targeting youth workers and educators in Slovakia. The website provides detailed program information and workshop descriptions, demonstrating a clear business purpose and target audience. Technically, the site is built on WordPress using Elementor and Yoast SEO, with modern fonts and some SEO optimization. However, Google Analytics is installed but not configured, and no privacy or cookie policies are present, which impacts privacy compliance. Security posture is moderate with HTTPS enabled but lacking security headers and explicit security policies. Overall, the site is professional and functional but could improve in privacy and security transparency.

on-collect solutions AG operates a legaltech cloud platform specializing in debt collection and receivables management, primarily serving companies in the energy sector in Germany. The company combines software as a service with consulting and legal expertise to optimize the entire customer lifecycle in receivables management. Their platform integrates seamlessly with ERP systems and offers automated processing, digital file management, and comprehensive reporting. The website positions on-collect as a pioneer in legaltech with over 200 customers using their SaaS solution. Technically, the website is built on WordPress with Elementor and Bootstrap, leveraging modern JavaScript libraries and Matomo for privacy-conscious analytics. The site is mobile-optimized and demonstrates good SEO practices, though some accessibility features could be enhanced. Security posture is solid with HTTPS enforced and no obvious vulnerabilities, but lacks some security headers and formal security policies. Overall, the security posture is good but could be improved by adding explicit privacy and cookie policies, incident response information, and security headers. The domain WHOIS data is consistent with the business claims, supporting legitimacy. No blocking or WAF challenges were detected, allowing full content analysis. Strategic recommendations include enhancing privacy compliance, publishing security and incident response policies, and implementing security headers to strengthen trust and compliance with GDPR and related regulations.

e-rechtsanwälte.eu is a specialized legal consultancy firm focusing on energy law, IT law, internet law, and data protection, primarily serving energy suppliers and medium-sized industries in Germany. The website presents a professional image with clear navigation and a modern design, leveraging WordPress with Elementor and Bootstrap frameworks. The firm offers a range of legal services including contract law, insolvency law, and organizational liability. Technically, the site uses HTTPS, Matomo analytics with cookies disabled, and a cookie consent mechanism, indicating a moderate level of digital maturity. However, the absence of a published privacy policy and terms of service pages suggests room for improvement in compliance transparency. Security posture is generally good with no visible vulnerabilities or exposed sensitive data, but the lack of security headers is a minor concern. Overall, the website is trustworthy and professional, though enhancing privacy and security disclosures would strengthen its compliance and user trust.

Flurbereinigungsverband Oldenburg-Ostfriesland is a public law corporation operating in Germany, focused on land consolidation and related administrative services for its members in the Oldenburg and Ostfriesland regions. The organization provides essential services such as financial management and maintenance of communal facilities, positioning itself as a regional governmental entity with a clear mandate and defined governance structure. The website reflects a professional and consistent brand image, targeting members and stakeholders involved in land management and public administration. Technically, the website is built on WordPress with standard SEO and accessibility plugins, hosted on a German hosting provider. It demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. The absence of advanced analytics or tracking tools suggests a privacy-conscious approach, albeit with room for improvement in cookie consent mechanisms. From a security perspective, the site uses HTTPS with no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security headers and published security policies or incident response information, which could enhance trust and compliance. The WHOIS data aligns well with the website content, indicating a legitimate and consistent domain registration. Overall, the website is safe, professional, and trustworthy, with recommendations to improve privacy compliance and security posture to meet higher standards and regulatory expectations.

creedle.de is a German-based digital platform focused on creating a Christian digital ecosystem called creedle. The platform aims to make Jesus digitally visible by connecting Christians, churches, and seekers through multiple applications (creedlec) integrated into a central search engine. The project started in 2022 with a roadmap to complete the first system version by 2027. The business is positioned as a niche technology provider in the Christian digital content space, supported by arvenio marketing GmbH and partnerships with organizations like the Deutsche Bibelgesellschaft. Technically, the website is built on WordPress using the Avada theme and Fusion Builder, with modern plugins for multilingual support and cookie consent. Security posture is strong with HTTPS and security headers, though privacy and incident response policies are missing. Overall, the site is professional, well-branded, and trustworthy, but could improve compliance documentation and explicit contact information.

The website material-e.de operates as the official online shop for the Evangelisch-lutherische Landeskirche Hannovers, providing a specialized e-commerce platform focused on church-related materials such as brochures, campaign products, and educational aids. The platform targets church communities, educators, and local organizers, positioning itself as a niche provider within the religious and non-profit sector in Germany. The site features professional branding consistent with the organization's identity and offers clear contact channels including email, phone, and a contact form. Technically, the website is built on the Shopware CMS platform, utilizing modern web technologies including Bootstrap and JavaScript. It demonstrates good mobile optimization, accessibility, and SEO practices. The site employs HTTPS with strong SSL configuration and implements security best practices such as CSRF tokens and cookie consent mechanisms. Analytics and marketing tools like Google Analytics, Facebook Pixel, and Hotjar are used with appropriate consent management. From a security perspective, the site maintains a solid posture with essential security headers and no detected vulnerabilities or exposed sensitive data. However, it lacks a publicly available security policy or incident response contact information, which could enhance transparency and preparedness. Privacy compliance is robust, with comprehensive privacy and cookie policies aligned with GDPR requirements. Overall, material-e.de presents a trustworthy, professional, and secure platform serving its target audience effectively. Strategic recommendations include publishing a dedicated security policy, establishing incident response contacts, and enhancing transparency around vulnerability disclosures to further strengthen its security and compliance posture.

TC-Innovations GmbH is a specialized Shopware agency based in Germany, recognized as a market leader in Shopware themes, particularly through their flagship product ThemeWare®, which is deployed in over 15,000 shops. Their core services include grand design, sales promotion, and individualization of Shopware shops, complemented by installation and support services. The company targets e-commerce businesses and agencies seeking professional Shopware solutions. Technically, the website employs modern web technologies such as jQuery, Slick Carousel, and LazyLoad, and is optimized for mobile devices with good SEO and accessibility practices. Security-wise, the site enforces HTTPS and implements a comprehensive cookie consent mechanism, though it lacks explicit security headers and published security policies. Overall, the domain registration data aligns well with the business claims, indicating a trustworthy and legitimate operation.

ELBE Decken is a specialized German manufacturer and supplier of prestressed concrete floor slabs, operating under the umbrella of Heidelberg Materials, a major global construction materials company. The company offers a broad product range and comprehensive services including manufacturing, delivery, consulting, planning, and project support. Their market position is strong within Germany, targeting construction professionals such as builders, architects, and investors. The website reflects a professional and well-branded digital presence with clear navigation and relevant content tailored to their audience. Technically, the site is built on WordPress with modern plugins and themes, optimized for SEO and mobile use, and hosted by Goneo. Security measures include HTTPS, Google reCAPTCHA, and cookie consent mechanisms, though some security headers and policies could be improved. Overall, the site is trustworthy, compliant with GDPR, and provides sufficient contact and business information.

Uniper is a large, established energy company headquartered in Germany, focused on power generation, energy trading, and accelerating the energy transition through renewables and hydrogen economy development. The company operates in over 40 countries and has a strong green energy portfolio. The website is built on Drupal 10 with modern web technologies and includes comprehensive content about their business, strategy, and sustainability efforts. Security posture is strong with HTTPS, security headers, and captcha-protected forms, though explicit incident response contacts and vulnerability disclosure policies are not found. Privacy and compliance policies are comprehensive and GDPR compliant. Overall, the website reflects a mature digital presence consistent with a reputable energy sector enterprise.

Dialog Krieger, operated by Heinrich Krieger KG, is a specialized service provider focusing on modern conflict management and public participation facilitation in Germany. The company emphasizes transparent and fair dialogue processes, primarily serving municipalities, companies, and initiatives. Their website reflects a professional and consistent brand image, highlighting certified mediators and structured citizen engagement services. The technical infrastructure is based on WordPress CMS with common plugins and a hosting provider identified as netcup, ensuring reliable performance and moderate mobile optimization. Security posture is adequate with HTTPS enabled and cookie consent implemented, though there is room for improvement in security headers and incident response transparency. Overall, the website is trustworthy, GDPR compliant, and provides sufficient contact information and business insights.

SCHWING Stetter is a well-established German manufacturer specializing in concrete technology products such as truck-mounted concrete pumps, truck mixers, batching plants, and industrial pumping systems. The company maintains a strong global presence with multiple regional partner sites and subsidiaries, targeting construction industry professionals and industrial clients. Their website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site is built on TYPO3 CMS, uses modern JavaScript frameworks, and integrates privacy-conscious analytics via Matomo. Cookie consent is managed effectively through Cookiebot, ensuring GDPR compliance. Security posture is solid with HTTPS enabled and basic security headers, though there is room for improvement in DNSSEC and advanced security headers. No critical vulnerabilities or suspicious patterns were detected. Overall, the website and domain registration data indicate a legitimate and credible business with a mature digital infrastructure.

BEYER-Mietservice KG operates a professional and established European construction machinery rental business, offering a wide range of equipment including aerial work platforms, cranes, forklifts, and generators. The website presents a clear business focus with detailed product listings and a consistent brand presence. Technically, the site uses modern web technologies such as Google Tag Manager and lazy loading for images, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced but lacks important security headers and formal privacy and cookie policies. The WHOIS data is minimal but does not indicate privacy protection or suspicious registration, supporting legitimacy. Overall, the site is functional and professional but could improve privacy compliance and security best practices.

Profi Beton GmbH is a medium-sized manufacturing company specializing in the production and distribution of transport concrete and splitt concrete, primarily serving the Rhein-Main region and the vorderen Odenwald in Germany. As a 100% subsidiary of Mitteldeutsche Hartstein-Industrie Aktiengesellschaft, it holds a leading market position with over 30 years of experience and a DIN ISO 9001 certification, indicating a commitment to quality. The company targets private, commercial, and public customers with tailored concrete products for various construction needs. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including jQuery, FontAwesome, and Google Maps API for location services. The site demonstrates good mobile optimization, clear navigation, and moderate performance. Privacy and compliance are well addressed with a comprehensive cookie consent mechanism and GDPR-aligned privacy policies. Matomo analytics is used for user tracking, reflecting a privacy-conscious approach. From a security perspective, the site enforces HTTPS and uses session cookies appropriately. However, some standard security headers are not explicitly detected, and there is no visible security policy or incident response contact, which could be improved. No vulnerabilities or suspicious content were found, and the domain registration data aligns well with the business claims, supporting legitimacy. Overall, Profi Beton GmbH presents a professional, trustworthy online presence with solid compliance and security foundations. Strategic improvements in security headers and incident response transparency would further enhance their security posture and trustworthiness.

HEMA Maschinen- und Apparateschutz GmbH is a medium-sized German manufacturing company specializing in machine protection products and services for industrial production machines. The company offers a broad portfolio including safety glass services, protection systems, clamping and braking systems, and sanitation technologies using ozone and UV-C. Their market position is supported by ISO 9001:2015 certification and a global presence with multiple international locations. The website is professionally designed using TYPO3 CMS, featuring multilingual support and modern consent management tools, indicating a mature digital infrastructure. Security posture is good with HTTPS, captcha-protected forms, and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. WHOIS data is unavailable, possibly due to privacy protection or recent registration, which slightly reduces transparency but does not detract from the overall legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure information to improve trust and compliance.

The website www.ekir.de appears to be a German language site with a strong emphasis on accessibility, integrating a comprehensive accessibility tool (digi·access) that offers multiple profiles and customization options for users with various disabilities. The site is built on WordPress CMS and uses common plugins such as Yoast SEO for search engine optimization and MashShare for social sharing. Hosting is provided by Cancom, as indicated by the nameservers. The site includes cookie consent management via Usercentrics, ensuring compliance with cookie regulations. However, explicit privacy policy and terms of service pages were not found in the provided content, which is a gap in compliance and transparency. Contact information such as emails, phone numbers, or physical addresses are not present in the analyzed content, limiting direct communication channels.

Alma & Lovis is a German sustainable fashion brand specializing in eco-friendly and fair women's clothing. The company emphasizes timeless design, high-quality natural materials, and responsible production practices. Their market position is that of a niche retailer focused on slow fashion, targeting environmentally conscious female consumers. The website is built on the Shopware CMS platform and hosted behind Cloudflare, indicating a modern technical infrastructure with CDN and security benefits. The site is well-optimized for mobile devices and SEO, providing a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced, but lacks some security headers and explicit privacy and cookie policies, which are areas for improvement. No contact emails or phone numbers are directly visible, which may affect user trust and compliance. Overall, the website is safe, professional, and credible, with room to enhance privacy compliance and security best practices.

KOLL Steine operates as a specialized supplier of stone products, catering to customers interested in natural stones for construction and landscaping. The website is built on WordPress using the Avada theme and integrates common SEO and analytics tools such as Yoast SEO and Google Analytics. The technical infrastructure is standard for small to medium-sized businesses, hosted on rzone.de servers. Security posture is moderate but lacks advanced security headers and explicit privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is provided, indicating room for improvement in security transparency. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security practices.

Inspiration Miller is a small freelance consultancy based in Germany specializing in IT consulting, data protection, and auditing services. The business leverages over 25 years of experience and cooperates with reputable certification bodies such as DEKRA and TÜV-Süd. The website presents a professional image with clear contact information and a focus on compliance and certifications. Technically, the site is built on Joomla CMS with standard modern libraries and includes a GDPR-compliant cookie consent mechanism. Security posture is adequate with HTTPS and no visible vulnerabilities, though security headers could be improved. Overall, the site is trustworthy and well-suited for its target SME audience in technology and related sectors.

The website represents a niche religious magazine 'begegnung' targeted at women associated with the Schönstatt movement, a Catholic community focused on family and faith. The business model revolves around subscription services including gift and single issue orders. The site is well-branded and consistent, serving a small, specialized audience primarily in Germany. Technically, the site uses the concrete5 CMS (version 5.6.4.0), jQuery, Bootstrap grid, and Typekit fonts, hosted likely on servers indicated by the nameservers. The site is mobile optimized with good navigation and content relevance but lacks modern security headers and cookie consent mechanisms. Security posture is moderate with HTTPS enabled but missing advanced headers and incident response information. No analytics or tracking scripts were detected, indicating minimal user tracking. Overall, the site is safe, professional, and trustworthy with room for improvement in security and privacy compliance.

Elektrizitätswerk Goldbach-Hösbach GmbH & Co. KG operates as a regional utility and telecommunications provider in Germany, offering energy products such as electricity, gas, and water, alongside VDSL and fiber internet services and IPTV television. The website targets private customers with detailed product offerings and pricing, emphasizing local service and customer support. The company maintains a professional online presence with clear navigation and comprehensive contact options. Technically, the website uses Bootstrap and jQuery frameworks, with legacy Google Analytics for tracking. Mobile optimization and accessibility are well addressed, though some modernization opportunities exist. Security posture is moderate; while HTTPS is implied and email obfuscation is used, explicit security headers and policies are absent. Privacy compliance is supported by a cookie consent mechanism and a comprehensive privacy policy. Overall, the site is trustworthy and professionally maintained, suitable for its regional utility business model.

Mobilis Sport's website functions primarily as a login portal for users, likely members or customers of a sports-related service based in Hungary. The site provides minimal public-facing content beyond the login form and basic cookie usage disclosure. The business appears to be small and relatively young, founded around 2020, with no detailed business description or contact information available on the site. The technical infrastructure uses common open-source libraries such as AngularJS, jQuery, and AdminLTE for UI styling, indicating a moderate level of digital maturity but with room for modernization and improvement in SEO and accessibility. From a security perspective, the site employs basic best practices such as HTTPS assumed usage and password masking on login forms. However, it lacks important security headers, CSRF protections, and a proper cookie consent mechanism, which lowers its security posture. No explicit privacy policy or terms of service are present, which raises compliance concerns especially under GDPR. The absence of contact information and business credentials further limits trust and credibility. Overall, the website is functional for its purpose but lacks comprehensive security, privacy, and business transparency features. The domain age and WHOIS data suggest a legitimate small business operation, but the site would benefit from enhanced security controls, privacy disclosures, and richer content to improve user trust and compliance. Strategic recommendations include implementing full GDPR-compliant privacy and cookie policies, adding security headers and CSRF protections, fixing minor JavaScript issues, and providing clear business contact information to enhance credibility and user confidence.

Jochum Betonlogistik is a German-based company specializing in concrete logistics, particularly transport using silo vehicles for dust and bulk goods. The company also offers pump services and mobile conveyor belts, serving construction companies, architects, and private builders. Their website reflects a well-established regional business with partnerships with major construction firms such as Hochtief and Strabag. The business model focuses on providing reliable and punctual logistics services for concrete and related materials. Technically, the website is built on WordPress with modern plugins like Yoast SEO and Revolution Slider, indicating a moderate to good digital maturity. The site is mobile-optimized and SEO-friendly, though some performance and accessibility improvements could be made. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and a formal security or incident response policy. Overall, the security posture is solid but could be enhanced by adding security headers and formal policies. The domain registration data aligns well with the business claims, supporting legitimacy. No suspicious or malicious content was detected, and privacy compliance is basic but present. Strategic recommendations include improving security headers, configuring analytics properly, and publishing security and incident response policies to enhance trust and compliance.

Powerment GmbH & Co. KG is a German-based specialist company focused on the acquisition and marketing of by-products from coal-fired power plants, such as fly ash, REA gypsum, and boiler sand, primarily serving the construction and building materials industry. The company benefits from strong partnerships with its parent companies EP Power Minerals and EnBW Energie Baden-Württemberg, positioning it as a reliable intermediary ensuring quality products and logistics. The website is professionally designed using TYPO3 CMS and Bootstrap, offering good content quality and clear navigation in German. Privacy compliance is well addressed with a cookie consent banner and detailed privacy policy. However, explicit security policies and incident response information are not present, and security headers are not detected, indicating room for improvement in security posture. Overall, the website is trustworthy, accessible, and well-aligned with its business objectives.

TC-Innovations GmbH operates the website themeware.design, offering ThemeWare®, a leading Shopware theme designed to boost sales and provide extensive customization options. The company positions itself as a market leader with over 20,000 downloads and 500+ five-star reviews, targeting Shopware e-commerce merchants seeking advanced theming solutions. The website demonstrates a mature technical infrastructure with modern frontend technologies, mobile optimization, and SEO best practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some improvements like DNSSEC and security headers could enhance protection. Overall, the domain registration aligns well with the business, supporting legitimacy and trust. No critical security or compliance issues were detected, and the site maintains a professional and trustworthy online presence.

The website kirche-tourismus.bayern is operated by the Evangelisch-Lutherische Kirche in Bayern and serves as a comprehensive informational platform promoting church-related tourism and spiritual activities in Bavaria. It targets tourists, church communities, and groups interested in religious and spiritual experiences, offering detailed information on events such as mountain services, open churches, pilgrimages, and group accommodations. The site is well-positioned within a niche market of religious tourism and collaborates with multiple partner organizations to provide rich content and resources. Technically, the website is built on Drupal 10, leveraging modern libraries such as jQuery, Superfish menus, and Slick sliders, with Bootstrap 5 for styling. The site is hosted on a provider associated with the domain's nameservers and demonstrates good mobile optimization, accessibility, and SEO practices. Performance is moderate, and the site is fully accessible without any WAF or security challenges. From a security perspective, the site uses HTTPS but lacks DNSSEC and security headers, which are recommended to enhance protection. No sensitive data exposure or vulnerable libraries were detected. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR explicit indicators. Contact information is limited to a contact form, with no direct emails or phone numbers publicly listed. Overall, the website is legitimate, consistent with its WHOIS registration data, and trustworthy. Strategic improvements in security headers, privacy compliance, and cookie consent would enhance its posture. The site effectively serves its target audience with relevant content and a professional presentation.

Himmlische Herbergen e.V. operates a well-established online platform dedicated to Christian group accommodations across Germany and parts of Europe. The website offers a comprehensive search and filter system for various types of guesthouses, hotels, and self-catering accommodations, targeting Christian groups, families, youth groups, and seminar attendees. The organization positions itself as a niche leader in the hospitality sector with a strong non-profit orientation and a focus on community and spiritual hospitality. Technically, the website is built on WordPress 6.8.3 with modern plugins such as Borlabs Cookie for privacy compliance and Instagram Feed integration for social engagement. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, and the site maintains comprehensive privacy and cookie policies aligned with GDPR requirements. The absence of direct contact emails or phone numbers suggests reliance on contact forms and social media channels for communication. Overall, the site reflects a mature digital presence with strong trust indicators and professional content. Strategically, the organization should focus on enhancing security headers, expanding direct contact options, and continuing to maintain compliance and transparency to strengthen user trust and operational resilience.

The website www.periodensystem.de is a specialized educational platform offering a free interactive periodic table of elements aimed at students and professionals in chemistry-related fields. It is positioned as a niche resource within the German education sector, providing accessible and app-free learning tools. The site is powered by TYPO3 CMS and leverages modern JavaScript libraries to enhance user experience. Hosting is provided by SchlundTech, a reputable German hosting provider, ensuring reliable infrastructure. The site demonstrates good technical maturity with responsive design and SEO optimization. Security posture is solid with HTTPS enforced and GDPR-compliant cookie consent managed via Usercentrics, although some security headers are missing and no explicit security policies or incident response contacts are provided. Overall, the site is trustworthy, safe, and professionally maintained, with room for improvement in transparency and security documentation.

Bauindustrieverband Hessen-Thüringen e.V. is a regional industry association representing the construction sector in the German states of Hessen and Thüringen. The organization acts as a political advocate and service provider for construction companies, offering employer association services, economic representation, sustainability initiatives, and educational events. The website reflects a professional and consistent brand presence, targeting industry stakeholders and members. Technically, the site is built on TYPO3 CMS with standard web technologies and demonstrates moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled but lacks advanced security headers and incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and functional but could improve in security and privacy transparency.